Package Management

FreeBSD 12 — ko-netscape-communicator-linux — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ko-netscape-communicator-linux — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]

Read more
FreeBSD 12 — py37-kerberos — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-kerberos — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]

Read more
openSUSE Tumbleweed — ocaml — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — ocaml — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2017-9772 CVE-2018-9838 CVE-2015-8869 Upstream summary: Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, […]

Read more
How to Install and Configure BIND9 DNS Server on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Install and Configure BIND9 DNS Server on Debian 9

Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up install and configure bind9 dns server on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each step […]

Read more
Ubuntu 14.04 — opencv — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — opencv — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4818-1 Related CVEs: CVE-2019-15939 CVE-2019-14491 CVE-2017-18009 CVE-2019-14492 CVE-2019-14493 Upstream summary: It was discovered that OpenCV did not properly manage certain objects, leading to a divide-by-zero. If a user were tricked […]

Read more
SLES 15 — libopenjpeg1 — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libopenjpeg1 — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-5030 CVE-2012-3358 CVE-2012-3535 CVE-2013-1447 CVE-2013-4289 CVE-2013-4290 CVE-2013-6045 CVE-2013-6052  +4 more Upstream summary: The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers […]

Read more
How to Configure Nginx Server Blocks on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure Nginx Server Blocks on Debian 9

Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up configure nginx server blocks on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each step carefully and […]

Read more
SLES 15 — grep — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — grep — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-1345 Upstream summary: The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read […]

Read more
FreeBSD 12 — librsvg2-rust — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — librsvg2-rust — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: librsvg2 — multiple vulnerabilities Related CVEs: CVE-2019-20446 Upstream summary: Librsvg2 developers reports: Backport the following fixes from 2.46.x: Librsvg now has limits on the number of loaded XML elements, and […]

Read more
FreeBSD 12 — acme.sh — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — acme.sh — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: acme.sh — closes potential remote vuln Upstream summary: Neil Pang reports: HiCA was injecting arbitrary code/commands into the certificate obtaining process and acme.sh is running them on the client machine. […]

Read more
CHAT