Operations

Oracle Linux 8 — java-17-openjdk security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2022-5726)

• November 23, 2020
• Linux
• Comment off

🟠 High   ⏱ 15–60 min  Last verified: 23 November 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-5726 Related CVEs: CVE-2022-21541 CVE-2022-21549 CVE-2022-21540 CVE-2022-34169 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more

Ubuntu 20.04 LTS No Space Left on Device During apt Upgrade

• November 23, 2020
• Linux
• Comment off

🟡 Medium   ⏱ 5–30 min  Last verified: 23 November 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more

Netplan Apply Fails with YAML Error

• November 23, 2020
• Tutorials
• Comment off

🟠 High   ⏱ 5–30 min  Last verified: 23 November 2020 Affected versions: 20.04 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs […]

Read more

FreeBSD 12 — rubygem-kaminari-core — vulnerability — patch and remediation guide

• November 23, 2020
• BSD
• Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 23 November 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kaminari — potential XSS vulnerability Related CVEs: CVE-2020-11082 Upstream summary: Kaminari Security Advisories: There was a vulnerability in versions of Kaminari that would allow an attacker to inject arbitrary code […]

Read more

Windows Server 2012 R2 — AGDLP scaling breaks when global groups exceed forest replication threshold — Fix & Prevention

• November 23, 2020
• Tutorials
• Comment off

🟠 High   ⏱ 5–30 min  Last verified: 23 November 2020 Affected versions: Windows Server 2012 R2 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more

How to Install MongoDB on SLES 12

• November 23, 2020
• SUSE Linux Enterprise
• Comment off

Introduction This tutorial covers How to Install MongoDB on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh && […]

Read more

Windows Server 2012 R2 — Task Scheduler service queue corruption — Fix & Prevention

• November 23, 2020
• Tutorials
• Comment off

🟠 High   ⏱ 5–30 min  Last verified: 23 November 2020 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more

Ubuntu 20.04 — neomutt — multiple vulnerabilities (20 CVEs) — patch and remediation guide

• November 23, 2020
• Linux
• Comment off

🟠 High   ⏱ 15–60 min  Last verified: 23 November 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7204-1 Related CVEs: CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352 CVE-2018-14353 CVE-2018-14354 CVE-2018-14355 CVE-2018-14356  +12 more Upstream summary: Jeriko One discovered that NeoMutt incorrectly handled certain IMAP and POP3 responses. An attacker could […]

Read more

SLES 15 — grafana-piechart-panel — vulnerability — patch and remediation guide

• November 23, 2020
• Linux
• Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 23 November 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:601-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13429 Upstream summary: legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) […]

Read more

How to Manage Users and Groups on SLES 15

• November 23, 2020
• SUSE Linux Enterprise
• Comment off

Introduction This tutorial covers How to Manage Users and Groups on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper […]

Read more