Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Ahead With Linux Security News

14.Lock Code WorldMap Esm H350
Network SecurityPrice Tag 1system security Linux network

The romanticized image of the digital nomad – a laptop on a sun-drenched balcony – rarely accounts for the actual friction of maintaining a professional development environment on the move. . The friction is amplified with Linux. We are looking for a setup that respects our kernel configurations, handles volatile network handovers, and maintains a strict security posture without the hand-holding of a consumer-grade OS – so, put simply, more than just a laptop and a sunny deck. The hardware is...
1 min read Network Security
2.Motherboard Esm H350
Server SecurityPrice Tag 1open-source Linux administration

Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other maintenance work that administrators do not want to run manually. Most Linux servers rely on it constantly, which is exactly why attackers continue abusing it for persistence after a system has already been compromised. . Persistence through cron is not complicated. Attackers do not need a rootkit or advanced malware framework to maintain...
3 - 6 min read Server Security
20.Lock AbstractDigital Circular Esm H350
Vendors/ProductsPrice Tag 1security breach linux

A major internal repository breach at GitHub has exposed a critical and overlooked blind spot in Linux supply chain security. Kernel exploits, exposed SSH services, weak firewall rules, and vulnerable daemons dominated the Linux threat model for years, and in many environments, they still matter. But recent supply-chain incidents involving GitHub ecosystems, npm packages, and malicious developer tooling point somewhere else entirely: the developer workstation. . The breach matters because...
5 - 10 min read Vendors/Products
30.Lock Globe Motherboard Esm H350
Security Trends Price Tag 1access control multi-tenant

Linux administrators often face an ugly choice in the cloud: prioritize convenience and cost-efficiency by sharing infrastructure, or sacrifice those benefits for the sake of total isolation. Most modern Linux workloads don't live on their own private servers anymore. They live in shared environments like Kubernetes clusters, where multiple teams and services run side-by-side. It sounds efficient, and it usually is. . But cloud isolation isn't as ironclad as it looks on the diagram. If you...
4 - 8 min read Security Trends
5.ShakingHands Esm H350
Vendors/ProductsPrice Tag 1incident response cloud security

Managed Extended Detection and Response (MXDR) has become one of the most sought-after security services in the enterprise market — and with good reason. It promises the holy grail: broad visibility across endpoints, network, cloud, email, and identity, combined with the 24/7 human expertise most organizations simply cannot build in-house. . However, the rapid growth of the market has produced a wide range of providers whose capabilities vary considerably beneath the surface. Choosing the...
4 - 7 min read Vendors/Products
Filter Icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found -4 articles for you...
77
General Esm H240
Price Tag 1security advisorysoftware updatesecurity fix

BIND 8.4.3 Security Advisory: Mitigating Cache Poisoning Risks

BIND 8.4.3 is a maintenance release of BIND 8.4. It includes the BIND 8.4.2 release which includes a security fix (also released as BIND 8.3.7). EnGarde has updates available; other vendors expected to follow shortly. It is not yet known if this impacts BIND-9; updates to follow. . . .. BIND 8.4.3 is a maintenance release of BIND 8.4. It includes the BIND 8.4.2 release which includes a security fix (also released as BIND 8.3.7). EnGarde has updates available; other vendors expected to follow shortly. It is not yet known if this impacts BIND-9; updates to follow. Subject: BIND 8.4.3 Release (8.4.3-REL) Date: 2003-11-26 23:00:59 BIND 8.4.3 Release (8.4.3-REL) BIND 8.4.3 is a maintenance release of BIND 8.4. It includes the BIND 8.4.2 release which includes a security fix (also released as BIND 8.3.7). Highlights. Maintenance Release. Highlights (8.4.2) Security Fix: Negative Cache Poison Fix. the distribution files are: Ftp://ftp.isc.org/isc/bind/src/8.4.3/bind-doc.tar.gz the pgp signature files are: .asc the md5 checksums are: MD5 (bind-contrib.tar.gz) = 454f8e3caf1610941a656fcc17e1ecec MD5 (bind-contrib.tar.gz.asc) = f8f0a5b8985a8180e5bd02207f319980 MD5 (bind-doc.tar.gz) = fcfdaaa2fc7d6485b0e3d08299948bd3 MD5 (bind-doc.tar.gz.asc) = fc0671468c2e3a1e5ff817b69da21a6b MD5 (bind-src.tar.gz) = e78610fc1663cfe8c2db6a2d132d902b MD5 (bind-src.tar.gz.asc) = 40453b40819fd940ad4bfabd26425619 Windows NT / Windows 2000 binary distribution. the md5 checksums are: MD5 (readme1st.txt) = ac4ce260f151dc1ab393c145f4288bba MD5 (BIND8.4.3.zip) = 7c3e333f90edbe3820952a62ff6ffdf3 MD5 (BIND8.4.3.zip.asc) = f2190cc390ce584c0cc624835bdcc8eb MD5 (readme1sttools.txt) = eef4c5782be1a1faac3ca0c756eaef05 MD5 (BIND8.4.3Tools.zip) = 8cb29c092394dfa430ef9ea47b6a02ea MD5 (BIND8.4.3Tools.zip.asc) = a77b2adb1f23db780f45efee32a92882 top of CHANGES says: --- 8.4.3 released --- (Mon Nov 24 17:27:52 PST 2003) 1617. [cleanup] don't pre-fetchmissing additional address records if we have one of A/AAAA. 1616. [func] turn on "preferred-glue A;" (if not specified in named.conf) if the answer space is a standard UDP message size or smaller. 1615. [func] when query logging log whether TSIG (T) and/or EDNS (E) was used to make the query. 1614. [cleanup] on dual (IPv4+IPv6) stack servers delay the lookup of missing glue if we have glue for one family. 1613. [cleanup] notify: don't lookup A/AAAA records for nameservers if we don't support the address at the transport level. 1612. [func] named now takes arguements -4 and -6 to limit the IP transport used for making queries. 1611. [debug] better packet tracing in debug output (+ some lint). 1610. [bug] don't explictly declare errno use . 1609. [bug] drop_port() was being called with ports in network order rather than host order. 1608. [port] sun: force alignment of answer in dig.c. 1607. [bug] do not attempt to prime cache when recursion and fetch-glue are disabled. 1606. [bug] sysquery duplicate detection was broken when using forwarders. 1605. [port] sun: force alignment of newmsg in ns_resp.c. 1604. [bug] heap_delete() sometimes violated the heap invariant, causing timer events not to be posted when due. 1603. [port] ds_remove_gen() mishandled removal IPv6 interfaces. 1602. [port] linux: work around a non-standard __P macro. 1601. [bug] dig could report the wrong server address on transfers. 1600. [bug] debug_freestr() prototype mismatch. 1599. [bug] res_nsearch() save statp-> res_h_errno instead of h_errno. 1598. [bug] dprint_ip_match_list() fails to print the mask correctly. 1597. [bug] use the actual presentation length of the IP address to determine if sprintf() is safe in write_tsig_info(). --- 8.4.2 released --- (Thu Sep 4 06:58:22 PDT 2003) 1596. [port] winnt: set USELOOPBACK in port_after.h 1595. [bug] dig: strcat used instead of strcpy. 1594. [bug] if only a single nameserver was listed in resolv.conf IPv6 default server was also being used. 1593. [port] irix: update port/irix/irix_patch. 1592. [port] irix: provide a sysctl() based getifaddrs() implementation. 1591. [port] irix: sa_len is a macro. 1590. [port] irix: doesn't have msg_control (NO_MSG_CONTROL) 1589. [port] linux: uninitalised variable. 1588. [port] solaris: provide ALIGN. 1587. [port] NGR_R_END_RESULT was not correct for some ports. 1586. [port] winnt: revert to old socket behaviour for UDP sockets (Windows 2000 SP2 and later). 1585. [port] solaris: named-xfer needs . 1584. [port] bsdos: explictly include for 4.0 and 4.1. 1583. [bug] add -X to named-xfer usage message. 1582. [bug] ns_ownercontext() failed to set the correct owner context for AAAA records. ns_ptrcontext() failed to return the correct context for IP6.ARPA. 1581. [bug] apply anti-cache poison techniques to negative answers. 1580. [bug] inet_net_pton() didn't fully handle implicit multicast IPv4 network addresses. 1579. [bug] ifa_addr can be NULL. 1578. [bug] named-xfer: wrong arguement passed to getnameinfo(). 1577. [func] return referrals for glue (NS/A/AAAA) if recursion is not desired (hp-> rd = 0). 1576. [bug] res_nsendsigned() incorrectly printed the truncated UDP response when RES_IGNTC was not set. 1575. [bug] tcp_send() passed the wrong length to evConnect(). 1574. [bug] res_nsendsigned() failed to handle truncation cleanly. 1573. [bug] tsig_size was not being copied by ns_forw(). 1572. [port] bsdos: missing #include . 1571. [bug] AA was sometimes incorrectly set. 1570. [port] decunix: change #1544 broke OSF1 3.2C. 1569. [bug] remove extraneous closes. 1568. [cleanup] reduce the memory footprint for large numbers of zones. 1567. [port] winnt: install MSVC70.DLL and MFC70.DLL. 1566. [bug] named failed to locate keys declared in masters clause. 1565. [bug] named-xfer was failing to use TSIG. 1564. [port] linux: allow static linkage to work. 1563. [bug] ndc getargs_closure failed to NUL terminate strings. 1562. [bug] handle non-responsive servers better. 1561. [bug] rtt estimates were not being updated for IPv6 addresses. 1560. [port] linux: add runtime support to handle old kernels that don't know about msg_control. 1559. [port] named, named-xfer: ensure that stdin, stdout and stderr are open. --- 8.4.1-P1 released --- (Sun Jun 15 17:35:10 PDT 2003) 1558. [port] sunos4 doesn't have msg_control (NO_MSG_CONTROL). 1557. [port] linux: socket returns EINVAL for unsupported family. 1556. [bug] reference through NULL pointer. 1555. [bug] sortlist wasn't being applied to AAAA queries. 1554. [bug] IPv4 access list elements of the form number/number (e.g. 127/8) were not correctly defined. 1553. [bug] getifaddrs*() failed to set ifa_dstaddr for point to point links (overwrote ifa_addr). 1552. [bug] buffer overruns in getifaddrs*() if the server has point to point links. 1551. [port] freebsd: USE_IFNAMELINKIDS should be conditionally defined. 1550. [port] TruCluster support didn't build. 1549. [port] Solaris 9 has /dev/random. --- 8.4.1-REL released --- (Sun Jun 8 15:11:32 PDT 2003) 1548. [port] winnt: make recv visible from libbind. 1547. [port] cope with spurious EINVAL from evRead. 1546. [cleanup] dig now reports version 8.4. 1545. [bug] getifaddrs_sun6 was broken. 1544. [port] hpux 10.20 has a broken recvfrom(). Revert to recv() in named-xfer and work around deprecated recv() in OSF. 1543. [bug] named failed to send notifies to servers that live in zones it was authoritative for. 1542. [bug] set IPV6_USE_MIN_MTU on IPv6 sockets if the kernel supports it. 1541. [bug] getifaddrs_sun6() should be a no-op on early SunOS releases. --- 8.4.0-REL released --- (Sun Jun 1 17:49:31 PDT 2003) . BIND version 8.4.3 is a vital update that enhances maintenance, specifically targeting vulnerabilities with new security patches to combat cache poisoning threats. BIND Security, Cache Poisoning, EnGarde Updates. . LinuxSecurity.com Team

Calendar 2 Nov 26, 2003 •User Avatar LinuxSecurity.com Team Server Security
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here