Package Management

How to Configure DNSSEC Validation on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure DNSSEC Validation on Debian 10

Introduction Deploying configure dnssec validation on debian 10 on a Debian 10 Buster machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure Debian 10 […]

Read more
openSUSE Tumbleweed — cinnamon — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — cinnamon — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1294-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12825 Upstream summary: libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. Table of contents Symptom & Impact Environment & […]

Read more
Ubuntu 18.04 — libdbi-perl — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libdbi-perl — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 July 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5030-1 Related CVEs: CVE-2014-10402 CVE-2020-14393 CVE-2019-20919 CVE-2020-14392 Upstream summary: It was discovered that the Perl DBI module incorrectly opened files outside of the folder specified in the data source name. […]

Read more
Ubuntu 16.04 — node-fstream — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — node-fstream — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4863-1 Related CVEs: CVE-2019-13173 Upstream summary: It was discovered that fstream incorrectly handled certain crafted tarballs. An attacker could use this vulnerability to write arbitrary files to the filesystem. Table […]

Read more
FreeBSD 12 — py38-yaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py38-yaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 July 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 CVE-2020-1747 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code […]

Read more
How to Configure OpenVAS Vulnerability Scanner on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure OpenVAS Vulnerability Scanner on Debian 10

Introduction This guide explains how to Configure OpenVAS Vulnerability Scanner on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install with the […]

Read more
Debian 9 — debian-lan-config — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — debian-lan-config — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 July 2020 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-3467 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
SLES 15 — libesmtp — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libesmtp — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 July 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2021:658-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19977 Upstream summary: libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. Table […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.198-152.320 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.198-152.320 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2020-030 Related CVEs: CVE-2020-25284 Upstream summary: A flaw was found in the capabilities check of the rados block device functionality in the Linux kernel. Incorrect capability checks could alllow a […]

Read more
Oracle Linux 8 — dbus — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — dbus — vulnerability — patch and remediation guide (ELSA-2019-3707)

🟡 Medium   ⏱ 10–30 min  Last verified: 9 July 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3707 Related CVEs: CVE-2019-12749 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT