Slackerbox

Upgrade dua paket openssl yang berkaitan dengan masalah security :

openssl-0.9.8n-x86_64-1_slack13.0.txz
openssl-solibs-0.9.8n-x86_64-1_slack13.0.txz

Upgrade httpd Apache ke versi 2.2.15 :) juga patch openssl dan openssl-solibs. Btw, jika scan server tertulis versi httpd 2.2.13 yang digunakan. Yach ! Itu kerja dari modsecurity yang berurusan dengan header versi httpd Apache.


patches/packages/httpd-2.2.15-x86_64-1_slack13.0.txz: Upgraded.
This update addresses a few security issues.
mod_ssl: A partial fix for the TLS renegotiation prefix injection attack
by rejecting any client-initiated renegotiations.
mod_proxy_ajp: Respond with HTTP_BAD_REQUEST when the body is not sent

Situs ini telah diupgrade ke drupal 6.16. Info lengkap masalah security versi drupal sebelumnya dapat dibaca di sini :
http://drupal.org/node/731710

Sekedar copy paste :)

Description

Multiple vulnerabilities and weaknesses were discovered in Drupal.
Installation cross site scripting

A user-supplied value is directly output during installation allowing a malicious user to craft a URL and perform a cross-site scripting attack. The exploit can only be conducted on sites not yet installed.

This issue affects Drupal 6.x only.
Open redirection

Barusan upgrade openssh & openssl 0.98m versi 64 bit slackware 13.0. Openssh adalah server ssh yang aktif di server ini supaya bisa dilakukan remote dari mana saja lewat terminal. Sedang openssl adalah versi terbuka dari secure socket layer. DImana koneksi ke dan dari server di enkripsi.

Barusan upgrade Httpd 2.2.14 & PHP 5.2.12 :) Pakai apa upgradenya ? Pakai program Slackpkg (official).

Patch kernel (baru dilakukan saat ini). Perlu boot agar kernel baru bisa aktif. Uptime Server 101 hari... reset ke 0 :)

Upgrade ke drupal 6.15. Theme kembali ke asal..... database sebelumnya 'jebol' tidak tau sebabnya. Kemungkinan karena theme 'black' yang tidak sempurna alias out of date.Tapi juga bisa karena hal lain. Kembali ke bentuk original... asli.... :) Maaf untuk data post story yang tidak bisa di recovery.

This site was upgraded to drupal 6.13 yesterday (from 5.19).The process was run smoothly (i guess coz not many modules are used). The mainly change is the server it self. http://slackerbox.com now run in a new server and OS (slackware64).

In the next several days, many configuration files need to be optimized. I hope everything run better :)

Long time no see :))
Almost one month this site couldn't be acces. The problem was domain. I forgot to Renew the domain :) so i have made decision to renewed slackerbox.com till 2014... if u want see about domain..from the console... $whois slackerbox.com

Upggrade HTTP Apache 2.2.11, PHP 5.2.10, Drupal 5.19 Yeah.. im using console n ssh (secure shell connection) to remote the server. As always #slackpkg help n save much time hehehe

Spesial thanks to denic from http://makassar-slackers.org who noticed me about this problem.

Situs ini barusan Upgrade ke drupal 5.15. Ada nuansa agak beda karena situs ini sekarang berbasis Slackware 12.0 (sebelumnya Slackware 11). Jika sebelumnya drupal dijalankan di apache versi 1.3.X maka sekarang sudah dibasis 2.2.x.

Salam.