Package Management

Ubuntu 20.04 — libexif — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libexif — multiple vulnerabilities (9 CVEs) — patch and remediation guide

  • February 15, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 15 February 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4624-1 Related CVEs: CVE-2020-0452 CVE-2020-0093 CVE-2020-0182 CVE-2020-0198 CVE-2020-13112 CVE-2020-13113 CVE-2020-13114 CVE-2018-20030  +1 more Upstream summary: It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this […]

Read more
Ubuntu 18.04 — cpanminus — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — cpanminus — vulnerability — patch and remediation guide

  • February 15, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 15 February 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5230-1 Related CVEs: CVE-2020-16154 Upstream summary: It was discovered that App::cpanminus did not properly verify CHECKSUMS files. An attacker could possibly use this issue to bypass signature verification, gaining access […]

Read more
Amazon Linux 2 — json-c — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — json-c — vulnerability — patch and remediation guide

  • February 15, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1442 Related CVEs: CVE-2020-12762 Upstream summary: json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. (CVE-2020-12762) Table of contents Symptom […]

Read more
SLES 15 — libzmq5 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libzmq5 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

  • February 15, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 15 February 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13132 CVE-2019-6250 CVE-2020-15166 CVE-2014-7202 CVE-2014-7203 CVE-2014-9721 Upstream summary: In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting […]

Read more
SLES 12 — mailman — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — mailman — multiple vulnerabilities (14 CVEs) — patch and remediation guide

  • February 15, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 15 February 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1886-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43331 CVE-2021-43332 CVE-2021-44227 CVE-2021-42096 CVE-2019-3693 CVE-2020-12108 CVE-2020-12137 CVE-2020-15011  +6 more Upstream summary: In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options […]

Read more
How to Automate Windows Server 2019 Provisioning with PowerShell and Terraform — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Automate Windows Server 2019 Provisioning with PowerShell and Terraform

Introduction: Automating Windows Server 2019 Provisioning Combining PowerShell and HashiCorp Terraform creates a powerful two-stage infrastructure-as-code pipeline for Windows Server 2019. Terraform handles the infrastructure layer—creating VMs in Hyper-V, VMware vSphere, or Azure, configuring networking and storage, and producing consistent, idempotent resource definitions in version-controlled .tf files. PowerShell handles the OS configuration layer—domain joining, feature […]

Read more
Oracle Linux 8 — ruby:2.7 security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — ruby:2.7 security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2023-3821)

  • February 14, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 14 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-3821 Related CVEs: CVE-2023-28755 CVE-2023-28756 CVE-2021-33621 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Common Problems 117904

Ubuntu 18.04 apt lock errors during updates

  • February 14, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 5–30 min  Last verified: 14 February 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Use Amanda for Enterprise Backup on Oracle Linux 8 — step-by-step Oracle Linux 8 tutorial on Progressive Robot

How to Use Amanda for Enterprise Backup on Oracle Linux 8

Introduction Setting up use amanda for enterprise backup on oracle linux 8 on a Oracle Linux 8 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Use Amanda for Enterprise Backup on Oracle Linux 8, with all the commands you need, the SELinux and firewalld […]

Read more
Common Problems 115506

RHEL 7 yum GPG Key Mismatch on Repository Metadata

  • February 14, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 5–30 min  Last verified: 14 February 2021 Affected versions: RHEL 7 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT