Introduction How to Configure SELinux Policies on CentOS Stream 9 on CentOS Stream 9 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration is […]
🟠 High ⏱ 30–90 min Last verified: 27 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0835, IBM PSIRT advisory page CVE: CVE-1999-0835 NVD summary: Denial of service in BIND named via malformed SIG records. References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSS www.securityfocus.com/bid/788 ftp://ftp.caldera.com/pub/security/OpenLinux/CSS Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 5–30 min Last verified: 27 February 2022 Affected versions: Windows Server 2012 R2 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟡 Medium ⏱ 15–45 min Last verified: 27 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2004-2697, IBM PSIRT advisory page CVE: CVE-2004-2697 NVD summary: The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack […]
🟠 High ⏱ 15–60 min Last verified: 27 February 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rails — XSS vulnerabilities Related CVEs: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 CVE-2016-2097 CVE-2016-2098 +12 more Upstream summary: Ruby on Rails blog: This is an announcement to let you know […]
Introduction This tutorial covers How to Set Up GitLab CE on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper […]
🟡 Medium ⏱ 10–30 min Last verified: 27 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]
🟢 Low ⏱ 5–15 min Last verified: 27 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0422 Upstream summary: flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 27 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0366 Upstream summary: lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large query. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2022:1898 Related CVEs: CVE-2022-1117 Upstream summary: Fapolicyd (File Access Policy Daemon) implements application whitelisting to decide file access rights. Applications that are known via a reputation source are allowed access while unknown […]
