Security Hardening

FreeBSD 12 — jakarta-tomcat — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — jakarta-tomcat — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tomcat — XSS vulnerability in sample applications Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 Upstream summary: The Apache Project reports: The JSP and Servlet included in the sample application within the […]

Read more
Ubuntu 14.04 — ruby1.9.1 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — ruby1.9.1 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3945-1 Related CVEs: CVE-2019-8320 CVE-2019-8321 CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325 CVE-2018-16395 CVE-2018-16396  +12 more Upstream summary: It was discovered that Ruby incorrectly handled certain RubyGems. An attacker could possibly use this […]

Read more
Gentoo Linux — mail-filter/spamassassin — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — mail-filter/spamassassin — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202105-26 Related CVEs: CVE-2020-1946 Upstream summary: It was discovered that SpamAssassin incorrectly handled certain CF files. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
How to Set Up Concourse CI on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up Concourse CI on Debian 10

Introduction Debian 10 Buster is built around the ethos of stability and free software. Setting up set up concourse ci on debian 10 on Buster leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Buster freeze. Follow each step carefully and […]

Read more
SLES 15 — dia — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — dia — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 April 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2008-5984 CVE-2019-19451 Upstream summary: Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary […]

Read more
Arch Linux — icoutils — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — icoutils — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201701-13 Related CVEs: CVE-2017-5208 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 0.31.0-1. Fixed in: 0.31.1-1. Group: AVG-129. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — firefox-esr — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — firefox-esr — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox ESR — Other issue in the WebRTC component Related CVEs: CVE-2011-3079 CVE-2012-2808 CVE-2014-1492 CVE-2014-1493 CVE-2014-1494 CVE-2014-1496 CVE-2014-1497 CVE-2014-1498  +12 more Upstream summary: https://bugzilla.mozilla.org/show_bug.cgi?id=2035939 reports: Other issue in the WebRTC […]

Read more
Common Problems 118931

Ubuntu 14.04 LTS broken dependencies after interrupted upgrade

🟠 High   ⏱ 5–30 min  Last verified: 16 April 2020 Affected versions: 14.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Common Problems 112986

Windows Server 2016 MPIO Path Imbalance Sends Traffic Over Single Storage Link – Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 16 April 2020 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
How to Set Up Varnish Cache on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up Varnish Cache on SLES 15

Introduction This tutorial covers How to Set Up Varnish Cache on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper […]

Read more
CHAT