Linux

Oracle Linux 9 — galera, mariadb, and mysql-selinux security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — galera, mariadb, and mysql-selinux security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2022-5948)

  • March 13, 2023
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 13 March 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-5948 Related CVEs: CVE-2021-46663 CVE-2022-27387 CVE-2022-27458 CVE-2022-27455 CVE-2022-24048 CVE-2021-46659 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Common Problems 117481

Ubuntu 20.04 LTS UFW Rules Applied but Traffic Still Blocked

  • March 13, 2023
  • Linux
  • Comment off

🟡 Medium   ⏱ 5–30 min  Last verified: 13 March 2023 Affected versions: 20.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
AlmaLinux 8 — cyrus-sasl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — cyrus-sasl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • March 13, 2023
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2022:0658 Related CVEs: CVE-2022-24407 CVE-2019-19906 Upstream summary: The cyrus-sasl packages contain the Cyrus implementation of Simple Authentication and Security Layer (SASL). SASL is a method for adding authentication support to connection-based protocols. […]

Read more
Debian 11 — jline3 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — jline3 — vulnerability — patch and remediation guide

  • March 13, 2023
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-50572 Upstream summary: An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error. Table of contents Symptom & Impact Environment & […]

Read more
Ubuntu 18.04 — giflib — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — giflib — multiple vulnerabilities (6 CVEs) — patch and remediation guide

  • March 13, 2023
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 13 March 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6824-1 Related CVEs: CVE-2021-40633 CVE-2022-28506 CVE-2023-39742 CVE-2016-3977 CVE-2018-11490 CVE-2019-15133 Upstream summary: It was discovered that GIFLIB incorrectly handled certain GIF files. An attacker could possibly use this issue to cause […]

Read more
How To Secure Apache with Let's Encrypt on Debian 9 — step-by-step Linux tutorial on Progressive Robot

How To Secure Apache with Let’s Encrypt on Debian 9

  • March 13, 2023
  • Linux
  • Comment off

Let’s Encrypt is a Certificate Authority (CA) that provides an easy way to obtain and install free TLS/SSL certificates, thereby enabling encrypted HTTPS on web servers. In this tutorial, you will use Certbot to obtain a free SSL certificate for Apache on Debian 9 and set up your certificate to renew automatically.

Read more
Ubuntu 20.04 — gcc-10 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — gcc-10 — vulnerability — patch and remediation guide

  • March 13, 2023
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7700-1 Related CVEs: CVE-2023-4039 Upstream summary: It was discovered that the -fstack-protector hardening feature in GCC for AArch64 did not properly protect dynamically-sized local variables such as those created using […]

Read more
Ubuntu 20.04 — ujson — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — ujson — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • March 13, 2023
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 13 March 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6629-2 Related CVEs: CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 Upstream summary: USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2023-12121)

  • March 13, 2023
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 13 March 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-12121 Related CVEs: CVE-2022-42896 CVE-2022-4139 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT