Package Management

Debian 10 — nghttp2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — nghttp2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2020 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-9511 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Set Up BGP Routing with BIRD on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up BGP Routing with BIRD on Debian 10

Introduction This guide explains how to Set Up BGP Routing with BIRD on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install […]

Read more
Ubuntu 18.04 — libapreq2 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libapreq2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4558-1 Related CVEs: CVE-2019-12412 Upstream summary: It was discovered that libapreq2 did not properly sanitize the Content-Type field in certain, crafted HTTP requests. An attacker could use this vulnerability to […]

Read more
Ubuntu 18.04 — libtomcrypt — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libtomcrypt — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4868-1 Related CVEs: CVE-2019-17362 Upstream summary: It was discovered that LibTomCrypt incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or read […]

Read more
openSUSE Tumbleweed — mxml — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — mxml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:3060-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-4570 CVE-2016-4571 Upstream summary: The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service […]

Read more
SLES 12 — libmspack0 — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libmspack0 — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3470-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-18586 CVE-2018-18584 CVE-2018-18585 CVE-2010-2800 CVE-2010-2801 CVE-2014-9556 CVE-2019-1010305 CVE-2014-9732  +6 more Upstream summary: chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does […]

Read more
How to Set Up Checksum Monitoring with AIDE on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Set Up Checksum Monitoring with AIDE on RHEL 7

File integrity monitoring is a cornerstone of host-based intrusion detection. AIDE — Advanced Intrusion Detection Environment — creates a cryptographic baseline of your file system and compares the current state against that baseline to detect unauthorized changes. When an attacker modifies a system binary, alters a configuration file, or installs a rootkit, AIDE reports exactly […]

Read more
SLES 15 — libgme0 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libgme0 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:3250-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-9957 CVE-2016-9958 CVE-2016-9959 CVE-2016-9960 CVE-2016-9961 Upstream summary: Stack-based buffer overflow in game-music-emu before 0.6.1. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
SLES 12 — tidy — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — tidy — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:1513-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-5522 CVE-2015-5523 CVE-2019-9022 Upstream summary: Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial […]

Read more
Gentoo Linux — app-arch/lha — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — app-arch/lha — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202007-42 Related CVEs: CVE-2016-1925 Upstream summary: A buffer overflow in LHa’s compression code was discovered which can be triggered by a crafted input file. Table of contents Symptom & Impact Environment & […]

Read more
CHAT