Flatpak 1.18.1 schließt 10 Sicherheitslücken, die zum Teil eine Rechteausweitung ermöglichten. Mit 1.19 wurde zeitgleich eine Vorschau auf den nächsten Entwicklungszweig veröffentlicht.

Lime Technologies aktualisiert Unraid auf v7.3.2 und schließt damit eine kritische Lücke in der Web-GUI. Zudem wurde die Docker-Version angehoben und Sicherheitsupdates für über 70 Pakete wurden eingespielt.

Canonical wants ntpd-rs, a Rust rewrite of NTP (Network Time Protocol), to become Ubuntu’s default time sync client. To help get there, Canonical has become a Gold Sponsor of the Trifecta Tech Foundation, the non-profit behind ntpd-rs, committing €40,000 a year to help fund its memory-safe software projects. The goal is to make the Rust-based version the default time sync client and server in Ubuntu 27.04, and it will be made it available for testing in Ubuntu 26.10, out in October. Eventually, it’ll also replace chrony, linuxptp and gpsd for time-syncing use cases, according to Jon Seager, Ubuntu VP of Engineering at Canonical. Your Ubuntu system keeps […]

You're reading Ubuntu is swapping its time sync tool for a Rust-based version, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Nie zuvor gab es so viele Notfall-Releases außerhalb des regulären Update-Zyklus von Tails wie in letzter Zeit. Bedingt wird dies durch die vielen von KI-Tools entdeckten Sicherheitslücken im Kernel und anderswo.

In dieser Woche sind für zwei Sicherheitslücken Exploits verfügbar. Das erleichtert Angreifern das Erlangen von Root-Rechten und die Übernahme von SSH-Verbindungen.

Wieder einmal war das Arch Linux Community-Paketarchiv AUR Ziel eines Angriffs, bei den über 400 Pakete mit einer Dependency Credential Stealer Malware infiziert wurden.

A new Linux kernel security vulnerability, Dirty Frag, has been uncovered and allows a local user to escalate its privileges to gain root access.

The post Dirty Frag Linux Kernel Flaw Allows Local Privilege Escalation, Patch Now appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

If you haven’t check in with Ubuntu’s app prompting feature for a while, there’s more reason to do so in the latest release. Recent improvements to the snap-focused security feature, which Canonical’s Oliver Calder has shared an update on, aims to “empower users” by letting them grant apps system and hardware access at runtime rather than retrospectively. Android or iOS use similar prompts, showing screen modals asking if users if they want to “allow Acme App to access the camera” with options to deny or “only while using the app”. Nifty stuff on mobile, but on a desktop? Well, Canonical […]

You're reading Ubuntu’s app permission prompting has got a lot better, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Bugs und Sicherheitslücken in Software werden heutzutage vorwiegend von KI gejagt. cURL-Entwickler Daniel Stenberg sieht in den vergangenen Monaten eine Zunahme der Qualität der Einreichungen.

XOrg Server 21.1.22 and Xwayland 24.1.10 have been released today to address a total of five security vulnerabilities. Users are urged to update their systems as soon as possible.

The post XOrg Server 21.1.22 and Xwayland 24.1.10 Released with Multiple Security Fixes appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

Ubuntu 26.04's sudo-rs now includes a keypress toggle for password feedback. Switch between visible asterisks and silent input without editing a config file.

You're reading Ubuntu 26.04 lets you hide sudo password feedback with shortcut, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Motorola und die GrapheneOS Foundation arbeiten zusammen an der Entwicklung von Smartphones, die mit dem Android-Custom-ROM GrapheneOS ausgeliefert werden.

Die Android Developer Verification will von Google nicht zertifizierte Apps unterbinden. Liegt darin eine Chance für alternative mobile Betriebssysteme?

The official Xubuntu website briefly served Windows malware to users trying to download the distro between 18-19 October. ISOs were not affected.

You're reading Xubuntu Website Hijack Served Malware Downloads (Now Fixed), a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Doing anything right now? Oh, you’re reading this – appreciated – but once you’re done go and install the pending update to Rsync, pushed out to all supported versions of Ubuntu desktop and server this week. Rsync is a command-line tool preinstalled in all versions and flavours of Ubuntu. It’s used for data-efficient copying and synchronising of files between locations, be it local or remote. You might not (knowingly) use it (it’s not a GUI app) it’s there, on your system. And the fact it’s there is important. This week, security researchers at Google disclosed major vulnerabilities in the Ubuntu […]

You're reading Ubuntu Patches Major Security Vulnerabilities in Rsync, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Canonical released new Linux kernel security updates for Ubuntu 21.10, 20.04 LTS, and 18.04 LTS releases to address a total of 17 vulnerabilities. All users are urged to update their installations as soon as possible!

The post New Ubuntu Linux Kernel Security Updates Patch 17 Vulnerabilities appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

Canonical is currently promoting a beta Ubuntu Pro for Desktop programme through the Software & Updates app on Ubuntu LTS releases. But what is it?

This post, What the ‘Ubuntu Pro’ banner in Ubuntu Means is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

The CentOS Linux 8 operating system series reached end of life on December 31st, 2021, and it's time to migrate to an alternative OS like Rocky Linux or AlmaLinux OS.

The post CentOS Linux 8 Reached End of Life, It’s Time to Migrate to an Alternative OS appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.