Package Management

Oracle Linux 8 — rsyslog security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — rsyslog security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-1702)

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1702 Related CVEs: CVE-2019-17041 CVE-2019-17042 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Alpine Linux edge — opendmarc — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — opendmarc — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.4.1.1-r3 📖 ~4 min read  •  Source: Alpine secdb entry — opendmarc 1.4.1.1-r3 Related CVEs: CVE-2021-34555 Upstream summary: Alpine community repository for vedge ships opendmarc 1.4.1.1-r3 which addresses CVE-2021-34555. Table of contents Symptom & Impact Environment […]

Read more
How to Configure HashiCorp Vault on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Configure HashiCorp Vault on SLES 12

Introduction This tutorial covers How to Configure HashiCorp Vault on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh […]

Read more
FreeBSD 12 — py35-wagtail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py35-wagtail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Wagtail — potential timing attack vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 Upstream summary: Wagtail release notes: CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack […]

Read more
FreeBSD 12 — mpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MPD5 PPPoE Server remotely exploitable crash Related CVEs: CVE-2020-7465 CVE-2020-7466 Upstream summary: Version 5.9_2 contains security fix for PPPoE servers. Insufficient validation of incoming PPPoE Discovery request specially crafted by […]

Read more
Ubuntu 18.04 — audacity — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — audacity — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7211-1 Related CVEs: CVE-2020-11867 Upstream summary: Mike Salvatore discovered that Audacity incorrectly handled default permissions of temporary files created by the application. An attacker could possibly use this issue to […]

Read more
SLES 15 — glib-networking — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — glib-networking — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3944-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13645 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]

Read more
How to Configure Traffic Shaping with tc on Oracle Linux 8 — step-by-step Oracle Linux 8 tutorial on Progressive Robot

How to Configure Traffic Shaping with tc on Oracle Linux 8

Introduction This tutorial demonstrates how to Configure Traffic Shaping with tc on Oracle Linux 8 on Oracle Linux 8. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered Oracle Linux 8 system with […]

Read more
Oracle Linux 8 — libsolv — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libsolv — vulnerability — patch and remediation guide (ELSA-2021-4060)

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-4060 Related CVEs: CVE-2021-33928 CVE-2021-33929 CVE-2021-33938 CVE-2021-33930 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
CHAT