Security Hardening

FreeBSD 12 — php55-sqlite — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php55-sqlite — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — use-after-free vulnerability Upstream summary: Symeon Paraschoudis reports: Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk() Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]

Read more
FreeBSD 12 — postgresql-devel — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — postgresql-devel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: postgresql — privilege escalation vulnerability Related CVEs: CVE-2005-0227 Upstream summary: John Heasman and others disovered that non-privileged users could use the LOAD extension to load arbitrary libraries into the postgres […]

Read more
How to Set Up Istio Service Mesh on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up Istio Service Mesh on SLES 15

Introduction This tutorial covers How to Set Up Istio Service Mesh on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: […]

Read more
SLES 12 — memcached — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — memcached — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 July 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2020:2072-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-11596 CVE-2019-15026 CVE-2009-1494 CVE-2011-4971 CVE-2013-7239 CVE-2016-8704 CVE-2016-8705 CVE-2016-8706  +5 more Upstream summary: In memcached before 1.5.14, a NULL pointer dereference was found in the "lru […]

Read more
FreeBSD 12 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tcpdump — multiple vulnerabilities Related CVEs: CVE-2003-0989 CVE-2003-1029 CVE-2004-0057 CVE-2004-0183 CVE-2004-0184 CVE-2005-1267 CVE-2005-1278 CVE-2005-1279  +12 more Upstream summary: tcpdump developers report: Too many issues to detail, see CVE references for […]

Read more
FreeBSD 12 — libxul — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libxul — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2010-1585 CVE-2010-2760 CVE-2010-2762 CVE-2010-2763 CVE-2010-2764 CVE-2010-2765 CVE-2010-2766 CVE-2010-2767  +12 more Upstream summary: Mozilla Foundation reports: CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: […]

Read more
Common Problems 121569

Debian 9 Filesystem Remounted Read-Only After Error

🟠 High   ⏱ 5–30 min  Last verified: 12 July 2019 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Common Problems 115120

RHEL 8 kdump Not Capturing vmcore After Kernel Panic

🟡 Medium   ⏱ 5–30 min  Last verified: 12 July 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Set Up LUKS Disk Encryption on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up LUKS Disk Encryption on SLES 15

Introduction This tutorial covers How to Set Up LUKS Disk Encryption on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: […]

Read more
FreeBSD 12 — php56-psql — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php56-psql — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved fix for […]

Read more
CHAT