Linux

Debian 10 — apache-log4j2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — apache-log4j2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 February 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-44228 CVE-2021-45046 CVE-2021-45105 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Oracle Linux 8 — Cockpit web console Services page unable to search services by state — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Cockpit web console Services page unable to search services by state

🟠 High   ⏱ 5–30 min  Last verified: 6 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: Oracle Bug 30286168 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]

Read more
Common Problems 119043

Ubuntu 14.04 LTS MySQL service fails to start

🟡 Medium   ⏱ 5–30 min  Last verified: 6 February 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 118056

Ubuntu 18.04 LTS – time sync unstable due to chrony and systemd-timesyncd conflict – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 6 February 2021 Affected versions: Ubuntu 18.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Ubuntu 16.04 — wkhtmltopdf — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — wkhtmltopdf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 February 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6232-1 Related CVEs: CVE-2020-21365 Upstream summary: It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using […]

Read more
SLES 15 — squashfs — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — squashfs — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4424-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-40153 CVE-2021-41072 CVE-2015-4645 CVE-2015-4646 CVE-2012-4025 CVE-2012-4024 Upstream summary: squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used […]

Read more
How To Setup a DavMail Exchange Gateway on a Debian 7 VPS — step-by-step Linux tutorial on Progressive Robot

How To Setup a DavMail Exchange Gateway on a Debian 7 VPS

If your workplace or school uses Microsoft Exchange for E-mail, you may wish to access your Exchange E-mail account from E-mail clients that do not support the Exchange protocol. DavMail provides a solution, translating Microsoft Exchange to open protocols like POP, IMAP, SMTP, Caldav, Carddav, and LDAP.

Read more
SLES 12 — python-Pygments — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-Pygments — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3814-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27291 Upstream summary: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular […]

Read more
CHAT