Package Management

Amazon Linux 2 — php-pear — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — php-pear — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2021-1602 Related CVEs: CVE-2020-36193 CVE-2021-32610 CVE-2020-28948 CVE-2020-28949 CVE-2018-1000888 Upstream summary: Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links. (CVE-2020-36193) Table […]

Read more
How to Install Zabbix Server on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install Zabbix Server on Debian 11

Introduction Deploying install zabbix server on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure Debian 11 […]

Read more
Debian 11 — ibus-pinyin — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ibus-pinyin — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the […]

Read more
Debian 11 — libfsntfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libfsntfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-11727 CVE-2018-11728 CVE-2018-11729 CVE-2018-11730 CVE-2018-11731 Upstream summary: The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via […]

Read more
Ubuntu 14.04 — tmux — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — tmux — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 May 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5843-1 Related CVEs: CVE-2022-47016 Upstream summary: It was discovered that tmux incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Table of […]

Read more
Oracle Linux 8 — java-11-openjdk — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — java-11-openjdk — vulnerability — patch and remediation guide (ELSA-2021-2781)

🟠 High   ⏱ 15–60 min  Last verified: 28 May 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-2781 Related CVEs: CVE-2021-2388 CVE-2021-2341 CVE-2021-2369 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2021-9475)

🟠 High   ⏱ 15–60 min  Last verified: 28 May 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9475 Related CVEs: CVE-2021-37159 CVE-2021-38198 CVE-2021-3743 CVE-2021-40490 CVE-2021-3739 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]

Read more
Amazon Linux 2 — golang-googlecode-sqlite — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — golang-googlecode-sqlite — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1862 Related CVEs: CVE-2022-1705 CVE-2022-1962 CVE-2022-1996 CVE-2022-24675 CVE-2022-27191 CVE-2022-27664 CVE-2022-28131 CVE-2022-28327  +8 more Upstream summary: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed […]

Read more
How to Set Up Checksum Monitoring with AIDE on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Set Up Checksum Monitoring with AIDE on RHEL 8

AIDE (Advanced Intrusion Detection Environment) is a host-based intrusion detection tool that builds a cryptographic baseline of your filesystem and alerts you whenever files are added, removed, or modified. On RHEL 8 it is available in the base repositories and integrates cleanly with cron and email for automated daily checks. Unlike network-based intrusion detection, AIDE […]

Read more
CHAT