Linux

Ubuntu 18.04 — qpdf — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — qpdf — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5026-1 Related CVEs: CVE-2018-18020 CVE-2021-36978 Upstream summary: It was discovered that QPDF incorrectly handled certain malformed PDF files. A remote attacker could use this issue to cause QPDF to consume […]

Read more
How To Use Tripwire to Detect Server Intrusions on an Ubuntu VPS — step-by-step Linux tutorial on Progressive Robot

How To Use Tripwire to Detect Server Intrusions on an Ubuntu VPS

Although it is possible to guard your server environment against attacks, it is important to be able to detect whether an intruder does manage to compromise your security. Tripwire is a tool that can be used to detect changes in the filesystem that may indicate that an unauthorized person has entered and modified files. In this guide, we will discuss how to install and configure tripwire on an Ubuntu 12.04 VPS.

Read more
Oracle Linux 8 — httpd:2.4 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — httpd:2.4 — vulnerability — patch and remediation guide (ELSA-2022-9276)

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9276 Related CVEs: CVE-2021-33193 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 9 — salt — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — salt — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2021 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-17361 CVE-2020-11651 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Oracle Linux 8 — python3 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python3 — security and stability fixes — required update (ELSA-2020-1764)

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1764 Related CVEs: CVE-2018-20852 CVE-2019-16056 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Alpine Linux edge — x11vnc — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — x11vnc — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.9.16-r2 📖 ~4 min read  •  Source: Alpine secdb entry — x11vnc 0.9.16-r2 Related CVEs: CVE-2020-29074 Upstream summary: Alpine community repository for vedge ships x11vnc 0.9.16-r2 which addresses CVE-2020-29074. Table of contents Symptom & Impact Environment […]

Read more
Ubuntu 18.04 — keepalived — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — keepalived — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5188-1 Related CVEs: CVE-2021-44225 CVE-2018-19115 Upstream summary: It was discovered that Keepalived incorrectly handled certain messages. An attacker could possibly use this issue to access-control bypass. Table of contents Symptom […]

Read more
How to Install and Use Podman with Buildah on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Install and Use Podman with Buildah on RHEL 8

Buildah is a Red Hat–sponsored command-line tool for building OCI-compliant container images without requiring a Docker daemon or root privileges. It ships in the default RHEL 8 AppStream repository alongside Podman, making it a natural fit for secure, rootless CI/CD pipelines. In this tutorial you will install Buildah and Podman on RHEL 8, build images […]

Read more
SLES 12 — librbd1 — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — librbd1 — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1158-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12059 CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-7262 CVE-2016-5009 CVE-2020-10753 CVE-2020-1760  +4 more Upstream summary: An issue was discovered in Ceph through 13.2.9. A POST request with an […]

Read more
CHAT