Introduction Deploying harden web servers on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base […]
🟠 High ⏱ 30–90 min Last verified: 4 January 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-39002, IBM Support Bulletin CVE: CVE-2021-39002 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that […]
🟠 High ⏱ 30–90 min Last verified: 4 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2002-0744, IBM PSIRT advisory page CVE: CVE-2002-0744 NVD summary: namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow. References: archives.neohapsis.com/archives/aix/2002-q2/0005 […]
🟠 High ⏱ 5–30 min Last verified: 3 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: Oracle Bug 34097708 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]
🟡 Medium ⏱ 15–45 min Last verified: 3 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2016-8981, IBM Support Bulletin CVE: CVE-2016-8981 NVD summary: IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system. References: www.ibm.com/support/docview.wss?uid=swg21994932 […]
🟡 Medium ⏱ 5–30 min Last verified: 3 January 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
Introduction Setting up set up timescaledb on centos stream 9 on a CentOS Stream 9 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Set Up TimescaleDB on CentOS Stream 9, with all the commands you need, the SELinux and firewalld considerations to keep in […]
🟢 Low ⏱ 5–15 min Last verified: 3 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: magento — multiple vulnerabilities Related CVEs: CVE-2012-3363 Upstream summary: Magento, Inc. reports: SUPEE-6482 – This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 – This […]
🟢 Low ⏱ 5–15 min Last verified: 3 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]
🟡 Medium ⏱ 5–30 min Last verified: 3 January 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
