Linux

Ubuntu 16.04 — fail2ban — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — fail2ban — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5232-1 Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain mail actions like […]

Read more
How To Set Up SSH Keys on Rocky Linux 8 — step-by-step Linux tutorial on Progressive Robot

How To Set Up SSH Keys on Rocky Linux 8

SSH, or secure shell, is an encrypted protocol used to administer and communicate with servers. When working with a Rocky Linux server, chances are you will spend most of your time in a terminal session connected to your server through SSH. In this guide, we’ll focus on…

Read more
How to Configure CentOS Stream 9 in Azure — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Configure CentOS Stream 9 in Azure

Introduction How to Configure CentOS Stream 9 in Azure on CentOS Stream 9 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration is reproducible […]

Read more
Oracle Linux 8 — container-tools:3.0 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — container-tools:3.0 — security and stability fixes — required update (ELSA-2021-4222)

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-4222 Related CVEs: CVE-2021-3602 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
AlmaLinux 8 — gcc-toolset-11 — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — gcc-toolset-11 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2022:1937 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — libpam-mount — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libpam-mount — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-3970 CVE-2008-5138 Upstream summary: pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users […]

Read more
How to Set Up Unbound DNS Resolver on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Set Up Unbound DNS Resolver on Debian 11

Introduction This guide explains how to Set Up Unbound DNS Resolver on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with […]

Read more
Debian 11 — libxrandr — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libxrandr — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1986 CVE-2016-7947 CVE-2016-7948 Upstream summary: Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via […]

Read more
Alpine Linux edge — fish — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — fish — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.4.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — fish 3.4.0-r0 Related CVEs: CVE-2022-20001 Upstream summary: Alpine main repository for vedge ships fish 3.4.0-r0 which addresses CVE-2022-20001. Table of contents Symptom & Impact Environment […]

Read more
Ubuntu 18.04 — nvidia-graphics-drivers-460-server — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — nvidia-graphics-drivers-460-server — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5019-1 Related CVEs: CVE-2021-1093 CVE-2021-1094 CVE-2021-1095 CVE-2021-1076 CVE-2021-1077 Upstream summary: It was discovered that an assert() could be triggered in the NVIDIA graphics drivers. A local attacker could use this […]

Read more
CHAT