Linux

openSUSE Tumbleweed — pam_ssh — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — pam_ssh — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-1273 Upstream summary: pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the […]

Read more
openSUSE Tumbleweed — NetworkManager-vpnc — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — NetworkManager-vpnc — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:2307-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10900 Upstream summary: Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be […]

Read more
How to Configure NTP Time Synchronization on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure NTP Time Synchronization on Debian 10

Introduction How to Configure NTP Time Synchronization on Debian 10 is a fundamental operation for any administrator maintaining a Debian 10 Buster server. Debian 10 Buster ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 10. […]

Read more
Amazon Linux 2 — openwsman — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — openwsman — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1196 Related CVEs: CVE-2019-3816 CVE-2019-3833 Upstream summary: Earlier versions of Openwsman are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A […]

Read more
Ubuntu 16.04 — ipmitool — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ipmitool — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 February 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5997-1 Related CVEs: CVE-2020-5208 Upstream summary: It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use this […]

Read more
SLES 15 — docker-runc — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — docker-runc — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2958-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19921 Upstream summary: runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be […]

Read more
openSUSE Tumbleweed — faad2 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — faad2 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2018-20196 CVE-2019-6956 CVE-2018-20194 CVE-2018-20199 CVE-2018-20358 CVE-2018-20359 CVE-2018-20362 CVE-2019-15296 Upstream summary: There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced […]

Read more
Red Hat Enterprise Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 8 📖 ~4 min read  •  Source: Red Hat advisory RHSA RHSA-2026:8610 Related CVEs: CVE-2006-10002 CVE-2006-10003 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How To Configure BIND as a Private Network DNS Server on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Configure BIND as a Private Network DNS Server on Ubuntu 14.04

In this tutorial, we will go over how to set up an internal DNS server, using the BIND name server software (BIND9) on Ubuntu 14.04, that can be used by your Virtual Private Servers (VPS) to resolve private host names and private IP addresses. This provides a central way to manage your internal hostnames and private IP addresses, which is indispensable when your environment expands to more than a few hosts.

Read more
CHAT