Debian

Debian 11 — plait — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — plait — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4085 Upstream summary: plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) […]

Read more
Debian 11 — gnuchess — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gnuchess — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8972 CVE-2019-15767 CVE-2021-30184 Upstream summary: Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary […]

Read more
Debian 11 — libksba — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libksba — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-5111 CVE-2014-9087 CVE-2016-4353 CVE-2016-4354 CVE-2016-4355 CVE-2016-4356 CVE-2016-4574 CVE-2016-4579  +2 more Upstream summary: The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package […]

Read more
Debian 11 — heimdal — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — heimdal — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1225 CVE-2002-1226 CVE-2002-1235 CVE-2003-0138 CVE-2004-0371 CVE-2004-0434 CVE-2005-0469 CVE-2005-2040  +12 more Upstream summary: Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc […]

Read more
Debian 10 — krb5 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — krb5 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 August 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-28196 CVE-2021-36222 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Debian 10 — gst-plugins-bad1.0 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — gst-plugins-bad1.0 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 August 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-3185 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — prboom-plus — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — prboom-plus — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-20797 Upstream summary: An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as […]

Read more
Debian 11 — postgis — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — postgis — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-18359 Upstream summary: PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_AsX3D function input, as demonstrated by […]

Read more
Debian 11 — libwebp — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libwebp — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-5127 CVE-2016-9085 CVE-2016-9969 CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25012 CVE-2018-25013  +8 more Upstream summary: Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service […]

Read more
CHAT