Linux

Debian 11 — pypy — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pypy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-16935 Upstream summary: The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py […]

Read more
Cómo instalar Nginx en CentOS 8 — step-by-step Linux tutorial on Progressive Robot

Cómo instalar Nginx en CentOS 8

Nginx es uno de los servidores web más populares del mundo y aloja algunos de los sitios más grandes y con mayor tráfico en Internet. Es más fácil de utilizar que Apache en la mayoría de los casos y puede emplearse como servidor web o…

Read more
Debian 11 — libgrss — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libgrss — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-20011 Upstream summary: libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs […]

Read more
How to Configure AppArmor Profiles on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure AppArmor Profiles on Debian 9

Introduction Deploying configure apparmor profiles on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you begin, […]

Read more
Debian 11 — notary — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — notary — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-9258 CVE-2015-9259 Upstream summary: In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability. Because an attacker controls the field specifying the signature […]

Read more
How To Install and Secure phpMyAdmin with Nginx on an Ubuntu 14.04 Server — step-by-step Linux tutorial on Progressive Robot

How To Install and Secure phpMyAdmin with Nginx on an Ubuntu 14.04 Server

Administering relational databases from the command line can be a daunting proposition for many people. A project called phpMyAdmin aims to alleviate this issue by providing an easy to use web interface for MySQL. In this guide, we’ll discuss how to install and secure phpMyAdmin on top of a LEMP (Linux, Nginx, MySQL, and PHP) stack on an Ubuntu 14.04 server.

Read more
SLES 15 — python3-oslo.utils — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-oslo.utils — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 December 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02448-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-0718 Upstream summary: A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect […]

Read more
CentOS Stream 9 — xz — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — xz — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 December 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2022:4940 Related CVEs: CVE-2022-1271 Upstream summary: XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm […]

Read more
CHAT