Security Hardening

How to Set Up DRBD Block Replication on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up DRBD Block Replication on Debian 10

Introduction This guide explains how to Set Up DRBD Block Replication on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install with […]

Read more
Ubuntu 18.04 — nvidia-graphics-drivers-440 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — nvidia-graphics-drivers-440 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 July 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4404-1 Related CVEs: CVE-2020-5963 CVE-2020-5967 CVE-2020-5973 Upstream summary: Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could […]

Read more
Ubuntu 16.04 — ant — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ant — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 July 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4874-1 Related CVEs: CVE-2020-1945 Upstream summary: It was discovered that Apache Ant created temporary files with insecure permissions. An attacker could use this vulnerability to read sensitive information leaked into […]

Read more
openSUSE Tumbleweed — sphinx — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — sphinx — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:0046-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-29050 Upstream summary: SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for […]

Read more
Common Problems 121084

Debian 10: MariaDB startup fails with InnoDB corruption

🔴 Critical   ⏱ 5–30 min  Last verified: 27 July 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Common Problems 118444

Ubuntu 16.04 LTS /boot partition full blocks kernel updates

🟡 Medium   ⏱ 5–30 min  Last verified: 27 July 2020 Affected versions: 16.04 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs […]

Read more
Common Problems 117607

Ubuntu 20.04 LTS – failed fstab mount entry blocks startup target – Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 27 July 2020 Affected versions: Ubuntu 20.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Common Problems 115104

kdump Not Capturing Kernel Crash Dumps

🟡 Medium   ⏱ 5–30 min  Last verified: 27 July 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Install Debian 10 Buster on a Server — step-by-step Debian 10 tutorial on Progressive Robot

How to Install Debian 10 Buster on a Server

Introduction Debian 10 Buster is built around the ethos of stability and free software. Setting up install debian 10 buster on a server on Buster leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Buster freeze. Follow each step carefully and […]

Read more
CHAT