Security News


-
Oracle Patches the Venom Security Issue in All Supported VirtualBox Branches
-
Is SELinux good anti-venom?
Dan Berrange, creator of libvirt, sums it up nicely on the Fedora Devel list:
"While you might be able to crash the QEMU process associated with your own guest, you should not be able to escalate from there to take over the host, nor be able to compromise other guests on the same host. The attacker would need to find a second independent security flaw to let them escape SELinux in some manner, or some way to trick libvirt via its QEMU monitor connection. Nothing is guaranteed 100% foolproof, but in absence of other known bugs, sVirt provides good anti-venom for this flaw IMHO."
-
Tuesday's security updates
-
DDoS reflection attacks are back – and this time, it's personal
At the start of 2014, attackers' favorite distributed denial of service attack strategy was to send messages to misconfigured servers with a spoofed return address – the servers would keep trying to reply to those messages, allowing the attackers to magnify the impact of their traffic.
-
Another HTTPS Vulnerability Rattles The Internet
Another HTTPS vulnerability has started to make its rounds earlier this morning. Dubbed Logjam by its researchers, the vulnerability stems from the US's encryption export mandate back in the 1990s. This particular vulnerability, in the transport-layer security layer protocol, breaks the Diffie-Hellman perfect forward-secrecy. Susceptibility to the vulnerability is depended on servers and clients supporting the DHE_EXPORT encryption scheme, or using a key less-than-or-equal to 1024 bits.
-
- Login or register to post comments
Printer-friendly version
- 1174 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
Today in Techrights
| Kernel: Git, Intel, AMD and Bugs
|
Games: GamerOS, MakerKing, Island Artist, Receiver 2
| OpenSUSE Tumbleweed Might See Micro-Architecture Packages For Better Performance
One of the many great programs at SUSE is the roughly annual program where their developers can focus for one week on any new open-source development they desire. SUSE Hack Week has led to many great innovations and improvements since it began in the mid-2000s and for the Hack Week later this month there is one project attempt we are eager to see tackled.
Proposed ahead of this year's SUSE Hack Week 20 event, which runs the last week of March, is supporting glibc-hwcaps and providing micro-architecture package generation support for openSUSE Tumbleweed and down the line for SLE/Leap.
[...]
SUSE's Antonio Larrosa is planning to experiment with the new capabilities and initially investigate a handful of libraries that would stand to benefit from the HWCAPS functionality. This would be catering to the openSUSE/SUSE buid process and establishing RPM macros and documentation in helping guide packagers around creating micro-architecture packages.
The current plan would be to spin the different micro-architecture packages into separate packages that can be installed by the user to supplement the generic package if they are wanting to pursue the optimized packages in the name of greater performance.
|
Recent comments
3 hours 59 min ago
4 hours 29 min ago
4 hours 33 min ago
17 hours 41 min ago
18 hours 50 min ago
21 hours 16 min ago
1 day 32 min ago
1 day 57 min ago
1 day 1 hour ago
1 day 8 hours ago