Troubleshooting

FreeBSD 12 — newsgrab — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — newsgrab — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: newsgrab — insecure file and directory creation Related CVEs: CVE-2005-0153 CVE-2005-0154 Upstream summary: The newsgrab script uses insecure permissions during the creation of the local output directory and downloaded files. […]

Read more
How to Set Up Snapshots with LVM on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up Snapshots with LVM on Debian 10

Introduction This guide explains how to Set Up Snapshots with LVM on Debian 10 on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install with […]

Read more
openSUSE Tumbleweed — kget — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — kget — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2010:024 (see also SUSE bugzilla) Related CVEs: CVE-2010-1000 Upstream summary: Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences […]

Read more
FreeBSD 12 — plib — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — plib — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: plib — stack-based buffer overflow Related CVEs: CVE-2011-4620 CVE-2012-4552 Upstream summary: CVE reports: Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute […]

Read more
Debian 10 — sphinxsearch — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — sphinxsearch — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2020 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-29050 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Set Up RADIUS Authentication with NPS on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Set Up RADIUS Authentication with NPS on Windows Server 2012 R2

How to Set Up RADIUS Authentication with NPS on Windows Server 2012 R2 Network Policy Server (NPS) is Microsoft’s implementation of a RADIUS (Remote Authentication Dial-In User Service) server and proxy, included with Windows Server 2012 R2. NPS centralizes authentication, authorization, and accounting for network access—including VPN connections, 802.1X wired and wireless connections, dial-up connections, […]

Read more
Ubuntu 18.04 — python-reportlab — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — python-reportlab — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4273-1 Related CVEs: CVE-2019-17626 Upstream summary: It was discovered that ReportLab incorrectly handled certain XML documents. If a user or automated system were tricked into processing a specially crafted document, […]

Read more
Arch Linux — geckodriver — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — geckodriver — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202107-71 Related CVEs: CVE-2020-15660 Upstream summary: Type: cross-site request forgery. Status: Fixed. Affected: 0.26.0-1. Fixed in: 0.29.1-1. Group: AVG-2180. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — mariadb102-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mariadb102-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2016-9843 CVE-2017-10155 CVE-2017-10165 CVE-2017-10167 CVE-2017-10203 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]

Read more
How to Audit Linux Security with Lynis on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Audit Linux Security with Lynis on RHEL 8

Lynis is a battle-tested open-source security auditing tool that scans your Linux system, identifies misconfigurations, and produces a prioritised list of hardening suggestions. On RHEL 8, it is available through the EPEL 8 repository and runs entirely from the command line without requiring a daemon or persistent service. After each scan, Lynis assigns a hardening […]

Read more
CHAT