Logging Monitoring

How to Set Up SSH Key Authentication on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Set Up SSH Key Authentication on FreeBSD 12

Introduction This guide explains how to Set Up SSH Key Authentication on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]

Read more
FreeBSD 12 — xdeview — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xdeview — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: uudeview buffer overflows Upstream summary: The authors of UUDeview report repairing two buffer overflows in their software. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
FreeBSD 12 — xli — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xli — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xloadimage — buffer overflows in NIFF image title handling Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-0639 CVE-2005-3178 Upstream summary: Ariel Berkman reports: Unlike most of the supported image formats in xloadimage, the […]

Read more
FreeBSD 12 — wayland — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wayland — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wayland — integer overflow Related CVEs: CVE-2013-2003 Upstream summary: Tobias Stoeckmann reports: The libXcursor fix for CVE-2013-2003 has never been imported into wayland, leaving it vulnerable to it. Table of […]

Read more
How to Configure Nginx as a TCP/UDP Load Balancer on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure Nginx as a TCP/UDP Load Balancer on Debian 9 (DEBIAN-9-2)

Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up configure nginx as a tcp/udp load balancer on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each […]

Read more
SLES 15 — python2-pycrypto — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-pycrypto — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2012:0869-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-2417 CVE-2013-1445 CVE-2013-7459 Upstream summary: PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces […]

Read more
FreeBSD 12 — postgresql94-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — postgresql94-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgresSQL — TYPE in pg_temp execute arbitrary SQL during `SECURITY DEFINER` execution Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167  +12 more Upstream summary: The PostgreSQL project reports: […]

Read more
How to Set Up Windows Server 2019 SMB over QUIC — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Set Up Windows Server 2019 SMB over QUIC

How to Set Up Windows Server 2019 SMB over QUIC SMB over QUIC is a feature introduced in Windows Server 2022 that allows SMB 3 file sharing over the QUIC transport protocol (UDP port 443) instead of TCP port 445. While Windows Server 2019 itself does not support the SMB over QUIC server role, Windows […]

Read more
Common Problems 115501

journalctl Missing Historical Logs Due to Non-Persistent Journald

🟡 Medium   ⏱ 5–30 min  Last verified: 9 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 112955

Windows Server 2016 Storage Deduplication Jobs Saturating CPU and Starving Workloads – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 9 January 2020 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
CHAT