How to Configure Kerberos Authentication on RHEL 7 Kerberos is a network authentication protocol that uses symmetric-key cryptography to allow clients and servers to prove their identity to each other securely without transmitting passwords over the network. It is the backbone of authentication in Active Directory environments and is natively supported across Linux through MIT […]
🟢 Low ⏱ 5–15 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the […]
🟢 Low ⏱ 5–15 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2188 CVE-2014-2744 Upstream summary: LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU […]
🟡 Medium ⏱ 10–30 min Last verified: 1 December 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4992-1 Related CVEs: CVE-2020-14372 CVE-2020-25632 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass2021 Upstream summary: Máté Kukri discovered that the acpi command in GRUB 2 allowed privileged users to load crafted ACPI tables […]
🟠 High ⏱ 15–60 min Last verified: 1 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-0218 Related CVEs: CVE-2021-3156 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4445 CVE-2014-3686 CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 +12 more Upstream summary: Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd […]
How to Configure Database Connection Pooling with PgBouncer on RHEL 7 Every PostgreSQL client connection spawns a backend process on the server, consuming approximately 5–10 MB of RAM for its working memory and adding overhead to the process scheduler. Applications that open hundreds of short-lived connections — such as PHP scripts, Node.js workers, or microservices […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2REDIS6-2023-004 Related CVEs: CVE-2021-32765 Upstream summary: Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted […]
🟠 High ⏱ 5–30 min Last verified: 30 November 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: Oracle Bug 30301271 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-Elixir — weak use of cryptography Related CVEs: CVE-2012-2146 Upstream summary: Red Hat Security Response Team reports: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector […]
