ubuntu

Ubuntu 20.04 — gegl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — gegl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5251-1 Related CVEs: CVE-2021-45463 Upstream summary: It was discovered that GEGL incorrectly filtered and escaped file path input data when using the C system() function for execution of the ImageMagick […]

Read more
How To Install Drupal on a Virtual Server Running Ubuntu 12.04 — step-by-step Linux tutorial on Progressive Robot

How To Install Drupal on a Virtual Server Running Ubuntu 12.04

This tutorials covers a basic drupal installation on an ubuntu server. Drupal is a free and open source content management that uses a PHP and a backend database, such as MySQL. It was created in 2001 and is currently the 3rd most popular content management site online. It now has over 17,000 addons to customize its functionality.

Read more
Ubuntu 20.04 — lasso — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — lasso — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4974-1 Related CVEs: CVE-2021-28091 Upstream summary: It was discovered that Lasso did not properly verify that all assertions in a SAML response were properly signed. An attacker could possibly use […]

Read more
Ubuntu 20.04 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5391-1 Related CVEs: CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Upstream summary: Nicolas Iooss discovered that libsepol incorrectly handled memory when handling policies. An attacker could possibly use this issue to cause a […]

Read more
Ubuntu 20.04 — underscore — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — underscore — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4913-1 Related CVEs: CVE-2021-23358 Upstream summary: It was discovered that Underscore incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary code. Table of contents Symptom […]

Read more
Ubuntu 20.04 — zsh — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — zsh — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5325-1 Related CVEs: CVE-2019-20044 CVE-2021-45444 Upstream summary: Sam Foxman discovered that Zsh incorrectly handled certain inputs. An attacker could possibly use this issue to regain dropped privileges. (CVE-2019-20044) It was […]

Read more
How To Set Up ModSecurity with Apache on Ubuntu 14.04 and Debian 8 — step-by-step Linux tutorial on Progressive Robot

How To Set Up ModSecurity with Apache on Ubuntu 14.04 and Debian 8

ModSecurity is a free web application firewall (WAF) that works with Apache, Nginx and IIS. It supports a flexible rule engine to perform simple and complex operations and comes with a Core Rule Set (CRS) which has rules for many exploits. For Apache, it is loaded as an additional module which makes it easy to install and configure. In this tutorial, you will learn how to install and configure ModSecurity and create custom rules.

Read more
Ubuntu 20.04 — libphp-phpmailer — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libphp-phpmailer — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5956-1 Related CVEs: CVE-2016-10033 CVE-2016-10045 CVE-2017-11503 CVE-2017-5223 CVE-2018-19296 CVE-2020-13625 CVE-2021-3603 Upstream summary: Dawid Golunski discovered that PHPMailer was not properly escaping user input data used as arguments to functions executed […]

Read more
Common Problems 118483

Ubuntu 16.04 LTS – swap misconfiguration causes heavy swapping and latency – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 12 April 2022 Affected versions: Ubuntu 16.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Ubuntu 18.04 — nvidia-graphics-drivers-515-server — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — nvidia-graphics-drivers-515-server — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5547-1 Related CVEs: CVE-2022-31607 CVE-2022-31608 CVE-2022-31615 Upstream summary: Le Wu discovered that the NVIDIA graphics drivers did not properly perform input validation in some situations. A local user could use […]

Read more
CHAT