Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Canonical has published new Linux kernel updates for all supported Ubuntu LTS systems to address a total of 19 security vulnerabilities. . The new Ubuntu kernel updates are available only for long-term supported Ubuntu systems, including Ubuntu 22.04 LTS (Jammy Jellyfish ) , Ubuntu 20.04 LTS (Focal Fossa), and Ubuntu 18.04 LTS (Bionic Beaver). These Ubuntu kernel updates are here to patch up to 19 vulnerabilities, including CVE-2022-41849 and CVE-2022-41850 , two race conditions discovered in the Roccat HID and SMSC UFX USB drivers that could lead to use-after-free vulnerabilities. These affect all Ubuntu LTS systems mentioned above and could allow local and physically proximate attackers to cause a denial of service (system crash) or execute arbitrary code. Three other vulnerabilities affected Ubuntu 22.04 LTS and Ubuntu 20.04 LTS systems running Linux kernel 5.15 LTS, as well as Ubuntu 20.04 LTS and Ubuntu 18.04 LTS systems running Linux kernel 5.4 LTS. The link for this article located at 9 to 5 Linux is no longer available. . Ubuntu kernel revisions address 21 vulnerabilities, impacting versions such as 22.10, 21.04, and 20.10.. Ubuntu Kernel Update, Patch Security Issues, Critical Bugs. . Brittany Day
Google has patched 29 security flaws, many of them deemed critical, in the latest update to the Chrome browser. On Tuesday, Google pushed Chrome 45 for Windows, Mac and Linux to the stable channel and for public release. As part of the Chrome 45.0.2454.85 update, 29 bugs have been fixed, and a number of improvements have been made.. The most critical issues fixed in this update were three cross-origin bypass problems, which netted researchers $7500 in each case. In addition, a bug bounty hunter earned $5000 for a use-after-free vulnerability in Skia. The link for this article located at ZDNet Security is no longer available. . Google fixes 29 critical flaws in Chrome 45.0.2454.85 update with essential security patches for users.. Chrome Update, Security Flaws, Google Chrome, Browser Security, Software Updates. . LinuxSecurity.com Team
A Mozilla executive has vowed that his company can patch any critical vulnerability in its software within 10 days, a sign that Mozilla intends to step up its efforts to improve security. I found this to be a pretty bold claim. Does this have anything to do with the recent flood of Firefox security bugs? I really hope that Mozilla is able to stick with their claim of providing security fixes with-in 10 day. Could other software makers do the same thing? . Mozilla executive Mike Shaver backed up his claim by scrawling it on a business card at the Black Hat security conference in Las Vegas last week and handing it to Robert Hansen, CEO of SecTheory.com, who also runs the ha.ckers.org website. Hansen posted a photo of Shaver's business card, including the claim "Ten [expletive] days." The link for this article located at TechWorld is no longer available. . Mozilla executive Mike Shaver backed up his claim by scrawling it on a business card at the Black Ha. mozilla, executive, vowed, company, patch, critical, vulnerability, software. . Bill Locke
Wednesday became a busy day for database administrators after Oracle released its quarterly patch update which, this time around, tackles more than 80 vulnerabilities in different Oracle software packages and components. Various flavours of Oracle database (37 security bugs), Oracle E-Business Suite and Applications (27), Oracle Collaboration Suite (20) and Oracle Application Server (17) are most in need of update. . The link for this article located at TheRegister.co.uk is no longer available. . The link for this article located at TheRegister.co.uk is no longer available.. wednesday, became, database, administrators, oracle, released, quarterly, patch. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.