Package Management

Common Problems 117511

Ubuntu 20.04 LTS – persistent high iowait caused by background apt jobs – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 2 September 2020 Affected versions: Ubuntu 20.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
FreeBSD 12 — py311-Flask-Cors — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py311-Flask-Cors — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]

Read more
How to Monitor System Resources on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Monitor System Resources on SLES 12

Introduction This tutorial covers How to Monitor System Resources on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh […]

Read more
Ubuntu 18.04 — spice-vdagent — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — spice-vdagent — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4617-1 Related CVEs: CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Upstream summary: Matthias Gerstner discovered that SPICE vdagent incorrectly handled the active_xfers hash table. A local attacker could possibly use this issue to […]

Read more
Ubuntu 20.04 — libmediainfo — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libmediainfo — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5237-1 Related CVEs: CVE-2020-15395 CVE-2020-26797 Upstream summary: It was discovered that MediaInfoLib incorrectly handled certain specially crafted files. An attacker could possibly use this issue to cause a denial of […]

Read more
How to Take a System Snapshot on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Take a System Snapshot on Debian 10

Introduction Debian 10 Buster is built around the ethos of stability and free software. Setting up take a system snapshot on debian 10 on Buster leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Buster freeze. Follow each step carefully and […]

Read more
Ubuntu 16.04 — libcroco — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libcroco — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5389-1 Related CVEs: CVE-2017-7960 CVE-2017-8834 CVE-2017-8871 CVE-2020-12825 Upstream summary: It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a heap buffer […]

Read more
Oracle Linux 8 — compat-exiv2-026 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — compat-exiv2-026 — vulnerability — patch and remediation guide (ELSA-2022-1797)

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-1797 Related CVEs: CVE-2020-18898 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Configure Windows Server 2019 for Containers — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Configure Windows Server 2019 for Containers

Introduction to Windows Server 2019 Containers Windows Server 2019 includes native support for containerization, enabling organizations to run applications in isolated, lightweight environments called containers. Unlike virtual machines, containers share the host OS kernel but maintain isolation through namespaces and resource controls. Windows Server 2019 supports two container isolation types: process isolation and Hyper-V isolation. […]

Read more
How to Configure Logrotate on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure Logrotate on Debian 10

Introduction Deploying configure logrotate on debian 10 on a Debian 10 Buster machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure Debian 10 Buster […]

Read more
CHAT