Linux

Common Problems 120615

Debian 11 Kernel Upgrade Leaves Old Kernels Unmanaged

🟢 Low   ⏱ 5–30 min  Last verified: 6 August 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
How to Configure OpenDKIM with Postfix on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure OpenDKIM with Postfix on Debian 11

Introduction Deploying configure opendkim with postfix on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will […]

Read more
Debian 11 — libgig — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libgig — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-12950 CVE-2017-12951 CVE-2017-12952 CVE-2017-12953 CVE-2017-12954 CVE-2018-14449 CVE-2018-14450 CVE-2018-14451  +12 more Upstream summary: The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of […]

Read more
Oracle Linux 8 — gnupg2 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — gnupg2 — vulnerability — patch and remediation guide (ELSA-2022-6463)

🟡 Medium   ⏱ 10–30 min  Last verified: 6 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-6463 Related CVEs: CVE-2022-34903 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 16.04 — cifs-utils — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — cifs-utils — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 August 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7688-1 Related CVEs: CVE-2022-27239 CVE-2021-20208 CVE-2020-14342 CVE-2022-29869 Upstream summary: Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2022-9612)

🟠 High   ⏱ 15–60 min  Last verified: 6 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9612 Related CVEs: CVE-2022-21505 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 9 — firefox — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — firefox — vulnerability — patch and remediation guide (ELSA-2022-7020)

🟠 High   ⏱ 15–60 min  Last verified: 6 August 2022 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-7020 Related CVEs: CVE-2022-40674 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — libarchive — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libarchive — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-5680 CVE-2007-3641 CVE-2007-3644 CVE-2007-3645 CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779  +12 more Upstream summary: The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause […]

Read more
Common Problems 116987

Ubuntu 22.04 UFW Rules Break Docker Container Connectivity

🟡 Medium   ⏱ 5–30 min  Last verified: 6 August 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Oracle Linux 8 — http-parser — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — http-parser — security and stability fixes — required update (ELSA-2019-3497)

🟡 Medium   ⏱ 10–30 min  Last verified: 5 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3497 Related CVEs: CVE-2018-12121 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT