March 2020

Common Problems 121125

Debian 10 GRUB Update Fails After Package Changes

🟠 High   ⏱ 5–30 min  Last verified: 31 March 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
How to Configure AppArmor on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Configure AppArmor on SLES 12

Introduction This tutorial covers How to Configure AppArmor on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Check AppArmor Status systemctl status apparmor aa-status Step 2 — […]

Read more
FreeBSD 12 — open-motif-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — open-motif-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]

Read more
FreeBSD 12 — pgbouncer — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pgbouncer — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pgbouncer — failed auth_query lookup leads to connection as auth_user Related CVEs: CVE-2015-4054 CVE-2015-6817 Upstream summary: PgBouncer reports: New auth_user functionality introduced in 1.6 allows login as auth_user when client […]

Read more
Alpine Linux edge — tcpflow — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — tcpflow — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.5.0-r1 📖 ~4 min read  •  Source: Alpine secdb entry — tcpflow 1.5.0-r1 Related CVEs: CVE-2018-18409 CVE-2018-14938 Upstream summary: Alpine main repository for vedge ships tcpflow 1.5.0-r1 which addresses CVE-2018-18409. Table of contents Symptom & Impact […]

Read more
How To Use Stored Procedures in MySQL — step-by-step Databases tutorial on Progressive Robot

How To Use Stored Procedures in MySQL

MySQL supports the use of stored procedures, which group one or multiple SQL statements for reuse under a common name. Using stored procedures, you can create reusable routines for common tasks to be used across multiple applications, provide data validation, or deliver an additional layer of data access security. In this tutorial, you’ll learn what stored procedures are and how to create basic stored procedures that return data and use both input and output parameters.

Read more
FreeBSD 12 — ca-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ca-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
How to Configure the System Timezone on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure the System Timezone on FreeBSD 12

Introduction How to Configure the System Timezone on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]

Read more
FreeBSD 12 — mcweject — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mcweject — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mcweject — exploitable buffer overflow Related CVEs: CVE-2007-1719 Upstream summary: CVE reports: Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local […]

Read more
CHAT