Debian

Debian 10 — ecdsautils — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — ecdsautils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-24884 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — goffice — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — goffice — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2491 Upstream summary: Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers […]

Read more
Debian 11 — libemail-address-list-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libemail-address-list-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-1474 CVE-2018-18898 Upstream summary: Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU […]

Read more
Debian 11 — racket — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — racket — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3476 CVE-2007-3477 CVE-2007-3996 CVE-2009-3546 CVE-2021-32773 Upstream summary: Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial […]

Read more
Debian 11 — pinball — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pinball — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-2196 CVE-2009-3736 Upstream summary: Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled […]

Read more
Debian 11 — xcal — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — xcal — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4988 Upstream summary: pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal##### temporary file. Table of contents Symptom & […]

Read more
Debian 11 — sup — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — sup — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0606 CVE-2004-0451 Upstream summary: sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. Table of contents Symptom & Impact […]

Read more
Debian 11 — rust-linked-hash-map — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rust-linked-hash-map — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-25573 Upstream summary: An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint. Table of […]

Read more
Debian 11 — vice — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — vice — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0453 Upstream summary: Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) […]

Read more
CHAT