Debian 12 Bookworm

Debian 12 — rust-http — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — rust-http — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-25009 CVE-2020-25574 Upstream summary: An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness. Table of […]

Read more
Debian 12 — nodau — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — nodau — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-4399 Upstream summary: A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. […]

Read more
Debian 12 — ruby-tzinfo — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — ruby-tzinfo — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-31163 Upstream summary: TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to […]

Read more
Debian 12 — ust — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — ust — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-3386 Upstream summary: usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a […]

Read more
Debian 12 — libhx — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libhx — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-2947 Upstream summary: Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of […]

Read more
Debian 12 — gnutls28 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — gnutls28 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-3389 CVE-2012-0390 CVE-2012-1573 CVE-2012-1663 CVE-2013-0169 CVE-2013-1619 CVE-2014-0092 CVE-2014-1959  +12 more Upstream summary: The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla […]

Read more
Debian 12 — libui-dialog-perl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libui-dialog-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-7315 Upstream summary: UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
Debian 12 — xzgv — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — xzgv — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0994 CVE-2006-1060 Upstream summary: Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which […]

Read more
Debian 12 — valgrind — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — valgrind — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4865 Upstream summary: Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working […]

Read more
CHAT