Skip to content

Instantly share code, notes, and snippets.

@akhdaniel
Last active August 24, 2021 07:54
Show Gist options
  • Save akhdaniel/4c4e048571b84cbde2dbe287f72266f8 to your computer and use it in GitHub Desktop.
Save akhdaniel/4c4e048571b84cbde2dbe287f72266f8 to your computer and use it in GitHub Desktop.
Vulnerabilities Fix

Vulnerabilities fix

1 Upgrade wpasupplicant packages to version 2:2.7+git20190128+0c1e29f-6+deb10u3.

2 Upgrade lz4 packages to version 1.8.3-1+deb10u1

3 Upgrade libwebp packages to version 0.6.1-2+deb10u1

4 Upgrade libx11 packages to version 2:1.6.7-1+deb10u2

5 Upgrade bind9 packages to version 1:9.11.5.P4+dfsg-5.1+deb10u5.

6 Upgrade nettle packages to version 3.4.1-1+deb10u1.

7 Upgrade tiff packages to version 4.1.0+git191117-2+deb10u2.

8 Upgrade aspell packages to version 0.60.7 20110707-6+deb10u1.

9 Update to a more recent Linux Kernel for 'SSB - Speculative Store Bypass' hardware vulnerabilities

10 Upgrade curl packages to version 7.64.0-4+deb10u2.

11 Upgrade libzstd packages to version 1.3.8+dfsg-3+deb10u1.

12 Upgrade openldap packages to version 2.4.47+dfsg- 3+deb10u5.

13 Upgrade openssl packages to version 1.1.1d-0+deb10u5.

14 Upgrade krb5 packages to version 1.17-3+deb10u2.

15 Upgrade libzstd packages to version 1.3.8+dfsg-3+deb10u2.

16 Upgrade systemd packages to version 241-7 deb10u8.

17 Update to a more recent Linux Kernel for 'iTLB multihit' hardware vulnerabilities.

18 Update to a more recent Linux Kernel for 'MDS - Microarchitectural Data Sampling' hardware vulnerabilities.

19 TCP timestamps

  • Add the line 'net.ipv4.tcp_timestamps = 0' to /etc/sysctl.conf.
  • Execute 'sysctl -p' to apply the settings at runtime.

20 Upgrade linux packages to version 4.19.194-3.

21 Postgresql service on server running Postgresql

  • Open /etc/postgresql.conf.
  • Edit line: listen = *
  • to listen =
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment