Troubleshooting

Ubuntu 14.04 — grub2 — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — grub2 — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 July 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4432-2 Related CVEs: https://launchpad.net/bugs/1889556 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705  +3 more Upstream summary: USN-4432-1 fixed vulnerabilities in GRUB2 affecting Secure Boot environments. Unfortunately, the update introduced regressions for […]

Read more
How to Set Up WireGuard VPN on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up WireGuard VPN on Debian 10

Introduction How to Set Up WireGuard VPN on Debian 10 is a fundamental operation for any administrator maintaining a Debian 10 Buster server. Debian 10 Buster ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 10. […]

Read more
Ubuntu 16.04 — moin — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — moin — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 July 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4629-1 Related CVEs: CVE-2020-15275 CVE-2020-25074 CVE-2017-5934 CVE-2016-7146 CVE-2016-7148 CVE-2016-9119 Upstream summary: Michael Chapman discovered that MoinMoin incorrectly handled certain cache actions. An attacker could possibly use this issue to execute […]

Read more
How to Configure Nginx Rate Limiting and Connection Throttling on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure Nginx Rate Limiting and Connection Throttling on RHEL 7

How to Configure Nginx Rate Limiting and Connection Throttling on RHEL 7 Uncontrolled traffic is one of the most common threats to web server stability. Whether the source is a poorly written client polling too aggressively, a scraper harvesting your content, or a low-volume denial-of-service attack, allowing unlimited requests to reach your application or upstream […]

Read more
Ubuntu 16.04 — ruby-websocket-extensions — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ruby-websocket-extensions — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 July 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4502-1 Related CVEs: CVE-2020-7663 Upstream summary: It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex backtracking, resulting in […]

Read more
How to Configure firewalld Zones on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure firewalld Zones on SLES 15

Introduction This tutorial covers How to Configure firewalld Zones on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper refresh […]

Read more
Common Problems 112513

Windows Server 2019 — Static routes lost after reboot due to persistent store misconfiguration in Server 2019 — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 25 July 2020 Affected versions: Windows Server 2019 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Ubuntu 20.04 — pcre3 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — pcre3 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 July 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5425-1 Related CVEs: CVE-2019-20838 CVE-2020-14155 Upstream summary: Yunho Kim discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could possibly use this issue to cause applications […]

Read more
SLES 15 — bubblewrap — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — bubblewrap — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 July 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-5291 CVE-2019-12439 Upstream summary: Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap –userns2` […]

Read more
How to Install WooCommerce on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Install WooCommerce on SLES 15

Introduction This tutorial covers How to Install WooCommerce on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper refresh && […]

Read more
CHAT