After provisioning a new RHEL 8 server, taking a few minutes to harden and configure the system goes a long way toward keeping it stable and secure. This guide walks you through the essential post-installation steps: updating packages, setting a hostname and timezone, locking down SSH, creating a non-root administrative user, and confirming that SELinux […]
🟠 High ⏱ 15–60 min Last verified: 17 June 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2019-1479 Related CVEs: CVE-2019-9213 CVE-2019-11479 CVE-2019-11477 CVE-2019-11478 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:1826 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
Introduction Deploying use docker secrets on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cryptography — tag forgery vulnerability Related CVEs: CVE-2016-9243 CVE-2018-10903 Upstream summary: The Python Cryptographic Authority (PyCA) project reports: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in […]
🟡 Medium ⏱ 10–30 min Last verified: 17 June 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/trousers — several vulnerabilities Related CVEs: CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 Upstream summary: the TrouSerS project reports reports: If the tcsd daemon is started with root privileges, it fails to drop the […]
🟠 High ⏱ 15–60 min Last verified: 17 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpdf — multiple remote Stream.CC vulnerabilities Related CVEs: CVE-2004-0888 CVE-2004-0889 CVE-2004-1125 CVE-2005-0064 CVE-2005-2097 CVE-2006-0301 CVE-2007-3387 CVE-2007-4352 +2 more Upstream summary: Secunia Research reports: Secunia Research has discovered some vulnerabilities in […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:1647 Related CVEs: CVE-2020-14318 CVE-2020-14323 CVE-2020-1472 Upstream summary: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: neon date parsing vulnerability Related CVEs: CVE-2004-0179 CVE-2004-0398 Upstream summary: Stefan Esser reports: A vulnerability within a libneon date parsing function could cause a heap overflow which could lead to […]
