Basket
Your basket is empty.
Debian GNU/Linux Consultancy
Debian is a free operating system (OS) for your server. An operating system is the set of basic programs and utilities that make your computer run. Debian uses the Linux kernel (the core of an operating system), but most of the basic OS tools come from the GNU project; hence the name GNU/Linux.
We know "The Debian Way". We are literally paving the Debian way so who else could manage your Debian based servers better?
Linux system based solutions
Install, set up and maintain a system based on Debian/GNU Linux.
- Samba PDC (Primary Domain Controller)
- Web server Apache
- PHP
- Rewrite engine
- Reverse proxy
- Web server Caudium
- JSP and servlet container Jakarta Tomcat
- Application server WebSphere, JBoss
- SMTP server
- Qmail
- Postfix
- Exim
- Currier
- POP3, IMAP server
- SQL server
- MySql
- Postgresql
- Firebird
- LDAP slapd
- Streaming server
- Firewall/router (iptables)
- FTP server (Proftpd)
- DNS server (BIND 8/9, djbdns)
- DHCP server
- CVS repository
- SSH OpenSSH + secure tunnels
- Jabber (XMPP)
- Asterisk VoIP
Network Security
- Firewall (iptables)
- IDS SNORT, LIDS
- Nessus Security Scanner
- Network usage monitor NTOP, tcpdump
- VPN solution
- Spam filter and server based email antivirus
Ninja Tux
Managed Web Hosting
At Laposa we can set up and maintain a fully managed secure webserver configured to your needs. Whether you're a small web design house wanting your own hosting or a company after global redundant hosting, we can configure, setup and manage a bespoke solution for your needs.
Office File Server
We have experience with build and long term support large office file servers including Domain Controllers. Central storage space for your company with Windows ACL. Our file server setup includes Time-Machine like backup solution.
Latest Debian Security Advisory
DSA-5843-2 rsync - regression update
The update for rsync announced in DSA 5843-1 introduced a regression
when using the -H option to preserve hard links. Updated packages are
now available to correct this issue.
<p>
<a href="https://security-tracker.debian.org/tracker/DSA-5843-2">https://security-tracker.debian.org/tracker/DSA-5843-2</a>
DSA-5844-1 chromium - security update
Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.
<p>
<a href="https://security-tracker.debian.org/tracker/DSA-5844-1">https://security-tracker.debian.org/tracker/DSA-5844-1</a>
DSA-5843-1 rsync - security update
Several vulnerabilities were discovered in rsync, a fast, versatile,
remote (and local) file-copying tool.
<p>
CVE-2024-12084
<p>
Simon Scannell, Pedro Gallegos and Jasiel Spelman discovered a
heap-based buffer overflow vulnerability due to improper handling of
attacker-controlled checksum lengths. A remote attacker can take
advantage of this flaw for code execution.
<p>
CVE-2024-12085
<p>
Simon Scannell, Pedro Gallegos and Jasiel Spelman reported a flaw in
the way rsync compares file checksums, allowing a remote attacker to
trigger an information leak.
<p>
CVE-2024-12086
<p>
Simon Scannell, Pedro Gallegos and Jasiel Spelman discovered a flaw
which would result in a server leaking contents of an arbitrary file
from the client's machine.
<p>
CVE-2024-12087
<p>
Simon Scannell, Pedro Gallegos and Jasiel Spelman reported a path
traversal vulnerability in the rsync daemon affecting the
--inc-recursive option, which could allow a server to write files
outside of the client's intended destination directory.
<p>
CVE-2024-12088
<p>
Simon Scannell, Pedro Gallegos and Jasiel Spelman reported that when
using the --safe-links option, rsync fails to properly verify if a
symbolic link destination contains another symbolic link with it,
resulting in path traversal and arbitrary file write outside of the
desired directory.
<p>
CVE-2024-12747
<p>
Aleksei Gorban "loqpa" discovered a race condition when handling
symbolic links resulting in an information leak which may enable
escalation of privileges.
<p>
<a href="https://security-tracker.debian.org/tracker/DSA-5843-1">https://security-tracker.debian.org/tracker/DSA-5843-1</a>
DSA-5842-1 openafs - security update
Several vulnerabilities were discovered in OpenAFS, an implementation of
the AFS distributed filesystem, which may result in theft of credentials
in Unix client PAGs (CVE-2024-10394), fileserver crashes and information
leak on StoreACL/FetchACL (CVE-2024-10396) or buffer overflows in XDR
responses resulting in denial of service and potentially code execution
(CVE-2024-10397).
<p>
<a href="https://security-tracker.debian.org/tracker/DSA-5842-1">https://security-tracker.debian.org/tracker/DSA-5842-1</a>
DSA-5841-1 thunderbird - security update
Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.
<p>
<a href="https://security-tracker.debian.org/tracker/DSA-5841-1">https://security-tracker.debian.org/tracker/DSA-5841-1</a>