💾 Archived View for gemini.tuxmachines.org › n › 2024 › 02 › 05 › Security_Leftovers.1.gmi captured on 2024-06-20 at 13:07:01. Gemini links have been rewritten to link to archived content
-=-=-=-=-=-=-
Tux Machines
Posted by Roy Schestowitz on Feb 05, 2024
Benchmarks: GNU/Linux Performance on x86
=> https://news.tuxmachines.org/i/2024/02/hacker-smartphone-warning.thumbnail.jpg ↺ Warning
=> https://linuxsecurity.com/news/security-vulnerabilities/xorg-xwayland-vulnerabilities ↺ XOrg Server and Xwayland Patched Against Multiple Security Vulnerabilities
Multiple security vulnerabilities have recently been discovered in the XOrg Server prior to 21.1.11, and Xwayland display implementations prior to 23.2.4. These vulnerabilities could potentially result in heap overflows, out-of-bounds writes, and local privilege escalation, potentially enabling attackers to view additional infrastructure to attack, add or delete users, or modify permissions of files or other users.
=> https://lwn.net/Articles/960952/ ↺ Security updates for Monday
Security updates have been issued by Debian (rear, runc, sudo, and zbar), Fedora (chromium, grub2, libebml, mingw-python-pygments, and python-aiohttp), Gentoo (FreeType, GNAT Ada Suite, Microsoft Edge, NBD Tools, OpenSSL, QtGui, SDDM, Wireshark, and Xen), Mageia (dracut, glibc, nss and firefox, openssl, packages, perl, and thunderbird), Slackware (libxml2), SUSE (java-11-openjdk, java-17-openjdk, perl, python-uamqp, slurm, and xerces-c), and Ubuntu (libssh and openssl).
=> https://blog.apnic.net/2024/02/05/update-on-the-apnic-honeynet-network/ ↺ Update on the APNIC Honeynet Network
The Community Honeynet project continues to assist network engineers and security personnel in understanding their online adversaries. What’s next?