Security Hardening

FreeBSD 12 — xdeview — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xdeview — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: uudeview buffer overflows Upstream summary: The authors of UUDeview report repairing two buffer overflows in their software. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
FreeBSD 12 — xli — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xli — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xloadimage — buffer overflows in NIFF image title handling Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-0639 CVE-2005-3178 Upstream summary: Ariel Berkman reports: Unlike most of the supported image formats in xloadimage, the […]

Read more
FreeBSD 12 — wayland — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wayland — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wayland — integer overflow Related CVEs: CVE-2013-2003 Upstream summary: Tobias Stoeckmann reports: The libXcursor fix for CVE-2013-2003 has never been imported into wayland, leaving it vulnerable to it. Table of […]

Read more
How to Configure Nginx as a TCP/UDP Load Balancer on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure Nginx as a TCP/UDP Load Balancer on Debian 9 (DEBIAN-9-2)

Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up configure nginx as a tcp/udp load balancer on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each […]

Read more
SLES 15 — python2-pycrypto — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-pycrypto — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2012:0869-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-2417 CVE-2013-1445 CVE-2013-7459 Upstream summary: PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces […]

Read more
FreeBSD 12 — postgresql94-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — postgresql94-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgresSQL — TYPE in pg_temp execute arbitrary SQL during `SECURITY DEFINER` execution Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167  +12 more Upstream summary: The PostgreSQL project reports: […]

Read more
Common Problems 115501

journalctl Missing Historical Logs Due to Non-Persistent Journald

🟡 Medium   ⏱ 5–30 min  Last verified: 9 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 114924

RHEL 8 firewalld Blocking Application Port Access

🟡 Medium   ⏱ 5–30 min  Last verified: 9 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Set Up SUSE Security Module on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Set Up SUSE Security Module on SLES 12

Introduction This tutorial covers How to Set Up SUSE Security Module on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: […]

Read more
Common Problems 112955

Windows Server 2016 Storage Deduplication Jobs Saturating CPU and Starving Workloads – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 9 January 2020 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
CHAT