ubuntu

Building for Production: Web Applications — Overview — step-by-step Linux tutorial on Progressive Robot

Building for Production: Web Applications — Overview

This tutorial will demonstrate how to plan and set up a sample production application from start to finish. Hopefully, this will help you plan and implement your own production server environment, even if you are running a different application on a completely different technology stack. Because this tutorial covers many different system administration topics, it will often defer the detailed explanation to external supporting articles that provide supplemental information.

Read more
How To Protect SSH with Fail2Ban on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Protect SSH with Fail2Ban on Ubuntu 14.04

Fail2ban is a daemon that can be run on your server to dynamically block clients that fail to authenticate correctly with your services repeatedly. This can help mitigate the affect of brute force attacks and illegitimate users of your services. In this guide, we’ll show demonstrate how to install and configure fail2ban to protect SSH and Nginx on an Ubuntu 14.04 server.

Read more
Common Problems 118532

Ubuntu 16.04 mdadm RAID Degraded After Reboot

🟡 Medium   ⏱ 5–30 min  Last verified: 16 October 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 18.04 — htslib — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — htslib — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 October 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4802-1 Related CVEs: CVE-2017-1000206 CVE-2018-13845 Upstream summary: It was discovered that HTSlib incorrectly handled certain data. An attacker could possibly use this issue to execute arbitrary code. This issue affected […]

Read more
Ubuntu 14.04 — thunderbird — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — thunderbird — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 October 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3927-1 Related CVEs: CVE-2018-18506 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9795 CVE-2019-9796  +12 more Upstream summary: It was discovered that Thunderbird allowed PAC files to specify that requests to localhost are […]

Read more
Ubuntu 16.04 — opencv — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — opencv — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 October 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4818-1 Related CVEs: CVE-2019-15939 CVE-2019-14491 CVE-2017-18009 CVE-2019-14492 CVE-2019-14493 Upstream summary: It was discovered that OpenCV did not properly manage certain objects, leading to a divide-by-zero. If a user were tricked […]

Read more
Ubuntu 18.04 — bzip2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — bzip2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 October 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4038-3 Related CVEs: https://launchpad.net/bugs/1834494 CVE-2016-3189 CVE-2019-12900 Upstream summary: USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. We […]

Read more
Ubuntu 16.04 — php-imagick — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — php-imagick — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 October 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4586-2 Related CVEs: CVE-2019-11037 Upstream summary: USN-4586-1 fixed vulnerabilities in PHP ImageMagick. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that PHP […]

Read more
How To Protect your Server Against the POODLE SSLv3 Vulnerability — step-by-step Linux tutorial on Progressive Robot

How To Protect your Server Against the POODLE SSLv3 Vulnerability

The POODLE SSLv3 vulnerability is a security issue that affects all implementations of SSLv3. This vulnerability allows an attacker to decrypt messages sent using this protocol version by exploiting a weakness the way the padding of a message are checked. In this guide, we’ll explain how the vulnerability work, and tell you how to disable SSLv3 on some common services.

Read more
CHAT