April 2020 - Page 24 of 62

FreeBSD 12 — pop3proxy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pop3proxy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: up-imapproxy — multiple vulnerabilities Related CVEs: CVE-2004-1035 Upstream summary: Timo Sirainen reports: There are various bugs in up-imapproxy which can crash it. Since up-imapproxy runs in a single process with […]

Read more
Common Problems 115125

RHEL 8 DNS Settings Overwritten by DHCP and Break Internal Name Resolution

🟡 Medium   ⏱ 5–30 min  Last verified: 19 April 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Set Up Victoriametrics on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up Victoriametrics on Debian 10

Introduction Debian 10 Buster is built around the ethos of stability and free software. Setting up set up victoriametrics on debian 10 on Buster leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Buster freeze. Follow each step carefully and the […]

Read more
Ubuntu 14.04 — bash — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — bash — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 April 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5380-1 Related CVEs: CVE-2019-18276 CVE-2019-9924 CVE-2016-0634 CVE-2016-7543 CVE-2016-9401 CVE-2017-5932 CVE-2014-6277 CVE-2014-6278  +4 more Upstream summary: It was discovered that Bash did not properly drop privileges when the binary had the […]

Read more
Observer Design Pattern in JavaScript — step-by-step Javascript tutorial on Progressive Robot

Observer Design Pattern in JavaScript

There are many times when one part of the application changes, other parts needs to be updated. In AngularJS, if the $scope object updates, an event can be triggered to notify another component. The observer pattern incorporates just that – if an object is modified it broadcasts to…

Read more
Oracle Linux 8 — grub2 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — grub2 — vulnerability — patch and remediation guide (ELSA-2020-0335)

🟡 Medium   ⏱ 10–30 min  Last verified: 19 April 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-0335 Related CVEs: CVE-2019-14865 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How To Use Confd and Etcd to Dynamically Reconfigure Services in CoreOS — step-by-step Web Servers tutorial on Progressive Robot

How To Use Confd and Etcd to Dynamically Reconfigure Services in CoreOS

Etcd is a globally distributed key-value store that is available in CoreOS installations. By registering services in this store, related applications can adjust their configuration based on the values available. In this guide, we will demonstrate how to configure `confd` to monitor `etcd` in order to dynamically generate an Nginx configuration. Continuous polling of `etcd` allows us to configure Nginx as a load balancer that adjusts its list of backend servers as they are started or stopped.

Read more
How to Set Up Privileged Access Management on Windows Server 2019 — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Set Up Privileged Access Management on Windows Server 2019

Introduction to Privileged Access Management Privileged Access Management (PAM) is a security practice and set of technologies designed to protect privileged accounts and limit the attack surface exposed by administrative access. On Windows Server 2019, PAM can be implemented using Microsoft Identity Manager (MIM) PAM, which is the enterprise-grade solution, or through a layered approach […]

Read more
CHAT