September 2019 - Page 36 of 61

FreeBSD 12 — mariadb100-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mariadb100-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mysql — denial of service vulnerability Related CVEs: CVE-2015-3152 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836  +12 more Upstream summary: Openwall reports: C client library for MySQL (libmysqlclient.so) has use-after-free […]

Read more
How To Use Templates in a Flask Application — step-by-step Python tutorial on Progressive Robot

How To Use Templates in a Flask Application

Jinja is the templating language that Flask uses to render HTML templates. Using templates allows you to separate the business logic of your application from the presentation logic. These templates provide many features that are not available in standard HTML, such as variables, if statements, for loops, filters, and template inheritance. This helps with maintenance of HTML pages, and prevents Cross-Site Scripting attacks.

Read more
Ubuntu 16.04 — aria2 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — aria2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4869-1 Related CVEs: CVE-2019-3500 Upstream summary: It was discovered that aria2 could accidentally leak authentication data. An attacker could possibly use this to gain access to sensitive information. Table of […]

Read more
How to Configure SSH Hardening on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure SSH Hardening on Debian 9

Introduction Deploying configure ssh hardening on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will need […]

Read more
SLES 15 — libgraphite2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libgraphite2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 September 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:0779-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-1521 CVE-2017-5436 CVE-2018-7999 Upstream summary: The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox […]

Read more
CHAT