chris

How to Use Podman on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Use Podman on FreeBSD 13

Introduction How to Use Podman on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, and […]

Read more
FreeBSD 13 — mplayer-esound — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mplayer-esound — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mplayer — vulnerability in STR files processor Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2005-1195 CVE-2006-0579 CVE-2006-1502 CVE-2006-6172 CVE-2007-1246  +8 more Upstream summary: Secunia reports: The vulnerability is caused due to a […]

Read more
Debian 11 — gfbgraph — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gfbgraph — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-39358 Upstream summary: In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. […]

Read more
Debian 11 — hypre — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — hypre — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]

Read more
FreeBSD 13 — p5-Archive-Zip — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — p5-Archive-Zip — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-Archive-Zip — virus detection evasion Upstream summary: An AMaViS Security Announcement reports that a vulnerability exist in the Archive::Zip Perl module which may lead to bypass of malicious code in […]

Read more
Oracle Linux 8 — .NET Core 3.1 security and bugfix update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — .NET Core 3.1 security and bugfix update (ELSA-2021-3142)

🟠 High   ⏱ 15–60 min  Last verified: 1 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-3142 Related CVEs: CVE-2021-34532 CVE-2021-26423 CVE-2021-34485 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
FreeBSD 13 — eyeOS — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — eyeOS — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: eyeOS — multiple XSS security bugs Related CVEs: CVE-2006-5071 Upstream summary: eyeOS team reports: [EyeOS 0.9.1] release fixes two XSS security bugs, so we recommend all users to upgrade to […]

Read more
Debian 11 — steghide — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — steghide — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-27211 Upstream summary: steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. Table of contents Symptom & Impact […]

Read more
Debian 10 — aide — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — aide — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-45417 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Test Disaster Recovery on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Test Disaster Recovery on Windows Server 2016

How to Perform Disaster Recovery Testing on Windows Server 2016 Disaster recovery testing is the practice of validating that your backup systems, failover processes, and recovery procedures actually work before you need them in a real emergency. An untested disaster recovery plan is little more than a document of good intentions. Organizations that skip regular […]

Read more
CHAT