Category Archives: Linux

Linux: Backdoor in upstream xz/liblzma; compromise of SSH servers

Posted on 2024-03-30 by guenni

[German]As of Friday, March 29, 2024, Red Hat has published a warning. The latest versions of the "xz" tools and libraries contain malicious code, a backdoor, which is apparently intended to allow unauthorized access. Affected by the backdoor (vulnerability CVE-2024-3094) … Continue reading →

Posted in issue, Linux, Security, Software | Tagged , , | 1 Comment
Advertising

Vulnerability in GNU C Library (glibc) jeopardizes Linux distros

Posted on 2024-01-31 by guenni

[German]The Qualys Threat Research Unit (TRU) has recently uncovered four significant vulnerabilities in the GNU C Library (glibc). This library is used in countless Linux applications in common Linux distributions. The vulnerabilities allow attackers to gain root privileges on Linux … Continue reading →

Posted in Linux, Security, Software | Tagged , | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

Ubuntu 24.04 LTS gets 12 year of support from Cannonical

Posted on 2024-01-22 by guenni

Cannonical wants to extend the support period for Ubuntu 24.04 LTS, which is expected in April 2024, to 12 years. The extended support period was announced by Canonical CEO Mark Shuttleworth in an interview with the YouTube channel Destination Linux … Continue reading →

Posted in Linux | Tagged , | Leave a comment
Advertising

Linux kernel vulnerability CVE-2024-0193 allows root access

Posted on 2024-01-09 by guenni

[German]The vulnerability CVE-2024-0193, which allows root access, was discovered in the Linux kernel. This is a use-after-free error in the Netfilter subsystem, which was given a CVSS score of 7.8. However, the vulnerability can only be exploited by local attackers … Continue reading →

Posted in Linux, Security | Tagged | Leave a comment

Google Chrome 120.0.6099.62/.63 released

Posted on 2023-12-06 by guenni

[English]Google has released updates of the Google Chrome browser in the Stable Channel for Mac, Linux and Windows to version 120.0.6099.62/.63 on December 5, 2023. Version 120.0.6099.62/.63 for Mac and Windows was released in the Extended Stable Channel. The Android … Continue reading →

Posted in Android, browser, ios, Linux, macOS, Security, Software, Update, Windows | Tagged , | 2 Comments
Advertising

Microsoft published Linux installation guide

Posted on 2023-10-18 by guenni

[German]Microsoft wants to get rid of some of its Windows users. That's how I interpret the fact that Microsoft published instructions on how to install Linux on their systems at the end of September 2023. Coincides with the terminated upgrade … Continue reading →

Posted in Linux | Tagged | 1 Comment

Linux vulnerability Looney Tunables

Posted on 2023-10-07 by guenni

[German]A buffer overflow vulnerability CVE-2023-4911 exists in the Gnu-C library (glibc) in the dynamic loader used to execute programs. The vulnerability, discovered by Qualys' Threat Research Unit (TRU), is called Looney Tunables and has probably existed since 2021. In the … Continue reading →

Posted in Linux, Security | Tagged , | Leave a comment

Linux Mint Debian Edition (LMDE) 6 "Faye" Released

Posted on 2023-09-30 by guenni

[German]The Mint development team has released the Linux distribution LMDE 6 "Faye" for download on September 27, 2023 after a short beta phase. The abbreviation LMDE stands for "Linux Mint Debian Edition", i.e. an edition that closely resembles Debian. Advertising

Posted in Linux | Tagged | Leave a comment
Advertising

Critical RCE Vulnerability CVE-2023-36664 in GhostScript affects Linux, Windows etc.

Posted on 2023-07-14 by guenni

[German]A security researcher has developed a proof of concept to exploit a remote code execution vulnerability CVE-2023-36664, rated critical (CVSS score 9.8), in the widely used (for PostScript and PDF displays) GhostScript software. Both Linux and Windows systems are threatened … Continue reading →

Posted in Linux, Security, Software, Windows | Tagged , | 1 Comment

Google Chrome 111.0.5563.110/.111 (Desktop) – and for Android/iOS

Posted on 2023-03-22 by guenni

[German]Google has released updates to Google Chrome browser 111 in the stable channel for Mac, Linux and Windows on March 21, 2023. These are security updates that fix critical vulnerabilities. The Extended Stable Channel and the apps for Android and … Continue reading →

Posted in Android, browser, ios, Linux, macOS, Security, Software, Update, Windows | Tagged | Leave a comment