How to Use Nginx’s map Module on Ubuntu 20.04
This tutorial explains how to use the map module inside the Nginx web server
How To Use DM-Crypt to Create an Encrypted Volume on an Ubuntu VPS
Encrypting your data is a great way to ensure that nobody will have access to your sensitive information if they ever get access to your server. There are many possible uses for this, such as making it easier to decommission servers with sensitive data, storing uncommonly accessed but important files, etc. In this guide, we will discuss how to use dm-crypt to create create an encrypted volume out of a regular empty file.
Ubuntu 14.04 — libhtml-stripscripts-perl — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 28 August 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6100-1 Related CVEs: CVE-2023-24038 Upstream summary: It was discovered that HTML::StripScripts does not properly parse HTML content with certain style attributes. A remote attacker could use this issue to cause […]
Ubuntu 16.04 — sofia-sip — multiple vulnerabilities (6 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 27 August 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6448-1 Related CVEs: CVE-2023-32307 CVE-2022-31001 CVE-2022-31002 CVE-2022-31003 CVE-2022-47516 CVE-2023-22741 Upstream summary: Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker could use this […]
Ubuntu 18.04 — dropbear — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 27 August 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7292-1 Related CVEs: CVE-2021-36369 CVE-2023-48795 Upstream summary: Manfred Kaiser discovered that Dropbear through 2020.81 does not properly check the available authentication methods in the client-side SSH code. An attacker could […]
Ubuntu 22.04 — pysha3 — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 27 August 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6525-1 Related CVEs: CVE-2022-37454 Upstream summary: Nicky Mouha discovered that pysha incorrectly handled certain SHA-3 operations. An attacker could possibly use this issue to cause pysha3 to crash, resulting in […]
Ubuntu 18.04 — tinyproxy — multiple vulnerabilities (3 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 August 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7190-1 Related CVEs: CVE-2023-49606 CVE-2022-40468 CVE-2017-11747 Upstream summary: It was discovered that Tinyproxy did not properly manage memory during the parsing of HTTP connection headers. An attacker could use this […]
Ubuntu 20.04 — linux-azure-fde — multiple vulnerabilities (20 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 August 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5909-1 Related CVEs: CVE-2022-3628 CVE-2022-3640 CVE-2022-3649 CVE-2022-41849 CVE-2022-41850 CVE-2022-42895 CVE-2023-20928 CVE-2022-20421 +12 more Upstream summary: It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did […]
Ubuntu 20.04 — cargo — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 25 August 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6275-1 Related CVEs: CVE-2023-38497 Upstream summary: Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by […]
Ubuntu 22.04 — libde265 — multiple vulnerabilities (20 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 24 August 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6764-1 Related CVEs: CVE-2023-51792 CVE-2023-27102 CVE-2023-27103 CVE-2023-43887 CVE-2023-47471 CVE-2023-49465 CVE-2023-49467 CVE-2023-49468 +12 more Upstream summary: It was discovered that libde265 could be made to allocate memory that exceeds the maximum […]
