chris

How to Install Java (OpenJDK 21) on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install Java (OpenJDK 21) on FreeBSD 13

Introduction This guide explains how to Install Java (OpenJDK 21) on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained […]

Read more
FreeBSD 13 — xloadimage — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xloadimage — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xloadimage — buffer overflows in NIFF image title handling Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-3178 Upstream summary: Ariel Berkman reports: Unlike most of the supported image formats in xloadimage, the NIFF […]

Read more
Entendendo ponteiros em Go — step-by-step Programming tutorial on Progressive Robot

Entendendo ponteiros em Go

Quando você criar software em Go, você estará escrevendo funções e métodos. Você passa dados para essas funções como argumentos. Às vezes, a função precisa de uma cópia local dos dados e você quer que o original permaneça inalterado. Por exemplo, se você for um banco e tiver…

Read more
Debian 11 — xsp — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — xsp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-2658 Upstream summary: Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, […]

Read more
Debian 11 — jsch — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — jsch — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-5725 Upstream summary: Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via […]

Read more
Object Storage vs. Block Storage Services — step-by-step DevOps tutorial on Progressive Robot

Object Storage vs. Block Storage Services

Flexible and scalable data storage is a baseline requirement for most applications and services being developed today. With today’s complex deployments, containers, and ephemeral infrastructure, the days of simply saving files to disk on a single server are gone. Cloud providers have developed services to fill the storage needs of modern application deployments, and they mostly fit into two categories: object storage, and block storage.

Read more
Debian 11 — opencv — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — opencv — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-1516 CVE-2016-1517 CVE-2017-1000450 CVE-2017-12597 CVE-2017-12598 CVE-2017-12599 CVE-2017-12600 CVE-2017-12601  +12 more Upstream summary: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. Table of […]

Read more
Ubuntu 18.04 — dogtag-pki — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — dogtag-pki — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 October 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8158-1 Related CVEs: CVE-2021-20179 Upstream summary: Fraser Tweedale and Geetika Kapoor discovered that Dogtag PKI could renew a certificate without proper authentication. An attacker could possibly use this to repeatedly […]

Read more
How to Configure Dynamic Access Control on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Configure Dynamic Access Control on Windows Server 2016

How to Set Up Windows Server 2016 Dynamic Access Control Dynamic Access Control (DAC) is an advanced authorization framework in Windows Server 2016 that allows administrators to apply access control policies based on user attributes, device attributes, and data classification, rather than relying solely on traditional group membership and share permissions. With DAC, you can […]

Read more
CHAT