Linux & Open Source News
Ubuntu Fixes Several Linux Kernel AWS Vulnerabilities
Several vulnerabilities in the Linux kernel have been identified, also affecting Amazon Web Services (AWS) systems. Canonical has released important security patches addressing these vulnerabilities. These flaws primarily involve race conditions and ...
Ubuntu Fixes Multiple BusyBox Vulnerabilities
BusyBox, often referred to as the “Swiss Army knife of embedded Linux,” is a compact suite of Unix utilities combined into a single executable. It’s widely used in small and embedded systems ...
Ubuntu Patches Three QEMU Vulnerabilities
Several security issues were discovered in QEMU, an open-source machine emulator and virtualizer. These issues also affected the Ubuntu 22.04 LTS release. In response, Canonical has released security updates to address QEMU ...
Critical wpa_supplicant Vulnerability Addressed
A serious vulnerability has been discovered in the widely used wpa_supplicant package, potentially leaving millions of devices at risk. This flaw, tracked as CVE-2024-5290, poses a significant risk of privilege escalation, potentially ...
Debian 11 “Bullseye” Enters LTS: What You Need to Know
Debian 11, code-named “Bullseye”, has entered the Long-Term Support phase after three years of regular support from the Debian Security and Release teams. As of August 15, 2024, Debian 11 will be ...
Critical SLUBStick Exploitation Technique Threatens Linux Security
A new and highly-effective cross-cache attack named SLUBStick has emerged, targeting the Linux kernel with a remarkable 99% success rate in transforming a limited heap vulnerability into an arbitrary memory read-and-write capability ...
Time to Upgrade: Linux Kernel 6.9 is End of Life
After nearly three months, Linux kernel 6.9 has officially reached the end of life on August 2nd, 2024. If you are currently running this EOL kernel version, it’s time to consider upgrading ...
Ubuntu Addresses Multiple OpenJDK 8 Vulnerabilities
Several vulnerabilities have recently been identified in OpenJDK 8, which could potentially lead to denial of service, information disclosure, arbitrary code execution, or even the bypassing of Java sandbox restrictions. In response, ...
0.0.0.0 Day: 18-Year-Old Browser Flaw Affects Linux and macOS
Oligo Security’s research team recently uncovered a critical vulnerability dubbed the “0.0.0.0 Day” affecting Chromium, Firefox, and Safari browsers on macOS and Linux systems. This vulnerability allows malicious websites to bypass standard ...
Patching Recent Linux Kernel Vulnerabilities with KernelCare
Several security vulnerabilities were discovered in the Linux kernel. These issues could potentially be exploited by malicious actors to compromise system integrity and steal sensitive data. In this article, we will explore ...
