Package Management

FreeBSD 12 — subversion-static — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — subversion-static — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: subversion — Arbitrary code execution vulnerability Upstream summary: subversion team reports: A Subversion client sometimes connects to URLs provided by the repository. This happens in two primary cases: during 'checkout', […]

Read more
FreeBSD 12 — mod_perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mod_perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_perl — cross-site scripting Related CVEs: CVE-2007-1349 CVE-2009-0796 Upstream summary: Secunia reports: Certain input passed to the "Apache::Status" and "Apache2::Status" modules is not properly sanitised before being returned to the […]

Read more
How to Use Docker Volumes on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Use Docker Volumes on FreeBSD 12

Introduction This guide explains how to Use Docker Volumes on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]

Read more
FreeBSD 12 — eGroupWare — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — eGroupWare — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]

Read more
openSUSE Tumbleweed — apache2-mod_nss — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — apache2-mod_nss — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1926-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4566 CVE-2015-5244 CVE-2016-3099 Upstream summary: mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting […]

Read more
How to Configure Pluggable Authentication Modules on IBM AIX 7.2 — step-by-step IBM AIX 7.2 tutorial on Progressive Robot

How to Configure Pluggable Authentication Modules on IBM AIX 7.2

Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure pluggable authentication modules on ibm aix 7.2 on […]

Read more
Debian 9 — ldap-account-manager — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — ldap-account-manager — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-8763 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 18.04 — policykit-desktop-privileges — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — policykit-desktop-privileges — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4037-1 Related CVEs: https://launchpad.net/bugs/1832337 Upstream summary: The policykit-desktop-privileges Startup Disk Creator policy allowed administrative users to overwrite disks. As a security improvement, this operation now requires authentication. Table of contents […]

Read more
Ubuntu 18.04 — lucene-solr — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — lucene-solr — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7283-1 Related CVEs: CVE-2019-0193 Upstream summary: It was discovered that the Apache Solr DataImportHandler module incorrectly handled certain request parameters in a default configuration. A remote attacker could possibly use […]

Read more
CHAT