Security Hardening

Ubuntu 18.04 — libhibernate3-java — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libhibernate3-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 January 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6845-1 Related CVEs: CVE-2020-25638 Upstream summary: It was discovered that Hibernate incorrectly handled certain inputs with unsanitized literals. If a user or an automated system were tricked into opening a […]

Read more
openSUSE Tumbleweed — targetcli-fb-common — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — targetcli-fb-common — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-10699 CVE-2020-13867 Upstream summary: A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If […]

Read more
How to Set Up FreeBSD Jails with iocage on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Set Up FreeBSD Jails with iocage on FreeBSD 12

Introduction FreeBSD 12 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up set up freebsd jails with iocage on freebsd 12 on FreeBSD 12 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from […]

Read more
Ubuntu 18.04 — libpam-krb5 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libpam-krb5 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 January 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4314-1 Related CVEs: CVE-2020-10595 Upstream summary: Russ Allbery discovered that pam-krb5 incorrectly handled some responses. An attacker could possibly use this issue to execute arbitrary code. Table of contents Symptom […]

Read more
SLES 12 — python-brotlipy — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-brotlipy — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 January 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:611-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8927 Upstream summary: A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" […]

Read more
Oracle Linux 8 — wayland security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — wayland security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2023-2786)

🟡 Medium   ⏱ 10–30 min  Last verified: 5 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-2786 Related CVEs: CVE-2021-3782 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 20.04 — tcpdump — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — tcpdump — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 January 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5331-2 Related CVEs: CVE-2018-16301 CVE-2020-8037 Upstream summary: USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: […]

Read more
How to Set Up MySQL with SSL on Oracle Linux 8 — step-by-step Oracle Linux 8 tutorial on Progressive Robot

How to Set Up MySQL with SSL on Oracle Linux 8

Introduction Oracle Linux 8 ships with a stable, security-hardened base that makes deploying set up mysql with ssl on oracle linux 8 both straightforward and auditable. This tutorial covers the complete procedure for how to Set Up MySQL with SSL on Oracle Linux 8, including dnf module streams where applicable, systemd unit management, and the […]

Read more
Oracle Linux 8 — firefox — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — firefox — vulnerability — patch and remediation guide (ELSA-2019-0966)

🔴 Critical   ⏱ 15–90 min  Last verified: 5 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-0966 Related CVEs: CVE-2019-9810 CVE-2019-9791 CVE-2019-9796 CVE-2019-9793 CVE-2019-9795 CVE-2019-9790 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 8 — firefox — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — firefox — vulnerability — patch and remediation guide (ELSA-2019-2663)

🔴 Critical   ⏱ 15–90 min  Last verified: 5 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-2663 Related CVEs: CVE-2019-11749 CVE-2019-11752 CVE-2019-11743 CVE-2019-11735 CVE-2019-11738 CVE-2019-11742 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
CHAT