Systemd Services

SLES 12 — zypper — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — zypper — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7685 CVE-2017-9271 CVE-2019-18900 CVE-2017-7435 CVE-2017-7436 CVE-2017-9269 CVE-2018-20532 CVE-2018-20533  +1 more Upstream summary: The decoupled download and installation steps in libzypp before 17.5.0 could lead to […]

Read more
FreeBSD 12 — py36-diffoscope — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py36-diffoscope — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: diffoscope — arbitrary file write Related CVEs: CVE-2017-0359 Upstream summary: Ximin Luo reports: [v67] introduced a security hole where diffoscope may write to arbitrary locations on disk depending on the […]

Read more
FreeBSD 12 — fuser — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — fuser — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fuser — missing user's privileges check Upstream summary: Denis Barov reports: sysutils/fuser allows user to send any signal to any process when installed with suid bit. Table of contents Symptom […]

Read more
Common Problems 117972

systemd-resolved DNS Stub Not Working

🟡 Medium   ⏱ 5–30 min  Last verified: 8 December 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
FreeBSD 12 — py38-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py38-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]

Read more
Common Problems 114939

RHEL 8 – Invalid fstab Entry Triggers Emergency Mode

🟡 Medium   ⏱ 5–30 min  Last verified: 8 December 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 14.04 — postgresql-common — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — postgresql-common — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4194-2 Related CVEs: CVE-2019-3466 CVE-2016-1255 CVE-2017-8806 Upstream summary: USN-4194-1 fixed a vulnerability in postgresql-common. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Rich Mirch discovered […]

Read more
How to Register a GitHub Actions Self-Hosted Runner on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Register a GitHub Actions Self-Hosted Runner on RHEL 8

GitHub Actions self-hosted runners allow you to execute CI/CD workflows on your own hardware, giving you full control over the operating system, installed tooling, network access, and resource allocation. On RHEL 8 this is especially valuable for pipelines that must access internal systems, use licensed software, or run workloads that exceed GitHub’s hosted-runner resource limits. […]

Read more
SLES 15 — libmspack0 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libmspack0 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0886-1 (see also SUSE bugzilla) Related CVEs: CVE-2010-2800 CVE-2010-2801 CVE-2014-9556 CVE-2018-18584 CVE-2018-18585 CVE-2018-18586 CVE-2019-1010305 Upstream summary: The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service […]

Read more
SLES 15 — python2-pyxdg — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-pyxdg — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 December 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2997-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12761 Upstream summary: A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML […]

Read more
CHAT