January 2022 - Page 27 of 69

How to Configure VLAN Tagging on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Configure VLAN Tagging on Windows Server 2016

How to Configure Windows Server 2016 VLAN Tagging Virtual Local Area Networks (VLANs) segment a single physical network into multiple logical networks, providing traffic isolation, improved security, and better bandwidth management. Windows Server 2016 supports VLAN tagging both on physical network adapters and on Hyper-V virtual switches, allowing servers and virtual machines to participate in […]

Read more
How To Set Up Multiple SSL Certificates on One IP with Apache on Ubuntu 12.04 — step-by-step Linux tutorial on Progressive Robot

How To Set Up Multiple SSL Certificates on One IP with Apache on Ubuntu 12.04

Although hosting several sites on a single virtual private server is not a challenge with the use of virtual hosts, providing separate SSL certificates for each site traditionally required separate IP addresses. The process has recently been simplified through the use of Server Name Indication (SNI), which sends a site visitor the certificate that matches the requested server name.

Read more
Debian 11 — namazu2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — namazu2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-1318 CVE-2008-1468 CVE-2009-5028 CVE-2011-4345 Upstream summary: Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via […]

Read more
Debian 11 — crun — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — crun — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-27650 Upstream summary: A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers […]

Read more
Alpine Linux edge — sdl2 — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — sdl2 — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.0.18-r0 📖 ~4 min read  •  Source: Alpine secdb entry — sdl2 2.0.18-r0 Related CVEs: CVE-2021-33657 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7578 CVE-2019-7635  +3 more Upstream summary: Alpine community repository for vedge ships sdl2 2.0.18-r0 which […]

Read more
Ubuntu 16.04 — zsh — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — zsh — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5325-1 Related CVEs: CVE-2019-20044 CVE-2021-45444 CVE-2018-0502 CVE-2018-1100 CVE-2018-13259 CVE-2018-1071 CVE-2018-1083 CVE-2014-10070  +7 more Upstream summary: Sam Foxman discovered that Zsh incorrectly handled certain inputs. An attacker could possibly use this […]

Read more
SLES 15 — xerces-j2 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xerces-j2 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23437 Upstream summary: There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ […]

Read more
How To Configure Suricata as an Intrusion Prevention System (IPS) on Ubuntu 20.04 — step-by-step Linux tutorial on Progressive Robot

How To Configure Suricata as an Intrusion Prevention System (IPS) on Ubuntu 20.04

In this tutorial you will learn how to configure Suricata’s built-in Intrusion Prevention System (IPS) mode. When you enable IPS mode, Suricata can actively drop suspicious network traffic in addition to generating alerts. Once you know which signatures you would like to use in IPS mode, you’ll convert their default action to drop or reject traffic. With your signatures in place, you’ll learn how to send network traffic through Suricata using the netfilter NFQUEUE iptables target.

Read more
Oracle Linux 8 — java-1.8.0-openjdk security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — java-1.8.0-openjdk security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2022-5696)

🟠 High   ⏱ 15–60 min  Last verified: 19 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-5696 Related CVEs: CVE-2022-21541 CVE-2022-21540 CVE-2022-34169 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
CHAT