Debian

Debian 12 — aview — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — aview — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4935 Upstream summary: asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file. Table of contents Symptom & […]

Read more
Debian 12 — bzflag — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — bzflag — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-4584 Upstream summary: BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign that is not followed by a […]

Read more
Debian 12 — mlterm — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — mlterm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0686 Upstream summary: Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is […]

Read more
Debian 12 — openexr — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — openexr — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-1720 CVE-2009-1721 CVE-2009-1722 CVE-2017-12596 CVE-2017-14988 CVE-2017-9110 CVE-2017-9111 CVE-2017-9112  +12 more Upstream summary: Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of […]

Read more
Debian 12 — file — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — file — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0102 CVE-2003-1092 CVE-2004-1304 CVE-2007-1536 CVE-2007-2026 CVE-2007-2799 CVE-2009-0947 CVE-2009-0948  +12 more Upstream summary: Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code […]

Read more
Debian 12 — libopenobex — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libopenobex — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-2366 Upstream summary: ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted […]

Read more
Common Problems 120155

Debian 12 Locale Misconfiguration Causes Perl Warning

🟢 Low   ⏱ 5–30 min  Last verified: 15 June 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Debian 11 — libtommath — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libtommath — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-36328 Upstream summary: Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). Table […]

Read more
Debian 11 — opusfile — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — opusfile — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-47021 Upstream summary: A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial […]

Read more
CHAT