Linux

SLES 15 — procmail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — procmail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1137-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3618 CVE-2017-16844 Upstream summary: Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and […]

Read more
How to Set Up Varnish Cache as a Reverse Proxy on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Set Up Varnish Cache as a Reverse Proxy on RHEL 7

How to Set Up Varnish Cache as a Reverse Proxy on RHEL 7 Varnish Cache is a high-performance HTTP reverse proxy and caching accelerator designed to sit in front of your web server. When a visitor requests a page, Varnish checks whether it holds a fresh cached copy. If it does, the response is served […]

Read more
Debian 9 — systemd — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — systemd — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 August 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-16864 CVE-2019-3842 CVE-2019-6454 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
How to Connect Your Internet of Things with Node-RED on Ubuntu 16.04 — step-by-step Linux tutorial on Progressive Robot

How to Connect Your Internet of Things with Node-RED on Ubuntu 16.04

Node-RED is a switchboard for the Internet of Things, a visual tool that helps you connect your favorite apps, websites, and hardware together to do new and useful things. Node-RED has a powerful and flexible interface, and a large open source community creating *nodes* to interact with a wide variety of apps and services. In this tutorial, we’ll install Node.js and Node-RED, get an SSL certificate from Let’s Encrypt, and use Nginx to handle secure connections for Node-RED.

Read more
Debian 10 — libwebp — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — libwebp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2019 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-25009 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 118918

Ubuntu 14.04 LTS – apt update fails because dpkg lock is held

🟠 High   ⏱ 5–30 min  Last verified: 13 August 2019 Affected versions: Ubuntu 14.04 LTS Ubuntu 14.04 Ubuntu 14.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]

Read more
Common Problems 118454

Ubuntu 16.04 LTS high load average caused by I/O wait saturation

🟠 High   ⏱ 5–30 min  Last verified: 13 August 2019 Affected versions: 16.04 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs […]

Read more
Common Problems 118417

Ubuntu 16.04 LTS SSH permission denied (publickey)

🟡 Medium   ⏱ 5–30 min  Last verified: 13 August 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Audit Linux Security with Lynis on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Audit Linux Security with Lynis on RHEL 7

How to Audit Linux Security with Lynis on RHEL 7 Maintaining a secure Linux server requires more than installing updates and setting strong passwords. A comprehensive security audit reveals configuration weaknesses, missing hardening measures, and potential vulnerabilities before attackers can exploit them. Lynis is an open-source security auditing tool that performs an in-depth scan of […]

Read more
openSUSE Tumbleweed — python3-Django — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python3-Django — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:1102-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-2512 CVE-2016-2513 Upstream summary: The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites […]

Read more
CHAT