Linux

Initial Server Setup with CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

Initial Server Setup with CentOS Stream 9

Introduction Initial Server Setup with CentOS Stream 9 on CentOS Stream 9 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration is reproducible and […]

Read more
Debian 11 — fbi — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fbi — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-1695 CVE-2006-3119 Upstream summary: The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via […]

Read more
Debian 11 — node-ini — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-ini — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7788 Upstream summary: This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will […]

Read more
Debian 11 — crispy-doom — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — crispy-doom — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-14983 Upstream summary: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can […]

Read more
Debian 11 — dpdk — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — dpdk — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1059 CVE-2019-14818 CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 CVE-2020-14374  +9 more Upstream summary: The DPDK vhost-user interface does not check to verify that all the requested guest physical range […]

Read more
How to Install OpenJDK 8 on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Install OpenJDK 8 on Debian 9

Introduction This guide explains how to Install OpenJDK 8 on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install with the standard […]

Read more
Ubuntu 18.04 — ruby-sinatra — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — ruby-sinatra — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7664-1 Related CVEs: CVE-2022-29970 CVE-2022-45442 Upstream summary: It was discovered that Sinatra incorrectly handled serving static files. An attacker could possibly use this issue to perform local file inclusion, obtaining […]

Read more
Ubuntu 20.04 — ruby-sinatra — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — ruby-sinatra — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7664-1 Related CVEs: CVE-2022-29970 CVE-2022-45442 Upstream summary: It was discovered that Sinatra incorrectly handled serving static files. An attacker could possibly use this issue to perform local file inclusion, obtaining […]

Read more
Ubuntu 20.04 — golang-1.13 — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — golang-1.13 — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6038-2 Related CVEs: CVE-2022-1705 CVE-2022-27664 CVE-2022-28131 CVE-2022-2879 CVE-2022-2880 CVE-2022-29526 CVE-2022-30629 CVE-2022-30630  +11 more Upstream summary: USN-6038-1 fixed several vulnerabilities in Go 1.18. This update provides the corresponding updates for Go […]

Read more
SLES 15 — libgmp10 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libgmp10 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:541-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43618 Upstream summary: GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to […]

Read more
CHAT