December 2022 - Page 13 of 70

Debian 11 — prosody-modules — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — prosody-modules — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-8086 Upstream summary: The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the is_admin() function. This grants remote entities admin-only […]

Read more
Debian 11 — pypy — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pypy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-16935 Upstream summary: The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py […]

Read more
Cómo instalar Nginx en CentOS 8 — step-by-step Linux tutorial on Progressive Robot

Cómo instalar Nginx en CentOS 8

Nginx es uno de los servidores web más populares del mundo y aloja algunos de los sitios más grandes y con mayor tráfico en Internet. Es más fácil de utilizar que Apache en la mayoría de los casos y puede emplearse como servidor web o…

Read more
Debian 11 — libgrss — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libgrss — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-20011 Upstream summary: libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs […]

Read more
How to Configure AppArmor Profiles on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure AppArmor Profiles on Debian 9

Introduction Deploying configure apparmor profiles on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you begin, […]

Read more
Debian 11 — notary — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — notary — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-9258 CVE-2015-9259 Upstream summary: In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability. Because an attacker controls the field specifying the signature […]

Read more
How To Install and Secure phpMyAdmin with Nginx on an Ubuntu 14.04 Server — step-by-step Linux tutorial on Progressive Robot

How To Install and Secure phpMyAdmin with Nginx on an Ubuntu 14.04 Server

Administering relational databases from the command line can be a daunting proposition for many people. A project called phpMyAdmin aims to alleviate this issue by providing an easy to use web interface for MySQL. In this guide, we’ll discuss how to install and secure phpMyAdmin on top of a LEMP (Linux, Nginx, MySQL, and PHP) stack on an Ubuntu 14.04 server.

Read more
SLES 15 — python3-oslo.utils — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-oslo.utils — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 December 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02448-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-0718 Upstream summary: A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect […]

Read more
CHAT