Logging Monitoring

How to Configure Kubernetes Persistent Volumes on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Configure Kubernetes Persistent Volumes on FreeBSD 13

Introduction How to Configure Kubernetes Persistent Volumes on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]

Read more
FreeBSD 13 — netdata — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — netdata — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: netdata — multiple vulnerabilities with streaming Upstream summary: Netdata reports: GHSA-xg38-3vmw-2978: Netdata Streaming Alert Command Injection GHSA-jx85-39cw-66f2: Netdata Streaming Authentication Bypass Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 13 — pypy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — pypy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Python — DoS via malformed XML-RPC / HTTP POST request Related CVEs: CVE-2012-0845 Upstream summary: Jan Lieskovsky reports, A denial of service flaw was found in the way Simple XML-RPC […]

Read more
FreeBSD 13 — corkscrew — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — corkscrew — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: corkscrew — buffer overflow vulnerability Upstream summary: The affected corkscrew versions use sscanf calls without proper bounds checking. In the authentication file parsing routine this can cause an exploitable buffer […]

Read more
FreeBSD 13 — plexhometheater — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — plexhometheater — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822 CVE-2015-6823 CVE-2015-6824  +11 more Upstream summary: NVD reports: The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does […]

Read more
How to Configure Storage Spaces on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Configure Storage Spaces on Windows Server 2012 R2

How to Configure Storage Spaces on Windows Server 2012 R2 Storage Spaces is a software-defined storage technology introduced with Windows Server 2012 and significantly enhanced in Windows Server 2012 R2. It allows administrators to group physical disk drives of varying types and sizes into a storage pool, then carve virtual disks — called storage spaces […]

Read more
Debian 10 — xrdp — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — xrdp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-4044 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 18.04 — libgd2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libgd2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7112-1 Related CVEs: CVE-2021-40812 CVE-2017-6363 CVE-2021-38115 CVE-2021-40145 CVE-2018-14553 CVE-2019-11038 CVE-2019-6977 CVE-2019-6978  +2 more Upstream summary: It was discovered that the GD Graphics Library did not perform proper bounds checking while […]

Read more
SLES 12 — libexempi3 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libexempi3 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3734-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-18651 CVE-2017-18234 CVE-2017-18233 CVE-2017-18236 CVE-2017-18238 CVE-2018-7728 CVE-2018-7730 Upstream summary: Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause […]

Read more
SLES 12 — python-PyYAML — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-PyYAML — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2021 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:197-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14343 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it […]

Read more
CHAT