LWN.net's Journal
[Most Recent Entries]
[Calendar View]
Tuesday, February 12th, 2019
| Time |
Event |
| 3:41p |
Security updates for Tuesday
Security updates have been issued by Arch Linux (chromium, dovecot, firefox, and spice), Debian (curl, php5, rssh, and wordpress), Fedora (curl, ghostscript, mingw-libconfuse, and radvd), openSUSE (java-11-openjdk and python-urllib3), Red Hat (chromium-browser and kernel), and SUSE (etcd and kernel). | | 3:48p |
CVE-2019-5736: runc container breakout
Anybody running containerized workloads with runc (used by Docker,
cri-o, containerd, and Kubernetes, among others) will want to make note of
a newly disclosed vulnerability known as CVE-2019-5736. "The vulnerability allows a malicious container to (with minimal user
interaction) overwrite the host runc binary and thus gain root-level
code execution on the host." LXC is also evidently vulnerable to a
variant of the exploit. | | 4:48p |
[$] Avoiding the coming IoT dystopia
Bradley Kuhn works for the Software Freedom Conservancy (SFC)
and part of what that organization does is to think about the problems that
software
freedom may encounter in the future. SFC worries about what will happen
with the four
freedoms as things change in the world.
One of those changes is already upon us: the Internet of Things (IoT) has
become quite popular, but it has many dangers, he said. Copyleft
can help; his talk is meant to show how. | | 6:25p |
Plasma 5.15 released KDE has announcedthe release of Plasma 5.15. " Plasma 5.15 brings a number of changes
to the configuration interfaces, including more options for complex network
configurations. Many icons have been added or redesigned to make them
clearer. Integration with third-party technologies like GTK and Firefox has
been improved substantially." This release also features improvements to the Discover software manager. Many other tweaks and improvements are covered in the changelog. | | 8:48p |
Stable kernel updates Stable kernels 4.20.8, 4.19.21, 4.14.99, and 4.9.156 have been released. They all contain a relatively large number of fixes and users should upgrade. |
|