Logging Monitoring

Debian 12 — scheme48 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — scheme48 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-4150 Upstream summary: The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp. Table of contents […]

Read more
Debian 11 — gss-ntlmssp — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gss-ntlmssp — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 August 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-25563 CVE-2023-25565 CVE-2023-25567 Upstream summary: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM […]

Read more
Windows Server 2022 — KB5022858 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2022

Windows Server 2022 — KB5022858 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read  •  Source: Microsoft KB5022858 • MSRC update-guide entry Related CVEs: CVE-2023-21808 CVE-2023-21689 CVE-2023-21690 CVE-2023-21692 CVE-2023-21684 CVE-2023-21701 CVE-2023-21797 CVE-2023-21798  +12 more Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Windows Server 2022 […]

Read more
Debian 12 — quota — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — quota — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-3417 Upstream summary: The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which […]

Read more
Debian 12 — lm-sensors — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — lm-sensors — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2672 Upstream summary: pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary […]

Read more
NetBSD 9.4 — php71-gd — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — php71-gd — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-7568 CVE-2018-5711 CVE-2019-6977 CVE-2017-7890 CVE-2019-11038 Upstream summary: pkgsrc audit-packages flagged php71-gd<7.1.0beta1nb1 for vulnerability class 'heap-overflow'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7568 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Ubuntu 16.04 — libxpm — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libxpm — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 August 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6408-2 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 CVE-2016-10164 Upstream summary: USN-6408-1 fixed several vulnerabilities in libXpm. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu […]

Read more
How to Set Up Suricata IDS/IPS on Oracle Linux 9 — step-by-step Oracle Linux 9 tutorial on Progressive Robot

How to Set Up Suricata IDS/IPS on Oracle Linux 9

Introduction Setting up set up suricata ids/ips on oracle linux 9 on a Oracle Linux 9 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Set Up Suricata IDS/IPS on Oracle Linux 9, with all the commands you need, the SELinux and firewalld considerations to […]

Read more
Ubuntu 20.04 — harfbuzz — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — harfbuzz — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7251-1 Related CVEs: CVE-2023-25193 CVE-2022-33068 Upstream summary: It was discovered that HarfBuzz incorrectly handled shaping certain fonts. A remote attacker could possibly use this issue to cause HarfBuzz to consume […]

Read more
NetBSD 9.4 — flac — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — flac — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-6888 CVE-2020-22219 Upstream summary: pkgsrc audit-packages flagged flac<1.2.1 for vulnerability class 'arbitrary-code-execution'. Reference: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=608 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
CHAT