2020 - Page 406 of 735

Arch Linux — lua — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — lua — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202010-5 Related CVEs: CVE-2020-15889 CVE-2020-15888 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 5.4.0-2. Fixed in: 5.4.1-1. Group: AVG-1207. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
FreeBSD 12 — p5-Config-IniFiles — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-Config-IniFiles — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-Config-IniFiles — unsafe temporary file creation Related CVEs: CVE-2012-2451 Upstream summary: Unsafe Temporary file creation Config::IniFiles used a predictable name for its temporary file without opening it correctly. Table of […]

Read more
FreeBSD 12 — shotwell — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — shotwell — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: shotwell — failure to encrypt authentication Upstream summary: Jens Georg reports: I have just released Shotwell 0.24.5 and 0.25.4 which turn on HTTPS encryption all over the publishing plugins. Users […]

Read more
Gentoo Linux — app-backup/borgmatic — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — app-backup/borgmatic — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202405-13 Upstream summary: Prevent shell injection attacks within the PostgreSQL hook, the MongoDB hook, the SQLite hook, the "borgmatic borg" action, and command hook variable/constant interpolation. Table of contents Symptom & Impact […]

Read more
How to Configure Docker Logging Drivers on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure Docker Logging Drivers on Debian 10

Introduction How to Configure Docker Logging Drivers on Debian 10 is a fundamental operation for any administrator maintaining a Debian 10 Buster server. Debian 10 Buster ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 10. […]

Read more
FreeBSD 12 — oftpd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — oftpd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: oftpd denial-of-service vulnerability (PORT command) Related CVEs: CVE-2004-0376 Upstream summary: Philippe Oechslin reported a denial-of-service vulnerability in oftpd. The oftpd server can be crashed by sending a PORT command containing […]

Read more
How To Secure PostgreSQL Against Automated Attacks — step-by-step Linux tutorial on Progressive Robot

How To Secure PostgreSQL Against Automated Attacks

In this tutorial, we will show an essential first step toward mitigating the specific risk that can be created when configuring PostgreSQL to allow remote connections. While this an important first step, since servers can be compromised in other ways, we also recommend that you take additional measures to protect your data, outlined in the section, [Additional Security Considerations](#additional-security-configuration).

Read more
Ubuntu 20.04 — hdf5 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — hdf5 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 June 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5272-1 Related CVEs: CVE-2018-17233 CVE-2018-17234 CVE-2018-17237 Upstream summary: It was discovered that HDF5 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. […]

Read more
CHAT