Linux

AlmaLinux 8 — blktrace — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — blktrace — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2019:3634 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
AlmaLinux 8 — gnome-tweaks — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — gnome-tweaks — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2020:1766 Related CVEs: CVE-2018-20337 CVE-2019-12447 CVE-2019-12448 CVE-2019-12449 CVE-2019-3825 Upstream summary: GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337) […]

Read more
Настройка ключей SSH в Ubuntu 16.04 — step-by-step Linux tutorial on Progressive Robot

Настройка ключей SSH в Ubuntu 16.04

SSH или защищенная оболочка — это шифрованный протокол, используемый для администриования и связи с серверами. При работе с сервером Ubuntu вы проведете больше всего времени в сеансах терминала с подключением к серверу через SSH. В этом обучающем модуле мы расскажем о настройке…

Read more
Debian 11 — liece — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — liece — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0537 Upstream summary: The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users to overwrite arbitrary files as other users. Table […]

Read more
Debian 11 — libdbd-firebird-perl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libdbd-firebird-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2788 Upstream summary: Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that […]

Read more
Ubuntu 20.04 — numpy — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — numpy — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 August 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5763-1 Related CVEs: CVE-2021-33430 CVE-2021-34141 CVE-2021-41495 CVE-2021-41496 Upstream summary: It was discovered that NumPy did not properly manage memory when specifying arrays of large dimensions. If a user were tricked […]

Read more
AlmaLinux 8 — file — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — file — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2021:4374 Related CVEs: CVE-2019-18218 Upstream summary: The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, […]

Read more
How to Perform a System Security Audit with auditd on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Perform a System Security Audit with auditd on RHEL 7

How to Perform a System Security Audit with auditd on RHEL 7 Security auditing is a critical practice for any production RHEL 7 system, especially those subject to compliance frameworks such as PCI-DSS, HIPAA, or DISA STIG. The Linux Audit Framework, centered on the auditd daemon, provides kernel-level monitoring of system calls, file access, user […]

Read more
How To Protect WordPress with Fail2Ban on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Protect WordPress with Fail2Ban on Ubuntu 14.04

WordPress is a very robust content-management system (CMS) that is free and open source. Because anyone can comment, create an account, and post on WordPress, many malicious actors have created networks of bots and servers that compromise and spam WordPress sites through brute-force attacks. The tool Fail2ban is useful in preventing unauthorized access to both your Droplet and your WordPress site. It notes suspicious or repeated login failures and proactively bans those IPs by modifying firewall

Read more
Oracle Linux 8 — libldb security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libldb security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4568)

🟡 Medium   ⏱ 10–30 min  Last verified: 26 August 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4568 Related CVEs: CVE-2020-10730 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT