chris

SLES 15 — policycoreutils — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — policycoreutils — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0338-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-7545 CVE-2018-1063 Upstream summary: SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call. Table of […]

Read more
How to Set Up AD FS 3.0 for Single Sign-On on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Set Up AD FS 3.0 for Single Sign-On on Windows Server 2012 R2

How to Set Up AD FS 3.0 for Single Sign-On on Windows Server 2012 R2 Active Directory Federation Services 3.0 on Windows Server 2012 R2 delivers enterprise Single Sign-On capabilities, allowing users to authenticate once with their corporate Active Directory credentials and access multiple applications — both on-premises and cloud-hosted — without re-entering credentials. AD […]

Read more
Gathering Metrics from Your Infrastructure and Applications — step-by-step Devops tutorial on Progressive Robot

Gathering Metrics from Your Infrastructure and Applications

Metrics are the primary material processed by monitoring systems to build a cohesive view of the systems being tracked. In this guide, we will start by discussing a popular framework used to identify the most critical metrics to track. Afterwards, we will walk through how those indicators can be applied to components throughout your deployment. This will focus on the fundamental resources of individual servers at first and then adjust the scope to cover increasingly larger areas of concern.

Read more
Alpine Linux edge — elfutils — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — elfutils — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.176-r0 📖 ~4 min read  •  Source: Alpine secdb entry — elfutils 0.176-r0 Related CVEs: CVE-2019-7146 CVE-2019-7148 CVE-2019-7149 CVE-2019-7150 CVE-2019-7664 CVE-2019-7665 CVE-2019-18310 CVE-2019-18520  +6 more Upstream summary: Alpine main repository for vedge ships elfutils 0.176-r0 which […]

Read more
FreeBSD 12 — php70-gd — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php70-gd — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-gd and gd — Buffer over-read into uninitialized memory Related CVEs: CVE-2013-7456 CVE-2015-8874 CVE-2015-8879 CVE-2016-3074 CVE-2016-4343 CVE-2016-5093 CVE-2016-5094 CVE-2016-5096  +12 more Upstream summary: PHP developers report: The GIF decoding function […]

Read more
openSUSE Tumbleweed — aws-cli — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — aws-cli — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2018:4074-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15869 Upstream summary: An Amazon Web Services (AWS) developer who does not specify the –owners flag when describing images via AWS CLI, and therefore not […]

Read more
FreeBSD 12 — linux-f8-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-f8-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: linux-flashplugin — remote code execution vulnerability Related CVEs: CVE-2008-4546 CVE-2009-3793 CVE-2009-3794 CVE-2009-3796 CVE-2009-3797 CVE-2009-3798 CVE-2009-3799 CVE-2009-3800  +12 more Upstream summary: Adobe Product Security Incident Response Team reports: A critical vulnerability […]

Read more
How to Install and Configure OpenVPN on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Install and Configure OpenVPN on RHEL 8

OpenVPN is a mature, battle-tested VPN solution that uses TLS for control-channel encryption and supports both UDP and TCP transports, making it highly adaptable to restrictive network environments. On RHEL 8 it is available from the EPEL repository, and the Easy-RSA toolkit simplifies the PKI management needed to issue server and client certificates. This guide […]

Read more
CHAT