Linux

Oracle Linux 8 — grafana security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — grafana security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2022-1781)

🟢 Low   ⏱ 5–15 min  Last verified: 17 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-1781 Related CVEs: CVE-2021-43813 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
AlmaLinux 8 — python-dasbus — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — python-dasbus — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALEA-2020:4713 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
openSUSE Tumbleweed — libnextcloudsync0 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libnextcloudsync0 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:0577-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22879 Upstream summary: Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server […]

Read more
Amazon Linux 2 — openjpeg — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — openjpeg — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-1999 Related CVEs: CVE-2021-3575 Upstream summary: A heap-based buffer overflow was found in OpenJPEG. This flaw allows an attacker to execute arbitrary code with the permissions of the application compiled […]

Read more
SLES 12 — libFLAC8 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libFLAC8 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 July 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0814-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-0561 CVE-2020-0499 CVE-2014-8962 CVE-2014-9028 Upstream summary: In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This […]

Read more
Amazon Linux 2 — jasper — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — jasper — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2018 Related CVEs: CVE-2020-27828 CVE-2021-26926 CVE-2021-26927 CVE-2021-3272 CVE-2021-3443 CVE-2021-3467 CVE-2016-9396 CVE-2017-1000050 Upstream summary: A flaw was found in the Jasper tool's jpc encoder. This flaw allows an attacker to craft […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2021-9141)

🟠 High   ⏱ 15–60 min  Last verified: 17 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9141 Related CVEs: CVE-2021-27363 CVE-2020-25639 CVE-2020-28588 CVE-2020-27171 CVE-2021-27364 CVE-2021-3444 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How to Configure Fail2Ban to Protect SSH on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Configure Fail2Ban to Protect SSH on RHEL 8

Even with SSH key-based authentication enabled, your server’s SSH port is still probed constantly by automated scanners. Fail2Ban monitors log files for repeated authentication failures and bans offending IP addresses by inserting temporary rules into the firewall. On RHEL 8, Fail2Ban integrates natively with firewalld, making it the right tool to complement the hardening steps […]

Read more
CHAT