Security Hardening

FreeBSD 12 — php55-exif — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php55-exif — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-3074 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291  +5 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
Arch Linux — zathura-pdf-mupdf — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — zathura-pdf-mupdf — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201805-12 Related CVEs: CVE-2018-6544 CVE-2018-6192 CVE-2018-6187 CVE-2018-5686 CVE-2018-1000051 CVE-2017-17858 CVE-2017-15587 CVE-2017-14687  +2 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 0.3.3-2. Fixed in: 0.3.3-3. Group: AVG-691. Table of contents […]

Read more
SLES 15 — python3-cupshelpers — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-cupshelpers — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-4405 Upstream summary: The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure […]

Read more
Oracle Linux 8 — bind — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — bind — vulnerability — patch and remediation guide (ELSA-2019-1714)

🟠 High   ⏱ 15–60 min  Last verified: 16 August 2019 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-1714 Related CVEs: CVE-2019-6471 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 9 — libvpx — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — libvpx — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 August 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-13194 CVE-2019-9232 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Arch Linux — firefox-developer-edition — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — firefox-developer-edition — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201906-19 Related CVEs: CVE-2019-11707 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 68.0b10-1. Fixed in: 68.0b11-1. Group: AVG-995. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
How to Automate SLES 15 Deployment with AutoYaST — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Automate SLES 15 Deployment with AutoYaST

Introduction This tutorial covers How to Automate SLES 15 Deployment with AutoYaST on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Launch YaST yast Step 2 — Use YaST from […]

Read more
openSUSE Tumbleweed — plasma5-desktop — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — plasma5-desktop — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:0303-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8651 Upstream summary: The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a […]

Read more
Alpine Linux edge — xerces-c — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — xerces-c — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.2.5-r0 📖 ~4 min read  •  Source: Alpine secdb entry — xerces-c 3.2.5-r0 Related CVEs: CVE-2018-1311 Upstream summary: Alpine community repository for vedge ships xerces-c 3.2.5-r0 which addresses CVE-2018-1311. Table of contents Symptom & Impact Environment […]

Read more
How to Configure Bacula Backup on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure Bacula Backup on FreeBSD 12

Introduction How to Configure Bacula Backup on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, […]

Read more
CHAT