Package Management

FreeBSD 12 — openjdk7-jre — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — openjdk7-jre — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: java — multiple vulnerabilities Related CVEs: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 25 new security fixes for […]

Read more
FreeBSD 12 — py310-Flask-Cors — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py310-Flask-Cors — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]

Read more
openSUSE Tumbleweed — irssi — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — irssi — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-5206 CVE-2018-5208 CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 CVE-2018-7053 CVE-2018-7054 CVE-2019-15717  +12 more Upstream summary: When the channel topic is set without specifying a sender, Irssi before 1.0.6 […]

Read more
How to Install Elasticsearch on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Install Elasticsearch on RHEL 8

Elasticsearch is a distributed, RESTful search and analytics engine capable of handling large volumes of structured and unstructured data in near real time. It is the core component of the Elastic Stack, widely used for log aggregation, full-text search, and observability pipelines. On RHEL 8, installing Elasticsearch requires adding the official Elastic repository and configuring […]

Read more
FreeBSD 12 — php55-mysqli — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php55-mysqli — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]

Read more
openSUSE Tumbleweed — kdirstat — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — kdirstat — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0930-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-2528 Upstream summary: kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via […]

Read more
How to Configure AppArmor in Complain Mode on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure AppArmor in Complain Mode on SLES 15

Introduction This tutorial covers How to Configure AppArmor in Complain Mode on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Check AppArmor Status systemctl status apparmor aa-status […]

Read more
FreeBSD 12 — ghostscript9-agpl-base — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ghostscript9-agpl-base — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2015-3228 CVE-2018-15908 CVE-2018-15909 CVE-2018-15910 CVE-2018-15911 CVE-2019-14811 CVE-2019-14812 CVE-2019-14813  +4 more Upstream summary: [email protected] reports: In Artifex Ghostscript through […]

Read more
FreeBSD 12 — freeciv-gtk — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — freeciv-gtk — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: freeciv — Denial of Service Vulnerabilities Related CVEs: CVE-2006-0047 CVE-2006-3913 Upstream summary: Secunia reports: Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to […]

Read more
FreeBSD 12 — viewcvs — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — viewcvs — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: viewcvs — information leakage Related CVEs: CVE-2004-0915 Upstream summary: The hide_cvsroot and forbidden configuration options are not properly honored by viewcvs when exporting to a tar file which can lead […]

Read more
CHAT