2021 - Page 439 of 759

FreeBSD 13 — pyblosxom — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — pyblosxom — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pyblosxom — atom flavor multiple XML injection vulnerabilities Upstream summary: Security Focus reports: PyBlosxom is prone to multiple XML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before […]

Read more
FreeBSD 13 — f2c — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — f2c — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: f2c — insecure temporary files Related CVEs: CAN-2005-0017 Upstream summary: Javier Fernández-Sanguino Peña reports two temporary file vulnerability within f2c. The vulnerabilities are caused due to weak temporary file handling. […]

Read more
FreeBSD 13 — activemq — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — activemq — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: activemq — Unsafe deserialization Related CVEs: CVE-2015-5254 CVE-2016-0734 CVE-2016-0782 Upstream summary: Alvaro Muatoz, Matthias Kaiser and Christian Schneider reports: JMS Object messages depends on Java Serialization for marshaling/unmashaling of the […]

Read more
Ubuntu 18.04 — sane-backends — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — sane-backends — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4470-1 Related CVEs: CVE-2017-6318 CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 Upstream summary: Kritphong Mongkhonvanit discovered that sane-backends incorrectly handled certain packets. A remote attacker could possibly use this issue […]

Read more
How To Set Up a Private Docker Registry on Top of object storage and Use It with Kubernetes — step-by-step Docker tutorial on Progressive Robot

How To Set Up a Private Docker Registry on Top of object storage and Use It with Kubernetes

A private Docker registry allows you to securely share your images within your team or organization. By hosting your private Docker registry directly in your Kubernetes cluster, you achieve higher speeds, lower latency, and better availability, all while having control over the registry. In this tutorial, you’ll deploy your private Docker registry to your Kubernetes cluster using Helm, backed up by object storage.

Read more
How to Set Up a FreeBSD Jail for Web Hosting on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Set Up a FreeBSD Jail for Web Hosting on FreeBSD 13 (ON-FREEBSD-13)

Introduction How to Set Up a FreeBSD Jail for Web Hosting on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service […]

Read more
Ubuntu 20.04 — gsl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — gsl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 June 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6472-1 Related CVEs: CVE-2020-35357 Upstream summary: It was discovered that GNU Scientific Library incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially […]

Read more
CHAT