chris

Ubuntu 18.04 — nfs-utils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — nfs-utils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 February 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4400-1 Related CVEs: CVE-2019-3689 Upstream summary: It was discovered that the nfs-utils package set incorrect permissions on the /var/lib/nfs directory. An attacker could possibly use this issue to escalate privileges. […]

Read more
Gentoo Linux — dev-libs/libmaxminddb — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — dev-libs/libmaxminddb — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202011-15 Related CVEs: CVE-2020-28241 Upstream summary: libmaxminddb used uninitialised memory when reading from a corrupt database file. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
Ubuntu 16.04 — python-reportlab — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — python-reportlab — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 February 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4273-1 Related CVEs: CVE-2019-17626 Upstream summary: It was discovered that ReportLab incorrectly handled certain XML documents. If a user or automated system were tricked into processing a specially crafted document, […]

Read more
Ubuntu 18.04 — file-roller — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — file-roller — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4927-1 Related CVEs: CVE-2020-36314 CVE-2020-11736 CVE-2019-16680 Upstream summary: It was discovered that File Roller incorrectly handled symlinks. An attacker could possibly use this issue to expose sensitive information. Table of […]

Read more
How to Deploy a Node.js Application with PM2 on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Deploy a Node.js Application with PM2 on RHEL 7

How to Deploy a Node.js Application with PM2 on RHEL 7 PM2 is a battle-tested production process manager for Node.js applications. It keeps your application running after a crash by restarting it automatically, provides integrated logging, enables zero-downtime reloads, supports cluster mode to utilize all CPU cores, and integrates with systemd for startup on boot. […]

Read more
How to Install and Use Composer on Debian 10 — step-by-step Linux tutorial on Progressive Robot

How to Install and Use Composer on Debian 10

Composer is a popular dependency management tool for PHP, created mainly to facilitate installation and updates for project dependencies. In this guide, we’ll see how to install and use Composer on a Debian 10 server.

Read more
FreeBSD 12 — py34-diffoscope — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py34-diffoscope — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: diffoscope — arbitrary file write Related CVEs: CVE-2017-0359 Upstream summary: Ximin Luo reports: [v67] introduced a security hole where diffoscope may write to arbitrary locations on disk depending on the […]

Read more
CHAT