Linux

Oracle Linux 8 — python-lxml — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python-lxml — vulnerability — patch and remediation guide (ELSA-2021-1898)

🟡 Medium   ⏱ 10–30 min  Last verified: 22 April 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-1898 Related CVEs: CVE-2020-27783 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 10 — exiv2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — exiv2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 April 2020 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-20421 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 18.04 — cairo — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — cairo — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 April 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8140-1 Related CVEs: CVE-2020-35492 CVE-2017-9814 CVE-2019-6462 CVE-2019-6461 Upstream summary: Alberto Garcia, Francisco Oca and Suleman Ali discovered that Cairo did not properly manage memory. An attacker could possibly use this […]

Read more
SLES 15 — python2-urllib3 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-urllib3 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 April 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-20060 CVE-2019-9740 CVE-2016-9015 CVE-2019-11236 CVE-2019-11324 Upstream summary: urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a […]

Read more
How To Install Webmin on Debian 10 — step-by-step Linux tutorial on Progressive Robot

How To Install Webmin on Debian 10

Webmin is a modern, web control panel for any Linux machine. It allows you to administer your server through an simple interface. In this tutorial, you’ll install and configure Webmin on a Debian 10 server and secure access to the interface with a valid certificate using Let’s Encrypt.

Read more
How to Install Zabbix Server on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Install Zabbix Server on Debian 10

Introduction This guide explains how to Install Zabbix Server on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install with the standard […]

Read more
Oracle Linux 8 — postgresql-jdbc — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — postgresql-jdbc — vulnerability — patch and remediation guide (ELSA-2020-3176)

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-3176 Related CVEs: CVE-2020-13692 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT