Linux

Debian 11 — radicale — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — radicale — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8747 CVE-2015-8748 CVE-2017-8342 Upstream summary: The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name. […]

Read more
How to Configure ModSecurity WAF with Apache2 on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure ModSecurity WAF with Apache2 on Debian 11

Introduction How to Configure ModSecurity WAF with Apache2 on Debian 11 is a fundamental operation for any administrator maintaining a Debian 11 Bullseye server. Debian 11 Bullseye ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian […]

Read more
Debian 11 — tinygltf — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — tinygltf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-3008 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 9 — fribidi — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — fribidi — vulnerability — patch and remediation guide (ELSA-2022-8011)

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2022 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-8011 Related CVEs: CVE-2022-25309 CVE-2022-25310 CVE-2022-25308 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Установка MySQL в CentOS 8 — step-by-step Linux tutorial on Progressive Robot

Установка MySQL в CentOS 8

MySQL — это система управления базами данных с открытым исходным кодом, которая, как правило, устанавливается в составе популярного стека LEMP…

Read more
SLES 12 — kernel-default-extra — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — kernel-default-extra — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 September 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2960-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45919 CVE-2022-41218 Upstream summary: An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect […]

Read more
How to Install and Use Composer on Debian 11 — step-by-step Linux tutorial on Progressive Robot

How to Install and Use Composer on Debian 11

Composer is a popular dependency management tool for PHP, created mainly to facilitate installation and updates for project dependencies. In this guide, we’ll see how to install and use Composer on a Debian 11 server.

Read more
How To Host a Website Using Cloudflare and Nginx on Ubuntu 18.04 — step-by-step Linux tutorial on Progressive Robot

How To Host a Website Using Cloudflare and Nginx on Ubuntu 18.04

In this tutorial you will secure your website served by Nginx with an Origin CA certificate from Cloudflare and configure Nginx to use authenticated pull requests. The advantages of using this setup are that you benefit from Cloudflare’s CDN and fast DNS resolution while ensuring that all connections pass through Cloudflare. This prevents any malicious requests from reaching your server.

Read more
CHAT