Package Management

Ubuntu 20.04 — ca-certificates — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — ca-certificates — multiple vulnerabilities (8 CVEs) — patch and remediation guide

  • April 19, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 19 April 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7034-1 Related CVEs: https://launchpad.net/bugs/2081875 https://launchpad.net/bugs/2020089 https://launchpad.net/bugs/1998785 https://launchpad.net/bugs/1976631 https://launchpad.net/bugs/1944481 https://launchpad.net/bugs/1914064 https://launchpad.net/bugs/1900727 https://launchpad.net/bugs/1881533 Upstream summary: The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in […]

Read more
Amazon Linux 2 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • April 19, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2307 Related CVEs: CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Upstream summary: The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper). (CVE-2021-36084) The CIL compiler in […]

Read more
Oracle Linux 8 — samba — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — samba — vulnerability — patch and remediation guide (ELSA-2021-4058)

  • April 19, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 19 April 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-4058 Related CVEs: CVE-2021-20254 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 12 — linux-flashplayer — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-flashplayer — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • April 19, 2021
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 19 April 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Flash Player — arbitrary code execution Related CVEs: CVE-2017-11213 CVE-2017-11215 CVE-2017-11225 CVE-2017-11281 CVE-2017-11282 CVE-2017-11292 CVE-2017-2925 CVE-2017-2926  +12 more Upstream summary: Adobe reports: This update resolves a NULL pointer dereference vulnerability […]

Read more
How to Configure Kerberos Authentication on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Configure Kerberos Authentication on RHEL 8

  • April 19, 2021
  • Linux
  • Comment off

Kerberos is a mature, ticket-based network authentication protocol that allows services and users to prove their identity to one another without transmitting passwords over the network. MIT Kerberos is the reference implementation and is packaged in RHEL 8’s default repositories. Setting up a Key Distribution Center (KDC) gives you a centralised authentication infrastructure that integrates […]

Read more
Oracle Linux 8 — SAN boot may fail when using an Emulex 32GB FC Adapter — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — SAN boot may fail when using an Emulex 32GB FC Adapter

  • April 18, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 5–30 min  Last verified: 18 April 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: Oracle Bug 31898488 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]

Read more
FreeBSD 13 — syslog-ng — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — syslog-ng — vulnerability — patch and remediation guide

  • April 18, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: syslog-ng2 — startup directory leakage in the chroot environment Related CVEs: CVE-2008-5110 Upstream summary: Florian Grandel reports: I have not had the time to analyze all of syslog-ng code. But […]

Read more
How to Set Up SSH Two-Factor Authentication on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Set Up SSH Two-Factor Authentication on SLES 12

Introduction This tutorial covers How to Set Up SSH Two-Factor Authentication on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: […]

Read more
AlmaLinux 8 — libcmis — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — libcmis — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • April 18, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2020:4628 Related CVEs: CVE-2020-12802 CVE-2020-12803 Upstream summary: LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a […]

Read more
FreeBSD 13 — aide — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — aide — vulnerability — patch and remediation guide

  • April 18, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: aide — heap-based buffer overflow Related CVEs: CVE-2021-45417 Upstream summary: David Bouman reports: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT