Security Hardening

Ubuntu 14.04 — apt — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — apt — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 September 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4667-2 Related CVEs: CVE-2020-27350 CVE-2020-3810 CVE-2019-3462 CVE-2016-1252 CVE-2014-7206 CVE-2014-6273 CVE-2014-0487 CVE-2014-0488  +3 more Upstream summary: USN-4667-1 fixed a vulnerability in APT. This update provides the corresponding update for Ubuntu 14.04 […]

Read more
Ubuntu 14.04 — libzen — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libzen — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 September 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6048-1 Related CVEs: CVE-2020-36646 Upstream summary: It was discovered that ZenLib doesn't check the return value of a specific operation before using it. An attacker could use a specially crafted […]

Read more
Oracle Linux 8 — mod_auth_mellon — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — mod_auth_mellon — vulnerability — patch and remediation guide (ELSA-2019-0985)

🟠 High   ⏱ 15–60 min  Last verified: 26 September 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-0985 Related CVEs: CVE-2019-3878 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
IBM AIX 7.2 — CVE-2020-4668 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2020-4668 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 26 September 2020 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2020-4668, IBM Support Bulletin CVE: CVE-2020-4668 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an […]

Read more
Oracle Linux 8 — bind — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — bind — security and stability fixes — required update (ELSA-2019-3552)

🟢 Low   ⏱ 5–15 min  Last verified: 25 September 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3552 Related CVEs: CVE-2019-6465 CVE-2018-5745 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Common Problems 115519

RHEL 7 Docker daemon fails to start because kernel cgroup features are missing

🟠 High   ⏱ 5–30 min  Last verified: 25 September 2020 Affected versions: RHEL 7 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
How to Patch AIX with Fix Central Downloads on IBM AIX 7.2 — step-by-step IBM AIX 7.2 tutorial on Progressive Robot

How to Patch AIX with Fix Central Downloads on IBM AIX 7.2

Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to patch aix with fix central downloads on ibm aix […]

Read more
How to Automate Oracle Linux 8 Deployment with Kickstart — step-by-step Oracle Linux 8 tutorial on Progressive Robot

How to Automate Oracle Linux 8 Deployment with Kickstart

Introduction Oracle Linux 8 ships with a stable, security-hardened base that makes deploying automate oracle linux 8 deployment with kickstart both straightforward and auditable. This tutorial covers the complete procedure for how to Automate Oracle Linux 8 Deployment with Kickstart, including dnf module streams where applicable, systemd unit management, and the firewalld rules required for […]

Read more
Debian 10 — davical — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — davical — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 September 2020 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-18345 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 18.04 — libproxy — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libproxy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 September 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4673-1 Related CVEs: CVE-2020-26154 CVE-2020-25219 Upstream summary: Li Fei discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a crash or execute […]

Read more
CHAT