Thread: NGINX and the Heartbleed vulnerability

NGINX and the Heartbleed vulnerability (nginx.com)

L 3 pts 0 comments by englishm Apr 8, 2014 devopsreleasesecurityweb Web Development Data / Databases / Infrastructure Security / Privacy thread

How to check which OpenSSL library Nginx is linked against

nginx security advisory (CVE-2013-2028) affecting 1.3.9 - 1.4.0 (mailman.nginx.org)

L 1 pts 1 comments by jcs May 7, 2013 devopssecurityunix Systems / Low-Level / OS Data / Databases / Infrastructure Security / Privacy thread

Unauthenticated Remote Code Execution Vulnerability in Puppet - CVE-2013-3567 (puppetlabs.com)

L 3 pts 0 comments by jcs Jun 18, 2013 devopsreleasesecurity Programming (General)Data / Databases / Infrastructure Security / Privacy thread

ngxtop - Real-time metrics for nginx server (github.com)

L 9 pts 0 comments by jcs Mar 24, 2014 devopsrelease Data / Databases / Infrastructure thread

Though it appears to just parse the server's access_log, so I don't see why it wouldn't also work with other HTTP servers.

Heartbleed Bug (OpenSSL CVE-2014-0160) (heartbleed.com)

L 54 pts 15 comments by jturner Apr 7, 2014 releasesecurity Security / Privacy thread

Preventing Damage From Potential Security Bugs Like Heartbleed (samlanning.com)

L 1 pts 0 comments by samlanning Apr 8, 2014 releasesecurity Security / Privacy thread

Why SecDevOps Will Save the Cloud (blog.threatstack.com)

L 5 pts 7 comments by byoung Jul 9, 2014 devopssecurity Data / Databases / Infrastructure Security / Privacy thread

How DevOps and Models Enhance Behavioral Detection (blog.threatstack.com)

L 3 pts 0 comments by byoung Jul 30, 2014 devopssecurity Data / Databases / Infrastructure Security / Privacy thread

Graylog2 v0.90 has been released (graylog2.org)

L 1 pts 0 comments by bernd Sep 23, 2014 devopsrelease Data / Databases / Infrastructure thread

Send Apache Logs to Papertrail With Rsyslog (longren.io)

L 1 pts 0 comments by tlongren Oct 19, 2014 devopsreleasesecurityweb Web Development Data / Databases / Infrastructure Security / Privacy thread

OpenSSH keyboard-interactive authentication brute force vulnerability (MaxAuthTries bypass) (kingcope.wordpress.com)

L 12 pts 0 comments by mulander Jul 18, 2015 releasesecurity Security / Privacy thread

Lemur - an x.509 certificate orchestration framework (techblog.netflix.com)

L 6 pts 0 comments by nick Sep 22, 2015 devopsreleasesecurity Programming (General)Data / Databases / Infrastructure Security / Privacy thread

Clever Cloud releases an API and a CLI tool for its PaaS (clever-cloud.com)

L 3 pts 0 comments by cnivolle Sep 23, 2015 apidevopsrelease Programming (General)Data / Databases / Infrastructure thread

Announcing Confidant: an open source secret management service (eng.lyft.com)

L 2 pts 0 comments by pushcx Nov 9, 2015 devopsreleasesecurity Programming (General)Data / Databases / Infrastructure Security / Privacy Productivity / Career / Business thread

Grafana 3.0 Stable Released (grafana.org)

L 6 pts 1 comments by napkindrawing May 11, 2016 devopsrelease Data / Databases / Infrastructure thread

Summary of new features: * Big UI improvements and polish * Redesigned plugin architecture and SDK * Grafana-cli command line tool shipped with grafana, installs plugins * Persisted dashboard playlists * Preferences like home dashboard, timezone and theme on org and u...

Introducing The DWF project: Vulnerability reporting done the open source way (redhat.com)

L 2 pts 0 comments by inactive-user Jun 1, 2016 releasesecurity Programming (General)Security / Privacy thread

Kontena 0.16.0 Release (blog.kontena.io)

L 0 pts 0 comments by jussi Oct 25, 2016 devopsrelease Data / Databases / Infrastructure thread

Ansible: New RCs for Security Bug CVE-2016-9587 (groups.google.com)

L 1 pts 0 comments by ChrisShort Jan 10, 2017 devopsreleasesecurity Data / Databases / Infrastructure Security / Privacy thread

CVE-2017-8301: TLS verification vulnerability in LibreSSL 2.5.1 - 2.5.3 (seclists.org)

L 13 pts 4 comments by mjturner May 4, 2017 releasesecurity Security / Privacy thread

Nginx v1.13.1 Released (nginx.org)

L 16 pts 2 comments by nikolay May 30, 2017 release Data / Databases / Infrastructure thread

* Feature: now a hostname can be used as the "set_real_ip_from" directive parameter. * Feature: vim syntax highlighting scripts improvements. * Feature: the "worker_cpu_affinity" directive now works on DragonFly BSD. Thanks to Sepherosa Ziehau. * Bugfix: SSL renegotiation on backend connections d...

Molecule v2 Released (github.com)

L 2 pts 0 comments by ChrisShort Jun 12, 2017 devopsrelease Data / Databases / Infrastructure Science / Math / Physics thread

nginx 1.13.3 & 1.12.1 released - security advisory (CVE-2017-7529) (mailman.nginx.org)

L 10 pts 0 comments by inactive-user Jul 11, 2017 releasesecurityweb Web Development Data / Databases / Infrastructure Security / Privacy thread

OpenSSH 7.6 released October 3, 2017 (delete SSH protocol version 1) (openssh.com)

L 17 pts 0 comments by cnst Oct 5, 2017 devopsreleasesecurityunix Systems / Low-Level / OS Data / Databases / Infrastructure Security / Privacy thread

nuster- v1.7.9.4 is released (A web caching proxy server) (github.com)

L 2 pts 0 comments by NusterCacheServer Feb 5, 2018 devopslinuxperformancereleaseshowweb Web Development Systems / Low-Level / OS Programming (General)Data / Databases / Infrastructure thread

nuster 1.7.9.5 released – A web caching proxy server based on HAProxy (github.com)

L 4 pts 2 comments by NusterCacheServer Feb 20, 2018 devopsfreebsdlinuxreleaseshowweb Web Development Systems / Low-Level / OS Programming (General)Data / Databases / Infrastructure thread

[nuster](https://github.com/jiangwenyuan/nuster), A web caching proxy server based on HAProxy released v1.7.9.5 Add a cache manager API supports enable and disable cache all at run time. Cache can be enabled/disabled by a single cache-rule name (tag), proxy-id(all cache-rules belong to this proxy...

nuster 1.7.9.6 released – A web caching proxy server based on HAProxy (github.com)

L 1 pts 0 comments by NusterCacheServer Mar 2, 2018 devopslinuxreleaseshowweb Web Development Systems / Low-Level / OS Programming (General)Data / Databases / Infrastructure thread

[nuster](https://github.com/jiangwenyuan/nuster), A web caching proxy server based on HAProxy released v1.7.9.6 Add a cache manager API supports updating cache TTL at run time, also an unified API to change state and ttl at the same time. ### Added - Update ttl at run time - Single API to ...

nuster- v1.7.9.7 is released (A web caching proxy server) (github.com)

L 1 pts 0 comments by NusterCacheServer Mar 12, 2018 devopslinuxreleaseshowweb Web Development Systems / Low-Level / OS Programming (General)Data / Databases / Infrastructure thread

[nuster](https://github.com/jiangwenyuan/nuster), A web caching proxy server based on HAProxy released v1.7.9.7 ### Added - Purge all cache (`curl -X PURGE -H "name: *"`) - Purge the cache belong to a proxy (`curl -X PURGE -H "name: proxy-name"`) - Purge the cache belong to a cache-rule (`cu...

nuster- v1.7.9.8 is released (A web caching proxy server) (github.com)

L 5 pts 0 comments by NusterCacheServer Mar 21, 2018 devopslinuxreleaseshowweb Web Development Systems / Low-Level / OS Programming (General)Data / Databases / Infrastructure thread

[nuster](https://github.com/jiangwenyuan/nuster), A web caching proxy server based on HAProxy released v1.7.9.8 Added more cache purging methods, by host, by path, by regex and their combinations. ### Added - Purge cache by host - Purge cache by path - Purge cache by regex ### Changed -...

GitLab 10.6 released with CI/CD for GitHub and deeper Kubernetes integration (about.gitlab.com)

L 1 pts 0 comments by jamesog Mar 22, 2018 devopsreleasetestingvcs Programming (General)Data / Databases / Infrastructure thread

OpenSSH 7.7 released April 3, 2018 (openssh.com)

L 15 pts 0 comments by cnst Apr 4, 2018 devopsreleasesecurityunix Systems / Low-Level / OS Data / Databases / Infrastructure Security / Privacy thread