Oracle Linux 8 — opensc security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — opensc security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4483)

February 1, 2021
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 1 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-4483 Related CVEs: CVE-2019-15946 CVE-2019-19481 CVE-2019-15945 CVE-2019-19479 CVE-2019-20792 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]

Debian 10 — uriparser — vulnerability — patch and remediation guide

February 1, 2021
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 1 February 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-46141 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

How to Set Up IPsec VPN with Libreswan on Oracle Linux 8

February 1, 2021
Oracle Linux
Comment off

Introduction Oracle Linux 8 ships with a stable, security-hardened base that makes deploying set up ipsec vpn with libreswan on oracle linux 8 both straightforward and auditable. This tutorial covers the complete procedure for how to Set Up IPsec VPN with Libreswan on Oracle Linux 8, including dnf module streams where applicable, systemd unit management, […]

Ubuntu 20.04 — opensaml — vulnerability — patch and remediation guide

February 1, 2021
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 1 February 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7364-1 Related CVEs: https://launchpad.net/bugs/2103420 Upstream summary: Alexander Tan discovered that the OpenSAML C++ library was susceptible to forging of signed SAML messages. An attacker could possibly use this issue to […]

Ubuntu 18.04 — linux-oracle-5.0 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

February 1, 2021
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 1 February 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4325-1 Related CVEs: CVE-2019-19046 CVE-2020-8428 CVE-2019-19053 CVE-2019-19056 CVE-2019-19058 CVE-2019-19059 CVE-2019-19066 CVE-2019-19068 +12 more Upstream summary: It was discovered that the IPMI message handler implementation in the Linux kernel did not […]

Ubuntu 16.04 — libxstream-java — multiple vulnerabilities (20 CVEs) — patch and remediation guide

February 1, 2021
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 1 February 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6978-1 Related CVEs: CVE-2016-3674 CVE-2020-26217 CVE-2020-26258 CVE-2020-26259 CVE-2021-21341 CVE-2021-21342 CVE-2021-21343 CVE-2021-21344 +12 more Upstream summary: It was discovered that XStream incorrectly handled parsing of certain crafted XML documents. A remote […]

How to Configure syslog-ng on FreeBSD 12

February 1, 2021
FreeBSD
Comment off

Introduction FreeBSD 12 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure syslog-ng on freebsd 12 on FreeBSD 12 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux distribution. This […]

Ubuntu 18.04 — flac — multiple vulnerabilities (4 CVEs) — patch and remediation guide

February 1, 2021
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 1 February 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6360-2 Related CVEs: CVE-2020-22219 CVE-2017-6888 CVE-2020-0499 CVE-2021-0561 Upstream summary: USN-6360-1 fixed a vulnerability in FLAC. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu […]

Oracle Linux 8 — curl — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — curl — security and stability fixes — required update (ELSA-2021-4511)

January 31, 2021
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 31 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4511 Related CVEs: CVE-2021-22876 CVE-2021-22925 CVE-2021-22898 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Ubuntu 14.04 LTS high iowait and system slowdown

January 31, 2021
Linux
Comment off

🟡 Medium ⏱ 5–30 min Last verified: 31 January 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Troubleshooting

Oracle Linux 8 — opensc security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4483)

Debian 10 — uriparser — vulnerability — patch and remediation guide

How to Set Up IPsec VPN with Libreswan on Oracle Linux 8

Ubuntu 20.04 — opensaml — vulnerability — patch and remediation guide

Ubuntu 18.04 — linux-oracle-5.0 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

Ubuntu 16.04 — libxstream-java — multiple vulnerabilities (20 CVEs) — patch and remediation guide

How to Configure syslog-ng on FreeBSD 12

Ubuntu 18.04 — flac — multiple vulnerabilities (4 CVEs) — patch and remediation guide

Oracle Linux 8 — curl — security and stability fixes — required update (ELSA-2021-4511)

Ubuntu 14.04 LTS high iowait and system slowdown

Tags