🔴 Critical ⏱ 15–90 min Last verified: 23 July 2022 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2022-4772 Related CVEs: CVE-2022-1529 CVE-2022-1802 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
Introduction Deploying configure docker resource limits on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will […]
🟡 Medium ⏱ 10–30 min Last verified: 22 July 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-7594 Related CVEs: CVE-2022-27337 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
Secrets and environment variables in Docker containers require careful handling to avoid leaking credentials into image layers, container logs, or environment variable dumps. The most common mistakes are: hardcoding credentials in Dockerfiles (they persist in image layer history forever), passing secrets via –env or –env-file flags (visible in docker inspect output and the process environment), […]
🟡 Medium ⏱ 5–30 min Last verified: 22 July 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 22 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-13441 CVE-2018-13457 CVE-2018-13458 CVE-2018-18245 CVE-2020-13977 CVE-2020-35269 Upstream summary: qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to […]
🟢 Low ⏱ 5–15 min Last verified: 22 July 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-1271 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 22 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3737 CVE-2005-3885 CVE-2007-1463 CVE-2007-1464 CVE-2012-5656 CVE-2012-6076 CVE-2021-42700 CVE-2021-42702 +1 more Upstream summary: Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 22 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1782 CVE-2003-0297 CVE-2005-0198 CVE-2005-2933 CVE-2008-5005 CVE-2008-5006 CVE-2008-5514 CVE-2018-19518 Upstream summary: The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not […]
Proxy servers are a useful way of caching or obfuscating web traffic. This means that web requests can be served from different inbound or outbound addresses than they appear to be, by offloading the connection to intermediaries. For regular end users, this usually means allowing you to make web requests from a different IP address than your own. Squid is a stable, popular, open-source HTTP proxy. In this tutorial, you will be installing and configuring Squid to provide an HTTP proxy on Rocky.
