Language Selection

English French German Italian Portuguese Spanish

Security: Patches, Whonix, IPFire and More

Filed under
Security
  • Security updates for Thursday

    Security updates have been issued by CentOS (kernel, ksh, python-pillow, and thunderbird), Debian (opensmtpd, proftpd-dfsg, and rake), Fedora (NetworkManager-ssh), openSUSE (chromium), and SUSE (libexif, mariadb, ovmf, python3, and squid). 

  • Whonix VirtualBox 15.0.0.8.9 - Point Release! - vanguards; TCP ISN Leak Protection; Extensive Hardening!

    This is a point release.

    Download Whonix for VirtualBox:

  • Build your career in Computer Forensics: List of Digital Forensic Tools - Part I

    Digital devices are present everywhere and considered to be the primary source of evidence in the case of cybercrime. Out of all the devices, phones and laptops are the top weapons used in cybercrimes. Regardless of who the device belonged to, either the victim or suspect, it offers an abundance of data to investigate the crime. But retrieving evidence from these devices in a secure environment can be very challenging. To overcome the time constraint and other complications, cyber forensic professionals use digital forensic tools.  

  • What are Open Source Security Approaches? With Examples

    Open source security approaches enable organizations to secure their applications and networks while avoiding expensive proprietary security offerings. 

    An open source approach allows organizations to secure their applications across cloud providers and other platforms using platform-agnostic APIs. These APIs are written by contributors to the open source software code while cloud providers may use open source code that allows the open APIs to connect to the cloud.

    Open source approaches, for security or not, also bring in collaboration across an industry. It isn’t just one organization that benefits from a program or technology, but everyone who contributes to and uses it.

    The open source projects and programs used as examples in this article come from two major open source entities: The Linux Foundation and the Cloud Native Computing Foundation (CNCF). The two also work closely together to further the projects under their purview.

  • Cloud Snooper: Hackers Using Linux Kernel Driver To Attack Cloud Server [Ed: So, if you install malicious software in Linux, due to recklessness or sabotage, it'll do malicious things. How is that a Linux weakness?]

    Whether you’re a Linux user or not, you must have heard the buzzword about the Linux — “Best OS for security.” Well, it is true, but being a computer program, Linux also has some downside that challenges its security.

    Talking about the security risks, recently, SophosLab published a report about a new malware dubbed Cloud Snooper, that can compromise the security of any Linux or other OS based servers by deploying a kernel driver.

  • IPFire on AWS: Update to IPFire 2.25 - Core Update 141

    Today, we have updated IPFire on AWS to IPFire 2.25 - Core Update 141 - the latest official release of IPFire.

    Since IPFire is available on AWS, we are gaining more and more users who are securing their cloud infrastructure behind an easy to configure, yet fast and secure firewall.

    This update adds the rewritten DNS stack and brings many bug fixes to the cloud.

More FUD

  • The “Cloud Snooper” malware that sneaks into your Linux servers [Ed: Sophos citing itself, hyping up the threat is installing malicious software on one's own server]

    SophosLabs has just published a detailed report about a malware attack dubbed Cloud Snooper.

    The reason for the name is not so much that the attack is cloud-specific (the technique could be used against pretty much any server, wherever it’s hosted), but that it’s a sneaky way for cybercrooks to open up your server to the cloud, in ways you very definitely don’t want, “from the inside out”.

    The Cloud Snooper report covers a whole raft of related malware samples that our researchers found deployed in combination.

OpenSMTPD

  • OpenSMTPD Email Server Vulnerability Threatens Many Linux and BSD Systems [Ed: It is this package, not the operating systems (GNU/Linux rarely uses this)]

    A critical vulnerability has been discovered in the OpenBSD email server OpenSMTPD. Exploiting the flaw could allow remote code execution attacks. The seriousness of the vulnerability poses a threat to the integrity of OpenBSD and Linux systems.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

More in Tux Machines

Linux App Touchégg v2.0.2 Released With Touchscreen Support

Last month, we reported about a Linux multi-touch gesture recognizer app called Touchégg. A completely revised version 2.0.0 arrived as a major update after more than years of gap. As the rewritten version of Touchégg became compatible with the latest Linux desktop tech stack, its developer José Expósito has now announced a new Touchégg v2.0.2 with more important enhancements. Before I speak about v2.0.2, those who’re unfamiliar with Touchégg, it’s a Linux app that runs in the background and transforms the gestures you make on your touchpad into visible actions on your desktop. For example, you can swipe up with 3 fingers to maximize a window or swipe left with 4 fingers to switch to the next desktop. Read more

Android Leftovers

GNOME 40 Desktop Environment Slated for Release on March 24th, 2021

Public testers will be able to get their hands on the GNOME 40 alpha release as soon as early January 2021, while the beta and RC releases are expected to hit the streets in mid-February and March respectively. The final release of the GNOME 40 desktop environment series is set for March 24th, 2021, just in time for the Ubuntu 21.04 (Hirsute Hippo) operating system, due for release on April 22nd, or Fedora 34, due for release on April 27th. Read more

Freespire 7.0 Released with the Xfce Desktop, Based on Ubuntu 20.04 LTS

Arriving more than nine months after Freespire 6.0, the Freespire 7.0 release is based on the Ubuntu 20.04 LTS (Focal Fossa) operating system series with the long-term supported Linux 5.4 kernel and uses the latest Xfce 4.14 desktop environment by default. Freespire 7.0 is packed with many popular applications, including the latest Chromium 86 web browser, Mozilla Thunderbird 68.12 email client, Synaptic package manager, Abiword word processor, Gnumeric spreadsheet editor, Parole media player, Transmission torrent downloader, KolourPaint digital painting app, as well as the KPatience card sorting game and DreamChess chess game. Read more