How To Install gpEasy CMS with NGINX and PHP5-FPM on Debian 7
This tutorial will take you through the steps needed to host gpEasy CMS on your Droplet.
How To Secure Nginx with Let’s Encrypt on Debian 8
Let’s Encrypt is a new Certificate Authority (CA) that provides an easy way to obtain and install free TLS/SSL certificates, thereby enabling encrypted HTTPS on web servers. It simplifies the process by providing a software client, certbot (previously called letsencrypt),…
Debian 11 — onionshare — multiple vulnerabilities (6 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 21 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5026 CVE-2018-19960 CVE-2021-41868 CVE-2022-21689 CVE-2022-21690 CVE-2022-21694 Upstream summary: hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory. Table of contents […]
Debian 11 — powerline-gitstatus — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 21 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-42906 Upstream summary: powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary […]
Debian 11 — libguestfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 20 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4127 CVE-2012-2690 CVE-2013-2124 CVE-2013-4419 CVE-2022-2211 Upstream summary: The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on […]
Debian 11 — xonix — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 18 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0157 Upstream summary: x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary […]
Debian 11 — gdisk — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 18 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-0256 CVE-2021-0308 Upstream summary: In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation […]
Debian 11 — libmatio — multiple vulnerabilities (20 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 18 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13107 CVE-2019-17533 CVE-2019-20017 CVE-2019-20018 CVE-2019-20019 CVE-2019-20020 CVE-2019-9026 CVE-2019-9027 +12 more Upstream summary: Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c […]
Debian 11 — mycli — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 18 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-44690 Upstream summary: Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
Debian 11 — fuseiso — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 18 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8836 CVE-2015-8837 Upstream summary: Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or […]