Logging Monitoring

How to Perform a System Security Audit with auditd on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Perform a System Security Audit with auditd on RHEL 8

The Linux Audit system (auditd) provides a comprehensive security logging framework that records system calls, file accesses, and user actions at the kernel level. On RHEL 8, auditd is installed and enabled by default, making it a foundational component of any security compliance strategy. Whether meeting requirements for PCI-DSS, HIPAA, or internal policy, audit rules […]

Read more
Oracle Linux 8 — GraalVM — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — GraalVM — vulnerability — patch and remediation guide (ELSA-2023-12673)

🟠 High   ⏱ 15–60 min  Last verified: 20 December 2019 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-12673 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]

Read more
Debian 9 — flatpak — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — flatpak — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 December 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9780 CVE-2019-8308 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
FreeBSD 12 — pecl-phar — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pecl-phar — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pecl-phar — format string vulnerability Related CVEs: CVE-2010-2094 Upstream summary: Entry for CVE-2010-2094 says: Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers […]

Read more
FreeBSD 12 — sql-ledger — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sql-ledger — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sql-ledger — security bypass vulnerability Related CVEs: CVE-2006-4244 CVE-2006-4731 CVE-2006-5872 Upstream summary: Chris Travers reports: George Theall of Tenable Security notified the LedgerSMB core team today of an authentication bypass […]

Read more
How to Configure Scale-Out File Server (SoFS) on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Configure Scale-Out File Server (SoFS) on Windows Server 2012 R2

How to Configure Scale-Out File Server (SoFS) on Windows Server 2012 R2 Scale-Out File Server (SoFS) is a Failover Cluster role in Windows Server 2012 R2 that provides continuously available file shares using SMB 3.0. Unlike a traditional File Server Failover Cluster role — where one node actively serves files while others stand by — […]

Read more
FreeBSD 12 — py23-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py23-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]

Read more
How to Install and Configure FreeIPA on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Install and Configure FreeIPA on RHEL 7

How to Install and Configure FreeIPA on RHEL 7 FreeIPA is an integrated identity and authentication solution that combines LDAP (via 389 Directory Server), Kerberos, DNS, a certificate authority (Dogtag PKI), and a web-based management interface into a single coherent platform. It is Red Hat’s upstream open-source project that underpins Red Hat Identity Management (IdM), […]

Read more
FreeBSD 12 — gcpio — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gcpio — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU cpio — multiple vulnerabilities Related CVEs: CVE-2014-9112 CVE-2015-1197 CVE-2016-2037 CVE-2019-14866 Upstream summary: Sergey Poznyakoff reports: This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the –no-absolute-filenames option, […]

Read more
How to Configure Fail2Ban to Protect SSH on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure Fail2Ban to Protect SSH on RHEL 7

How to Configure Fail2Ban to Protect SSH on RHEL 7 Even with SSH key-based authentication enabled, your server’s port 22 (or whatever port SSH is listening on) is constantly targeted by automated bots scanning the internet for open SSH services. These bots attempt thousands of login combinations per hour. While they cannot succeed against key-only […]

Read more
CHAT