Cómo proteger Apache con Let’s Encrypt en Ubuntu 18.04
Let’s Encrypt es una entidad de certificación (CA) que proporciona una manera sencilla de obtener e instalar certificados de TLS/SSL gratuitos, lo que…
How to Profile Application Performance with perf on RHEL 8
The perf tool is a powerful Linux profiling framework built directly into the kernel, capable of sampling CPU performance counters, tracing system calls, and generating flame graphs that reveal exactly where an application spends its time. On RHEL 8, perf is packaged in the standard repositories and integrates with the kernel’s built-in performance monitoring units […]
RHEL 9 Performance Drop Due to THP and Swappiness Misconfiguration
🟡 Medium ⏱ 5–30 min Last verified: 8 February 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
Alpine Linux edge — fribidi — multiple vulnerabilities (4 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.0.7-r1 📖 ~4 min read • Source: Alpine secdb entry — fribidi 1.0.7-r1 Related CVEs: CVE-2019-18397 CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 Upstream summary: Alpine main repository for vedge ships fribidi 1.0.7-r1 which addresses CVE-2019-18397. Table of contents Symptom […]
Debian 11 — gnome-gmail — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 8 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-24904 Upstream summary: An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link. Table of […]
Debian 11 — profanity — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 8 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5592 Upstream summary: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's […]
Debian 11 — rsyslog — multiple vulnerabilities (16 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 8 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5617 CVE-2008-5618 CVE-2011-1488 CVE-2011-1489 CVE-2011-1490 CVE-2011-3200 CVE-2011-4623 CVE-2014-3634 +8 more Upstream summary: The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, […]
Debian 11 — ceph — multiple vulnerabilities (20 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 8 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5245 CVE-2016-5009 CVE-2016-7031 CVE-2016-8626 CVE-2016-9579 CVE-2017-7519 CVE-2018-10861 CVE-2018-1128 +12 more Upstream summary: CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 […]
Debian 11 — ruby-tzinfo — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 8 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-31163 Upstream summary: TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to […]
Ubuntu 16.04 — tcpreplay — multiple vulnerabilities (20 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 8 February 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7231-1 Related CVEs: CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786 CVE-2023-27787 CVE-2023-27788 CVE-2023-27789 CVE-2023-4256 +12 more Upstream summary: It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. A remote […]