Security Hardening

Ubuntu 16.04 — sympa — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — sympa — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 July 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4442-2 Related CVEs: CVE-2018-1000550 CVE-2018-1000671 CVE-2020-10936 Upstream summary: USN-4442-1 fixed vulnerabilities in Sympa. This update provides the corresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. […]

Read more
Oracle Linux 8 — cyrus-imapd — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — cyrus-imapd — vulnerability — patch and remediation guide (ELSA-2021-3492)

🟠 High   ⏱ 15–60 min  Last verified: 15 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-3492 Related CVEs: CVE-2021-33582 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
SLES 12 — xmlbeans — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — xmlbeans — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 July 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3875-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-23926 Upstream summary: The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious […]

Read more
openSUSE Tumbleweed — libtcmu2 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libtcmu2 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:0060-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-28374 Upstream summary: In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote […]

Read more
FreeBSD 13 — percona-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — percona-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — multiple vulnerabilities Related CVEs: CVE-2012-4414 CVE-2012-5611 CVE-2012-5612 CVE-2012-5615 CVE-2012-5627 CVE-2015-3194 CVE-2016-0639 CVE-2016-0640  +12 more Upstream summary: Oracle reports reports: Critical Patch Update contains 31 new security fixes for […]

Read more
Oracle Linux 8 — edk2 security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — edk2 security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4805)

🟡 Medium   ⏱ 10–30 min  Last verified: 14 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4805 Related CVEs: CVE-2019-14559 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 112623

Windows Server 2019 — NIC Teaming failover delay creates transient packet blackholes in bonded interfaces — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 14 July 2021 Affected versions: Windows Server 2019 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
How to Configure LVM on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure LVM on FreeBSD 12

Introduction This guide explains how to Configure LVM on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege separation. […]

Read more
FreeBSD 13 — prozilla — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — prozilla — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ProZilla — server response buffer overflow vulnerabilities Related CVEs: CVE-2004-1120 Upstream summary: Buffer overflow vulnerabilities have been reported to exist in this software package. The vulnerabilities can be triggered by […]

Read more
CHAT