Package Management

How to Configure RAID with mdadm on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure RAID with mdadm on Debian 9

Introduction How to Configure RAID with mdadm on Debian 9 is a fundamental operation for any administrator maintaining a Debian 9 Stretch server. Debian 9 Stretch ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 9. […]

Read more
Alpine Linux edge — samba — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — samba — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 4.8.7-r0 📖 ~4 min read  •  Source: Alpine secdb entry — samba 4.8.7-r0 Related CVEs: CVE-2018-16841 CVE-2018-16851 CVE-2018-16853 CVE-2018-1139 CVE-2018-1140 CVE-2018-10858 CVE-2018-10918 CVE-2018-10919  +12 more Upstream summary: Alpine main repository for vedge ships samba 4.8.7-r0 which […]

Read more
FreeBSD 12 — atril — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — atril — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: evince and atril — command injection vulnerability in CBT handler Related CVEs: CVE-2017-1000083 Upstream summary: GNOME reports: The comic book backend in evince 3.24.0 (and earlier) is vulnerable to a […]

Read more
FreeBSD 12 — twiki — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — twiki — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: twiki — remote Perl code execution Related CVEs: CVE-2004-1037 CVE-2006-3336 CVE-2008-3195 CVE-2008-5304 CVE-2008-5305 CVE-2014-7236 Upstream summary: TWiki developers report: The debugenableplugins request parameter allows arbitrary Perl code execution. Using an […]

Read more
FreeBSD 12 — postfix — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — postfix — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]

Read more
FreeBSD 12 — py27-foolscap — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py27-foolscap — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]

Read more
How to Harden Web Servers: Security Headers, CSP and HSTS on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Harden Web Servers: Security Headers, CSP and HSTS on RHEL 8

HTTP security headers instruct browsers how to handle your site’s content and protect visitors from clickjacking, cross-site scripting, MIME sniffing, and other common attacks. Adding these headers to Nginx or Apache on RHEL 8 is a high-value, low-effort hardening step that improves both your security posture and your score on tools like securityheaders.com. This tutorial […]

Read more
FreeBSD 12 — php73-exif — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php73-exif — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PHP — Multiple vulnerabilities in EXIF module Related CVEs: CVE-2019-11034 CVE-2019-11035 Upstream summary: The PHP project reports: Heap-buffer-overflow in php_ifd_get32s (CVE-2019-11034) Heap-buffer-overflow in exif_iif_add_value (CVE-2019-11035) Table of contents Symptom & […]

Read more
Oracle Linux 8 — thunderbird — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — thunderbird — vulnerability — patch and remediation guide (ELSA-2019-2774)

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-2774 Related CVEs: CVE-2019-11746 CVE-2019-11739 CVE-2019-11742 CVE-2019-11752 CVE-2019-11740 CVE-2019-11744 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
openSUSE Tumbleweed — syslog-ng — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — syslog-ng — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2011-0343 CVE-2011-1951 Upstream summary: Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to […]

Read more
CHAT