chris

FreeBSD 13 — ppxp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ppxp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ppxp — local root exploit Related CVEs: CVE-2005-0392 Upstream summary: A Debian Advisory reports: Jens Steube discovered that ppxp, yet another PPP program, does not release root privileges when opening […]

Read more
Ubuntu 18.04 — fail2ban — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — fail2ban — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5232-1 Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain mail actions like […]

Read more
Common Problems 113623

Windows Server 2012 R2 — Windows Update and web traffic fail due to bad proxy PAC settings — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 27 May 2021 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
Amazon Linux 2 — python3-pygments — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — python3-pygments — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2117 Related CVEs: CVE-2021-27291 Upstream summary: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have […]

Read more
Oracle Linux 8 — httpd:2.4 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — httpd:2.4 — vulnerability — patch and remediation guide (ELSA-2022-0891)

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0891 Related CVEs: CVE-2021-34798 CVE-2021-39275 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Oracle Linux 8 — olcne — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — olcne — vulnerability — patch and remediation guide (ELSA-2021-9398)

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9398 Related CVEs: CVE-2021-28683 CVE-2021-31920 CVE-2021-34824 CVE-2021-29258 CVE-2021-31921 CVE-2021-28682 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 8 — grafana — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — grafana — vulnerability — patch and remediation guide (ELSA-2021-3771)

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-3771 Related CVEs: CVE-2021-39226 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Spring Annotations — step-by-step DevOps tutorial on Progressive Robot

Spring Annotations

URL: https://www.progressiverobot.com/spring-annotations/ Spring Annotations allows us to configure dependencies and implement dependency injection through java programs. Spring Annotations Spring framework implements and promotes the principle of control inversion (IOC) or dependency injection (DI) and is in fact an IOC container. Traditionally, Spring allows a developer to manage bean dependencies by using XML-based configuration. There is […]

Read more
Amazon Linux 2 — pacemaker — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — pacemaker — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1275 Related CVEs: CVE-2018-16877 CVE-2018-16878 CVE-2019-3885 CVE-2020-25654 Upstream summary: A flaw was found in pacemaker. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS. (CVE-2018-16878) A use-after-free […]

Read more
CHAT