DNS

Common Problems 114484

Custom SELinux Policy Needed for Internal App

🟡 Medium   ⏱ 5–30 min  Last verified: 17 April 2024 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 122712

Logging Service Not Rotating and /var/log Grows Unbounded

🟠 High   ⏱ 5–30 min  Last verified: 15 April 2024 Affected versions: FreeBSD 14 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
openSUSE Leap 15.5 — unbound — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — unbound — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1923-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-3204 CVE-2024-8508 CVE-2022-30698 CVE-2022-30699 CVE-2024-43167 Upstream summary: A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The […]

Read more
Ubuntu 22.04 — smartdns — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — smartdns — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7370-1 Related CVEs: CVE-2024-24198 CVE-2024-24199 CVE-2024-42643 Upstream summary: It was discovered that SmartDNS did not correctly align certain objects in memory, leading to undefined behaviour. An attacker could possibly use […]

Read more
How to Install Graylog for Centralised Log Management on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Install Graylog for Centralised Log Management on RHEL 9

Graylog is an open-source centralised log management platform that collects, indexes, and analyses log data from across your infrastructure in one place. On RHEL 9, deploying Graylog 5.x gives operations teams powerful search, alerting, and dashboarding capabilities without relying on cloud-based log services. Graylog depends on MongoDB for metadata storage and OpenSearch (or Elasticsearch) for […]

Read more
How to Use OpenSSL to Generate and Manage SSL Certificates on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Use OpenSSL to Generate and Manage SSL Certificates on RHEL 9

OpenSSL is the most widely used toolkit for working with SSL/TLS certificates on Linux systems. On RHEL 9, it provides everything you need to generate private keys, create certificate signing requests (CSRs), sign certificates using your own certificate authority, and convert between certificate formats. Understanding OpenSSL is essential for any sysadmin managing secure services. This […]

Read more
FreeBSD 12 — bind9-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — bind9-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 April 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: DNSSEC validators — denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilities Related CVEs: CVE-2015-3193 CVE-2015-8000 CVE-2015-8461 CVE-2016-1285 CVE-2016-1286 CVE-2016-2088 CVE-2016-2775 CVE-2016-2776  +12 more Upstream summary: Simon Kelley reports: If DNSSEC validation […]

Read more
Debian 12 — xbindkeys-config — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — xbindkeys-config — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-9513 Upstream summary: Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
Oracle Linux 9 — aardvark-dns — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — aardvark-dns — vulnerability — patch and remediation guide (ELSA-2025-7094)

🟡 Medium   ⏱ 10–30 min  Last verified: 7 April 2024 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2025-7094 Related CVEs: CVE-2024-8418 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 14 — powerdns-recursor — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — powerdns-recursor — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: powerdns-recursor — Denial of Service Related CVEs: CVE-2009-4009 CVE-2009-4010 CVE-2015-1868 CVE-2015-5470 CVE-2016-2120 CVE-2016-7068 CVE-2016-7072 CVE-2016-7073  +12 more Upstream summary: PowerDNS Team reports: 2025-07: Internal logic flaw in cache management can […]

Read more
CHAT