Linux

Ubuntu 14.04 — openldap — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — openldap — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7713-1 Related CVEs: CVE-2021-27212 CVE-2020-36229 CVE-2020-36230 CVE-2020-36226 CVE-2020-36221 CVE-2020-36224 CVE-2020-36228 CVE-2020-36227  +12 more Upstream summary: It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly […]

Read more
Installieren von Nginx unter Ubuntu 20.04 [Schnellstart] — step-by-step Linux tutorial on Progressive Robot

Installieren von Nginx unter Ubuntu 20.04 [Schnellstart]

Nginx ist einer der beliebtesten Webserver der Welt und hostet einige der größten und datenverkehrsreichsten Sites im Internet. Nginx ist in den meisten Fällen ressourcenschonender als Apache und kann als Webserver oder Reverse-Proxy verwendet werden. In diesem Leitfaden…

Read more
Ubuntu 16.04 — yara — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — yara — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8080-1 Related CVEs: CVE-2018-19976 CVE-2017-9304 CVE-2018-19974 CVE-2017-8294 CVE-2018-12034 CVE-2017-8929 CVE-2021-45429 CVE-2017-11328  +9 more Upstream summary: Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially […]

Read more
How to Install Bro on Ubuntu 16.04 — step-by-step Linux tutorial on Progressive Robot

How to Install Bro on Ubuntu 16.04

Bro is an open-source network analysis framework and security monitoring application. It brings together some of the best features of OSSEC and osquery into one nice package. In this article, you’ll install Bro from source on Ubuntu 16.04 in standalone mode.

Read more
Como instalar o Git no Ubuntu 18.04 — step-by-step Linux tutorial on Progressive Robot

Como instalar o Git no Ubuntu 18.04

Uma versão anterior deste tutorial foi escrita por Brennen Bearnes. Os sistemas de controle de versão são cada vez mais indispensáveis no desenvolvimento de software moderno uma ver que o controle de versão permite que…

Read more
How to Deploy a Flask Application with Gunicorn and Nginx on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Deploy a Flask Application with Gunicorn and Nginx on RHEL 7

How to Deploy a Flask Application with Gunicorn and Nginx on RHEL 7 Flask is a lightweight Python web framework ideal for building APIs and web applications. While Flask’s built-in development server is useful for testing, it is not suitable for production workloads. The standard production stack on RHEL 7 combines Gunicorn as a WSGI […]

Read more
Oracle Linux 8 — .NET 5.0 security and bugfix update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — .NET 5.0 security and bugfix update

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0830 Related CVEs: CVE-2022-24464 CVE-2022-24512 CVE-2020-8927 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Ubuntu 20.04 — maven — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — maven — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5245-1 Related CVEs: CVE-2021-26291 Upstream summary: It was discovered that Apache Maven followed repositories that are defined in a dependency's Project Object Model (pom) even if the repositories weren't encrypted […]

Read more
CHAT