Logging Monitoring

Debian 11 — python-rencode — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-rencode — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-40839 Upstream summary: The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU […]

Read more
Debian 11 — screen — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — screen — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0972 CVE-2006-4573 CVE-2009-1214 CVE-2009-1215 CVE-2015-6806 CVE-2017-5618 CVE-2020-9366 CVE-2021-26937  +4 more Upstream summary: Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows […]

Read more
How to Configure Oracle Linux 9 for Edge Computing — step-by-step Oracle Linux 9 tutorial on Progressive Robot

How to Configure Oracle Linux 9 for Edge Computing

Introduction This tutorial demonstrates how to Configure Oracle Linux 9 for Edge Computing on Oracle Linux 9. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered Oracle Linux 9 system with the default […]

Read more
Debian 11 — juce — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — juce — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-23520 CVE-2021-23521 Upstream summary: The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability […]

Read more
Debian 11 — mosh — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — mosh — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-2385 Upstream summary: The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape […]

Read more
Ubuntu 14.04 — gsasl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gsasl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6169-1 Related CVEs: CVE-2022-2469 Upstream summary: It was discovered that GNU SASL's GSSAPI server could make an out-of-bounds reads if given specially crafted GSS-API authentication data. A remote attacker could […]

Read more
SLES 15 — libcapnp — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libcapnp — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 January 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4478-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-46149 Upstream summary: Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and […]

Read more
SLES 15 — e2fsprogs — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — e2fsprogs — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 January 2023 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1021-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1304 CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 Upstream summary: An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly […]

Read more
Oracle Linux 8 — gnutls — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — gnutls — vulnerability — patch and remediation guide (ELSA-2022-7105)

🟡 Medium   ⏱ 10–30 min  Last verified: 25 January 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-7105 Related CVEs: CVE-2022-2509 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Set Up Windows Server 2019 with Zabbix — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Set Up Windows Server 2019 with Zabbix

How to Set Up Windows Server 2019 with Zabbix Zabbix is an enterprise-class open-source monitoring platform that provides agent-based and agentless monitoring of Windows Server 2019 infrastructure. The Zabbix agent for Windows collects over 100 built-in metrics including CPU, memory, disk, network, services, and event log data. Zabbix’s template system makes it straightforward to apply […]

Read more
CHAT