Security Hardening

SLES 15 — libct4 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libct4 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1417-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13508 Upstream summary: FreeTDS through 1.1.11 has a Buffer Overflow. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
SLES 12 — zypper — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — zypper — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7685 CVE-2017-9271 CVE-2019-18900 CVE-2017-7435 CVE-2017-7436 CVE-2017-9269 CVE-2018-20532 CVE-2018-20533  +1 more Upstream summary: The decoupled download and installation steps in libzypp before 17.5.0 could lead to […]

Read more
FreeBSD 12 — py36-diffoscope — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py36-diffoscope — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: diffoscope — arbitrary file write Related CVEs: CVE-2017-0359 Upstream summary: Ximin Luo reports: [v67] introduced a security hole where diffoscope may write to arbitrary locations on disk depending on the […]

Read more
FreeBSD 12 — fuser — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — fuser — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fuser — missing user's privileges check Upstream summary: Denis Barov reports: sysutils/fuser allows user to send any signal to any process when installed with suid bit. Table of contents Symptom […]

Read more
Common Problems 117972

systemd-resolved DNS Stub Not Working

🟡 Medium   ⏱ 5–30 min  Last verified: 8 December 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Install Docker Compose on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Install Docker Compose on SLES 15

Introduction This tutorial covers How to Install Docker Compose on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Install Docker zypper install -y docker docker-compose Step 2 […]

Read more
FreeBSD 12 — py38-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py38-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]

Read more
Common Problems 114939

RHEL 8 – Invalid fstab Entry Triggers Emergency Mode

🟡 Medium   ⏱ 5–30 min  Last verified: 8 December 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 14.04 — postgresql-common — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — postgresql-common — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4194-2 Related CVEs: CVE-2019-3466 CVE-2016-1255 CVE-2017-8806 Upstream summary: USN-4194-1 fixed a vulnerability in postgresql-common. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Rich Mirch discovered […]

Read more
How to Register a GitHub Actions Self-Hosted Runner on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Register a GitHub Actions Self-Hosted Runner on RHEL 8

GitHub Actions self-hosted runners allow you to execute CI/CD workflows on your own hardware, giving you full control over the operating system, installed tooling, network access, and resource allocation. On RHEL 8 this is especially valuable for pipelines that must access internal systems, use licensed software, or run workloads that exceed GitHub’s hosted-runner resource limits. […]

Read more
CHAT