How To Install and Configure Elasticsearch on Ubuntu 20.04
Elasticsearch is a platform for distributed search and analysis of data in real time.
Debian 11 — asterisk — multiple vulnerabilities (20 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 28 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0761 CVE-2003-0779 CVE-2005-2081 CVE-2005-3559 CVE-2006-1827 CVE-2006-2898 CVE-2006-4345 CVE-2006-4346 +12 more Upstream summary: Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for […]
Debian 11 — php7.4 — multiple vulnerabilities (20 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 28 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11048 CVE-2020-7059 CVE-2020-7060 CVE-2020-7062 CVE-2020-7063 CVE-2020-7064 CVE-2020-7065 CVE-2020-7066 +12 more Upstream summary: In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file […]
Oracle Linux 8 — gdb — security and stability fixes — required update (ELSA-2020-1635)
🟡 Medium ⏱ 10–30 min Last verified: 27 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-1635 Related CVEs: CVE-2019-1010180 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
How to Use Skopeo for Container Images on CentOS Stream 9
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying use skopeo for container images on centos stream 9 both straightforward and auditable. This tutorial covers the complete procedure for how to Use Skopeo for Container Images on CentOS Stream 9, including dnf module streams where applicable, systemd unit management, and the […]
Debian 11 — sleekxmpp — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 27 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5591 Upstream summary: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's […]
Debian 11 — ruby-redis-store — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 27 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000248 Upstream summary: Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
Debian 11 — awl — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 27 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-11728 CVE-2020-11729 Upstream summary: An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management does not use a sufficiently hard-to-guess session key. Anyone who […]
How to Configure Prometheus AlertManager on RHEL 7
How to Configure Prometheus AlertManager on RHEL 7 Prometheus collects and stores metrics, but on its own it cannot notify your team when something goes wrong. Alertmanager is the dedicated component that handles alert routing, deduplication, grouping, and delivery to receivers such as email, Slack, or PagerDuty. On RHEL 7, setting up Alertmanager alongside Prometheus […]
Debian 11 — dcmtk — multiple vulnerabilities (20 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 27 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6825 CVE-2015-8979 CVE-2019-1010228 CVE-2020-36855 CVE-2021-41687 CVE-2021-41688 CVE-2021-41689 CVE-2021-41690 +12 more Upstream summary: (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc […]
