Troubleshooting

FreeBSD 12 — magento — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — magento — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: magento — multiple vulnerabilities Related CVEs: CVE-2012-3363 Upstream summary: Magento, Inc. reports: SUPEE-6482 – This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 – This […]

Read more
How to Enable SSL/TLS with Let's Encrypt on Apache2 on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Enable SSL/TLS with Let’s Encrypt on Apache2 on Debian 10

Introduction Deploying enable ssl/tls with let’s encrypt on apache2 on debian 10 on a Debian 10 Buster machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. […]

Read more
SLES 12 — csync2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — csync2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:14763-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-15522 CVE-2019-15523 Upstream summary: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command […]

Read more
Oracle Linux 8 — libwebp — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libwebp — vulnerability — patch and remediation guide (ELSA-2021-4231)

🟡 Medium   ⏱ 10–30 min  Last verified: 27 January 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-4231 Related CVEs: CVE-2018-25014 CVE-2018-25010 CVE-2018-25013 CVE-2020-36331 CVE-2018-25012 CVE-2020-36332 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How to Set Up a Git Server with Gitea on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Set Up a Git Server with Gitea on RHEL 7

How to Set Up a Git Server with Gitea on RHEL 7 Gitea is a lightweight, self-hosted Git service written in Go. It provides a GitHub-style web interface for repository management, issue tracking, pull requests, webhooks, and user management — all from a single binary that consumes a fraction of the resources required by GitLab […]

Read more
SLES 12 — cryptctl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — cryptctl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 27 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:2136-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18906 CVE-2017-9270 Upstream summary: A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with […]

Read more
Common Problems 118458

Kernel Panic – not syncing: VFS

🟡 Medium   ⏱ 5–30 min  Last verified: 26 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 115518

RHEL 7 NTP Drift Causes Yum TLS Certificate Errors

🟡 Medium   ⏱ 5–30 min  Last verified: 26 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
FreeBSD 12 — tor-devel — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tor-devel — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tor — security regression Related CVEs: CVE-2009-0414 CVE-2009-0936 CVE-2009-0937 CVE-2009-0938 CVE-2010-1676 CVE-2011-0427 CVE-2014-5117 CVE-2017-0377 Upstream summary: The Tor Project reports: Tor 0.3.0.9 fixes a path selection bug that would allow […]

Read more
CHAT