New Security Updates for Ubuntu
Linux developers Canonical has released important security updates for the Ubuntu kernel, strongly recommending upgrades for releases 6.06 LTS, 7.10 and 8.04 LTS and corresponding versions of Kubuntu, Edubuntu and Xubuntu.
The updates became necessary after the discovery of numerous security flaws in the Linux kernel. The direct-10 subsystem fails to validate certain structures, tmpfs implementation is faulty and the NFSv4 does not correctly handle file ACLs. All of these bugs are capable of causing the system to crash or result in a Denial of Service.
A detailed list of bugs is published on the Ubuntu Security Notice USN-659-1. The bug fixes can be applied using the Synaptic, Aptitude and other package-management tools, with a reboot necessary to complete the process.
Additional information is aimed at Ubuntu 8.04 (Hardy Heron) users; with the update pocket disabled, the kernel upgrade will include an unavoidable ABI change and the kernel will be given a new version number. All third party kernel modules will have to be recompiled and reinstalled. Drivers from Ubuntu's own package "linux-restricted-modules" will be updated automatically.
Issue 163/2014
Buy this issue as a PDF
Digital Issue: Price $9.99
(incl. VAT)
Tag Cloud
News
-
KDE Announces Software Compilation 4.13
New release comes with better semantic search and improvements to Kontact.
-
Coverity: Open Source Code has Fewer Defects
Annual code quality report shows FOSS is more secure at all project size levels.
-
An Even Smaller Raspberry Pi
The Raspberry Pi Foundation has announced an even smaller version of the tiny computer that will fit into a DIMM slot.
-
Freaky Privilege Escalation Attack
A new class of problems lets a malicious app pre-configure an invisible privilege update.
-
Facebook Rolls Out New PHP-like Programming Language
New Hack language adds static typing and other conveniences.
-
Fedora Announces Innovative Crytography Policy System
New crypto policy system will offer easier configuration and more uniform security.
-
Shuttleworth Calls for Declarative Firmware
Ubuntu founder denounces insecurity in proprietary, close-source software blobs.
-
New TLS Attack Takes the S out of HTTPS
Vulnerability affects many Linux web servers
-
Munich Adopts Kolab
The Bavarian capital shuns Microsoft, Google, and other alternatives to implement an open source groupware solution.
-
Canonical Announces Ubuntu Smartphones
Phone vendor partnerships bring Mark Shuttleworth's dream of Ubuntu on a phone a step closer to reality.