Security Hardening

Oracle Linux 8 — nodejs:18 security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — nodejs:18 security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2023-4536)

🟡 Medium   ⏱ 10–30 min  Last verified: 1 December 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-4536 Related CVEs: CVE-2023-30581 CVE-2023-30588 CVE-2023-30590 CVE-2023-30589 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
How to Install Nginx via AIX Toolbox on IBM AIX 7.2 — step-by-step IBM AIX 7.2 tutorial on Progressive Robot

How to Install Nginx via AIX Toolbox on IBM AIX 7.2

Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to install nginx via aix toolbox on ibm aix 7.2 […]

Read more
Ubuntu 20.04 — musl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — musl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 December 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5990-1 Related CVEs: CVE-2019-14697 CVE-2020-28928 Upstream summary: It was discovered that musl did not handle certain i386 math functions properly. An attacker could use this vulnerability to cause a denial […]

Read more
How to Set Up Port Knocking on Oracle Linux 8 — step-by-step Oracle Linux 8 tutorial on Progressive Robot

How to Set Up Port Knocking on Oracle Linux 8

Introduction How to Set Up Port Knocking on Oracle Linux 8 on Oracle Linux 8 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration […]

Read more
SLES 15 — p11-kit — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — p11-kit — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 December 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:599-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-29361 CVE-2020-29363 CVE-2020-29362 Upstream summary: An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in […]

Read more
How to Configure a DSC Pull Server on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Configure a DSC Pull Server on Windows Server 2016

Introduction PowerShell Desired State Configuration (DSC) Pull Server on Windows Server 2016 provides a centralised configuration management service. Target nodes automatically pull their configuration MOF files and report compliance status back, enabling drift detection and automatic remediation at scale. Installing Pull Server Prerequisites Install required features and modules: Install-WindowsFeature DSC-Service, Web-Server -IncludeManagementTools Install-Module xPSDesiredStateConfiguration -Force […]

Read more
Oracle Linux 8 — python3 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python3 — vulnerability — patch and remediation guide (ELSA-2019-0997)

🟠 High   ⏱ 15–60 min  Last verified: 1 December 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-0997 Related CVEs: CVE-2019-9636 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 8 — tigervnc — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — tigervnc — security and stability fixes — required update (ELSA-2023-2830)

🟡 Medium   ⏱ 10–30 min  Last verified: 30 November 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-2830 Related CVEs: CVE-2022-46340 CVE-2022-46343 CVE-2022-4283 CVE-2022-46341 CVE-2022-46344 CVE-2022-46342 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Common Problems 117917

Ubuntu 18.04 Network Interface Missing After Kernel Upgrade

🟡 Medium   ⏱ 5–30 min  Last verified: 30 November 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 113609

Windows Server 2012 R2 – Password policy change blocked by domain functional level – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 30 November 2020 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
CHAT