Published on Tux Machines (http://www.tuxmachines.org)

Home > content > Security: Latest Patches, GNU Guix Vulnerability, and Security Enhancements

Security: Latest Patches, GNU Guix Vulnerability, and Linux Security Enhancements

By Roy Schestowitz Created 09/02/2021 - 7:45pm Submitted by Roy Schestowitz on Tuesday 9th of February 2021 07:45:51 PM Filed under Security [1]

Security updates for Tuesday [LWN.net] [2]

Security updates have been issued by CentOS (), (connman, golang-1.11, and openjpeg2), Fedora (pngcheck), (, phppgadmin, and wpa_supplicant), openSUSE (privoxy), Oracle (flatpak and kernel), Red Hat (qemu-kvm-rhev), SUSE (kernel, python- urllib3, and python3), and (firefox).

Risk of local privilege escalation via setuid programs ? 2021 ? Blog ? GNU Guix[3]

On Guix System, setuid programs were, until now, installed as setuid-root and setgid-root (in the /run/setuid-programs directory). However, most of these programs are meant to run as setuid-root, but not setgid-root. Thus, this setting posed a risk of local privilege escalation (users of Guix on a ?foreign distro? are unaffected).

security things in Linux v5.8 [4]

Linux v5.8 was released in August, 2020. Here?s my summary of various security things that caught my attention... Cook: security things in Linux v5.8 [5]

Kees Cook catches up with the security-related changes in the 5.8 kernel release.

Security

Source URL: http://www.tuxmachines.org/node/147465

Links: [1] http://www.tuxmachines.org/taxonomy/term/59 [2] https://lwn.net/Articles/845504/rss [3] https://guix.gnu.org/blog/2021/risk-of-local-privilege-escalation-via-setuid-programs/ [4] https://outflux.net/blog/archives/2021/02/08/security-things-in-linux-v5-8/ [5] https://lwn.net/Articles/845469/rss