🟢 Low ⏱ 5–15 min Last verified: 14 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
Introduction How to Set Up a Certificate Authority with OpenSSL on Debian 12 is a fundamental operation for any administrator maintaining a Debian 12 Bookworm server. Debian 12 Bookworm ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ […]
🟠 High ⏱ 15–60 min Last verified: 14 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10768 CVE-2019-14863 CVE-2020-7676 CVE-2022-25844 CVE-2022-25869 CVE-2023-26116 CVE-2023-26117 CVE-2023-26118 +8 more Upstream summary: In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of […]
Introduction How to Encrypt Disk Partitions with LUKS on Debian 12 is a fundamental operation for any administrator maintaining a Debian 12 Bookworm server. Debian 12 Bookworm ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9773 CVE-2016-4478 CVE-2017-6384 CVE-2022-24976 Upstream summary: modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the (1) LIST, (2) […]
🟠 High ⏱ 15–60 min Last verified: 13 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2320 CVE-2012-2321 CVE-2012-2322 CVE-2012-6459 CVE-2017-12865 CVE-2021-26675 CVE-2021-26676 CVE-2021-33833 +8 more Upstream summary: ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 13 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-35434 Upstream summary: jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-2057 CVE-2010-1159 CVE-2014-8321 CVE-2014-8322 CVE-2014-8323 CVE-2014-8324 Upstream summary: Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets. Table […]
🟢 Low ⏱ 5–15 min Last verified: 13 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-22083 Upstream summary: jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It has been argued that this is […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1756 CVE-2010-2945 CVE-2013-4412 Upstream summary: SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and […]
