Language Selection

English French German Italian Portuguese Spanish

Security: DHCP, System Updates, and Ubuntu Blobs Store

Filed under
Security
  • Protect your Fedora system against this DHCP flaw

    A critical security vulnerability was discovered and disclosed earlier today in dhcp-client. This DHCP flaw carries a high risk to your system and data, especially if you use untrusted networks such as a WiFi access point you don’t own. Read more here for how to protect your Fedora system.

    Dynamic Host Control Protocol (DHCP) allows your system to get configuration from a network it joins. Your system will make a request for DHCP data, and typically a server such as a router answers. The server provides the necessary data for your system to configure itself. This is how, for instance, your system configures itself properly for networking when it joins a wireless network.

    However, an attacker on the local network may be able to exploit this vulnerability. Using a flaw in a dhcp-client script that runs under NetworkManager, the attacker may be able to run arbitrary commands with root privileges on your system. This DHCP flaw puts your system and your data at high risk. The flaw has been assigned CVE-2018-1111 and has a Bugzilla tracking bug.

  • Security updates for Tuesday
  • Potentially Malicious Bytecoin Miner Removed from the Ubuntu Snap Store
  • Canonical on trust and security in the Snap Store

    Here's a posting from Canonical concerning the cryptocurrency-mining app that was discovered in its Snap Store.

  • Canonical finds hidden crypto-miners in the Linux Snap app store

    Last Friday, Canonical, the developer of the popular Ubuntu operating system and owner of the Snapcraft app store, spotted one application surreptitiously mining cryptocurrencies in the background.

More in Tux Machines

today's howtos

GNU nano 2.9.7 was released

Accumulated changes over the last five releases include: the ability to bind a key to a string (text and/or escape sequences), a default color of bright white on red for error messages, an improvement to the way the Scroll-Up and Scroll-Down commands work, and the new --afterends option to make Ctrl+Right (next word) stop at the end of a word instead of at the beginning. Check it out. Read more

Red Hat and Fedora News

Games: Cities: Skylines - Parklife, Descenders, WolfenDoom: Blade of Agony, Stoneshard

  • Cities: Skylines - Parklife launches this Thursday, get the main game super cheap on Humble Store
    With the release of Cities: Skylines - Parklife on Thursday, it's going to expand the already great city builder with some fun new features. For those who don't have Cities: Skylines yet, it has a massive sale on Humble Store with 75% off.
  • Extreme downhill free-riding game 'Descenders' just had a huge update, needs a quick fix on Linux
    Descenders is an extreme downhill free-riding game currently in Early Access and their first major update just went live. I've been quite a big fan of it, as it showed a massive amount of promise at the initial release. I held off on covering this update right away, since the released version of the update broke the 64bit Linux version. Nearly a week later and no fix, so here's how you can fix it manually: Right click on it in your Steam library and go to properties, then hit the Local Files tab up the top and press Browse Local Files… once there, open the Descenders_Data folder, go into the Plugins folder and delete "libfmod.so".
  • WolfenDoom - Blade of Agony is looking for AMD testers
    The GZDoom-powered FPS total conversion WolfenDoom: Blade of Agony [Official Site] is pushing on with development of Chapter 3: The Clash of Faith.
  • Open-world roguelike RPG 'Stoneshard' will have Linux support, nearly hit the Kickstarter goal
    Stoneshard [Official Site] is a pretty good sounding open-world RPG, it's currently on Kickstarter with a promise of Linux support and they've nearly hit their goal. With 26 days left to go, they've hit $28K of their $30K goal, so it looks like they will manage it easily. Inspired by the likes of Diablo, ADOM, Darkest Dungeon and more, they have a lot to live up to in terms of their inspiration. What makes it sound quite interesting, is the survival elements you heal to deal with like diseases, broken bones, mental health and more.