April 2020 - Page 6 of 62

Amazon Linux 2 — file — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — file — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1370 Related CVEs: CVE-2019-18218 CVE-2018-10360 Upstream summary: cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds […]

Read more
Ubuntu 20.04 — fwupd — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — fwupd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4395-1 Related CVEs: CVE-2020-10759 Upstream summary: Justin Steven discovered that fwupd incorrectly handled certain signature verification. An attacker could possibly use this issue to install an unsigned firmware. Table of […]

Read more
Ubuntu 18.04 — librabbitmq — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — librabbitmq — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4214-2 Related CVEs: CVE-2019-18609 Upstream summary: USN-4214-1 fixed a vulnerability in RabbitMQ. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It […]

Read more
Ubuntu 16.04 — libssh2 — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libssh2 — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 April 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6371-1 Related CVEs: CVE-2020-22218 CVE-2019-13115 CVE-2019-17498 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859  +4 more Upstream summary: It was discovered that libssh2 incorrectly handled memory access. An attacker could possibly use this […]

Read more
SLES 12 — spice-vdagent — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — spice-vdagent — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 April 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3268-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25653 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2017-15108 Upstream summary: A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw […]

Read more
openSUSE Tumbleweed — rpmlint — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — rpmlint — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2019:2408-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-3689 Upstream summary: The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before […]

Read more
How to Use Terraform to Provision Infrastructure on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Use Terraform to Provision Infrastructure on RHEL 8

With Terraform installed on RHEL 8, the next step is writing real-world HCL configurations that provision cloud infrastructure. HashiCorp Configuration Language 2 (HCL2) provides a clean, human-readable syntax for defining providers, resources, variables, and outputs that can be version-controlled alongside your application code. This tutorial walks through provisioning an AWS EC2 instance — covering input […]

Read more
CHAT