Linux

Oracle Linux 9 — xorg-x11-server-Xwayland security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — xorg-x11-server-Xwayland security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2023-6341)

🟡 Medium   ⏱ 10–30 min  Last verified: 14 November 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-6341 Related CVEs: CVE-2023-1393 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 119979

Debian 12: NTP drift and unsynchronized system clock

🟡 Medium   ⏱ 5–30 min  Last verified: 14 November 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
How to Configure a Firewall with nftables on CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Configure a Firewall with nftables on CentOS Stream 9

Introduction How to Configure a Firewall with nftables on CentOS Stream 9 on CentOS Stream 9 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting […]

Read more
Debian 12 — libxinerama — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libxinerama — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1985 Upstream summary: Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to […]

Read more
How to Configure OSPF with FRRouting on Debian 12 — step-by-step Debian 12 tutorial on Progressive Robot

How to Configure OSPF with FRRouting on Debian 12

Introduction This guide explains how to Configure OSPF with FRRouting on Debian 12 on Debian 12 Bookworm. Debian Bookworm uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 12 install with the […]

Read more
Debian 12 — xshisen — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — xshisen — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-1053 CVE-2005-0117 Upstream summary: Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable. […]

Read more
Ubuntu 16.04 — vips — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — vips — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 November 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6437-1 Related CVEs: CVE-2018-7998 CVE-2019-6976 CVE-2020-20739 CVE-2021-27847 CVE-2023-40032 Upstream summary: Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were […]

Read more
Ubuntu 14.04 — configobj — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — configobj — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7040-2 Related CVEs: CVE-2023-26112 Upstream summary: USN-7040-1 fixed a vulnerability in ConfigObj. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that ConfigObj […]

Read more
CHAT