chris

openSUSE Tumbleweed — ft2demos — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — ft2demos — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • February 10, 2020
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2009:010 (see also SUSE bugzilla) Related CVEs: CVE-2009-0946 CVE-2010-2497 CVE-2010-2805 CVE-2010-3053 CVE-2010-3054 CVE-2010-3311 CVE-2010-3814 CVE-2011-0226  +12 more Upstream summary: Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute […]

Read more
FreeBSD 12 — php4-nms — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php4-nms — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • February 10, 2020
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 10 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483  +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

Read more
How To Install Tinc and Set Up a Basic VPN on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Install Tinc and Set Up a Basic VPN on Ubuntu 14.04

  • February 10, 2020
  • Linux
  • Comment off

In this tutorial, we will go over how to use Tinc, an open source Virtual Private Network (VPN) daemon, to create a secure VPN that your servers can communicate on as if they were on a local network. We will also demonstrate how to use Tinc to set up a secure tunnel into a private network. We will be using Ubuntu 14.04 servers, but the configurations can be adapted for use with any other OS.

Read more
Gentoo Linux — x11-libs/gdk-pixbuf — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — x11-libs/gdk-pixbuf — vulnerability — patch and remediation guide

  • February 10, 2020
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202012-15 Related CVEs: CVE-2020-29385 Upstream summary: It was discovered that the GDK-PixBuf library did not properly handle certain GIF images. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
How to Set Up Windows Server 2019 Extended Security Updates — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Set Up Windows Server 2019 Extended Security Updates

How to Set Up Windows Server 2019 Extended Security Updates Windows Server 2019 reached mainstream support on January 9, 2024, and will reach end of extended support on January 9, 2029. However, for organizations running older Windows Server versions like 2008 R2 or 2012 R2, Extended Security Updates (ESUs) provide an additional three years of […]

Read more
FreeBSD 12 — pavuk — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pavuk — vulnerability — patch and remediation guide

  • February 10, 2020
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 10 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Pavuk HTTP Location header overflow Related CVEs: CVE-2004-0456 Upstream summary: When pavuk sends a request to a web server and the server sends back the HTTP status code 305 (Use […]

Read more
FreeBSD 12 — distcc — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — distcc — vulnerability — patch and remediation guide

  • February 10, 2020
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 10 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: distcc — incorrect parsing of IP access control rules Related CVEs: CVE-2004-0601 Upstream summary: Fix bug that might cause IP-based access control rules not to be interpreted correctly on 64-bit […]

Read more
Alpine Linux edge — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • February 10, 2020
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 4.9.3-r1 📖 ~4 min read  •  Source: Alpine secdb entry — tcpdump 4.9.3-r1 Related CVEs: CVE-2020-8037 CVE-2017-16808 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14466 CVE-2018-14461 CVE-2018-14462  +12 more Upstream summary: Alpine main repository for vedge ships tcpdump 4.9.3-r1 which […]

Read more
FreeBSD 12 — ipython — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ipython — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • February 10, 2020
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 10 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: devel/ipython — multiple vulnerabilities Related CVEs: CVE-2015-4706 CVE-2015-4707 CVE-2015-5607 CVE-2015-6938 CVE-2015-7337 Upstream summary: Matthias Bussonnier reports: Summary: Local folder name was used in HTML templates without escaping, allowing XSS in […]

Read more
How to Set Up ModSecurity WAF with Apache on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Set Up ModSecurity WAF with Apache on RHEL 8

  • February 10, 2020
  • Linux
  • Comment off

ModSecurity is a widely-deployed open-source Web Application Firewall (WAF) that integrates directly with Apache as a module. Combined with the OWASP Core Rule Set (CRS), it provides protection against the most common web attack categories including SQL injection, cross-site scripting, and remote code execution. On RHEL 8, both the mod_security Apache module and the mod_security_crs […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT