I'm new in linux admin and security approach, and need some tips about warnings from
Debsecan scanner tool.
I have some warnings returned by simple check, like this below:
CVE-2017-1000158 python2.7-minimal (remotely exploitable, high urgency) CVE-2016-2779 libsmartcols1 (high urgency) CVE-2017-12618 libaprutil1-ldap (low urgency)
With that reference for example
CVE-2017-12618 libaprutil1-ldap I search and find that page: https://security-tracker.debian.org/tracker/CVE-2017-12618
And I was in doubt on how to use this information to fix the warning?
From the table have the status of version package and respective version OS.
Source Package Release Version Status apr-util (PTS) wheezy 1.4.1-3 vulnerable wheezy (security) 1.4.1-3+deb7u1 fixed jessie 1.5.4-1 vulnerable stretch 1.5.4-3 vulnerable buster, sid 1.6.1-1 fixed
Debian(stretch) and I don't know how see the version package installed and how change from fix package? This is the way?