October 2019 - Page 21 of 69

openSUSE Tumbleweed — libgc1 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libgc1 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-2673 Upstream summary: Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser […]

Read more
How to Set Up IPsec with StrongSwan on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Set Up IPsec with StrongSwan on FreeBSD 12

Introduction This guide explains how to Set Up IPsec with StrongSwan on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]

Read more
Amazon Linux 2 — setup — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — setup — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1158 Related CVEs: CVE-2018-1113 Upstream summary: Setup in Amazon Linux 2 added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access […]

Read more
FreeBSD 12 — subversion-freebsd — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — subversion-freebsd — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Subversion — multiple vulnerabilities Related CVEs: CVE-2009-2411 CVE-2010-4539 CVE-2010-4644 CVE-2011-0715 CVE-2011-1752 CVE-2011-1783 CVE-2011-1921 Upstream summary: Subversion team reports: Subversion's mod_dav_svn Apache HTTPD server module will dereference a NULL pointer if […]

Read more
FreeBSD 12 — isc-dhcp3-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — isc-dhcp3-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-0460 CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute […]

Read more
FreeBSD 12 — xrdb — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xrdb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xrdb — root hole via rogue hostname Related CVEs: CVE-2011-0465 Upstream summary: Matthias Hopf reports: By crafting hostnames with shell escape characters, arbitrary commands can be executed in a root […]

Read more
How to Set Up Automatic Security Updates on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up Automatic Security Updates on Debian 9

Introduction Deploying set up automatic security updates on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You […]

Read more
FreeBSD 12 — zh-tin — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zh-tin — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tin — buffer overflow vulnerabilities Upstream summary: Urs Janssen and Aleksey Salow report possible buffer overflows in tin versions 1.8.0 and 1.8.1. OpenPKG project elaborates there is an allocation off-by-one […]

Read more
CHAT