Security Hardening

FreeBSD 12 — ghostscript9-agpl-x — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ghostscript9-agpl-x — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ghostscript — Security bypass vulnerabilities Related CVEs: CVE-2015-3228 CVE-2018-15908 CVE-2018-15909 CVE-2018-15910 CVE-2018-15911 CVE-2019-14811 CVE-2019-14812 CVE-2019-14813  +3 more Upstream summary: Cedric Buissart (Red Hat) reports: A flaw was found in, ghostscript […]

Read more
Debian 10 — condor — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — condor — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2020 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-18823 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
openSUSE Tumbleweed — python36-rsa — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python36-rsa — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:0901-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13757 CVE-2020-25658 Upstream summary: Python-RSA before 4.1 ignores leading '' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping […]

Read more
Ubuntu 18.04 — libvncserver — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libvncserver — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4636-1 Related CVEs: CVE-2020-25708 CVE-2019-20839 CVE-2019-20840 CVE-2020-14396 CVE-2020-14397 CVE-2020-14398 CVE-2020-14399 CVE-2020-14400  +12 more Upstream summary: It was discovered that LibVNCServer incorrectly handled certain internals. An attacker could possibly use this […]

Read more
How to Encrypt Disk Partitions with LUKS on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Encrypt Disk Partitions with LUKS on Debian 10

Introduction This guide explains how to Encrypt Disk Partitions with LUKS on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install with […]

Read more
SLES 12 — wicked — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — wicked — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 January 2020 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:800-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18902 CVE-2019-18903 CVE-2020-7216 CVE-2020-7217 Upstream summary: A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE […]

Read more
SLES 15 — libexif12 — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libexif12 — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 20 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1534-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13112 CVE-2020-0452 CVE-2019-9278 CVE-2020-13113 CVE-2020-0181 CVE-2020-0198 CVE-2012-2812 CVE-2012-2813  +11 more Upstream summary: An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF […]

Read more
FreeBSD 12 — apache+mod_ssl+mod_accel+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache+mod_ssl+mod_accel+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

Read more
Common Problems 115130

RPM database corruption prevents package operations – RHEL 8 Post 021

🟡 Medium   ⏱ 5–30 min  Last verified: 19 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
CHAT