Logging Monitoring

FreeBSD 12 — abiword — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — abiword — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: abiword, koffice — stack based buffer overflow vulnerabilities Related CVEs: CAN-2005-2972 Upstream summary: Chris Evans reports that AbiWord is vulnerable to multiple stack-based buffer overflow vulnerabilities. This is caused by […]

Read more
How to Configure ZFS Snapshots and Rollback on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure ZFS Snapshots and Rollback on FreeBSD 12

Introduction Deploying configure zfs snapshots and rollback on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the […]

Read more
Common Problems 112530

Windows Server 2019 Storage Replica Backlog Growth During Peak Write Periods – Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 20 March 2020 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Ubuntu 18.04 — dino-im — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — dino-im — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 March 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4306-1 Related CVEs: CVE-2019-16235 CVE-2019-16236 CVE-2019-16237 https://bugs.launchpad.net/bugs/1866115 Upstream summary: It was discovered that Dino incorrectly validated inputs. An attacker could use this issue to possibly obtain, inject or remove sensitive […]

Read more
Common Problems 112523

Windows Server 2019 — IPsec site-to-site tunnel renegotiation fails after certificate renewal on RRAS — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 20 March 2020 Affected versions: Windows Server 2019 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
How to Configure InfluxDB and Grafana on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure InfluxDB and Grafana on Debian 9

Introduction Deploying configure influxdb and grafana on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you […]

Read more
Ubuntu 14.04 — python-rsa — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — python-rsa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4478-1 Related CVEs: CVE-2020-13757 Upstream summary: It was discovered that Python-RSA incorrectly handled certain ciphertexts. An attacker could possibly use this issue to obtain sensitive information. Table of contents Symptom […]

Read more
Ubuntu 18.04 — speex — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — speex — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5280-1 Related CVEs: CVE-2020-23903 Upstream summary: It was discovered that Speex incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service. Table […]

Read more
Oracle Linux 8 — nginx:1.14 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — nginx:1.14 — vulnerability — patch and remediation guide (ELSA-2019-2799)

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-2799 Related CVEs: CVE-2019-9513 CVE-2019-9511 CVE-2019-9516 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
CHAT