December 2022 - Page 15 of 70

Debian 11 — libbsd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libbsd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-2090 CVE-2019-20367 Upstream summary: Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer […]

Read more
How to Configure Lightweight User Environments with WPARs on IBM AIX 7.3 — step-by-step IBM AIX 7.3 tutorial on Progressive Robot

How to Configure Lightweight User Environments with WPARs on IBM AIX 7.3

Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure lightweight user environments with wpars on IBM AIX […]

Read more
Common Problems 112557

Windows Server 2019 — NTDS service pages heavily and stalls AD replication — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 25 December 2022 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
How to Configure DirectAccess on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Configure DirectAccess on Windows Server 2012 R2

How to Configure DirectAccess on Windows Server 2012 R2 DirectAccess provides always-on, seamless remote access for domain-joined Windows clients without requiring user-initiated VPN connections. When a DirectAccess-configured client is outside the corporate network, it automatically establishes an encrypted tunnel to the DirectAccess server using IPv6 over HTTPS (IP-HTTPS) or other transition technologies, giving users transparent […]

Read more
Common Problems 111699

Windows Server 2022 — SMB Access Denied After NTLM Hardening Policy Change — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 25 December 2022 Affected versions: Windows Server 2022 📖 ~1 min read Table of contents Symptom & Impact Quick Checks Deep Diagnosis Primary Fix Verification Prevention & Hardening Symptom & Impact Users and service accounts lose access to shared folders after security baseline changes disable legacy auth […]

Read more
Ubuntu 20.04 — memcached — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — memcached — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 December 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6382-1 Related CVEs: CVE-2022-48571 Upstream summary: It was discovered that Memcached incorrectly handled certain multi-packet uploads in UDP. An attacker could possibly use this issue to cause a denial of […]

Read more
SLES 12 — libyajl2 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libyajl2 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 December 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2276-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24795 Upstream summary: yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` […]

Read more
Utilizing Security Features in SSH — step-by-step Security tutorial on Progressive Robot

Utilizing Security Features in SSH

Securely manage remote systems by making use of the full set of security features SSH has to offer, including strong encryption algorithms, ssh agents, two-factor authentication, and more.

Read more
How to Set Up Suricata IDS/IPS on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Set Up Suricata IDS/IPS on SLES 12

Introduction This tutorial covers How to Set Up Suricata IDS/IPS on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper […]

Read more
Как обновить сервер до Ubuntu 16.04 LTS — step-by-step Linux tutorial on Progressive Robot

Как обновить сервер до Ubuntu 16.04 LTS

<$>[warning] Внимание: Более ранняя версия этой статьи включала упоминание Ubuntu 14.04. Хотя обновление с версии 14.04 может успешно завершиться, обновления с одной версии LTS до следующей версии LTS по умолчанию отключены до момента выхода первого обновления новой версии…

Read more
CHAT