Logging Monitoring

Ubuntu 20.04 — shim-signed — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — shim-signed — multiple vulnerabilities (11 CVEs) — patch and remediation guide

  • January 25, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 January 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6355-1 Related CVEs: CVE-2022-28737 CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-28733 CVE-2022-28734 CVE-2022-28735  +3 more Upstream summary: Daniel Axtens discovered that specially crafted images could cause a heap-based out-of-bonds write. A local […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide (ELSA-2022-9181)

  • January 25, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9181 Related CVEs: CVE-2022-25636 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
SLES 12 — log4j — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — log4j — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • January 25, 2022
  • Linux
  • Comment off

🔴 Critical   ⏱ 15–90 min  Last verified: 25 January 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0053-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-17571 CVE-2022-23305 CVE-2022-23307 CVE-2021-4104 CVE-2022-23302 Upstream summary: Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can […]

Read more
IBM AIX 7.2 — CVE-2021-29798 — sql injection — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2021-29798 — sql injection — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 24 January 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2021-29798, IBM Support Bulletin CVE: CVE-2021-29798 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which […]

Read more
FreeBSD 13 — libtremor — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libtremor — multiple vulnerabilities (8 CVEs) — patch and remediation guide

  • January 24, 2022
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2008-1418 CVE-2008-1419 CVE-2008-1420 CVE-2008-1423 CVE-2008-2009 CVE-2012-0444 CVE-2018-5146 CVE-2018-5147 Upstream summary: The Mozilla Foundation reports: CVE-2018-5146: Out of bounds memory write in libvorbis An out […]

Read more
FreeBSD 13 — tinyproxy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tinyproxy — vulnerability — patch and remediation guide

  • January 24, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tinyproxy — ACL lists ineffective when range is configured Related CVEs: CVE-2011-1499 Upstream summary: When including a line to allow a network of IP addresses, the access to tinyproxy 56 […]

Read more
How to Configure Redis Sentinel on CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Configure Redis Sentinel on CentOS Stream 9

  • January 24, 2022
  • CentOS
  • Comment off

Introduction This tutorial demonstrates how to Configure Redis Sentinel on CentOS Stream 9 on CentOS Stream 9. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered CentOS Stream 9 system with the default […]

Read more
FreeBSD 13 — zh-mutt-devel — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zh-mutt-devel — security advisory — patch and remediation guide

  • January 24, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — Remote Buffer Overflow Vulnerability Upstream summary: SecurityFocus reports: Mutt is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied […]

Read more
FreeBSD 12 — teeworlds — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — teeworlds — vulnerability — patch and remediation guide

  • January 24, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Teeworlds — Buffer Overflow Related CVEs: CVE-2021-43518 Upstream summary: NVD reports: Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value […]

Read more
FreeBSD 13 — zebra — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zebra — vulnerability — patch and remediation guide

  • January 24, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zebra/quagga denial of service vulnerability Related CVEs: CVE-2003-0858 Upstream summary: A remote attacker could cause zebra/quagga to crash by sending a malformed telnet command to their management port. Table of […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT