How to install Modsecurity 2.9.6 on Debian 11 with Apache2? - owasp

If you want you use the new CRS versions you need at least 2.9.6 of libapache2-mod-security2. see:
https://coreruleset.org/installation/
Is this possible on Debian11? I searched for backports but couldn't find any method on getting this version. Default Debian 11 Version 2.9.3

If you want you use the new CRS versions you need at least 2.9.6 of libapache2-mod-security2. see: https://coreruleset.org/installation/
Thanks, we (CRS team) should add some links to this documentation.
Is this possible on Debian11? I searched for backports but couldn't find any method on getting this version. Default Debian 11 Version 2.9.3
We are working on it, that Debian 11 accepts this version too. Actually, the Debian's package source repository already has the patched 2.9.3:
https://salsa.debian.org/modsecurity-packaging-team/modsecurity-apache/-/blob/bullseye/debian/changelog
You can download that and make an own package.
If you want to avoid to make a custom/own package, follow this link, and you can try the Digitalwave's ModSecurity repository. There you can find the 2.9.6 for Debian 10, 11, Ubuntu 18.04, 20,04 and 22.04.
Note: I'm CRS developer, and Debian maintainer. I made the packages for Debian too.

Related

How to install plv8 in postgresql 14 for windows?

I tried installing plv8 from
[1]: https://martendb.io/v3/documentation/admin/installing-plv8-windows
but it did not work.
The challenge is Windows and Version 14. The solution you point to has only the files going up to PG Version 12. It works on 12, I used that on 12.
But I am also trying to find the windows version of this extension for PG 14. So far, people have updated the Linux builds for working with 14.
The correct, full answer is to download the source from github.
Install Version 14 of PG (You need the header files). Install the tools spelled out in the PLV8\Windows directory README. And then compile everything locally. This is what the Linux users do to get the binaries for their specific system.
we are grabbing the source from here: https://github.com/plv8/plv8/tree/master
We are working on this right now. We will push the compiled (under windows 10 x64) Versions up to another GIT and publish the link for others as our way of supporting this. (But it's not trivial, this stuff is made more for the Linux side of things)

Unable to find postgresql-client-10 on Debian Stretch ARM

I am trying to build docker image on Apple M1 chip Mac and one of the steps include installing postgresql-client-10 package. The base image is ruby-2.6.5-stretch and I have added file repository configuration and repo signing key as listed on postgresql documentation page for Debian. In the last step, when I am trying to install a specific version postgresql-client-10, the build errors out because it is not able to find this package.
This was working fine on AMD Debian Stretch build but not finding this client on ARM Debian stretch. If I install postgresql-client (without specifying version), it installs version 9. Is it possible that the client is not available for versions 9 and above? Where can I get the list of available client versions for postgresql based on Debian releases?
There's one more caveat, when I try to install it on Buster release, the installation is successful but since I need to have libproj12 (due to gem dependency), libproj.so.12 file is not found. Since the libproj package list for version 12 shows only stretch release, I think I am confined to using stretch release only and have to make it work for postgresql 10.

Does kubespray support CentOS 8?

I have a quick question related to "Kubespray".
Does "Kubespray" support CentOS 8?
I wanted to deploy "Kubespray" on "CentOS" and I came to know that the CentOS 8 has Kernel version 4.18 and If I can use "CentOS 8" for "Kubernetes" deployment, maybe I can get rid of the "c-group" issue which we are currently facing for all the CentOS distribution which has Kernal Version less than 4.18.
Thanks in Advance.
According to the official documentation Kubesprawy provides support for CentOS/RHEL 7 only. The problem is that:
Installing Kubespray on a RHEL8 systems does not work since the
default Python version is 3.6 and thus python3-libselinux should be
installed instead of libselinux-python. Even that python2 is still
available, the libselinux-python package is not.
I hope it helps.

postgresql-9.3-pljava-gcj for 64 bit architecture

I need to install pljava for postgresql 9.3 on Ubuntu 14.04. I installed the 64bit version of postgre using the apt-get packet manager of Ubuntu, and I tried installing pljava in the same way
sudo apt-get install postgresql-9.3-pljava-gcj
but it gives me the "unmet dependencies error"
The following packages have unmet dependencies:
postgresql-9.3-pljava-gcj:i386 : Depends: postgresql-9.3:i386 but it is not going to be installed
Apparently, there's no version of pljava for 64bit architectures of pljava for postgresql 9.3. Also searching the Web led me to this conclusion (https://launchpad.net/ubuntu/+source/postgresql-pljava/1.4.3-3 - see the "not build" versions of the packet).
Now, my problem is that I have to use a 64bit version of postgresql-9.3, and I definitely need pljava to embed some "java triggering" inside the db. Does anyone know any solution to this issue? Can I use pljava-9.1 with postgresql-9.3? Anything else?
Thanks a lot
There is no maintained PL/JAVA package for Ubuntu anymore. The package you mentioned is using a too old version of PL/JAVA, depending on gcj. It is highly recommended to use PL/JAVA version 1.5.0, using a recent Oracle or OpenJDK java version.
The sad news is you have to build it yourself. For instructions, see
https://tada.github.io/pljava/build/build.html (building)
https://tada.github.io/pljava/install/install.html (installing)
At the time this question was asked, it was true that there were not maintained PL/Java packages for Ubuntu.
Just to update the story, more recently there are. They can be found in the PGDG apt repository.

What is SRU in solaris? How to find the SRU number?

I used pkg list entire command , and i got the output for version column as follows :
0.5.11-0.175.1.0.0.24.2.
How to find the SRU from this?
Can we upgrade/ downgrade to a particular SRU ?
SRU is an abbreviation for Support Repository Update, installing new package versions from the support repo for that OS, much like installing a patch cluster for older Solaris releases.
The various fields in the version is explained in Oracle Solaris Package Versioning.
Oracle only makes SRUs available to customers with support contracts - if you have a support contract you can read more about SRU's in the Oracle Support Knowledgebase at Solaris 11 Support Repositories Explained, and see what fixes are available in each SRU for Solaris 11.1 and Solaris 11.2.
If you run 'pkg info entire' it will show the SRU name in human readable format also (if you have installed from the support repo - otherwise it shows the Release info). The 4th digit in 0.175.1.0.0.24.2 is the SRU number
In the example above it is the base Solaris 11.1 release - no SRU has been installed yet.
If an SRU had been installed on top of that you'd get a version like 0.5.11-0.175.1.21.4.1 (aka Oracle Solaris 11.1 SRU21.4.1)
You can easily upgrade to an SRU but you can't downgrade unless you have an older Boot Environment (BE) from which to upgrade to the SRU you want.