Security Hardening

Ubuntu 16.04 — libmspack — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libmspack — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 September 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4066-1 Related CVEs: CVE-2019-1010305 CVE-2018-18584 CVE-2018-18585 CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682 CVE-2017-11423  +1 more Upstream summary: It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly […]

Read more
Common Problems 113064

Windows Server 2016 — AD Recycle Bin recovery needed to restore accidentally deleted user object — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 18 September 2019 Affected versions: Windows Server 2016 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Common Problems 113008

Windows Server 2016 – iSCSI initiator driver sessions fail to reconnect – Fix and Prevention

🟠 High   ⏱ 5–30 min  Last verified: 18 September 2019 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
SLES 15 — yast2-security — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — yast2-security — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 September 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-3700 Upstream summary: yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were […]

Read more
SLES 15 — perl-HTML-Parser — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-HTML-Parser — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 September 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2009:020 (see also SUSE bugzilla) Related CVEs: CVE-2009-3627 Upstream summary: The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an […]

Read more
How to Configure SNMP with net-snmp on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure SNMP with net-snmp on RHEL 7

How to Configure SNMP with net-snmp on RHEL 7 Simple Network Management Protocol (SNMP) is the industry standard for monitoring network devices, servers, and applications. Whether you use Nagios, Zabbix, Cacti, LibreNMS, or a commercial NMS, SNMP is the universal query language they all speak. RHEL 7 ships the mature net-snmp suite, which includes the […]

Read more
Arch Linux — bitcoin-qt — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — bitcoin-qt — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201809-1 Related CVEs: CVE-2018-17144 Upstream summary: Type: denial of service. Status: Fixed. Affected: 0.16.2-2. Fixed in: 0.16.3-1. Group: AVG-766. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — rubygem-sanitize — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rubygem-sanitize — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Sanitize — XSS vulnerability Related CVEs: CVE-2018-3740 Upstream summary: Sanitize release: Fixed an HTML injection vulnerability that could allow XSS. When Sanitize <= 4.6.2 is used in combination with libxml2 […]

Read more
How to Perform a Security Audit on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Perform a Security Audit on FreeBSD 12

Introduction Deploying perform a security audit on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard […]

Read more
FreeBSD 12 — py37-buildbot — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-buildbot — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]

Read more
CHAT