chris

FreeBSD 13 — mod_php4-twig — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mod_php4-twig — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2007-0905 CVE-2007-0906 CVE-2007-0907  +5 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

Read more
Ubuntu 14.04 — lxml — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — lxml — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5225-1 Related CVEs: CVE-2021-43818 CVE-2021-28957 CVE-2020-27783 CVE-2018-19787 CVE-2014-3146 Upstream summary: It was discovered that lxml incorrectly handled certain XML and HTML files. An attacker could possibly use this issue to […]

Read more
How to Use Prometheus Blackbox Exporter on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Use Prometheus Blackbox Exporter on FreeBSD 12

Introduction How to Use Prometheus Blackbox Exporter on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]

Read more
Gentoo Linux — net-libs/libtirpc — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — net-libs/libtirpc — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202210-33 Related CVEs: CVE-2021-46828 Upstream summary: Currently svc_run does not handle poll timeout and rendezvous_request does not handle EMFILE error returned from accept(2 as it used to. These two missing functionality were […]

Read more
Ubuntu 18.04 — whoopsie — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — whoopsie — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4450-1 Related CVEs: CVE-2020-11937 CVE-2020-12135 CVE-2020-15570 https://launchpad.net/bugs/1850608 CVE-2019-11484 CVE-2019-11476 Upstream summary: Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to […]

Read more
Установка Linux, Nginx, MySQL, PHP (стека LEMP) в Ubuntu 20.04 — step-by-step Linux tutorial on Progressive Robot

Установка Linux, Nginx, MySQL, PHP (стека LEMP) в Ubuntu 20.04

Программный стек LEMP — это комплекс программного обеспечения, используемый для обслуживания динамических веб-страниц и веб-приложений, написанных на PHP. Аббревиатура LEMP обозначает операционную систему Linux с веб-сервером Nginx (произносится как «энджинкс»). Данные…

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2021-9461)

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9461 Related CVEs: CVE-2021-3739 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — ntp — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ntp — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ntp — Multiple vulnerabilities Related CVEs: CVE-2009-0159 CVE-2009-1252 CVE-2013-5211 CVE-2014-9293 CVE-2014-9294 CVE-2014-9295 CVE-2014-9296 CVE-2015-1798  +12 more Upstream summary: nwtime.org reports: Three ntp vulnerabilities, Depending on configuration, may have little impact […]

Read more
CHAT