🟡 Medium ⏱ 10–30 min Last verified: 27 August 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5763-1 Related CVEs: CVE-2021-33430 CVE-2021-34141 CVE-2021-41495 CVE-2021-41496 Upstream summary: It was discovered that NumPy did not properly manage memory when specifying arrays of large dimensions. If a user were tricked […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:4374 Related CVEs: CVE-2019-18218 Upstream summary: The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, […]
How to Perform a System Security Audit with auditd on RHEL 7 Security auditing is a critical practice for any production RHEL 7 system, especially those subject to compliance frameworks such as PCI-DSS, HIPAA, or DISA STIG. The Linux Audit Framework, centered on the auditd daemon, provides kernel-level monitoring of system calls, file access, user […]
WordPress is a very robust content-management system (CMS) that is free and open source. Because anyone can comment, create an account, and post on WordPress, many malicious actors have created networks of bots and servers that compromise and spam WordPress sites through brute-force attacks. The tool Fail2ban is useful in preventing unauthorized access to both your Droplet and your WordPress site. It notes suspicious or repeated login failures and proactively bans those IPs by modifying firewall
🟡 Medium ⏱ 10–30 min Last verified: 26 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rt and dependent modules — multiple security vulnerabilities Related CVEs: CVE-2012-2770 CVE-2015-7686 CVE-2016-6127 CVE-2017-5361 CVE-2017-5943 CVE-2017-5944 Upstream summary: BestPractical reports: Please reference CVE/URL list for details Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 26 August 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-4568 Related CVEs: CVE-2020-10730 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 26 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4000 Upstream summary: Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 5–30 min Last verified: 26 August 2021 Affected versions: Ubuntu 20.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟠 High ⏱ 15–60 min Last verified: 26 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 CVE-2015-0222 +12 more Upstream summary: Tim Graham reports: Malicious redirect and possible XSS attack via user-supplied redirect […]
Introduction This tutorial covers How to Configure Custom Metrics with Prometheus on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Install Prometheus zypper install -y golang-github-prometheus-prometheus Step […]
