Package Management

FreeBSD 12 — php5-dba — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php5-dba — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — ini database truncation inside dba_replace() function Related CVEs: CVE-2008-7068 Upstream summary: securityfocus research reports: A bug that leads to the emptying of the INI file contents if the […]

Read more
FreeBSD 12 — py-subversion — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py-subversion — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: subversion — heap overflow vulnerability Related CVEs: CVE-2009-2411 Upstream summary: A Subversion Security Advisory reports: Subversion clients and servers have multiple heap overflow issues in the parsing of binary deltas. […]

Read more
Alpine Linux edge — zeromq — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — zeromq — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 4.3.3-r0 📖 ~4 min read  •  Source: Alpine secdb entry — zeromq 4.3.3-r0 Related CVEs: CVE-2020-15166 CVE-2019-13132 CVE-2019-6250 Upstream summary: Alpine main repository for vedge ships zeromq 4.3.3-r0 which addresses CVE-2020-15166. Table of contents Symptom & […]

Read more
FreeBSD 12 — MT — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — MT — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MT — Search Unspecified XSS Related CVEs: CVE-2006-5080 Upstream summary: Secunia reports: Arai has reported a vulnerability in Movable Type and Movable Type Enterprise, which can be exploited by malicious […]

Read more
How to Set Up LVM Logical Volume Management on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up LVM Logical Volume Management on Debian 10

Introduction This guide explains how to Set Up LVM Logical Volume Management on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install […]

Read more
Ubuntu 18.04 — libapache-session-ldap-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libapache-session-ldap-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6596-1 Related CVEs: CVE-2020-36658 Upstream summary: It was discovered that Apache::Session::LDAP incorrectly handled invalid X.509 certificates. If a user or an automated system were tricked into opening a specially crafted […]

Read more
openSUSE Tumbleweed — bison — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — bison — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-24979 Upstream summary: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was […]

Read more
Ubuntu 16.04 — velocity — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — velocity — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6281-1 Related CVEs: CVE-2020-13936 Upstream summary: Alvaro Munoz discovered that Velocity Engine incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted […]

Read more
Ubuntu 16.04 — brotli — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — brotli — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4568-1 Related CVEs: CVE-2020-8927 Upstream summary: It was discovered that Brotli incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. Table of contents Symptom […]

Read more
openSUSE Tumbleweed — libecryptfs1 — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libecryptfs1 — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2011:0898-1 (see also SUSE bugzilla) Related CVEs: CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1837 CVE-2011-1833 CVE-2014-9687 CVE-2016-1572  +1 more Upstream summary: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows […]

Read more
CHAT