chris

SLES 15 — squashfs — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — squashfs — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4424-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-40153 CVE-2021-41072 CVE-2015-4645 CVE-2015-4646 CVE-2012-4025 CVE-2012-4024 Upstream summary: squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used […]

Read more
How To Setup a DavMail Exchange Gateway on a Debian 7 VPS — step-by-step Linux tutorial on Progressive Robot

How To Setup a DavMail Exchange Gateway on a Debian 7 VPS

If your workplace or school uses Microsoft Exchange for E-mail, you may wish to access your Exchange E-mail account from E-mail clients that do not support the Exchange protocol. DavMail provides a solution, translating Microsoft Exchange to open protocols like POP, IMAP, SMTP, Caldav, Carddav, and LDAP.

Read more
SLES 12 — python-Pygments — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-Pygments — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3814-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27291 Upstream summary: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular […]

Read more
Debian 10 — mailman — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — mailman — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 February 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-12108 CVE-2020-12137 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
How To Access Vault Secrets Inside of Kubernetes Using External Secrets Operator (ESO) — step-by-step Kubernetes tutorial on Progressive Robot

How To Access Vault Secrets Inside of Kubernetes Using External Secrets Operator (ESO)

Secrets in Kubernetes can be used in pods to avoid keeping connection strings and other sensitive data in source control or to prevent your application from accessing sensitive data directly. Storing secrets in a secret store is a secure way to allow access for the required tools. In this tutorial, you’ll install the External Secrets Operator in a the cloud provider-managed Kubernetes cluster and set up a SecretStore as well as an ExternalSecrets to fetch some values from a HashiCorp Vault instance.

Read more
CHAT