chris

Amazon Linux 2 — openwsman — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — openwsman — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1196 Related CVEs: CVE-2019-3816 CVE-2019-3833 Upstream summary: Earlier versions of Openwsman are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A […]

Read more
Ubuntu 16.04 — ipmitool — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ipmitool — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 February 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5997-1 Related CVEs: CVE-2020-5208 Upstream summary: It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use this […]

Read more
SLES 15 — docker-runc — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — docker-runc — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2958-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19921 Upstream summary: runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be […]

Read more
openSUSE Tumbleweed — faad2 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — faad2 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2018-20196 CVE-2019-6956 CVE-2018-20194 CVE-2018-20199 CVE-2018-20358 CVE-2018-20359 CVE-2018-20362 CVE-2019-15296 Upstream summary: There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced […]

Read more
Red Hat Enterprise Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 8 📖 ~4 min read  •  Source: Red Hat advisory RHSA RHSA-2026:8610 Related CVEs: CVE-2006-10002 CVE-2006-10003 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How To Configure BIND as a Private Network DNS Server on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Configure BIND as a Private Network DNS Server on Ubuntu 14.04

In this tutorial, we will go over how to set up an internal DNS server, using the BIND name server software (BIND9) on Ubuntu 14.04, that can be used by your Virtual Private Servers (VPS) to resolve private host names and private IP addresses. This provides a central way to manage your internal hostnames and private IP addresses, which is indispensable when your environment expands to more than a few hosts.

Read more
SLES 15 — python2-rsa — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-rsa — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:254-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13757 CVE-2020-25658 Upstream summary: Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping […]

Read more
Android SwipeRefreshLayout - Android Pull/Swipe Down to Refresh — step-by-step DevOps tutorial on Progressive Robot

Android SwipeRefreshLayout – Android Pull/Swipe Down to Refresh

In this tutorial we'll discuss and implement Android Swipe Down to Refresh or Android Pull to Refresh the screen. This Android Material Design UI pattern is very commonly seen in many applications like Gmail, Facebook, Twitter and implemented using Android SwipeRefreshLayout. Android SwipeRefreshLayout ![Android SwipeRefreshLayout, android pull to refresh, android swipe down to refresh screen](images/android-swiperefreshlayout-pull-swipe-refresh-section-1.png) […]

Read more
CHAT