chris

How To Install and Use CFEngine Community Edition on Ubuntu 20.04 — step-by-step Linux tutorial on Progressive Robot

How To Install and Use CFEngine Community Edition on Ubuntu 20.04

CFEngine is a scalable configuration management tool for your IT infrastructure. CFEngine allows you to use the same tool and policy language to manage everything in your infrastructure: Linux, Mac, Windows, BSD, Solaris, IBM AIX, HP-UX, and others. In this tutorial, you will install CFEngine Community Edition 3.21 on Ubuntu 20.04, write sample policy files, and automate your policy runs.

Read more
FreeBSD 12 — apache+mod_ssl+mod_deflate+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache+mod_ssl+mod_deflate+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 May 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

Read more
How To Add ngx_pagespeed Module to Nginx in Debian Wheezy — step-by-step Linux tutorial on Progressive Robot

How To Add ngx_pagespeed Module to Nginx in Debian Wheezy

In this tutorial, you are going to add ngx_pagespeed module to nginx by building it from Debian wheezy backport source, because Debian backports repository has a more recent nginx version than the stable repository, which is at the time of writing this tutorial version 1.4.4.

Read more
Ubuntu 16.04 — ampache — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ampache — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4693-1 Related CVEs: CVE-2019-12385 CVE-2019-12386 Upstream summary: It was discovered that an SQL injection vulnerability exists in the Ampache search engine. Any user able to perform searches could dump any […]

Read more
How to Configure Snort Network Intrusion Detection on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure Snort Network Intrusion Detection on Debian 10

Introduction How to Configure Snort Network Intrusion Detection on Debian 10 is a fundamental operation for any administrator maintaining a Debian 10 Buster server. Debian 10 Buster ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian […]

Read more
Common Problems 121135

Debian 10 NTP Sync Not Active and Clock Drift Increases

🟡 Medium   ⏱ 5–30 min  Last verified: 1 May 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
How to Configure pf Packet Filtering on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure pf Packet Filtering on FreeBSD 12

Introduction FreeBSD 12 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure pf packet filtering on freebsd 12 on FreeBSD 12 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux […]

Read more
CHAT