Security Hardening

How to Install and Configure AIDE on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Install and Configure AIDE on RHEL 8

AIDE (Advanced Intrusion Detection Environment) is a host-based intrusion detection tool that detects unauthorized changes to files and directories by comparing a live system snapshot against a baseline database. On RHEL 8, AIDE is available directly from the standard repositories and integrates cleanly with systemd for scheduled integrity checks. Detecting modified binaries, configuration files, or […]

Read more
SLES 15 — java — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — java — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 17 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1874-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-4881 CVE-2016-9840 CVE-2016-9841 CVE-2017-10107 CVE-2017-3289 CVE-2018-12547 CVE-2018-3183 CVE-2019-17631  +12 more Upstream summary: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE […]

Read more
FreeBSD 12 — tomcat — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tomcat — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache Tomcat — Multiple Vulnerabilities Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 CVE-2010-1157 CVE-2011-0013 CVE-2012-0022 CVE-2012-2733  +12 more Upstream summary: [email protected] reports: A race condition on connection close could trigger a […]

Read more
How to Harden SSH on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Harden SSH on SLES 15

Introduction This tutorial covers How to Harden SSH on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Edit SSH Configuration vi /etc/ssh/sshd_config Step 2 — Recommended Settings […]

Read more
Common Problems 118532

Ubuntu 16.04 mdadm RAID Degraded After Reboot

🟡 Medium   ⏱ 5–30 min  Last verified: 16 October 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 115084

Leapp Preupgrade Reports Blockers for RHEL 8 Minor Upgrade Path

🟡 Medium   ⏱ 5–30 min  Last verified: 16 October 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
openSUSE Tumbleweed — libtool — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libtool — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:006 (see also SUSE bugzilla) Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other […]

Read more
FreeBSD 12 — wgetpro — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wgetpro — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wget — multiple vulnerabilities Related CVEs: CVE-2004-1487 CVE-2004-1488 Upstream summary: Jan Minar reports that there exists multiple vulnerabilities in wget: Wget erroneously thinks that the current directory is a fair […]

Read more
Common Problems 114895

DNF Metadata Expired Causing Slow or Failed Updates

🟡 Medium   ⏱ 5–30 min  Last verified: 16 October 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
CHAT