Security Hardening

Common Problems 114968

RHEL 8 Podman Containers Cannot Resolve DNS Names

🟡 Medium   ⏱ 5–30 min  Last verified: 6 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
FreeBSD 12 — silc-client — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — silc-client — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: silc-client — Format string vulnerability Related CVEs: CVE-2009-3051 Upstream summary: SILC changelog reports: An unspecified format string vulnerability exists in silc-client. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
How to Set Up Unbound DNS Resolver on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up Unbound DNS Resolver on Debian 9

Introduction This guide explains how to Set Up Unbound DNS Resolver on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install with […]

Read more
Gentoo Linux — media-libs/faad2 — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — media-libs/faad2 — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202006-17 Related CVEs: CVE-2018-19502 CVE-2018-19503 CVE-2018-19504 CVE-2018-20194 CVE-2018-20195 CVE-2018-20196 CVE-2018-20197 CVE-2018-20198  +11 more Upstream summary: Multiple vulnerabilities have been discovered in FAAD2. Please review the CVE identifiers referenced below for details. Table […]

Read more
Oracle Linux 8 — sudo — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — sudo — vulnerability — patch and remediation guide (ELSA-2020-0487)

🟠 High   ⏱ 15–60 min  Last verified: 6 January 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-0487 Related CVEs: CVE-2019-18634 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
openSUSE Tumbleweed — supervisor — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — supervisor — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-12105 Upstream summary: In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected […]

Read more
How to Install and Configure Samba File Server on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Install and Configure Samba File Server on Debian 9

Introduction This guide explains how to Install and Configure Samba File Server on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install […]

Read more
SLES 15 — system-user-root — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — system-user-root — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 6 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:697-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-5021 Upstream summary: Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to […]

Read more
FreeBSD 12 — percona55-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — percona55-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL Client — Multiple vulerabilities Related CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]

Read more
Common Problems 113407

Windows Server 2012 R2 — Chocolatey package install fails due to TLS 1.2 handshake error — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 5 January 2020 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
CHAT