Package Management

FreeBSD 12 — x11vnc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — x11vnc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: x11vnc — access to shared memory segments Related CVEs: CVE-2006-2450 CVE-2020-29074 Upstream summary: [email protected] reports: scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other […]

Read more
Oracle Linux 8 — kernel — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — kernel — security and stability fixes — required update (ELSA-2020-0339)

🟠 High   ⏱ 15–60 min  Last verified: 9 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-0339 Related CVEs: CVE-2019-14814 CVE-2019-14816 CVE-2019-14898 CVE-2019-14895 CVE-2019-17666 CVE-2019-19338 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How to Set Up Suricata IDS/IPS on Oracle Linux 8 — step-by-step Oracle Linux 8 tutorial on Progressive Robot

How to Set Up Suricata IDS/IPS on Oracle Linux 8

Introduction Oracle Linux 8 ships with a stable, security-hardened base that makes deploying set up suricata ids/ips on oracle linux 8 both straightforward and auditable. This tutorial covers the complete procedure for how to Set Up Suricata IDS/IPS on Oracle Linux 8, including dnf module streams where applicable, systemd unit management, and the firewalld rules […]

Read more
Ubuntu 20.04 — influxdb — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — influxdb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5451-1 Related CVEs: CVE-2019-20933 Upstream summary: Ilya Averyanov discovered that an InfluxDB vulnerability allowed attackers to bypass authentication and gain access to any known database user. Table of contents Symptom […]

Read more
How to Set Up WordPress with Apache2 on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up WordPress with Apache2 on Debian 9

Introduction Deploying set up wordpress with apache2 on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before […]

Read more
SLES 15 — openconnect — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — openconnect — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 January 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-7098 CVE-2012-6128 CVE-2019-16239 CVE-2020-12105 CVE-2020-12823 CVE-2018-20319 CVE-2012-3291 Upstream summary: OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on […]

Read more
Oracle Linux 8 — nodejs:14 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — nodejs:14 — security and stability fixes — required update (ELSA-2022-6448)

🟡 Medium   ⏱ 10–30 min  Last verified: 8 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-6448 Related CVEs: CVE-2022-32213 CVE-2022-32212 CVE-2022-33987 CVE-2022-32215 CVE-2022-32214 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]

Read more
Oracle Linux 8 — bind — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — bind — vulnerability — patch and remediation guide (ELSA-2021-0670)

🟠 High   ⏱ 15–60 min  Last verified: 8 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-0670 Related CVEs: CVE-2020-8625 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Configure SSH Key Authentication on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Configure SSH Key Authentication on SLES 12

Introduction This tutorial covers How to Configure SSH Key Authentication on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper […]

Read more
How to Configure Custom Metrics with Prometheus on Oracle Linux 8 — step-by-step Oracle Linux 8 tutorial on Progressive Robot

How to Configure Custom Metrics with Prometheus on Oracle Linux 8

Introduction How to Configure Custom Metrics with Prometheus on Oracle Linux 8 on Oracle Linux 8 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting […]

Read more
CHAT