Linux

Common Problems 118046

Ubuntu 18.04 LTS – UFW policy change blocks SSH and remote administration – Fix & Prevention

🔴 Critical   ⏱ 5–30 min  Last verified: 23 March 2022 Affected versions: Ubuntu 18.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Debian 11 — flask-caching — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — flask-caching — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-33026 Upstream summary: The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an […]

Read more
Debian 11 — pikepdf — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pikepdf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-29421 Upstream summary: models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries. Table of contents Symptom & Impact Environment & […]

Read more
How to Install Node.js 8 LTS on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Install Node.js 8 LTS on Debian 9

Introduction This guide explains how to Install Node.js 8 LTS on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install with the […]

Read more
Debian 11 — fvwm — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fvwm — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-1308 CVE-2006-5969 Upstream summary: CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns […]

Read more
Debian 11 — afflib — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — afflib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-8050 Upstream summary: The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt […]

Read more
Debian 11 — sc — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — sc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-25222 Upstream summary: SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers […]

Read more
How to Configure restic Backup Solution on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure restic Backup Solution on Debian 11

Introduction Deploying configure restic backup solution on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will […]

Read more
openSUSE Tumbleweed — ftdump — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — ftdump — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2200-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-27404 CVE-2022-27406 Upstream summary: FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. Table of contents Symptom & Impact […]

Read more
CHAT