Security Hardening

How to Configure Static IP on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure Static IP on Debian 10

Introduction Deploying configure static ip on debian 10 on a Debian 10 Buster machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will need […]

Read more
FreeBSD 12 — p5-libwww — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-libwww — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-libwww — possibility to remote servers to create file with a .(dot) character Related CVEs: CVE-2010-2253 Upstream summary: lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that […]

Read more
Ubuntu 18.04 — apt — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — apt — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 March 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4667-1 Related CVEs: CVE-2020-27350 CVE-2020-3810 CVE-2019-3462 CVE-2018-0501 Upstream summary: Kevin Backhouse discovered that APT incorrectly handled certain packages. A local attacker could possibly use this issue to cause APT to […]

Read more
Alpine Linux edge — irssi — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — irssi — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.2.2-r0 📖 ~4 min read  •  Source: Alpine secdb entry — irssi 1.2.2-r0 Related CVEs: CVE-2019-15717 CVE-2019-13045 CVE-2019-5882 CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 CVE-2018-7053 CVE-2018-7054  +12 more Upstream summary: Alpine community repository for vedge ships irssi 1.2.2-r0 which […]

Read more
Debian 9 — icu — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — icu — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 March 2020 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-15422 CVE-2020-10531 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
How to Set Up IIS URL Rewrite on Windows Server 2019 — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Set Up IIS URL Rewrite on Windows Server 2019

Introduction to IIS URL Rewrite on Windows Server 2019 The IIS URL Rewrite module is a powerful extension for IIS 10 on Windows Server 2019 that allows server-side manipulation of incoming request URLs before they are processed. URL Rewrite is used for canonicalising URLs (removing or adding trailing slashes, enforcing lowercase), redirecting HTTP to HTTPS, […]

Read more
Debian 9 — openssl1.0 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — openssl1.0 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 March 2020 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0739 CVE-2019-1547 CVE-2019-1551 CVE-2019-1559 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

Read more
How to Harden the Linux Kernel with sysctl on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Harden the Linux Kernel with sysctl on RHEL 8

The Linux kernel exposes hundreds of tunable parameters through the /proc/sys virtual filesystem, and sysctl is the tool used to read and write these values persistently. Many default kernel settings prioritize compatibility and functionality over security, leaving attack surface that can be closed with targeted configuration. On RHEL 8, persistent sysctl settings are stored in […]

Read more
How to Install and Configure DB2 on IBM AIX 7.1 — step-by-step IBM AIX 7.1 tutorial on Progressive Robot

How to Install and Configure DB2 on IBM AIX 7.1

Introduction IBM AIX 7.1 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.1 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to install and configure db2 on ibm aix 7.1 on […]

Read more
CHAT