Logging Monitoring

SLES 15 — python311-Babel — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python311-Babel — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 January 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-20095 Upstream summary: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none Table of contents Symptom […]

Read more
Oracle Linux 8 — container-tools:2.0 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — container-tools:2.0 — vulnerability — patch and remediation guide (ELSA-2021-0706)

🟠 High   ⏱ 15–60 min  Last verified: 17 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-0706 Related CVEs: CVE-2021-20188 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — trafficserver — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — trafficserver — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-0256 CVE-2014-10022 CVE-2014-3525 CVE-2014-3624 CVE-2015-3249 CVE-2015-5168 CVE-2015-5206 CVE-2016-5396  +12 more Upstream summary: Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate […]

Read more
Common Problems 117492

Ubuntu 20.04 LTS – disk full under /var/log causes service failures – Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 17 January 2022 Affected versions: Ubuntu 20.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
IBM AIX 7.3 — CVE-2021-39035 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2021-39035 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 16 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2021-39035, IBM Support Bulletin CVE: CVE-2021-39035 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows […]

Read more
Oracle Linux 8 — unbound security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — unbound security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2022-7622)

🟡 Medium   ⏱ 10–30 min  Last verified: 16 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-7622 Related CVEs: CVE-2022-30698 CVE-2022-30699 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
How to Migrate from CentOS Linux 8 to CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Migrate from CentOS Linux 8 to CentOS Stream 9

Introduction This tutorial demonstrates how to Migrate from CentOS Linux 8 to CentOS Stream 9 on CentOS Stream 9. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered CentOS Stream 9 system with […]

Read more
FreeBSD 13 — jakarta-tomcat — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — jakarta-tomcat — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tomcat — XSS vulnerability in sample applications Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 Upstream summary: The Apache Project reports: The JSP and Servlet included in the sample application within the […]

Read more
FreeBSD 13 — ledger — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ledger — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ledger — multiple vulnerabilities Related CVEs: CVE-2017-2807 CVE-2017-2808 Upstream summary: Talos reports: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal […]

Read more
Common Problems 117508

Ubuntu 20.04 LTS – cloud-init stalls and first boot never completes

🟠 High   ⏱ 5–30 min  Last verified: 16 January 2022 Affected versions: Ubuntu 20.04 LTS Ubuntu 20.04 Ubuntu 20.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]

Read more
CHAT