Linux

SLES 12 — docker-distribution-registry — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — docker-distribution-registry — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory GHSA-hqxw-f8mx-cpmw (see also SUSE bugzilla) Related CVEs: CVE-2023-2253 CVE-2017-11468 Upstream summary: A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records […]

Read more
Oracle Linux 9 — libvirt security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — libvirt security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2023-6409)

🟡 Medium   ⏱ 10–30 min  Last verified: 11 March 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-6409 Related CVEs: CVE-2023-3750 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 118511

Ubuntu 16.04 LTS – network settings reset leaves server without persistent DNS – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 11 March 2023 Affected versions: Ubuntu 16.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Ubuntu 20.04 — ecdsautils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — ecdsautils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 March 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6239-1 Related CVEs: CVE-2022-24884 Upstream summary: It was discovered that ECDSA Util did not properly verify certain signature values. An attacker could possibly use this issue to bypass signature verification. […]

Read more
CentOS Stream 9 — opensc — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — opensc — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 March 2023 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2024:0966 Related CVEs: CVE-2023-5992 CVE-2023-40660 CVE-2023-40661 CVE-2023-4535 CVE-2023-2977 Upstream summary: The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic […]

Read more
SLES 12 — libjbig2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libjbig2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 March 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-6369 CVE-2022-1210 Upstream summary: Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of […]

Read more
Oracle Linux 8 — libXpm — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libXpm — vulnerability — patch and remediation guide (ELSA-2023-0379)

🟠 High   ⏱ 15–60 min  Last verified: 11 March 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-0379 Related CVEs: CVE-2022-4883 CVE-2022-46285 CVE-2022-44617 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
How to Install Zabbix on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Install Zabbix on RHEL 9

Zabbix is a mature, enterprise-grade open-source monitoring solution capable of tracking thousands of servers, virtual machines, network devices, and applications from a single web interface. It supports agent-based and agentless monitoring, flexible alerting, and detailed graphing out of the box. This tutorial installs Zabbix 6.4 on RHEL 9 using MySQL (MariaDB) as the backend database […]

Read more
CHAT