Linux

Ubuntu 16.04 — spamassassin — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — spamassassin — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 September 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4899-1 Related CVEs: CVE-2020-1946 CVE-2020-1930 CVE-2020-1931 CVE-2018-11805 CVE-2019-12420 CVE-2017-15705 CVE-2018-11780 CVE-2018-11781 Upstream summary: Damian Lukowski discovered that SpamAssassin incorrectly handled certain CF files. If a user or automated system were […]

Read more
Alpine Linux edge — libetpan — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — libetpan — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.9.4-r1 📖 ~4 min read  •  Source: Alpine secdb entry — libetpan 1.9.4-r1 Related CVEs: CVE-2020-15953 Upstream summary: Alpine community repository for vedge ships libetpan 1.9.4-r1 which addresses CVE-2020-15953. Table of contents Symptom & Impact Environment […]

Read more
Oracle Linux 8 — cryptsetup security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — cryptsetup security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4542)

🟡 Medium   ⏱ 10–30 min  Last verified: 21 September 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4542 Related CVEs: CVE-2020-14382 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Amazon Linux 2 — ldns — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — ldns — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2032 Related CVEs: CVE-2020-19860 Upstream summary: When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information […]

Read more
Ubuntu 18.04 — json-c — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — json-c — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 September 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4360-4 Related CVEs: CVE-2020-12762 https://launchpad.net/bugs/1878723 Upstream summary: USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides […]

Read more
Ubuntu 16.04 — pcre3 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — pcre3 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 September 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5665-1 Related CVEs: CVE-2017-6004 CVE-2017-7186 CVE-2019-20838 CVE-2020-14155 Upstream summary: It was discovered that PCRE incorrectly handled certain regular expressions. A remote attacker could use this issue to cause applications using […]

Read more
How to Configure Nginx as a Reverse Proxy for Apache2 on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure Nginx as a Reverse Proxy for Apache2 on Debian 9

Introduction Deploying configure nginx as a reverse proxy for apache2 on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path […]

Read more
CHAT