Debian Debian-Edu-Config vulnerabilities

CVE-2021-20001 [CRITICAL] CWE-276 CVE-2021-20001: It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blen It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.

CVE-2019-3467 [HIGH] CVE-2019-3467: debian-edu-config - Debian-edu-config all versions < 2.11.10, a set of configuration files used for ... Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals. Scope: local bookworm: resolved (fixed in 2.11.10) bullseye: resolved (fixed in 2.11.10) forky: resolved (fix