Security Hardening

FreeBSD 12 — ru-bugzilla — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ru-bugzilla — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bugzilla — multiple vulnerabilities Related CVEs: CVE-2013-0785 CVE-2013-0786 Upstream summary: A Bugzilla Security Advisory reports: Cross-Site Scripting When viewing a single bug report, which is the default, the bug ID […]

Read more
FreeBSD 12 — portupgrade-devel — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — portupgrade-devel — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: portupgrade-devel — lack of distfile checksums Upstream summary: Ports security team reports: The portupgrade-devel port fetched directly from a git respository without checking against a known good SHA hash. This […]

Read more
openSUSE Tumbleweed — wildmidi — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — wildmidi — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2017-11661 CVE-2017-11664 Upstream summary: The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file. […]

Read more
FreeBSD 12 — netqmail-mysql — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — netqmail-mysql — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qmail — 64 bit integer overflows with possible remote code execution on large SMTP requests Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: Georgi Guninski writes: There are several issues with […]

Read more
SLES 15 — yast2-multipath — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — yast2-multipath — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3231-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-17955 Upstream summary: In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection Table of […]

Read more
Oracle Linux 8 — python-pip — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python-pip — vulnerability — patch and remediation guide (ELSA-2020-4432)

🟡 Medium   ⏱ 10–30 min  Last verified: 12 November 2019 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4432 Related CVEs: CVE-2019-20916 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Arch Linux — wireshark-qt — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — wireshark-qt — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201805-25 Related CVEs: CVE-2018-11362 CVE-2018-11361 CVE-2018-11360 CVE-2018-11359 CVE-2018-11358 CVE-2018-11357 CVE-2018-11356 CVE-2018-11355  +6 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 2.6.0-1. Fixed in: 2.6.1-1. Group: AVG-708. Table of contents […]

Read more
FreeBSD 12 — flock — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — flock — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2007-4879 CVE-2007-5959 CVE-2008-0016 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0417  +12 more Upstream summary: The Mozilla Foundation reports: MFSA 2008-37 UTF-8 URL stack buffer overflow MFSA […]

Read more
Debian 9 — rdesktop — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — rdesktop — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-8791 CVE-2019-15682 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
How to Configure Log Rotation with logrotate on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Configure Log Rotation with logrotate on RHEL 8

Log files grow indefinitely unless something rotates and prunes them, which will eventually fill a disk and crash your services. On RHEL 8, logrotate is installed by default and handles rotation for most system logs out of the box via a systemd timer. For application logs your team manages, you need to write a custom […]

Read more
CHAT