Linux

SLES 12 — u-boot-rpi3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — u-boot-rpi3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 8 March 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2052-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-30790 CVE-2022-34835 CVE-2022-30552 CVE-2020-8432 CVE-2022-30767 CVE-2019-13103 CVE-2019-14192 CVE-2019-14193  +12 more Upstream summary: Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552. Table […]

Read more
How to Install Apache HTTP Server on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Install Apache HTTP Server on RHEL 8

Apache HTTP Server (httpd) is one of the most widely deployed web servers in the world and is fully supported on RHEL 8 through the AppStream repository. After installing the httpd package, you will configure the firewall, review the main configuration file, and serve content from a custom document root. This tutorial covers everything you […]

Read more
Oracle Linux 8 — python38:3.8 security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python38:3.8 security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4641)

🟡 Medium   ⏱ 10–30 min  Last verified: 7 March 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4641 Related CVEs: CVE-2020-14422 CVE-2019-20477 CVE-2019-20907 CVE-2020-8492 CVE-2020-1747 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]

Read more
Amazon Linux 2 — mailman — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — mailman — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1740 Related CVEs: CVE-2016-6893 CVE-2021-42097 CVE-2021-44227 CVE-2021-43331 CVE-2021-43332 CVE-2018-0618 CVE-2018-13796 CVE-2018-5950 Upstream summary: Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows […]

Read more
How to Install Packer on CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Install Packer on CentOS Stream 9

Introduction This tutorial demonstrates how to Install Packer on CentOS Stream 9 on CentOS Stream 9. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered CentOS Stream 9 system with the default AppStream […]

Read more
Common Problems 120705

Debian 11: OOM killer terminates Java service under memory pressure

🔴 Critical   ⏱ 5–30 min  Last verified: 7 March 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Debian 11 — ejabberd — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ejabberd — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-0903 CVE-2009-0934 CVE-2010-0305 CVE-2011-1753 CVE-2011-4320 CVE-2013-6169 CVE-2014-8760 Upstream summary: Unspecified vulnerability in the mod_roster_odbc module in ejabberd before 1.1.3 has unknown impact and attack vectors. Table of contents […]

Read more
Debian 11 — realmd — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — realmd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2704 Upstream summary: realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response. Table of contents Symptom […]

Read more
Debian 11 — fontforge — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fontforge — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-4259 CVE-2017-11568 CVE-2017-11569 CVE-2017-11570 CVE-2017-11571 CVE-2017-11572 CVE-2017-11573 CVE-2017-11574  +12 more Upstream summary: Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application […]

Read more
Ubuntu 14.04 — privoxy — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — privoxy — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4886-1 Related CVEs: CVE-2020-35502 CVE-2021-20209 CVE-2021-20210 CVE-2021-20211 CVE-2021-20212 CVE-2021-20213 CVE-2021-20214 CVE-2021-20215  +6 more Upstream summary: It was discovered that Privoxy incorrectly handled CGI requests. An attacker could possibly use this […]

Read more
CHAT