April 2020 - Page 4 of 62

Ubuntu 18.04 — pyxdg — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — pyxdg — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 April 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4700-1 Related CVEs: CVE-2019-12761 Upstream summary: Alexandre D'Hondt discovered that PyXDG did not properly sanitize input. An attacker could exploit this with a crafted .menu file to execute arbitrary code. […]

Read more
How to Write Ansible Playbooks for Debian 10 Systems — step-by-step Debian 10 tutorial on Progressive Robot

How to Write Ansible Playbooks for Debian 10 Systems

Introduction This guide explains how to Write Ansible Playbooks for Debian 10 Systems on Debian 10 Buster. Debian Buster uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 10 install with the […]

Read more
Ubuntu 20.04を使用するための初期サーバーセットアップ — step-by-step Linux tutorial on Progressive Robot

Ubuntu 20.04を使用するための初期サーバーセットアップ

最初に新しいUbuntu 20.04サーバを作成するときは、基本的なセットアップの一部として、いくつかの重要な設定手順を実行する必要があります。これらの手順を踏むことで、サーバーのセキュリティと使い勝手が向上し、その後のアクションに必要な強固な基盤を手にすることができます。

Read more
Oracle Linux 8 — vim — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — vim — vulnerability — patch and remediation guide (ELSA-2020-4453)

🟡 Medium   ⏱ 10–30 min  Last verified: 29 April 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4453 Related CVEs: CVE-2019-20807 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Gentoo Linux — dev-util/global — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — dev-util/global — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202008-02 Related CVEs: CVE-2017-17531 Upstream summary: A vulnerability was found in an undocumented function of gozilla. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide (ELSA-2020-5691)

🟠 High   ⏱ 15–60 min  Last verified: 29 April 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-5691 Related CVEs: CVE-2020-11609 CVE-2020-11608 CVE-2020-11668 CVE-2020-9391 CVE-2020-8647 CVE-2020-8649 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How To Build a Rate Limiter With Node.js on App Platform — step-by-step Javascript tutorial on Progressive Robot

How To Build a Rate Limiter With Node.js on App Platform

Rate limiting manages your network’s traffic and limits the number of times someone repeats an operation in a given duration, such as using an API. A service without a layer of security against rate limit abuse is prone to overload and hampers your application’s proper operation for legitimate customers. In this tutorial, you will build a Node.js project deployed on the cloud provider’s App Platform that protects a Cloudflare routed domain with rate limiting.

Read more
FreeBSD 12 — linux-f10-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-f10-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: flash — multiple vulnerabilities Related CVEs: CVE-2008-4546 CVE-2009-3793 CVE-2009-3794 CVE-2009-3796 CVE-2009-3797 CVE-2009-3798 CVE-2009-3799 CVE-2009-3800  +12 more Upstream summary: Adobe reports: These updates resolve type confusion vulnerabilities that could lead to […]

Read more
Automating Server Setup with Ansible: Набор материалов для тренинга the cloud provider — step-by-step Devops tutorial on Progressive Robot

Automating Server Setup with Ansible: Набор материалов для тренинга the cloud provider

<$>[note​​​] [label Материалы для проведения тренинга по автоматизации настройки сервера с помощью Ansible] Данный набор материалов для тренинга предназначен для ознакомления технических специалистов с понятиями управления конфигурацией и использованием Ansible для автоматизации настройки…

Read more
CHAT