Logging Monitoring

How to Deploy Applications with Docker Compose on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Deploy Applications with Docker Compose on RHEL 7

How to Deploy Applications with Docker Compose on RHEL 7 Docker Compose lets you define and run multi-container applications using a single YAML file. Instead of managing individual docker run commands for each service, you describe the entire application stack — web server, database, cache, message queue — in a docker-compose.yml file and bring everything […]

Read more
Oracle Linux 8 — numpy — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — numpy — vulnerability — patch and remediation guide (ELSA-2019-3704)

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3704 Related CVEs: CVE-2019-6446 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 16.04 — xawtv — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — xawtv — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 July 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4518-1 Related CVEs: CVE-2020-13696 Upstream summary: Matthias Gerstner discovered that xawtv incorrectly handled opening files. A local attacker could possibly use this issue to open and write to arbitrary files […]

Read more
How to Configure GEOM Mirroring on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure GEOM Mirroring on FreeBSD 12

Introduction Deploying configure geom mirroring on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base […]

Read more
Ubuntu 14.04 — grub2 — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — grub2 — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 July 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4432-2 Related CVEs: https://launchpad.net/bugs/1889556 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705  +3 more Upstream summary: USN-4432-1 fixed vulnerabilities in GRUB2 affecting Secure Boot environments. Unfortunately, the update introduced regressions for […]

Read more
How to Set Up WireGuard VPN on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Set Up WireGuard VPN on Debian 10

Introduction How to Set Up WireGuard VPN on Debian 10 is a fundamental operation for any administrator maintaining a Debian 10 Buster server. Debian 10 Buster ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 10. […]

Read more
Ubuntu 16.04 — moin — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — moin — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 July 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4629-1 Related CVEs: CVE-2020-15275 CVE-2020-25074 CVE-2017-5934 CVE-2016-7146 CVE-2016-7148 CVE-2016-9119 Upstream summary: Michael Chapman discovered that MoinMoin incorrectly handled certain cache actions. An attacker could possibly use this issue to execute […]

Read more
How to Configure Nginx Rate Limiting and Connection Throttling on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure Nginx Rate Limiting and Connection Throttling on RHEL 7

How to Configure Nginx Rate Limiting and Connection Throttling on RHEL 7 Uncontrolled traffic is one of the most common threats to web server stability. Whether the source is a poorly written client polling too aggressively, a scraper harvesting your content, or a low-volume denial-of-service attack, allowing unlimited requests to reach your application or upstream […]

Read more
Ubuntu 16.04 — ruby-websocket-extensions — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ruby-websocket-extensions — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 July 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4502-1 Related CVEs: CVE-2020-7663 Upstream summary: It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex backtracking, resulting in […]

Read more
Common Problems 112513

Windows Server 2019 — Static routes lost after reboot due to persistent store misconfiguration in Server 2019 — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 25 July 2020 Affected versions: Windows Server 2019 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
CHAT