IT, Cloud & DevOps Blog

FreeBSD 12 — rinetd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rinetd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible to overwrite memory […]

Read more
FreeBSD 12 — ja-xv — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-xv — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xv — filename handling format string vulnerability Related CVEs: CVE-2005-0665 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw […]

Read more
Como configurar as chaves SSH no Ubuntu 16.04 — step-by-step Linux tutorial on Progressive Robot

Como configurar as chaves SSH no Ubuntu 16.04

O SSH, ou shell seguro, é um protocolo criptografado usado para administrar e se comunicar com servidores. Ao trabalhar com um servidor Ubuntu, existem boas chances de você gastar a maior parte do seu tempo em uma sessão de terminal conectada ao seu servidor através do…

Read more
openSUSE Tumbleweed — shadowsocks-libev — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — shadowsocks-libev — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-15924 CVE-2019-5163 CVE-2019-5164 Upstream summary: In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request […]

Read more
How to Set Up Privileged Access Workstations on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Set Up Privileged Access Workstations on Windows Server 2016

How to Set Up Windows Server 2016 Privileged Access Workstation A Privileged Access Workstation (PAW) is a dedicated, hardened workstation used exclusively for administrative tasks. The PAW concept is a Microsoft best practice for protecting high-value accounts and systems from credential theft and lateral movement. By separating privileged administration from everyday user activity, a PAW […]

Read more
FreeBSD 12 — acroread — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — acroread — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: acroread9 — Multiple Vulnerabilities Related CVEs: CVE-2004-0630 CVE-2004-1152 CVE-2005-1306 CVE-2005-1625 CVE-2005-1912 CVE-2005-2470 CVE-2011-1353 CVE-2011-2431  +12 more Upstream summary: The Adobe Security Team reports: An unspecified vulnerability in the U3D component […]

Read more
Ubuntu 16.04 — gcab — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — gcab — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3546-1 Related CVEs: CVE-2018-5345 Upstream summary: Richard Hughes discovered that gcab incorrectly handled certain malformed cabinet files. If a user or automated system were tricked into opening a specially crafted […]

Read more
CHAT