Linux

Ubuntu 16.04 — opencv — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — opencv — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 October 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4818-1 Related CVEs: CVE-2019-15939 CVE-2019-14491 CVE-2017-18009 CVE-2019-14492 CVE-2019-14493 Upstream summary: It was discovered that OpenCV did not properly manage certain objects, leading to a divide-by-zero. If a user were tricked […]

Read more
Gentoo Linux — media-sound/bladeenc — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — media-sound/bladeenc — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202107-18 Related CVEs: CVE-2017-14648 Upstream summary: A crafted file could cause a buffer overflow in the iteration_loop function in BladeEnc. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Установка и использование Composer в Ubuntu 18.04 — step-by-step Linux tutorial on Progressive Robot

Установка и использование Composer в Ubuntu 18.04

Предыдущая версия данного обучающего руководства была написана Бренненом Бернсом. Composer — это популярный менеджер зависимостей PHP, который упрощает процесс установки и обновления зависимостей…

Read more
openSUSE Tumbleweed — python36-slixmpp — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python36-slixmpp — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2019:0163-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-1000021 Upstream summary: slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin (Persistent Storage of Private Data via PubSub) options […]

Read more
Ubuntu 18.04 — bzip2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — bzip2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 October 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4038-3 Related CVEs: https://launchpad.net/bugs/1834494 CVE-2016-3189 CVE-2019-12900 Upstream summary: USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. We […]

Read more
Ubuntu 16.04 — php-imagick — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — php-imagick — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 October 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4586-2 Related CVEs: CVE-2019-11037 Upstream summary: USN-4586-1 fixed vulnerabilities in PHP ImageMagick. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that PHP […]

Read more
SLES 15 — libpotrace0 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libpotrace0 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-8685 CVE-2016-8686 CVE-2013-7437 CVE-2017-12067 Upstream summary: The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory […]

Read more
How To Protect your Server Against the POODLE SSLv3 Vulnerability — step-by-step Linux tutorial on Progressive Robot

How To Protect your Server Against the POODLE SSLv3 Vulnerability

The POODLE SSLv3 vulnerability is a security issue that affects all implementations of SSLv3. This vulnerability allows an attacker to decrypt messages sent using this protocol version by exploiting a weakness the way the padding of a message are checked. In this guide, we’ll explain how the vulnerability work, and tell you how to disable SSLv3 on some common services.

Read more
Oracle Linux 8 — wavpack — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — wavpack — vulnerability — patch and remediation guide (ELSA-2020-1581)

🟢 Low   ⏱ 5–15 min  Last verified: 15 October 2019 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1581 Related CVEs: CVE-2018-19840 CVE-2019-1010315 CVE-2019-1010319 CVE-2018-19841 CVE-2019-11498 CVE-2019-1010317 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
CHAT