chris

How to Harden SSH on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Harden SSH on SLES 12

Introduction This tutorial covers How to Harden SSH on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Edit SSH Configuration vi /etc/ssh/sshd_config Step 2 — Recommended Settings […]

Read more
FreeBSD 12 — py37-cairosvg — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-cairosvg — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]

Read more
Maven Dependency Tree - Resolving Conflicts — step-by-step DevOps tutorial on Progressive Robot

Maven Dependency Tree – Resolving Conflicts

URL: https://www.progressiverobot.com/maven-dependency-tree-resolving-conflicts/ Maven Dependency Tree is very helpful in understanding the project dependencies and resolving any conflicts because of different versions of a dependency. How to get the Maven Dependency Tree of a Project We can run mvn dependency:tree command in the terminal to print the project dependency tree. For our example, I will be […]

Read more
How To Use IRB to Explore Ruby — step-by-step Programming tutorial on Progressive Robot

How To Use IRB to Explore Ruby

IRB, short for Interactive Ruby, is a REPL (read-eval-print loop) which serves as a quick way to explore the Ruby programming language and try out code without creating a file. In this tutorial, you’ll use IRB to run some code, inspect its output, bring in external libraries, and customize your IRB session.

Read more
FreeBSD 12 — pear-twig-twig — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pear-twig-twig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-twig — remote code execution Related CVEs: CVE-2015-7809 Upstream summary: Fabien Potencier reports: End users can craft valid Twig code that allows them to execute arbitrary code (RCEs) via the […]

Read more
How to Install and Configure Varnish Cache on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Install and Configure Varnish Cache on FreeBSD 12

Introduction This guide explains how to Install and Configure Varnish Cache on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]

Read more
Ubuntu 18.04 — python-psutil — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — python-psutil — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 September 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4204-1 Related CVEs: CVE-2019-18874 Upstream summary: Riccardo Schirone discovered that psutil incorrectly handled certain reference counting operations. An attacker could use this issue to cause psutil to crash, resulting in […]

Read more
CHAT