Logging Monitoring

Debian 11 — gst-plugins-good1.0 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gst-plugins-good1.0 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • June 5, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-10198 CVE-2016-10199 CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810  +12 more Upstream summary: The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause […]

Read more
Debian 11 — tomcat9 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — tomcat9 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • June 5, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-0199 CVE-2019-0221 CVE-2019-10072 CVE-2019-12418 CVE-2019-17563 CVE-2019-17569 CVE-2020-11996 CVE-2020-13934  +12 more Upstream summary: The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with […]

Read more
How to Set Up Alertmanager with PagerDuty and Slack Integration on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Set Up Alertmanager with PagerDuty and Slack Integration on RHEL 7

  • June 5, 2022
  • Linux
  • Comment off

Prometheus generates alerts, but it is Alertmanager that handles routing, deduplication, grouping, and delivery to your notification channels. Without a properly configured Alertmanager, even the most thorough alerting rules in Prometheus are useless — they fire into the void. Integrating Alertmanager with both PagerDuty and Slack gives you a two-tier notification strategy: high-severity incidents page […]

Read more
Common Problems 117110

Ubuntu 22.04 LTS Fail2ban Not Banning Attackers Due to Journal Backend Misconfig

  • June 5, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 5–30 min  Last verified: 5 June 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
IBM AIX 7.3 — CVE-2020-4578 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2020-4578 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 4 June 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2020-4578, IBM Support Bulletin CVE: CVE-2020-4578 NVD summary: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in […]

Read more
FreeBSD 13 — libmspack — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libmspack — vulnerability — patch and remediation guide

  • June 4, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libmspack — frame_end overflow which could cause infinite loop Related CVEs: CVE-2014-9556 Upstream summary: There is a denial of service vulnerability in libmspack. The libmspack code is built into cabextract, […]

Read more
Arch Linux — ghostscript — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — ghostscript — multiple vulnerabilities (13 CVEs) — patch and remediation guide

  • June 4, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202109-3 Related CVEs: CVE-2021-3781 CVE-2019-14817 CVE-2019-14813 CVE-2019-14812 CVE-2019-14811 CVE-2019-3838 CVE-2019-3835 CVE-2019-6116  +5 more Upstream summary: Type: arbitrary command execution. Status: Fixed. Affected: 9.54.0-2. Fixed in: 9.54.0-3. Group: AVG-2374. Table of […]

Read more
FreeBSD 13 — linux-c6-libtiff — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-c6-libtiff — multiple vulnerabilities (8 CVEs) — patch and remediation guide

  • June 4, 2022
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 4 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2015-8870 CVE-2016-5652 CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 CVE-2016-9536 CVE-2016-9537 CVE-2016-9540 Upstream summary: libtiff project reports: Multiple flaws have been discovered in libtiff library and utilities. Table […]

Read more
FreeBSD 13 — libzip — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libzip — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • June 4, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libzip — denial of service Related CVEs: CVE-2015-2331 CVE-2017-14107 Upstream summary: libzip developers report: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT