An Overview of the cloud provider VPC and Networking
Learn how the the cloud provider VPC features work together to isolate a multi-tenant system, and how you can leverage more complex networking for your complex applications.
SLES 15 — autofs — vulnerability — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 12 June 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:1020-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8169 Upstream summary: automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of […]
sudo Command Delays from Hostname Lookup Failures
🟡 Medium ⏱ 5–30 min Last verified: 11 June 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
RHEL 8 XFS Filesystem Forced Read-Only After IO Error
🟡 Medium ⏱ 5–30 min Last verified: 11 June 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
FreeBSD 12 — kf5-kconfig — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 11 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: KDE Frameworks — malicious .desktop files execute code Related CVEs: CVE-2019-14744 Upstream summary: The KDE Community has released a security announcement: The syntax Key[$e]=$(shell command) in *.desktop files.directory files, and […]
How to Set Up iSCSI Initiator on SLES 12
Introduction This tutorial covers How to Set Up iSCSI Initiator on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper […]
FreeBSD 12 — py32-djblets — security advisory — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 11 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-djblets — Self-XSS vulnerability Upstream summary: Djblets Release Notes reports: A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious […]
Windows Server 2012 R2 — Post-Update Boot Loop Triggered by Incompatible Storage Driver — Fix & Prevention
🟠 High ⏱ 5–30 min Last verified: 11 June 2019 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
Windows Server 2019 — WinRM remote PowerShell fails with access denied after hardening — Fix & Prevention
🟡 Medium ⏱ 5–30 min Last verified: 11 June 2019 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
FreeBSD 12 — timidity++-gtk — multiple vulnerabilities (3 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 11 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: TiMidity++ — Multiple vulnerabilities Related CVEs: CVE-2017-11546 CVE-2017-11547 CVE-2017-11549 Upstream summary: qflb.wu of DBAPPSecurity reports: Ihe insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of service(divide-by-zero error […]
