Language Selection

English French German Italian Portuguese Spanish

Security Advisories

Filed under
Security

Less critical

Ubuntu has issued updates for the kernel. These fixes two vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or gain escalated privileges.

Solution:

Apply updated packages. Links to updates

Highly critical

SUSE has issued updates for multiple packages. These fix various vulnerabilities, which can be exploited by malicious, local users to escalate their privileges and by malicious people to compromise a vulnerable system.

Solution:

Apply updated packages.

Updated packages are available using YaST Online Update or the SUSE FTP site. Full description.

Less critical

Noam Rathaus has discovered a vulnerability in KMail, which can be exploited by malicious people to conduct spoofing attacks.

The vulnerability is caused due to an error where HTML code can overlay part of the user interface. This can e.g. be exploited to trick a user into believing a specially crafted mail is signed and coming from a trusted source.

Successful exploitation requires that the option "Prefer HTML to plain text" is enabled (not default setting).

The vulnerability has been confirmed in KMail 1.7.1 on KDE 3.3.1. KDE 3.3.2 is reportedly also affected. Other versions may also be affected.

Solution:

Disable the "Prefer HTML to plain text" setting. Link.

Serious
Red Hat Inc. is warning enterprise Linux users to update their installations of XFree86 to fix a number of serious security bugs, some of which could allow attackers to take over a system. Affected operating systems include Enterprise Linux AS 3, Enterprise Linux ES 3 and Enterprise Linux WS 3, Red Hat said in an advisory. XFree86 is an implementation of the X Window System that provides low-level graphics functionality for graphical user interface systems such as KDE and Gnome. The most serious flaw is an integer overflow in the libXpm library, used by some applications in opening XPixMap images, Red Hat said. An attacker could use a malicious XPixMap file to execute code on a user's system. Source for this one.

More in Tux Machines

Servers/Networks

  • PLUMgrid Advances SDN with CloudSecure
    Software Defined Networking (SDN) vendor PLUMgrid is helping to secure it product portfolio and its customers with a new technology it calls CloudSecure. The goal with CloudSecure is to help provide policy and structure for organizations to build secure micro-segmented networking in the cloud.
  • Networking, Security & Storage with Docker & Containers: A Free eBook Covers the Essentials
  • How Hardware Can Boost NFV Adoption
  • Datera’s Elastic Data Fabric Integrates With Kubernetes
    Today Datera announced a new integration with Google’s Kubernetes system. Datera states that its intent-defined universal data fabric complements the Kubernetes operational model well. An integration of the two enables automatic provisioning and deployment of stateful applications at scale. According to Datera, this integration with Kubernetes will let them translate application service level objectives, such as performance, durability, security and capacity into its universal data fabric. Datera goes on to claim that the integration will allow enterprise and service provider clouds to seamlessly and cost-effectively scale applications of any kind.
  • Huawei Launches a Kubernetes-based Container Engine
    Joining an increasing number of companies, Asian telecommunications giant Huawei Technologies has released its own container orchestration engine, the Cloud Container Engine (CCE).

8 Best Linux Distributions For New Linux Users

New Linux users are always confused about choosing a best Linux distribution to start with. As there are hundreds of Linux distributions so it might always be a confusing part. But I'll help you choosing the right Linux flavour to start your Linux exploration. In this article, I'll walk you through a list of 8 Best Linux distributions for new Linux users. But before all of that, I suggest you throwing out all the misconceptions about Linux, such as Linux is only for geeks or developers. Linux is for everyone. As I always say, "When Linux can run Google, Facebook, Amazon, it can surely run your home computer as well." Read
more

NVIDIA 367.44 Stable Linux Driver Released

While the NVIDIA 370 Linux driver series is currently in beta, the 367 driver series has been updated as the latest long-lived branch release. The Pascal-based TITAN X, GeForce GTX 1060 3GB, and GTX 1060 6GB are now officially supported... That's just with regards to proper product detection as I've been using the GTX 1060 fine on earlier driver releases, etc. Read more Also: Nvidia 367.44 Driver Adds TITAN X (Pascal) and GeForce GTX 1060 Support to Linux

OpenIndiana Operating System Gets MATE 1.14 Desktop Environment, New ISOs

Alexander Pyhalov from the OpenIndiana development team was happy to announce the availability of the latest MATE 1.14 open-source desktop environment for the Solaris-derived operating system. Read more