Security Hardening

FreeBSD 12 — rinetd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rinetd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible to overwrite memory […]

Read more
FreeBSD 12 — ja-xv — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-xv — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xv — filename handling format string vulnerability Related CVEs: CVE-2005-0665 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw […]

Read more
openSUSE Tumbleweed — shadowsocks-libev — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — shadowsocks-libev — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-15924 CVE-2019-5163 CVE-2019-5164 Upstream summary: In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request […]

Read more
How to Set Up Privileged Access Workstations on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Set Up Privileged Access Workstations on Windows Server 2016

How to Set Up Windows Server 2016 Privileged Access Workstation A Privileged Access Workstation (PAW) is a dedicated, hardened workstation used exclusively for administrative tasks. The PAW concept is a Microsoft best practice for protecting high-value accounts and systems from credential theft and lateral movement. By separating privileged administration from everyday user activity, a PAW […]

Read more
FreeBSD 12 — acroread — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — acroread — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: acroread9 — Multiple Vulnerabilities Related CVEs: CVE-2004-0630 CVE-2004-1152 CVE-2005-1306 CVE-2005-1625 CVE-2005-1912 CVE-2005-2470 CVE-2011-1353 CVE-2011-2431  +12 more Upstream summary: The Adobe Security Team reports: An unspecified vulnerability in the U3D component […]

Read more
Ubuntu 16.04 — gcab — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — gcab — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3546-1 Related CVEs: CVE-2018-5345 Upstream summary: Richard Hughes discovered that gcab incorrectly handled certain malformed cabinet files. If a user or automated system were tricked into opening a specially crafted […]

Read more
Ubuntu 14.04 — mercurial — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — mercurial — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 June 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5102-2 Related CVEs: CVE-2019-3902 CVE-2018-17983 Upstream summary: USN-5102-1 fixed vulnerabilities in Mercurial. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It […]

Read more
How to Use Azure Monitor with Windows Server 2019 — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Use Azure Monitor with Windows Server 2019

Introduction to Azure Monitor for Windows Server 2019 Azure Monitor is Microsoft’s comprehensive monitoring service that collects, analyzes, and acts on telemetry data from Azure resources, on-premises servers, and hybrid environments. For Windows Server 2019 machines — whether on-premises, in Azure, or in other clouds — Azure Monitor can collect performance metrics, Windows Event Logs, […]

Read more
How to Set Up Automatic SSH Login Banners on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Set Up Automatic SSH Login Banners on RHEL 8

Login banners are a critical security control that display legal warnings before and after users authenticate to a system. On RHEL 8, three separate mechanisms control banner messages: /etc/issue for local console pre-login text, /etc/issue.net for SSH pre-login banners, and /etc/motd for the message of the day shown after login. Properly configured banners inform authorized […]

Read more
Ubuntu 14.04 — elfutils — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — elfutils — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 June 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6322-1 Related CVEs: CVE-2018-16062 CVE-2018-16403 CVE-2018-18310 CVE-2018-18520 CVE-2018-18521 CVE-2019-7149 CVE-2019-7150 CVE-2019-7665  +12 more Upstream summary: It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated […]

Read more
CHAT