Package Management

Ubuntu 20.04 — libntlm — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libntlm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 June 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5108-1 Related CVEs: CVE-2019-17455 Upstream summary: It was discovered that Libntlm incorrectly handled specially crafted NTML requests. An attacker could possibly use this issue to cause a denial of service […]

Read more
FreeBSD 12 — sddm — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sddm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X11 Session — SDDM allows unauthorised unlocking Related CVEs: CVE-2018-14345 Upstream summary: MITRE reports: An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not […]

Read more
FreeBSD 12 — zeek — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zeek — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zeek — potential DoS vulnerability Upstream summary: Wojtulewicz of Corelight reports: A specially-crafted series of MIME headers sent via SMTP or HTTP could cause Zeek to use large amounts of […]

Read more
How to Install Kibana on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Install Kibana on Debian 9

Introduction This guide explains how to Install Kibana on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install with the standard repositories […]

Read more
FreeBSD 12 — hadoop — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — hadoop — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 June 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hadoop2 — unauthorized disclosure of data vulnerability Related CVEs: CVE-2014-0230 CVE-2014-7810 CVE-2015-1776 Upstream summary: Arun Suresh reports: RPC traffic from clients, potentially including authentication credentials, may be intercepted by a […]

Read more
Ubuntu 16.04 — mqtt-client — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mqtt-client — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 June 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6685-1 Related CVEs: CVE-2019-0222 Upstream summary: It was discovered that mqtt-client incorrectly handled memory while parsing malformed MQTT frames. An attacker could possibly use this issue to cause a crash, […]

Read more
How to Set Up VLAN Tagging on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up VLAN Tagging on Debian 10

Introduction How to Set Up VLAN Tagging on Debian 10 is a fundamental operation for any administrator maintaining a Debian 10 Buster server. Debian 10 Buster ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 10. […]

Read more
Ubuntu 18.04 — pam-python — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — pam-python — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 June 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4552-3 Related CVEs: CVE-2019-16729 Upstream summary: USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update introduced a regression which prevented PAM modules written in Python from importing python modules […]

Read more
Arch Linux — pam — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — pam — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202012-13 Related CVEs: CVE-2020-27780 Upstream summary: Type: authentication bypass. Status: Fixed. Affected: 1.5.0-1. Fixed in: 1.5.0-2. Group: AVG-1297. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Ubuntu 18.04 — libsdl2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libsdl2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 June 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5274-1 Related CVEs: CVE-2020-14409 CVE-2020-14410 CVE-2017-2888 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 Upstream summary: It was discovered that Simple DirectMedia Layer library incorrectly handled memory when parsing certain specially crafted .BMP files. […]

Read more
CHAT