Getting Into Open Source for Fun & Profit
A panel discussion about how developers and organizations can balance open source work with commercial work – and generate income for both yourself and your company.
How to Set Up Windows Server 2022 as a RADIUS Proxy
Introduction to Active Directory Certificate Services Active Directory Certificate Services (AD CS) is a Windows Server role that provides customizable services for creating and managing public key infrastructure (PKI) certificates. Organizations use AD CS to issue digital certificates for authentication (smart cards, VPN, 802.1X), encrypting data in transit (SSL/TLS for internal websites), encrypting data at […]
Gentoo Linux — dev-python/libvirt-python — multiple vulnerabilities (5 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202210-06 Related CVEs: CVE-2020-14339 CVE-2020-25637 CVE-2021-3631 CVE-2021-3667 CVE-2022-0897 Upstream summary: Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact […]
IBM AIX 7.3 — CVE-2008-5387 — buffer overflow — patch and remediation guide
🟡 Medium ⏱ 15–45 min Last verified: 25 May 2026 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2008-5387, IBM Support Bulletin CVE: CVE-2008-5387 NVD summary: Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain […]
IBM AIX 7.3 — CVE-2022-34336 — xss — patch and remediation guide
🟡 Medium ⏱ 15–45 min Last verified: 25 May 2026 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2022-34336, IBM Support Bulletin CVE: CVE-2022-34336 NVD summary: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in […]
Windows Server 2022 — IIS URL Rewrite rules causing 500.52 after migration — Fix & Prevention
🟡 Medium ⏱ 5–30 min Last verified: 18 May 2026 Affected versions: Windows Server 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
IBM AIX 7.3 — CVE-2010-2090 — denial of service — patch and remediation guide
🟡 Medium ⏱ 15–45 min Last verified: 25 May 2026 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2010-2090, IBM Support Bulletin CVE: CVE-2010-2090 NVD summary: The npb_protocol_error function in sna V5router64 in IBM Communications Server for Windows 6.1.3 and Communications Server for AIX (aka CSAIX or CS/AIX) in sna.rte […]
FreeBSD 12 — py37-matrix-synapse — multiple vulnerabilities (8 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — unbounded recursion in urlpreview Related CVEs: CVE-2019-5885 CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 Upstream summary: Matrix developers report: This release fixes a vulnerability with Synapse's URL preview […]
How to Apply Technology Level Updates on IBM AIX 7.3
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to apply technology level updates on IBM AIX 7.3 with […]
Debian 11 — node-dot — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8141 Upstream summary: The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if […]
