Linux

Debian 11 — ruby-rack — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-rack — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-5036 CVE-2012-6109 CVE-2013-0183 CVE-2013-0184 CVE-2013-0262 CVE-2013-0263 CVE-2015-3225 CVE-2018-16471  +12 more Upstream summary: Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters […]

Read more
Ubuntu 22.04 — ldns — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — ldns — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 October 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5257-2 Related CVEs: CVE-2020-19860 CVE-2020-19861 Upstream summary: USN-5257-1 fixed several vulnerabilities in ldns. This update provides the corresponding update for Ubuntu 20.04 ESM and Ubuntu 22.04 ESM. Original advisory details: […]

Read more
A Straightforward Guide On Installing Web-Facing Applications on a VPS — step-by-step Linux tutorial on Progressive Robot

A Straightforward Guide On Installing Web-Facing Applications on a VPS

Installing web-facing programs often involves following the same basic set of steps. This involves installing and configuring a web stack (often LAMP), uploading the application’s files to the web root, and configuring the appropriate values. In this guide, we will introduce you to this basic practice by installing a forum software called MyBB.

Read more
Debian 11 — jsoup — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — jsoup — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-6748 CVE-2021-37714 CVE-2022-36033 Upstream summary: Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
How To Set Up a Samba Share For A Small Organization on Ubuntu 16.04 — step-by-step Linux tutorial on Progressive Robot

How To Set Up a Samba Share For A Small Organization on Ubuntu 16.04

Samba is an open-source implementation of the SMB/CIFS networking protocol that is used in Windows environments for shared services such as file and printer access and Active Directory. In this guide, you will install and configure a standalone Samba server to provide networked file stores or shares for a hypothetical small organization called Example.com and learn how to access the shares from Windows, Linux, and macOS.

Read more
How To Run a Meilisearch Frontend Using InstantSearch on Ubuntu 22.04 — step-by-step Linux tutorial on Progressive Robot

How To Run a Meilisearch Frontend Using InstantSearch on Ubuntu 22.04

Meilisearch is an open source, standalone search engine written in the highly performant Rust programming language. Compared with other popular search engines, Meilisearch is focused on keeping deployment straightforward– it provides features like fuzzy matching and schema-less indexing out of the box, and is managed by a single command-line binary. It includes its own web frontend for demo purposes, and can be integrated with the InstantSearch javascript library for more complex web deployment.

Read more
Debian 11 — shadowsocks-libev — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — shadowsocks-libev — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-15924 CVE-2019-5152 CVE-2019-5163 CVE-2019-5164 Upstream summary: In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via […]

Read more
Установка комплекта Linux, Apache, MariaDB, PHP (LAMP) в CentOS 8 [Краткое руководство] — step-by-step Linux tutorial on Progressive Robot

Установка комплекта Linux, Apache, MariaDB, PHP (LAMP) в CentOS 8 [Краткое руководство]

Это руководство рассказывает об установке комплекса LAMP на сервер с CentOS 8. Хотя MySQL доступен в используемых по умолчанию репозиториях в CentOS 8, в этом руководстве мы рассмотрим процесс настройки комплекта LAMP с MariaDB в качестве системы управления…

Read more
CHAT