2019 - Page 316 of 527

How to Harden Nginx: Security Headers, TLS 1.3 and OCSP Stapling on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Harden Nginx: Security Headers, TLS 1.3 and OCSP Stapling on RHEL 8

A default Nginx installation exposes version information in response headers, accepts legacy TLS protocols, and sends no browser security directives — all of which reduce your attack surface score and leave clients vulnerable to clickjacking, MIME sniffing, and downgrade attacks. Hardening Nginx on RHEL 8 involves a series of targeted configuration changes: suppressing the server […]

Read more
FreeBSD 12 — teTeX-base — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — teTeX-base — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpdf — makeFileKey2() buffer overflow vulnerability Related CVEs: CVE-2004-0888 CVE-2004-0889 CVE-2004-1125 CVE-2005-0064 Upstream summary: An iDEFENSE Security Advisory reports: Remote exploitation of a buffer overflow vulnerability in the xpdf PDF […]

Read more
Ubuntu 18.04 — hibagent — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — hibagent — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 July 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6493-2 Related CVEs: https://launchpad.net/bugs/2043739 Upstream summary: USN-6493-1 fixed a vulnerability in hibagent. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: On […]

Read more
How to Configure Nginx with ModSecurity WAF on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Configure Nginx with ModSecurity WAF on RHEL 8

ModSecurity is not limited to Apache — it can also protect Nginx deployments through a dedicated dynamic module called ngx_http_modsecurity_module. The module embeds the ModSecurity v3 library directly into Nginx’s request processing pipeline, enabling the same OWASP Core Rule Set that Apache users rely on. On RHEL 8, Nginx is available from the AppStream module […]

Read more
How To Run Multiple Functions Concurrently in Go — step-by-step Programming tutorial on Progressive Robot

How To Run Multiple Functions Concurrently in Go

To run programs faster, a programmer needs to design their programs to run at the same time. Two features in Go, goroutines and channels, make concurrency easier when used together. Goroutines solve the difficulty of setting up and running concurrent code in a program, and channels solve the difficulty of safely communicating between the code running concurrently.

Read more
FreeBSD 12 — chromium-npapi — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — chromium-npapi — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: chromium — multiple vulnerabilities Related CVEs: CVE-2015-1212 CVE-2015-1213 CVE-2015-1214 CVE-2015-1215 CVE-2015-1216 CVE-2015-1217 CVE-2015-1218 CVE-2015-1219  +12 more Upstream summary: Google Chrome Releases reports: 5 security fixes in this release, including: [698622] […]

Read more
CHAT