chris

SLES 12 — zypper — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — zypper — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7685 CVE-2017-9271 CVE-2019-18900 CVE-2017-7435 CVE-2017-7436 CVE-2017-9269 CVE-2018-20532 CVE-2018-20533  +1 more Upstream summary: The decoupled download and installation steps in libzypp before 17.5.0 could lead to […]

Read more
How To Add the gzip Module to Nginx on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Add the gzip Module to Nginx on Ubuntu 14.04

How fast a website will load depends on the size of all of the files that have to be downloaded by the browser. Reducing the size of files to be transmitted can make the website not only load faster, but also cheaper to those who have to pay for their bandwidth usage. In this guide, we’ll discuss how to configure Nginx installed on your Ubuntu 14.04 server to utilize `gzip` compression to reduce the size of content sent to website visitors.

Read more
FreeBSD 12 — py36-diffoscope — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py36-diffoscope — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: diffoscope — arbitrary file write Related CVEs: CVE-2017-0359 Upstream summary: Ximin Luo reports: [v67] introduced a security hole where diffoscope may write to arbitrary locations on disk depending on the […]

Read more
FreeBSD 12 — fuser — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — fuser — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fuser — missing user's privileges check Upstream summary: Denis Barov reports: sysutils/fuser allows user to send any signal to any process when installed with suid bit. Table of contents Symptom […]

Read more
Common Problems 117972

systemd-resolved DNS Stub Not Working

🟡 Medium   ⏱ 5–30 min  Last verified: 8 December 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Install Docker Compose on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Install Docker Compose on SLES 15

Introduction This tutorial covers How to Install Docker Compose on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Install Docker zypper install -y docker docker-compose Step 2 […]

Read more
FreeBSD 12 — py38-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py38-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]

Read more
Common Problems 114939

RHEL 8 – Invalid fstab Entry Triggers Emergency Mode

🟡 Medium   ⏱ 5–30 min  Last verified: 8 December 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
CHAT