Kubernetes is the industry-standard container orchestration platform for automating deployment, scaling, and management of containerised applications across clusters of servers. While Kubernetes is typically set up using managed services (EKS, GKE, AKS) in cloud environments, installing it with kubeadm on bare-metal or on-premises servers provides full control over the cluster configuration. kubeadm is the official […]
![Установка веб-сервера Apache в CentOS 8. [Краткое руководство.] — step-by-step Linux tutorial on Progressive Robot](https://www.progressiverobot.com/wp-content/uploads/2026/05/how-to-install-the-apache-web-server-on-centos-8-quickstart-ru-82721-featured.png "Установка веб-сервера Apache в CentOS 8. [Краткое руководство.] 2")
HTTP-сервер Apache — самый широко используемый веб-сервер в мире. Он имеет множество мощных функций, включая динамически загружаемые модули, надежную поддержку различных медиаформатов и интеграцию с другим популярным программным обеспечением. С…
In this article we will be looking at enhancing system security by increasing the level of monitoring performed. We are going to set up Linux Socket Monitor (LSM) which sends out alerts when a new socket / port is created, which is a potential signal of an intrusion by an unknown application taking over its host.
🟢 Low ⏱ 5–15 min Last verified: 11 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15954 Upstream summary: KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use. Table of contents Symptom […]
MQTT is a machine-to-machine messaging protocol, designed to provide lightweight publish/subscribe communication to “Internet of Things” devices. Mosquitto is a popular MQTT server (or broker, in MQTT parlance) that has great community support and is easy to install and configure. In this tutorial, we’ll install Mosquitto, retrieve SSL certificates from Let’s Encrypt, and set up our broker to use SSL to secure our password-protected MQTT communications.
🟠 High ⏱ 15–60 min Last verified: 11 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2330 CVE-2013-4450 CVE-2014-5256 CVE-2014-9748 CVE-2015-6764 CVE-2015-7384 CVE-2015-8027 CVE-2016-1669 +12 more Upstream summary: The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does not properly […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.9.8-r3 📖 ~4 min read • Source: Alpine secdb entry — libxml2 2.9.8-r3 Related CVEs: CVE-2020-7595 CVE-2018-9251 CVE-2018-14404 CVE-2018-14567 CVE-2017-5969 CVE-2016-9318 CVE-2016-5131 CVE-2022-29824 +12 more Upstream summary: Alpine main repository for vedge ships libxml2 2.9.8-r3 which […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13936 Upstream summary: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the […]
Merging code. Coordinating releases. Determining build status. Maintaining updates. If you know the frustration of these processes well enough that the words themselves threaten a headache, you might want to look into Jenkins CI. At its core, Jenkins does two things: automated integration and external build monitoring. This means that it can greatly simplify the process of keeping your code maintainable and keep a close and untiring eye on the quality of your builds.
🟢 Low ⏱ 5–15 min Last verified: 10 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3607 Upstream summary: DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of […]
