Security Hardening

How to Configure Traffic Shaping with tc on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Configure Traffic Shaping with tc on SLES 12

Introduction This tutorial covers How to Configure Traffic Shaping with tc on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: […]

Read more
openSUSE Tumbleweed — syslog-ng — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — syslog-ng — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2011-0343 CVE-2011-1951 Upstream summary: Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to […]

Read more
FreeBSD 12 — cliqz — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — cliqz — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Mozilla — Stored passwords in 'Saved Logins' can be copied without master password entry Related CVEs: CVE-2019-11733 Upstream summary: Mozilla Foundation reports: CVE-2019-11733: Stored passwords in 'Saved Logins' can be […]

Read more
FreeBSD 12 — libsamplerate — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libsamplerate — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libsamplerate — multiple vulnerabilities Related CVEs: CVE-2017-7697 Upstream summary: NVD reports: In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. […]

Read more
Arch Linux — git-annex — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — git-annex — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201807-2 Related CVEs: CVE-2018-10859 CVE-2018-10857 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 6.20180529-18. Fixed in: 6.20180626-1. Group: AVG-725. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 9 — python-reportlab — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — python-reportlab — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-17626 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 9 — openconnect — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — openconnect — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-16239 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Set Up WireGuard VPN on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Set Up WireGuard VPN on RHEL 8

WireGuard is a modern, high-performance VPN protocol built into the Linux kernel since version 5.6, offering significantly simpler configuration and better performance than older alternatives like OpenVPN or IPsec. On RHEL 8, WireGuard can be installed via the ELRepo kernel module or the wireguard-tools package from EPEL, with the kernel module provided by the elrepo-kernel […]

Read more
Arch Linux — libcurl-gnutls — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — libcurl-gnutls — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201805-18 Related CVEs: CVE-2018-1000301 CVE-2018-1000300 CVE-2019-5436 CVE-2019-3823 CVE-2019-3822 CVE-2018-16890 CVE-2018-16840 CVE-2018-0500  +12 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 7.59.0-1. Fixed in: 7.60.0-1. Group: AVG-699. Table of contents […]

Read more
CHAT