2020 - Page 676 of 735

openSUSE Tumbleweed — log4net — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — log4net — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-1285 CVE-2006-0743 Upstream summary: Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks […]

Read more
FreeBSD 12 — nut — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — nut — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nut — upsd can be remotely crashed Related CVEs: CVE-2012-2944 Upstream summary: Networkupstools project reports: NUT server (upsd), from versions 2.4.0 to 2.6.3, are exposed to crashes when receiving random […]

Read more
How to Set Up a PKI Infrastructure with AD CS on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Set Up a PKI Infrastructure with AD CS on Windows Server 2012 R2

How to Set Up a PKI Infrastructure with AD CS on Windows Server 2012 R2 Public Key Infrastructure (PKI) built on Active Directory Certificate Services (AD CS) provides the digital certificate foundation for enterprise security: SSL/TLS certificates for web servers and internal services, S/MIME for email encryption, smart card authentication, code signing, and IPsec encryption. […]

Read more
FreeBSD 12 — php52-sqlite — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php52-sqlite — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php5-sqlite — open_basedir bypass Related CVEs: CVE-2012-3365 Upstream summary: MITRE CVE team reports: The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via […]

Read more
Gentoo Linux — dev-python/thrift — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — dev-python/thrift — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202107-32 Related CVEs: CVE-2019-0205 CVE-2019-0210 CVE-2020-13949 Upstream summary: Multiple vulnerabilities have been discovered in Apache Thrift. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment […]

Read more
How To Enable SFTP Without Shell Access on Ubuntu 18.04 — step-by-step Linux tutorial on Progressive Robot

How To Enable SFTP Without Shell Access on Ubuntu 18.04

In a standard configuration, the SSH server grants file transfer access and terminal shell access to all users with an account on the system. In this tutorial, we’ll set up the SSH daemon to limit SFTP access to one directory with no SSH access allowed on per user basis on an Ubuntu 18.04 server.

Read more
FreeBSD 12 — fr-cups-lpr — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — fr-cups-lpr — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups-lpr — lppasswd multiple vulnerabilities Related CVEs: CVE-2004-1268 CVE-2004-1269 CVE-2004-1270 Upstream summary: D. J. Bernstein reports that Bartlomiej Sieka has discovered several security vulnerabilities in lppasswd, which is part of […]

Read more
Alpine Linux edge — f2fs-tools — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — f2fs-tools — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.14.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — f2fs-tools 1.14.0-r0 Related CVEs: CVE-2020-6104 CVE-2020-6105 CVE-2020-6106 CVE-2020-6107 CVE-2020-6108 Upstream summary: Alpine main repository for vedge ships f2fs-tools 1.14.0-r0 which addresses CVE-2020-6104. Table of contents […]

Read more
CHAT