Debian

Debian 11 — omega-rpg — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — omega-rpg — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0932 Upstream summary: Buffer overflow in omega-rpg 0.90 allows local users to execute arbitrary code via a long (1) command line or (2) environment variable. Table of contents […]

Read more
Debian 11 — jzlib — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — jzlib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-2102 Upstream summary: InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data. Table of […]

Read more
Debian 10 — prosody — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — prosody — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-32917 CVE-2022-0217 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Debian 11 — dopewars — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — dopewars — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3591 Upstream summary: Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location. Table of contents Symptom […]

Read more
Debian 10 — zsh — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — zsh — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-45444 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — libphp-adodb — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libphp-adodb — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-0146 CVE-2006-0147 CVE-2006-0410 CVE-2006-0806 CVE-2006-4976 CVE-2011-3699 CVE-2016-4855 CVE-2016-7405  +3 more Upstream summary: The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including […]

Read more
Debian 11 — lftp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — lftp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0963 CVE-2007-2348 CVE-2010-2251 CVE-2018-10916 Upstream summary: Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via […]

Read more
Debian 11 — pdns — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pdns — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0038 CVE-2005-0428 CVE-2005-2301 CVE-2005-2302 CVE-2006-4251 CVE-2008-3337 CVE-2008-5277 CVE-2012-0206  +12 more Upstream summary: The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of […]

Read more
Debian 10 — libxstream-java — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — libxstream-java — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-26217 CVE-2020-26258 CVE-2021-39139 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Debian 11 — vtk6 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — vtk6 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-42521 Upstream summary: There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 […]

Read more
CHAT