IT, Cloud & DevOps Blog

FreeBSD 12 — wget — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wget — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wget — security flaw in caching credentials passed as a part of the URL Related CVEs: CVE-2004-1487 CVE-2004-1488 CVE-2010-2252 CVE-2014-4877 CVE-2016-4971 CVE-2016-7098 CVE-2017-13089 CVE-2017-13090  +2 more Upstream summary: Gynvael Coldwind […]

Read more
Common Problems 113053

Windows Server 2016 — SQL Server service account permission regression — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 3 December 2019 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
How to Configure Remote Desktop Web Access on Windows Server 2019 — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Configure Remote Desktop Web Access on Windows Server 2019

How to Configure Remote Desktop Web Access on Windows Server 2019 Remote Desktop Web Access (RD Web Access) provides a web portal through which users can access RemoteApp programs and session desktops without installing any software other than a web browser or the Remote Desktop client. Users navigate to an HTTPS URL, authenticate with their […]

Read more
FreeBSD 12 — lxr — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — lxr — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lxr — multiple XSS vulnerabilities Related CVEs: CVE-2009-4497 Upstream summary: Dan Rosenberg reports: There are several cross-site scripting vulnerabilities in LXR. These vulnerabilities could allow an attacker to execute scripts […]

Read more
Ubuntu 18.04 — gvfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — gvfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 December 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4053-1 Related CVEs: CVE-2019-12447 CVE-2019-12448 CVE-2019-12449 CVE-2019-12795 CVE-2019-3827 Upstream summary: It was discovered that GVfs incorrectly handled the admin backend. Files created or moved by the admin backend could end […]

Read more
Настройка проекта Node с помощью Typescript — step-by-step Javascript tutorial on Progressive Robot

Настройка проекта Node с помощью Typescript

По мере увеличения базы кода написание серверного кода JavaScript становится сложнее. TypeScript — это типовой (опциональный) супернабор JavaScript, который может помочь со сборкой и управлением крупномасштабными проектами JavaScript. Его можно представить как JavaScript с дополнительными возможностями, включая мощное статическое типирование, компиляцию и объектно-ориентированное программирование. В этом учебном модуле вы узнаете, как использовать структуру [Express](https://expressjs.com/) с Ty

Read more
How to Set Up a PXE Boot Server on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Set Up a PXE Boot Server on RHEL 7

How to Set Up a PXE Boot Server on RHEL 7 Provisioning bare-metal servers or virtual machines one by one from USB media does not scale. A PXE (Preboot Execution Environment) boot server lets a machine boot directly from the network, pull a kernel and RAM disk from a TFTP server, and optionally complete an […]

Read more
Oracle Linux 8 — libvorbis — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libvorbis — vulnerability — patch and remediation guide (ELSA-2019-3703)

🟢 Low   ⏱ 5–15 min  Last verified: 3 December 2019 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3703 Related CVEs: CVE-2018-10392 CVE-2018-10393 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
FreeBSD 12 — libXtst — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXtst — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]

Read more
CHAT