Package Management

SLES 15 — jakarta-commons-fileupload — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — jakarta-commons-fileupload — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:2188-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-3092 CVE-2016-1000031 Upstream summary: The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x […]

Read more
SLES 15 — bash — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — bash — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 October 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:1212-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 CVE-2016-9401 CVE-2014-2524 Upstream summary: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment […]

Read more
openSUSE Tumbleweed — netdata — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — netdata — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:0647-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-18836 CVE-2018-18837 CVE-2018-18838 CVE-2018-18839 Upstream summary: An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in […]

Read more
How to Set Up GlusterFS on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Set Up GlusterFS on SLES 12

Introduction This tutorial covers How to Set Up GlusterFS on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh […]

Read more
FreeBSD 12 — proftpd-mysql — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — proftpd-mysql — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: proftpd — arbitrary code execution vulnerability with chroot Related CVEs: CVE-2005-2390 CVE-2006-5815 CVE-2006-6170 CVE-2008-4242 CVE-2008-4247 CVE-2009-0542 CVE-2009-0543 Upstream summary: The FreeBSD security advisory FreeBSD-SA-11:07.chroot reports: If ftpd is configured to […]

Read more
Gentoo Linux — app-crypt/libu2f-host — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — app-crypt/libu2f-host — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202004-15 Related CVEs: CVE-2018-20340 CVE-2019-9578 Upstream summary: Multiple vulnerabilities have been discovered in libu2f-host. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
How to Set Up File Integrity Monitoring with AIDE on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up File Integrity Monitoring with AIDE on Debian 9

Introduction Deploying set up file integrity monitoring with aide on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. […]

Read more
FreeBSD 12 — eyeOS — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — eyeOS — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: eyeOS — multiple XSS security bugs Related CVEs: CVE-2006-5071 Upstream summary: eyeOS team reports: [EyeOS 0.9.1] release fixes two XSS security bugs, so we recommend all users to upgrade to […]

Read more
openSUSE Tumbleweed — pound — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — pound — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-10711 CVE-2018-21245 Upstream summary: Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751. Table of contents Symptom & Impact […]

Read more
FreeBSD 12 — dillo — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — dillo — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dillo — format string vulnerability Related CVEs: CVE-2005-0012 Upstream summary: dillo contains a format string vulnerability which could lead to execution of arbitrary code simply by viewing a web page […]

Read more
CHAT