Package Management

How to Manage Storage with Parted on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Manage Storage with Parted on SLES 15

Introduction This tutorial covers How to Manage Storage with Parted on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper […]

Read more
Ubuntu 18.04 — velocity-tools — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — velocity-tools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6282-1 Related CVEs: CVE-2020-13959 Upstream summary: Jackson Henry discovered that Velocity Tools incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted […]

Read more
Oracle Linux 8 — dovecot — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — dovecot — vulnerability — patch and remediation guide (ELSA-2020-3713)

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-3713 Related CVEs: CVE-2020-12674 CVE-2020-12100 CVE-2020-12673 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
How to Configure MySQL InnoDB Tuning on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure MySQL InnoDB Tuning on Debian 10

Introduction Deploying configure mysql innodb tuning on debian 10 on a Debian 10 Buster machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will […]

Read more
Oracle Linux 8 — nghttp2 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — nghttp2 — vulnerability — patch and remediation guide (ELSA-2019-2692)

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-2692 Related CVEs: CVE-2019-9513 CVE-2019-9511 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
FreeBSD 12 — ja-w3m — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-w3m — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: w3m – multiple vulnerabilities Related CVEs: CVE-2006-6772 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 CVE-2016-9426 CVE-2016-9428 CVE-2016-9429  +12 more Upstream summary: Tatsuya Kinoshita reports: CVE-2018-6196 * table.c: Prevent negative indent value in feed_table_block_tag(). […]

Read more
How to Write Ansible Playbooks for Server Automation on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Write Ansible Playbooks for Server Automation on RHEL 8

Once you have Ansible installed and your inventory configured, playbooks are the primary way to describe and enforce the desired state of your infrastructure. A playbook is a YAML file that groups one or more plays, each targeting a set of hosts and executing an ordered list of tasks. This tutorial covers playbook anatomy, the […]

Read more
Common Problems 121030

Debian 10 – nftables Rules Missing After Reboot – Persistent Firewall Setup

🟠 High   ⏱ 5–30 min  Last verified: 31 May 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
How to Install CockroachDB on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Install CockroachDB on SLES 12

Introduction This tutorial covers How to Install CockroachDB on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh && […]

Read more
FreeBSD 12 — devcpu-data — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — devcpu-data — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Intel CPU issues Related CVEs: CVE-2020-0543 Upstream summary: Intel reports: Intel CPUs suffer Special Register Buffer Data Sampling vulnerability Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
CHAT