It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/pub

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 11, 2022 · OSV.dev

   Detected

   It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.

2. Oct 15, 2026 · OSV.dev

   Fix available

   debian-edu-config fixed in 2.12.16; debian-edu-config fixed in 2.12.16

3. Oct 15, 2026 · OSV.dev

   Fix available

   debian-edu-config fixed in 2.12.16

4. Oct 15, 2026 · OSV.dev

   Updated

   It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.

Affected

• Debian:12 debian-edu-config0 → 2.12.16
• Debian:13 debian-edu-config0 → 2.12.16

Sources

• CVE.orgVulnerability recordCVE-2021-20001

  Official CVE identifier

  cve.org
• OSV.devPackage advisoryDEBIAN-CVE-2021-20001
  osv.dev

References

• ADVISORY · security-tracker.debian.org