IT, Cloud & DevOps Blog

FreeBSD 12 — kdebase — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kdebase — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: KDM — local privilege escalation vulnerability Related CVEs: CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-1156 CVE-2004-1157 CVE-2004-1158 CVE-2004-1160 CVE-2004-1171  +6 more Upstream summary: KDE Security Advisory reports: KDM contains a race condition that […]

Read more
Gentoo Linux — app-emulation/virtualbox-bin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — app-emulation/virtualbox-bin — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202004-02 Related CVEs: CVE-2019-2926 CVE-2019-2944 CVE-2019-2984 CVE-2019-3002 CVE-2019-3005 CVE-2019-3017 CVE-2019-3021 CVE-2019-3026  +12 more Upstream summary: Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details. Table […]

Read more
FreeBSD 12 — wesnoth — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wesnoth — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wesnoth — Code Injection vulnerability Related CVEs: CVE-2015-0844 CVE-2015-5069 CVE-2015-5070 CVE-2018-1999023 Upstream summary: shadowm reports: A severe bug was found in the game client which could allow a malicious user […]

Read more
How To Use Foreman To Manage Puppet Nodes on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Use Foreman To Manage Puppet Nodes on Ubuntu 14.04

Foreman is an open-source tool that can help with the management of servers, by providing an easy way to interact with Puppet to automate tasks and application deployment. In this tutorial, we will show you how to install Foreman with Puppet, and start using it to manage your servers. We will use Foreman for its reporting and External Node Classifier (ENC) capabilities, to ease the management of Puppet.

Read more
FreeBSD 12 — yahoo-ui — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — yahoo-ui — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: YUI JavaScript library — JavaScript injection exploits in Flash components Related CVEs: CVE-2010-4207 CVE-2010-4208 CVE-2010-4209 CVE-2012-5881 CVE-2012-5882 Upstream summary: The YUI team reports: Vulnerability in YUI 2.4.0 through YUI 2.9.0 […]

Read more
SLES 15 — libXcursor1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libXcursor1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 September 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2003 CVE-2017-16612 Upstream summary: Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow […]

Read more
Arch Linux — perl-email-address — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — perl-email-address — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201905-7 Related CVEs: CVE-2018-12558 Upstream summary: Type: denial of service. Status: Fixed. Affected: 1.909-1. Fixed in: 1.912-1. Group: AVG-722. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
How to Harden Web Servers: Security Headers, CSP and HSTS on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Harden Web Servers: Security Headers, CSP and HSTS on RHEL 7

How to Harden Web Servers: Security Headers, CSP and HSTS on RHEL 7 HTTP security headers are one of the most cost-effective controls available to web server administrators. They instruct the browser to enforce strict content handling rules, preventing common attacks such as cross-site scripting (XSS), clickjacking, MIME-type confusion, and protocol downgrade attacks — without […]

Read more
CHAT