Linux

Ubuntu 18.04 — chrony — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — chrony — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 November 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4475-1 Related CVEs: CVE-2020-14367 Upstream summary: It was discovered that Chrony incorrectly handled certain symbolic links. An attacker could possibly use this issue to cause a denial of service or […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide (ELSA-2021-9006)

🟠 High   ⏱ 15–60 min  Last verified: 3 November 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9006 Related CVEs: CVE-2020-14351 CVE-2020-14381 CVE-2020-29568 CVE-2020-29569 CVE-2020-25705 CVE-2020-28374 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 8 — python3 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python3 — security and stability fixes — required update (ELSA-2020-4433)

🟡 Medium   ⏱ 10–30 min  Last verified: 3 November 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4433 Related CVEs: CVE-2020-14422 CVE-2019-16935 CVE-2020-8492 CVE-2019-20907 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
Debian 10 — wpa — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — wpa — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 November 2020 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-13377 CVE-2020-12695 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
How Fail2Ban Works to Protect Services on a Linux Server — step-by-step Linux tutorial on Progressive Robot

How Fail2Ban Works to Protect Services on a Linux Server

Fail2ban is a daemon that can be used to monitor the logs of services and ban clients that repeatedly fail authentication checks. It is a great tool to help protect against brute force attacks and malicious users. In this guide, we’ll discuss how fail2ban works and how you can leverage its configuration structure to modify or extend its functionality.

Read more
Debian 10 — kconfig — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — kconfig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 November 2020 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-14744 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT