Logging Monitoring

How to Set Up Alertmanager Email Notifications on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up Alertmanager Email Notifications on Debian 9

Introduction This guide explains how to Set Up Alertmanager Email Notifications on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install with […]

Read more
openSUSE Tumbleweed — xinetd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — xinetd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0466-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-0862 CVE-2013-4342 Upstream summary: builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled […]

Read more
Debian 10 — nghttp2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — nghttp2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2020 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-9511 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Set Up BGP Routing with BIRD on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up BGP Routing with BIRD on Debian 10

Introduction This guide explains how to Set Up BGP Routing with BIRD on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install […]

Read more
Ubuntu 18.04 — libapreq2 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libapreq2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4558-1 Related CVEs: CVE-2019-12412 Upstream summary: It was discovered that libapreq2 did not properly sanitize the Content-Type field in certain, crafted HTTP requests. An attacker could use this vulnerability to […]

Read more
Ubuntu 18.04 — libtomcrypt — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libtomcrypt — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4868-1 Related CVEs: CVE-2019-17362 Upstream summary: It was discovered that LibTomCrypt incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or read […]

Read more
openSUSE Tumbleweed — mxml — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — mxml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:3060-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-4570 CVE-2016-4571 Upstream summary: The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service […]

Read more
SLES 12 — libmspack0 — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libmspack0 — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3470-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-18586 CVE-2018-18584 CVE-2018-18585 CVE-2010-2800 CVE-2010-2801 CVE-2014-9556 CVE-2019-1010305 CVE-2014-9732  +6 more Upstream summary: chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does […]

Read more
How to Set Up Checksum Monitoring with AIDE on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Set Up Checksum Monitoring with AIDE on RHEL 7

File integrity monitoring is a cornerstone of host-based intrusion detection. AIDE — Advanced Intrusion Detection Environment — creates a cryptographic baseline of your file system and compares the current state against that baseline to detect unauthorized changes. When an attacker modifies a system binary, alters a configuration file, or installs a rootkit, AIDE reports exactly […]

Read more
CHAT