Защита Nginx с помощью Let’s Encrypt в Ubuntu 20.04
Let’s Encrypt — это центр сертификации (ЦС), позволяющий легко получать и устанавливать бесплатные сертификаты TLS/SSL, что позволяет использовать на…
FreeBSD 12 — tor-browser — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 19 March 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libwebp heap buffer overflow Related CVEs: CVE-2023-4863 Upstream summary: [email protected] reports: Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out […]
Debian 11 — httpie — multiple vulnerabilities (3 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10751 CVE-2022-0430 CVE-2022-24737 Upstream summary: All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary […]
Oracle Linux 9 – Common Problem 012 – Diagnosis and Fix
🟡 Medium ⏱ 5–30 min Last verified: 19 March 2023 Affected versions: Oracle Linux 9 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
SELinux Denials Preventing App Startup on RHEL 9
🟡 Medium ⏱ 5–30 min Last verified: 19 March 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
Debian 11 — openscad — multiple vulnerabilities (4 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28599 CVE-2020-28600 CVE-2022-0496 CVE-2022-0497 Upstream summary: A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code […]
How to Set Up a Docker Swarm Cluster on Oracle Linux 9
Introduction How to Set Up a Docker Swarm Cluster on Oracle Linux 9 on Oracle Linux 9 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the […]
Ubuntu 20.04 — node-ip — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 19 March 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6643-1 Related CVEs: CVE-2023-42282 Upstream summary: Emre Durmaz discovered that NPM IP package incorrectly distinguished between private and public IP addresses. A remote attacker could possibly use this issue to […]
Windows Server 2022 — Container networking NAT rules disappear after updates — Fix & Prevention
🟠 High ⏱ 5–30 min Last verified: 19 March 2023 Affected versions: Windows Server 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
Ubuntu 22.04 — libpano13 — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 19 March 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6163-1 Related CVEs: CVE-2021-20307 CVE-2021-33293 Upstream summary: It was discovered that pano13 did not properly validate the prefix provided for PTcrop's output. An attacker could use this issue to cause […]
