Security Hardening

FreeBSD 12 — sudosh — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sudosh — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sudosh — buffer overflow Upstream summary: ISS reports: sudosh2 and sudosh3 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the replay() function. By persuading a […]

Read more
How to Set Up a PPTP VPN Server on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up a PPTP VPN Server on Debian 10

Introduction Debian 10 Buster is built around the ethos of stability and free software. Setting up set up a pptp vpn server on debian 10 on Buster leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Buster freeze. Follow each step […]

Read more
FreeBSD 12 — kronolith — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kronolith — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kronolith — arbitrary local file inclusion vulnerability Upstream summary: iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute […]

Read more
FreeBSD 12 — firefox-ja — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — firefox-ja — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — code execution via Quicktime media-link files Related CVEs: CVE-2006-4965 CVE-2006-6077 CVE-2007-0008 CVE-2007-0009 CVE-2007-0775 CVE-2007-0776 CVE-2007-0777 CVE-2007-0778  +11 more Upstream summary: The Mozilla Foundation reports a vulnerability within the […]

Read more
Oracle Linux 8 — perl-File-Find-Rule — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — perl-File-Find-Rule — vulnerability — patch and remediation guide (ELSA-2025-9605)

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2025-9605 Related CVEs: CVE-2011-10007 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 121114

Debian 10: kubelet not starting due to cgroup driver mismatch

🟠 High   ⏱ 5–30 min  Last verified: 11 February 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
FreeBSD 12 — postfix-current — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — postfix-current — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]

Read more
How to Install Redis on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Install Redis on SLES 12

Introduction This tutorial covers How to Install Redis on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Install Redis zypper install -y redis Step 2 — Enable […]

Read more
FreeBSD 12 — ja-groff — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-groff — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: groff — pic2graph and eqn2graph are vulnerable to symlink attack through temporary files Related CVEs: CVE-2004-0969 CVE-2004-1296 Upstream summary: The eqn2graph and pic2graph scripts in groff 1.18.1 allow local users […]

Read more
Ubuntu 16.04 — thunderbird — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — thunderbird — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 February 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4421-1 Related CVEs: CVE-2020-12398 CVE-2020-12399 CVE-2020-12405 CVE-2020-12406 CVE-2020-12410 CVE-2020-12417 CVE-2020-12418 CVE-2020-12419  +12 more Upstream summary: Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening […]

Read more
CHAT