chris

FreeBSD 12 — p5-HTML-Scrubber — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-HTML-Scrubber — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-HTML-Scrubber — XSS vulnerability Related CVEs: CVE-2015-5667 Upstream summary: MITRE reports: Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows […]

Read more
FreeBSD 12 — nagios-plugins — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — nagios-plugins — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nagios-plugins — Long Location Header Buffer Overflow Vulnerability Related CVEs: CVE-2007-5198 Upstream summary: A Secunia Advisory reports: The vulnerability is caused due to a boundary error within the redir() function […]

Read more
How to Use zrepl for ZFS Replication on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Use zrepl for ZFS Replication on FreeBSD 12

Introduction This guide explains how to Use zrepl for ZFS Replication on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]

Read more
How To Install and Configure Ghost on Ubuntu 16.04 — step-by-step Linux tutorial on Progressive Robot

How To Install and Configure Ghost on Ubuntu 16.04

Ghost is a light-weight open-source blogging platform. In this tutorial, you’ll set up a production-ready Ghost instance on Ubuntu 16.04 using the official `ghost-cli` installation wizard. This will install Ghost, configure Nginx to proxy requests to Ghost, secure it with a [Let’s Encrypt](https://letsencrypt.org/) certificate, and configure Ghost to run in the background as a system service.

Read more
openSUSE Tumbleweed — kbd — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — kbd — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:007 Related CVEs: CVE-2011-0460 Upstream summary: The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map. Table of contents Symptom […]

Read more
FreeBSD 12 — ruby_r — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ruby_r — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ruby — CGI DoS Related CVEs: CVE-2004-0983 Upstream summary: The Ruby CGI.rb module contains a bug which can cause the CGI module to go into an infinite loop, thereby causing […]

Read more
FreeBSD 12 — linux-flock — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-flock — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2007-4879 CVE-2007-5959 CVE-2008-0016 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0417  +12 more Upstream summary: The Mozilla Foundation reports: MFSA 2008-37 UTF-8 URL stack buffer overflow MFSA […]

Read more
Amazon Linux 2 — python-crypto — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — python-crypto — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2ANSIBLE2-2024-011 Related CVEs: CVE-2013-7459 CVE-2018-6594 Upstream summary: Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as […]

Read more
CHAT