IT, Cloud & DevOps Blog

FreeBSD 12 — mod_security — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mod_security — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: www/mod_security — NULL pointer dereference DoS Related CVEs: CVE-2013-1915 CVE-2013-2765 Upstream summary: SecurityFocus reports: When ModSecurity receives a request body with a size bigger than the value set by the […]

Read more
How To Design Template Pages with Twig on a VPS — step-by-step Programming tutorial on Progressive Robot

How To Design Template Pages with Twig on a VPS

Twig is a very good alternative to the PHPTemplate way of building the presentation logic of a web application as it is represents a much cleaner templating experience. In this respect, it comes with a very easy to understand syntax and restricts you from performing dynamic PHP operations in template files.

Read more
How to Configure PostgreSQL Remote Access and SSL on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure PostgreSQL Remote Access and SSL on RHEL 7

How to Configure PostgreSQL Remote Access and SSL on RHEL 7 By default, PostgreSQL on RHEL 7 only accepts connections from localhost and rejects all remote clients. For multi-tier applications where the web or application server runs on a separate host from the database, you need to explicitly open PostgreSQL to remote connections — and […]

Read more
FreeBSD 12 — enscript-letter — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — enscript-letter — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: enscript — arbitrary code execution vulnerability Related CVEs: CVE-2004-1184 CVE-2004-1185 CVE-2004-1186 CVE-2008-3863 CVE-2008-4306 Upstream summary: Ulf Harnhammar of Secunia Research reports: Stack-based buffer overflow in the read_special_escape function in src/psgen.c […]

Read more
Ubuntu 16.04 — squirrelmail — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — squirrelmail — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4669-1 Related CVEs: CVE-2019-12970 Upstream summary: It was discovered that a cross-site scripting (XSS) vulnerability in SquirrelMail allows remote attackers to use malicious script content from HTML e-mail to execute […]

Read more
Arch Linux — jupyter-notebook — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — jupyter-notebook — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201812-1 Related CVEs: CVE-2018-19352 CVE-2018-19351 Upstream summary: Type: cross-site scripting. Status: Fixed. Affected: 5.5.0-1. Fixed in: 5.7.2-1. Group: AVG-820. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
CHAT