Suche
Beiträge, die mit Linux getaggt sind
That could allow a local attacker to gain root privileges without requiring user interaction. Needrestart is a utility that scans a system to determine the services that need to be restarted after applying shared library updates.
https://blog.qualys.com/vulnerabilities-threat-research/2024/11/19/qualys-tru-uncovers-five-local-privilege-escalation-vulnerabilities-in-needrestart
#linux #ubuntu #it #security #privacy #engineer #tech #media #news
![Multiple decade-old security vulnerabilities have been disclosed in the needrestart package.
The vulnerabilities are believed to have existed since the introduction of interpreter support in needrestart 0.8, which was released on April 27, 2014.
"These needrestart exploits allow Local Privilege Escalation (LPE) which means that a local attacker is able to gain root privileges," Ubuntu said in an advisory, noting they have been addressed in version 3.8.
<https://ubuntu.com/blog/needrestart-local-privilege-escalation>
The 5 flaws are listed below:
• CVE-2024-48990 [CVSS score: 7.8] - A vulnerability that allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.
• CVE-2024-48991 [CVSS score: 7.8] - A vulnerability that allows local attackers to execute arbitrary code as root by winning a race condition & tricking needrestart into running their own, fake Python interpreter.
• CVE-2024-48992 [CVSS score: 7.8] - A vulnerability that allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.
• CVE-2024-11003 [CVSS score: 7.8] and CVE-2024-10224 [CVSS score: 5.3] - Two vulnerabilities that allows a local attacker to execute arbitrary shell commands as root by taking advantage of an issue in the libmodule-scandeps-perl package. (before version 1.36)](https://nerdculture.de/system/media_attachments/files/113/521/649/340/089/036/original/9c79a893744b5d47.jpeg "Multiple decade-old security vulnerabilities have been disclosed in the needrestart package.
The vulnerabilities are believed to have existed since the introduction of interpreter support in needrestart 0.8, which was released on April 27, 2014.
\"These needrestart exploits allow Local Privilege Escalation (LPE) which means that a local attacker is able to gain root privileges,\" Ubuntu said in an advisory, noting they have been addressed in version 3.8.
<https://ubuntu.com/blog/needrestart-local-privilege-escalation>
The 5 flaws are listed below:
• CVE-2024-48990 [CVSS score: 7.8] - A vulnerability that allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.
• CVE-2024-48991 [CVSS score: 7.8] - A vulnerability that allows local attackers to execute arbitrary code as root by winning a race condition & tricking needrestart into running their own, fake Python interpreter.
• CVE-2024-48992 [CVSS score: 7.8] - A vulnerability that allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.
• CVE-2024-11003 [CVSS score: 7.8] and CVE-2024-10224 [CVSS score: 5.3] - Two vulnerabilities that allows a local attacker to execute arbitrary shell commands as root by taking advantage of an issue in the libmodule-scandeps-perl package. (before version 1.36)")
Qualys TRU Uncovers Five Local Privilege Escalation Vulnerabilities in needrestart | Qualys Security Blog
The Qualys Threat Research Unit (TRU) has identified five Local Privilege Escalation (LPE) vulnerabilities within the needrestart component…Saeed Abbasi (Qualys, Inc.)
Así es, aparte de hacer #podcast y artículos para el #blog, también transmitimos #musica y programas interesantes sobre #linux #softwarelibre #historia #filosofia #mitología #saludybienestar #misterios y mucho más.
Pásate a escuchar nuestra propuesta radial en https://mdtradiomx.neocities.org/ y
#daleplay
https://mirekdlugosz.com/blog/2024/understanding-linux-virtualization-stack/
#linux #blog #kvm #QEMU #xen #virtualbox
Understanding Linux virtualization stack
I find Linux virtualization stack confusing. KVM? libvirt? QEMU? Xen? What does that even mean? This post is my attempt at making sense of that all. I don’t claim it to be correct, but that’s the way I understand it.Mirek Długosz personal website
Russians forked the last version before getting banned and are modifying their own kernel now. #Russia was unaffected by the microsoft outage couple of months ago as they use their own kernels.
https://www.tomshardware.com/software/linux/linus-torvalds-kicked-the-russians-out-of-linux-now-theyre-creating-a-sovereign-linux-community-in-russia-ministry-of-digital-development-steps-in
Linus Torvalds kicked the Russians out of Linux, now they're creating a sovereign Linux community in Russia — Ministry of Digital Development steps in
Kneejerk announcement or a serious plan, time will tell.Mark Tyson (Tom's Hardware)
I realize I haven't published any new #blog posts for #TheFutureIsFederated in 3 weeks (gasp).
I've been doing a lot of thinking, reading, learning #Linux on my #RaspberryPi5... and I'm now preparing a brand new blog post about the #Fediverse. I think it will be the most important thing I have ever written on the subject. I care about this A LOT and I hope it will be good and helpful.
In the meantime, you can read old posts and subscribe here: https://blog.elenarossini.com/tag/the-future-is-federated/
The Future is Federated - Elena Rossini
The Future is Federated is a series of essays about the Fediverse with the goal of introducing it to people not familiar with it... and showing interoperability between projects for more advanced users.Elena Rossini
Explore now: https://www.spsanderson.com/steveondata/posts/2024-11-15/
#Blog #Programming #Linux #Coding
Linux Environment Variables: A Beginner’s Guide to printenv, set, export, and alias – Steve’s Data Tips and Tricks
Master Linux environment variables with our comprehensive guide. Learn how to use printenv, set, export, and alias commands to customize your Linux environment effectively.Steve's Data Tips and Tricks
Read more: https://www.spsanderson.com/steveondata/posts/2024-11-15/
#Blog #Coding #Programming #Linux #Tech
Linux Environment Variables: A Beginner’s Guide to printenv, set, export, and alias – Steve’s Data Tips and Tricks
Master Linux environment variables with our comprehensive guide. Learn how to use printenv, set, export, and alias commands to customize your Linux environment effectively.Steve's Data Tips and Tricks
- set up my #RaspberryPi5 / install #Linux (Ubuntu MATE most likely)
- permanently delete my inactive 3 bird app accounts
- draft a new post for #TheFutureIsFederated about data sovereignty and my plans for the next 4 years
- finish reading #NeilPostman’s superb “Building a Bridge to the 18th century”
- chin up, be defiant and resist
ICYMI: this is the latest #blog I wrote on my personal site: “The rebellion will be federated” https://elenarossini.com/2024/11/the-rebellion-will-be-federated/
#FOSS #rebelalliance
The rebellion will be federated — Elena Rossini
This is how I plan to rebel against the tech barons and kleptocrats for the next 4 years: through activism, education and FLOSSElena Rossini
#northkorea #flashdrivesforfreedom #tech #linux #media #follow #boost #social #mastodon #peace #help #donate #cybersecurity #trending #freedom
Instead of giving unnecessary gifts this year, we give loved ones home-made Christmas cards:
“This year, I’m giving you a gift of democracy. This card represents a purchase not made, money that #billionaires cannot use against civilisation. I hope this is a gift that you shall be able to use in the future.”
or donate on their behalf to #opensource & #linux projects — things we actually need.
https://activersity.org/opinion/christmas-strike
#christmasstrike
#tech #technology #techProblems #techSupport
Check it out here: https://www.spsanderson.com/steveondata/posts/2024-11-08/
#Programming #Linux #TechTips #CLI #Blog
🚀 Ready to boost your Linux skills? Our latest post breaks down key process management commands f
Understanding Linux Processes and Essential Commands: A Beginner’s Guide – Steve’s Data Tips and Tricks
Unlock the power of Linux processes with this beginner’s guide. Master essential commands like ps, top, jobs, and bg to effectively manage and monitor your system. Boost your Linux administration skills today.Steve's Data Tips and Tricks
https://writer13.neocities.org/linux/why-its-hard-for-me-to-write-about-linux.html
I am not tired of Linux, but simple fallen into the background. Will not stopping posting about it here (not just because of the Foss part) if I find interesting or useful stuff.
#Linux #tech #blog
You use it, it sits in the background, and you forget it's there without all the whinging and pop ups and forced-something-or-other you get from other brands of operating systems.
Free to drink beer but not free to brewing it if you are a "xxyyzz" person?
1st they came for the Jews, then they came for the commies, then they came for the gypsies, but I was still drinking FREE beer.
@fsf
#Foss #Russia #Linux #BSD #Gnu
#Capitalism did not create the internet (c.f. ARPANET) and it is seemingly incapable of improving it. I'm not sure how it got to be in charge.
Humans, rise
#opensource #linux #fediverse
Stable and beta available via PPA https://github.com/retorquere/zotero-deb
#linux #research
GitHub - retorquere/zotero-deb: Packaged versions of Zotero and Juris-M for Debian-based systems
Packaged versions of Zotero and Juris-M for Debian-based systems - retorquere/zotero-debGitHub
Every time I plan on an event in a different timezone I'm confused how to put it in my calendar.
#linux #thunderbird #gnome
https://www.reddit.com/r/Ubuntu/comments/19cb7nh/why_is_ubuntu_used_so_much_in_the_scientific_field/
Spoiler: Cause I have to say... there's zero reasons to use windows on science, industry, technology, production, military... or any other field that takes it serious.
#foss #linux #ubuntu #fedora #redhat #windows #science #compare
- distro: pop OS ("Ubuntu")
- browser: #firefox 120.0.1
- seurity key: #yubikey 5 NFC
'just worked' after setting a #FIDO2 PIN via YubiKey Manager https://support.yubico.com/hc/en-us/articles/360016649039-Enabling-the-Yubico-PPA-on-Ubuntu#01H30DBXGX5RDD4AM7M815GAA3
Passkeys.io – A passkey demo and info page by Hanko
Try the passkey demo and learn the basic facts and use cases about passkeys, the new authentication standard powered by FIDO2 and WebAuthn.www.passkeys.io
Can someone confirm that all #dmesg output is available in #journalctl ?
Are there any other logs I should be looking at, and if yes how?
What about printer/scanner devices? It appears they mostly work fine, according to https://wiki.debian.org/CUPSQuickPrintQueues#mfd
Does anyone have experience, good or bad, with setting up printer/scanners on GNU/Linux, especially #Debian?
#Linux #scanner #printer #MFD
#unix #linux #bash #tips #terminal #commands + #vim #emacs #nano #shortcut
Basics | Cheat sheets | Linux Command Library
Handy cheat sheets with linux tips and terminal basics about System control, Users, Files, Package managers, Video and Audio, Hacking tools, Terminal games and many more categories.Linux Command Library
1. The device adheres to open standards without tricks or drivers. It is portable. This is the gold standard for plug-and-play.
2. If a driver is conceptually necessary, see if a linux version exists. If yes,
it means that someone loved the device enough to do the work for free.
Follow the love, my friend.
what are steps to make sure this doesn't happen ever again?
#linux #SysAdmin #linuxMint #MateDesktop
#foss #opensource #software #marketing #branding #design #linux #freesoftware #libre
