Language Selection

English French German Italian Portuguese Spanish

Security Advisories

Filed under
Security

Less critical

Ubuntu has issued updates for the kernel. These fixes two vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or gain escalated privileges.

Solution:

Apply updated packages. Links to updates

Highly critical

SUSE has issued updates for multiple packages. These fix various vulnerabilities, which can be exploited by malicious, local users to escalate their privileges and by malicious people to compromise a vulnerable system.

Solution:

Apply updated packages.

Updated packages are available using YaST Online Update or the SUSE FTP site. Full description.

Less critical

Noam Rathaus has discovered a vulnerability in KMail, which can be exploited by malicious people to conduct spoofing attacks.

The vulnerability is caused due to an error where HTML code can overlay part of the user interface. This can e.g. be exploited to trick a user into believing a specially crafted mail is signed and coming from a trusted source.

Successful exploitation requires that the option "Prefer HTML to plain text" is enabled (not default setting).

The vulnerability has been confirmed in KMail 1.7.1 on KDE 3.3.1. KDE 3.3.2 is reportedly also affected. Other versions may also be affected.

Solution:

Disable the "Prefer HTML to plain text" setting. Link.

Serious
Red Hat Inc. is warning enterprise Linux users to update their installations of XFree86 to fix a number of serious security bugs, some of which could allow attackers to take over a system. Affected operating systems include Enterprise Linux AS 3, Enterprise Linux ES 3 and Enterprise Linux WS 3, Red Hat said in an advisory. XFree86 is an implementation of the X Window System that provides low-level graphics functionality for graphical user interface systems such as KDE and Gnome. The most serious flaw is an integer overflow in the libXpm library, used by some applications in opening XPixMap images, Red Hat said. An attacker could use a malicious XPixMap file to execute code on a user's system. Source for this one.

More in Tux Machines

New Manjaro Release

What a week we had. With this update we have removed most of our EOL tagged kernels. Please adopt to newer series of each, when still be used. PulseAudio and Gstreamer got renewed. Also most of our kernels got newer point-releases. Series v4.12 is now marked as EOL. Guillaume worked on Pamac to solve reported issues within our v6 series. The user experience should be much better now. Latest NetworkManager, Python and Haskell updates complete this update-pack. Please report back and give us feedback for given changes made to our repositories. Read more

Linux 4.14 Is Up To Around 23.2 Million Lines Of Code

While I usually look at the Linux kernel code size following each merge window, I am a few days late this time around due to busy Xeon/EPYC benchmarking and XDC2017. Anyhow, Linux 4.14 is showing some weight gains but nothing too bad. Linux 4.14 has been another busy cycle with a lot of happenings from finally seeing Heterogeneous Memory Management merged to a lot of other new core functionality plus the always fun and exciting changes and new support happening in driver space. See our Linux 4.14 feature overview for a rundown on the new functionality. Read more

Today in Techrights

10 Best Free Photo Editors For Linux

Linux has come a long way in terms of the applications that are available for the platform. Whatever your specific needs are, you can be sure that there are at least a few applications available for you to use. Today, we'll look at 10 free photo editors for Linux, and I must say, there are a lot of image editing tools available. This post selects just 10 of these awesome tools and talks about them briefly looking at what makes them stand out. In no particular order, let's get started. Read
more