IT, Cloud & DevOps Blog

FreeBSD 12 — php5-cli — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php5-cli — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483 CVE-2006-4484  +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

Read more
Security Checkpoint — step-by-step Linux tutorial on Progressive Robot

Security Checkpoint

This checkpoint is intended to help you assess what you learned from our introductory articles to Security, where we introduced recommended security practices and commonly used security tools.

Read more
Amazon Linux 2 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3230 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A […]

Read more
How to Write Ansible Playbooks for FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Write Ansible Playbooks for FreeBSD 12

Introduction Deploying write ansible playbooks for freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base […]

Read more
Debian 9 — cyrus-sasl2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — cyrus-sasl2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 June 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-19906 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 14.04 — glusterfs — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — glusterfs — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4770-1 Related CVEs: CVE-2014-3619 CVE-2018-10841 CVE-2018-1088 CVE-2018-10904 CVE-2018-10907 CVE-2018-10911 CVE-2018-10913 CVE-2018-10914  +12 more Upstream summary: It was discovered that GlusterFS incorrectly handled network requests. An attacker could possibly use this […]

Read more
SLES 15 — libICE6 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libICE6 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2626 Upstream summary: It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw […]

Read more
CHAT