Linux

Debian 11 — u-boot — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — u-boot — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-3225 CVE-2017-3226 CVE-2018-1000205 CVE-2018-18439 CVE-2018-18440 CVE-2018-3968 CVE-2019-11059 CVE-2019-11690  +12 more Upstream summary: Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. […]

Read more
Ubuntu 20.04 — lasso — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — lasso — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4974-1 Related CVEs: CVE-2021-28091 Upstream summary: It was discovered that Lasso did not properly verify that all assertions in a SAML response were properly signed. An attacker could possibly use […]

Read more
Ubuntu 20.04 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5391-1 Related CVEs: CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Upstream summary: Nicolas Iooss discovered that libsepol incorrectly handled memory when handling policies. An attacker could possibly use this issue to cause a […]

Read more
How to Set Up a Complete DevSecOps Pipeline on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Set Up a Complete DevSecOps Pipeline on RHEL 7

How to Set Up a Complete DevSecOps Pipeline on RHEL 7 DevSecOps integrates security testing directly into every phase of the software delivery lifecycle rather than treating it as a final gate before production. The goal is to detect vulnerabilities, exposed secrets, and misconfigurations early — when they are cheap to fix — and to […]

Read more
Oracle Linux 8 — container-tools:ol8 security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — container-tools:ol8 security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-3053)

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-3053 Related CVEs: CVE-2020-1983 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Configure Kibana Dashboards on CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Configure Kibana Dashboards on CentOS Stream 9

Introduction How to Configure Kibana Dashboards on CentOS Stream 9 on CentOS Stream 9 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration is […]

Read more
AlmaLinux 8 — perl-B-Debug — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — perl-B-Debug — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2019:3337 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — snakeyaml — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — snakeyaml — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-18640 CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 CVE-2022-41854 Upstream summary: The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to […]

Read more
Debian 10 — lasso — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — lasso — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-28091 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — mhc — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — mhc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0120 Upstream summary: adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a […]

Read more
CHAT