Linux

Common Problems 114933

RHEL 8 SELinux AVC denies web application write access

🟡 Medium   ⏱ 5–30 min  Last verified: 11 August 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Set Up Real-Time Performance Monitoring with Netdata on Ubuntu 16.04 — step-by-step Linux tutorial on Progressive Robot

How to Set Up Real-Time Performance Monitoring with Netdata on Ubuntu 16.04

Netdata provides accurate performance monitoring through extensible web dashboards that visualise the processes and services on your Linux systems. It monitors metrics about CPU, memory, disks, networks, processes, and more. The steps in this tutorial cover everything you need to successfully set up one Ubuntu 16.04 server running Netdata using its built-in web server or, optionally, using Nginx.

Read more
Ubuntu 18.04 — grub2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — grub2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 August 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4432-2 Related CVEs: https://launchpad.net/bugs/1889556 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705  +2 more Upstream summary: USN-4432-1 fixed vulnerabilities in GRUB2 affecting Secure Boot environments. Unfortunately, the update introduced regressions for […]

Read more
How to Configure SSL/TLS Client Certificate Authentication on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure SSL/TLS Client Certificate Authentication on Debian 10

Introduction How to Configure SSL/TLS Client Certificate Authentication on Debian 10 is a fundamental operation for any administrator maintaining a Debian 10 Buster server. Debian 10 Buster ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian […]

Read more
How To Set Up Highly Available Web Servers with Keepalived and Reserved IPs on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Set Up Highly Available Web Servers with Keepalived and Reserved IPs on Ubuntu 14.04

Keepalived is a service that can monitor servers or processes in order to implement high availability on your infrastructure. In this guide, we will use the `keepalived` daemon to monitor two web servers. The secondary server will take over the web traffic if the primary server experiences issues by automatically claiming ownership of a shared Floating IP address using the cloud provider API.

Read more
Common Problems 121017

Debian 10 Temporary Failure Resolving During apt update

🟡 Medium   ⏱ 5–30 min  Last verified: 10 August 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Ubuntu 16.04 — grub2-signed — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — grub2-signed — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 August 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4432-2 Related CVEs: https://launchpad.net/bugs/1889556 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705  +2 more Upstream summary: USN-4432-1 fixed vulnerabilities in GRUB2 affecting Secure Boot environments. Unfortunately, the update introduced regressions for […]

Read more
How to Install and Configure Julia on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Install and Configure Julia on Debian 10

Introduction This guide explains how to Install and Configure Julia on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install with the […]

Read more
SLES 15 — libexempi3 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libexempi3 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 August 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3734-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-18651 CVE-2020-18652 CVE-2018-12648 CVE-2018-7728 CVE-2018-7729 CVE-2018-7730 CVE-2018-7731 Upstream summary: Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause […]

Read more
CHAT