December 2021 - Page 71 of 71

Debian 11 — ibus-chewing — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ibus-chewing — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the […]

Read more
Debian 11 — lua-expat — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — lua-expat — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-2188 CVE-2014-2744 Upstream summary: LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU […]

Read more
Ubuntu 18.04 — grub2-unsigned — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — grub2-unsigned — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4992-1 Related CVEs: CVE-2020-14372 CVE-2020-25632 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass2021 Upstream summary: Máté Kukri discovered that the acpi command in GRUB 2 allowed privileged users to load crafted ACPI tables […]

Read more
Oracle Linux 8 — sudo — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — sudo — vulnerability — patch and remediation guide (ELSA-2021-0218)

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-0218 Related CVEs: CVE-2021-3156 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — wpa — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — wpa — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-4445 CVE-2014-3686 CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145  +12 more Upstream summary: Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd […]

Read more
How to Configure Database Connection Pooling with PgBouncer on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure Database Connection Pooling with PgBouncer on RHEL 7

How to Configure Database Connection Pooling with PgBouncer on RHEL 7 Every PostgreSQL client connection spawns a backend process on the server, consuming approximately 5–10 MB of RAM for its working memory and adding overhead to the process scheduler. Applications that open hundreds of short-lived connections — such as PHP scripts, Node.js workers, or microservices […]

Read more
CHAT