November 2021 - Page 10 of 64

FreeBSD 13 — a2ps-a — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — a2ps-a — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: a2ps — insecure temporary file creation Related CVEs: CVE-2004-1170 CVE-2004-1377 Upstream summary: A Secunia Security Advisory reports that Javier Fernández-Sanguino Peña has found temporary file creation vulnerabilities in the fixps […]

Read more
How To Secure MongoDB on Ubuntu 20.04 — step-by-step Linux tutorial on Progressive Robot

How To Secure MongoDB on Ubuntu 20.04

MongoDB doesn’t have authentication enabled by default, meaning that any user with access to the server where the database is installed can add and delete data without restriction. In order to secure this vulnerability, this tutorial will walk you through creating an administrative user and enabling authentication. You’ll then test to confirm that only this administrative user has access to the database.

Read more
Debian 11 — odoo — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — odoo — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-15634 CVE-2018-15641 CVE-2019-11782 CVE-2019-11783 CVE-2019-11784 CVE-2021-23166 CVE-2021-23176 CVE-2021-23178  +10 more Upstream summary: Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise […]

Read more
Установка веб-сервера Apache в Ubuntu 18.04. [Краткое руководство.] — step-by-step Linux tutorial on Progressive Robot

Установка веб-сервера Apache в Ubuntu 18.04. [Краткое руководство.]

HTTP-сервер Apache — самый широко используемый веб-сервер в мире. Он имеет множество мощных функций, включая динамически загружаемые модули, надежную поддержку различных медиа-форматов и интеграцию с другим популярным программным обеспечением. В этом обучающем модуле мы…

Read more
How to Configure HAST High-Availability Storage on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Configure HAST High-Availability Storage on FreeBSD 13

Introduction How to Configure HAST High-Availability Storage on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]

Read more
Debian 11 — kgb — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — kgb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-1192 Upstream summary: Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive. Table of […]

Read more
SLES 12 — linuxptp — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — linuxptp — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 November 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2443-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3570 Upstream summary: A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between […]

Read more
CHAT