Package Management

FreeBSD 12 — nagios — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — nagios — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nagios — denial of service vulnerability Related CVEs: CVE-2007-5803 CVE-2008-5027 CVE-2009-2288 CVE-2012-6096 CVE-2013-7108 CVE-2013-7205 Upstream summary: Eric Stanley reports: Most CGIs previously incremented the input variable counter twice when it […]

Read more
FreeBSD 12 — doas — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — doas — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: doas — Prevent passing of environment variables Upstream summary: Jesse Smith (upstream author of the doas program) reported: Previous versions of "doas" transferred most environment variables, such as USER, HOME, […]

Read more
How to Set Up Chef Infra Client on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up Chef Infra Client on Debian 9

Introduction Deploying set up chef infra client on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure […]

Read more
FreeBSD 12 — evolution — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — evolution — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: evolution — remote format string vulnerabilities Related CVEs: CVE-2005-0102 CVE-2005-2549 CVE-2005-2550 Upstream summary: A SITIC Vulnerability Advisory reports: Evolution suffers from several format string bugs when handling data from remote […]

Read more
FreeBSD 12 — clamav-milter — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — clamav-milter — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: clamav — multiple vulnerabilities Related CVEs: CVE-2019-12625 CVE-2019-12900 Upstream summary: Micah Snyder reports: An out of bounds write was possible within ClamAV&s NSIS bzip2 library when attempting decompression in cases […]

Read more
How to Configure auditd for Security Event Logging on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure auditd for Security Event Logging on RHEL 7

The Linux Audit Framework, managed by the auditd daemon, provides a comprehensive kernel-level mechanism for tracking security-relevant events on RHEL 7. Unlike application-level logging, the audit subsystem operates below the application layer, meaning that even a compromised process cannot suppress its own audit trail without also compromising the kernel. Properly configured, auditd records file access, […]

Read more
Ubuntu 18.04 — openssl-ibmca — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — openssl-ibmca — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6046-1 Related CVEs: https://launchpad.net/bugs/2015454 Upstream summary: It was discovered that OpenSSL-ibmca incorrectly handled certain RSA decryption. An attacker could possibly use this issue to expose sensitive information. Table of contents […]

Read more
SLES 15 — libgypsy0 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libgypsy0 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-0523 CVE-2011-0524 Upstream summary: gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users […]

Read more
CHAT