🟡 Medium ⏱ 10–30 min Last verified: 29 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-1880 Related CVEs: CVE-2019-14822 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 29 December 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lasso — signature checking failure Related CVEs: CVE-2021-28091 Upstream summary: entrouvert reports: When AuthnResponse messages are not signed (which is permitted by the specifiation), all assertion's signatures should be checked, […]
🟢 Low ⏱ 5–15 min Last verified: 29 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Anydesk — Multiple Vulnerabilities Related CVEs: CVE-2020-13160 Upstream summary: Anydesk reports: AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code […]
Introduction This tutorial demonstrates how to Configure Prometheus Alerting Rules on CentOS Stream 9 on CentOS Stream 9. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered CentOS Stream 9 system with the […]
🟠 High ⏱ 15–60 min Last verified: 29 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: graphite2 — out-of-bounds write with malicious font Related CVEs: CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 CVE-2016-1969 CVE-2016-1977 CVE-2016-2790 CVE-2016-2791 +12 more Upstream summary: Mozilla Foundation reports: An out-of-bounds write in the Graphite […]
🟡 Medium ⏱ 10–30 min Last verified: 29 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ruby — UTF-7 encoding XSS vulnerability in WEBrick Related CVEs: CVE-2006-5467 CVE-2006-6303 CVE-2008-1447 CVE-2008-2726 CVE-2008-3655 CVE-2008-3656 CVE-2008-3905 CVE-2009-1904 +1 more Upstream summary: The official ruby site reports: WEBrick have had […]
Introduction Deploying deploy applications in freebsd jails on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the […]
🟡 Medium ⏱ 10–30 min Last verified: 29 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-3081 Related CVEs: CVE-2021-3429 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 30–90 min Last verified: 29 December 2021 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2003-0954, IBM Support Bulletin CVE: CVE-2003-0954 NVD summary: Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges. References: secunia.com/advisories/10276/ securitytracker.com/id?1008258 www-1.ibm.com/support/search.wss?rs=0&q=IY48272& Table of […]
ClamAV is an open-source antivirus engine widely used on Linux servers to scan for malware in email attachments, uploaded files, and shared storage directories. Although Linux malware is less common than its Windows counterpart, RHEL 8 servers often act as intermediaries that receive and redistribute files to mixed-OS environments, making antivirus scanning an important layer […]
