chris

Debian 10 — libpam-krb5 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — libpam-krb5 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 May 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-10595 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 18.04 — rabbitmq-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — rabbitmq-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 May 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5004-1 Related CVEs: CVE-2019-11287 CVE-2021-22116 Upstream summary: It was discovered that RabbitMQ incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This […]

Read more
openSUSE Tumbleweed — xtrans — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — xtrans — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3189-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25697 Upstream summary: A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an […]

Read more
SLES 12 — libnettle4 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libnettle4 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 May 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:127-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20305 CVE-2021-3580 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-6489 Upstream summary: A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST […]

Read more
Oracle Linux 8 — ELSA-2020-5619-1: postgresql:9.6 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — ELSA-2020-5619-1: postgresql:9.6 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 May 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-5619-1 Related CVEs: CVE-2019-10130 CVE-2020-25694 CVE-2020-25695 CVE-2019-10208 CVE-2020-1720 CVE-2020-14350 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How To Install Metabase on Ubuntu 20.04 with Docker — step-by-step Docker tutorial on Progressive Robot

How To Install Metabase on Ubuntu 20.04 with Docker

Introduction Metabase is a Java-based open-source Business Intelligence (BI) tool. It can connect to a number of different databases and has a question builder tool that can hide the complexity of large SQL queries. In this tutorial you will install Metabase using Docker Compose, then install Nginx to act as a reverse proxy for your […]

Read more
How to Profile Application Performance with perf on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Profile Application Performance with perf on RHEL 7

How to Profile Application Performance with perf on RHEL 7 Performance bottlenecks in production applications are notoriously difficult to diagnose using traditional monitoring tools alone. CPU usage metrics tell you that a system is busy but rarely tell you where the work is happening inside your application. The perf subsystem, built directly into the Linux […]

Read more
openSUSE Tumbleweed — npm14 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — npm14 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:0802-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8174 CVE-2021-22930 CVE-2021-22940 CVE-2021-37701 CVE-2021-37713 CVE-2021-39135 CVE-2020-11080 CVE-2020-7774  +12 more Upstream summary: napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and […]

Read more
CHAT