Linux

Ubuntu 14.04 — c3p0 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — c3p0 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 January 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7571-1 Related CVEs: CVE-2019-5427 Upstream summary: Aaron Massey discovered that c3p0 could be made to crash when parsing certain input. An attacker able to modify the application’s XML configuration file […]

Read more
How To Configure SSH Key-Based Authentication on a FreeBSD Server — step-by-step Linux tutorial on Progressive Robot

How To Configure SSH Key-Based Authentication on a FreeBSD Server

SSH, or secure shell, is a network protocol that provides a secure, encrypted way to communicate with and administer your servers. As SSH is the most common way of working with a FreeBSD server, you will want to familiarize yourself with the different ways that you can authenticate and log in to your server. While there are several ways of logging into a FreeBSD server, this tutorial will focus on setting up and using SSH keys for authentication.

Read more
SLES 15 — libImlib2 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libImlib2 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2010-0991 Upstream summary: Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted (1) ARGB, (2) XPM, or […]

Read more
openSUSE Tumbleweed — eog — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — eog — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2008-5978 CVE-2013-7447 CVE-2016-6855 Upstream summary: Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) […]

Read more
How to Install Keepalived for High Availability on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Install Keepalived for High Availability on Debian 9

Introduction This guide explains how to Install Keepalived for High Availability on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install with […]

Read more
openSUSE Tumbleweed — python36-pywbem — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python36-pywbem — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0580-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6418 Upstream summary: PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an […]

Read more
How to Configure Bonding Network Interfaces on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure Bonding Network Interfaces on Debian 10

Introduction Deploying configure bonding network interfaces on debian 10 on a Debian 10 Buster machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will […]

Read more
SLES 15 — libmwaw — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libmwaw — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1821-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-9433 Upstream summary: Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in […]

Read more
openSUSE Tumbleweed — miniupnpc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — miniupnpc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-1000494 CVE-2014-3985 Upstream summary: Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault […]

Read more
CHAT