Linux

Ubuntu 16.04 — mupdf — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mupdf — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 March 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7825-1 Related CVEs: CVE-2020-26683 CVE-2018-16647 CVE-2021-37220 CVE-2018-10289 CVE-2018-16648 CVE-2018-1000036 CVE-2021-3407 CVE-2020-21896 Upstream summary: It was discovered that MuPDF incorrectly managed memory, resulting in a memory leak. An attacker could possibly […]

Read more
Ubuntu 18.04 — ansible — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — ansible — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7330-1 Related CVEs: CVE-2015-3908 CVE-2015-6240 CVE-2016-8614 CVE-2019-10206 CVE-2019-14846 CVE-2019-14904 CVE-2020-10729 CVE-2020-1739  +12 more Upstream summary: It was discovered that Ansible did not properly verify certain fields of X.509 certificates. An […]

Read more
Установка Jitsi Meet в Ubuntu 18.04 — step-by-step Linux tutorial on Progressive Robot

Установка Jitsi Meet в Ubuntu 18.04

Автор выбрал фонд Open Internet/Free Speech для получения пожертвования в рамках программы Write for DOnations. Jitsi Meet — приложение с открытым…

Read more
openSUSE Tumbleweed — imlib2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — imlib2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-12761 CVE-2008-2426 CVE-2008-5187 CVE-2010-0991 Upstream summary: modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via an icon […]

Read more
SLES 15 — targetcli-fb-common — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — targetcli-fb-common — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-10699 CVE-2020-13867 Upstream summary: A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If […]

Read more
How to Set Up Port Knocking for SSH on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Set Up Port Knocking for SSH on RHEL 7

How to Set Up Port Knocking for SSH on RHEL 7 Port knocking is a stealthy technique for controlling access to network services by requiring a client to send connection attempts to a predefined sequence of closed ports before a firewall rule opens the target port. When applied to SSH, it effectively hides port 22 […]

Read more
Oracle Linux 8 — glib2 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — glib2 — security and stability fixes — required update (ELSA-2021-2170)

🟠 High   ⏱ 15–60 min  Last verified: 29 March 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-2170 Related CVEs: CVE-2021-27219 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT