Linux

AlmaLinux 8 — ltrace — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — ltrace — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2020:1626 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — coolkey — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — coolkey — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-4129 Upstream summary: CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory. Table of contents Symptom & […]

Read more
Amazon Linux 2 — golang-github-gorilla-context — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — golang-github-gorilla-context — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1859 Related CVEs: CVE-2022-1705 CVE-2022-1962 CVE-2022-1996 CVE-2022-24675 CVE-2022-27191 CVE-2022-27664 CVE-2022-28131 CVE-2022-28327  +8 more Upstream summary: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed […]

Read more
Debian 11 — netkit-rwho — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — netkit-rwho — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-1180 Upstream summary: Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash). Table […]

Read more
Настройка монтажа NFS в Ubuntu 20.04 — step-by-step Linux tutorial on Progressive Robot

Настройка монтажа NFS в Ubuntu 20.04

NFS (сетевая файловая система) — это распределенный протокол файловой системы, позволяющий монтировать на сервер удаленные каталоги. Это позволяет управлять пространством хранения в другом месте и выполнять запись в это пространство с нескольких клиентов. NFS обеспечивает…

Read more
Debian 11 — signing-party — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — signing-party — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-11627 Upstream summary: gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID. Table of contents Symptom & […]

Read more
Debian 11 — php-horde-gollem — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — php-horde-gollem — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-15235 CVE-2020-8034 Upstream summary: The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn […]

Read more
Ubuntu 20.04 — shim-signed — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — shim-signed — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 January 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6355-1 Related CVEs: CVE-2022-28737 CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-28733 CVE-2022-28734 CVE-2022-28735  +3 more Upstream summary: Daniel Axtens discovered that specially crafted images could cause a heap-based out-of-bonds write. A local […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide (ELSA-2022-9181)

🟠 High   ⏱ 15–60 min  Last verified: 25 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9181 Related CVEs: CVE-2022-25636 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
SLES 12 — log4j — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — log4j — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 January 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0053-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-17571 CVE-2022-23305 CVE-2022-23307 CVE-2021-4104 CVE-2022-23302 Upstream summary: Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can […]

Read more
CHAT