LINUX Unplugged - Episodes Tagged with “Vulnerability”

582: On the CUPS of Disaster

Jupiter Broadcasting — Sun, 29 Sep 2024 18:00:00 -0700

We explain the one-packet attack on CUPS and discuss its real-world implications. Plus, a Meshtastic update and more.

Links:

💥 Gets Sats Quick and Easy with Strike
📻 LINUX Unplugged on Fountain.FM
Attacking UNIX Systems via CUPS — A remote unauthenticated attacker can silently replace existing printers’ (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print job is started (from that computer).
Marcus Hutchins Scan finds 107,287 servers responding to the UDP port 631 — Instead of relying on Shodan data, I performed my own internet-wide scan using a distributed network of servers. This resulted in discovering drastically more exposed cups-browsed instances, causing my total count to rise from 13,289 to 107,287.
Shodan on X: 75,000 exposed CUPS daemons on the Internet
Annual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!
nodeboard — Your Ultimate Digital Inventory Manager
Lightning Pay
activate-linux — The "Activate Windows" watermark ported to Linux
Install Frog on Linux | Flathub — Extract text from images, websites, videos, and QR codes by taking a picture of the source.
Clapgrep — Ever had a folder full of PDF files, where you knew, somewhere in there, is what you're looking for. But you did not know in which file. So you had to search each of them at a time...

570: RegreSSHion Strikes

Jupiter Broadcasting — Sun, 07 Jul 2024 17:00:00 -0700

We dig into the RegreSSHion bug, debate it's real threat and explore clever tools to build a tasty fried onion around your system.

541: Out with a Bang

Jupiter Broadcasting — Sun, 17 Dec 2023 14:30:00 -0800

The stories that kept us talking all year, and are only getting hotter!

Plus the big flops we're still sore about.

Special Guest: Kenji Berthold.

288: We're Gonna Need a Bigger Repo

Jupiter Broadcasting — Tue, 12 Feb 2019 23:30:00 -0800

The hype around a new security flaw hits new levels. Fedora has a bunch of news, and we discover what's new in the latest Plasma release.

Plus we fall down the openSUSE rabbit hole when Ell updates us on her desktop challenge.

Special Guests: Alan Pope, Brent Gervais, Danielle Foré, Ell Marquez, Martin Wimpress, and Neal Gompa.

Support LINUX Unplugged

Links:

KDE Plasma 5.15: Lightweight, Usable and Productive — Discover, Plasma's software and add-on installer, has received tonnes of improvements to help you stay up-to-date and find the tools you need to get your tasks done.
CVE-2019-5736: runc container breakout (all versions) — However, it *is* blocked through correct use of user namespaces (where the host root is not mapped into the container's user namespace).
Container Bug Allows Attackers to Gain Root Access on Host Machine — The container bug, CVE-2019-5736, affects runc, the underlying container runtime for Docker, containerd, Kubernetes, cri-o and other container software, which means that nearly everyone running containers is affected.
Doomsday Docker security hole uncovered | ZDNet
Linux Coin Miner Removes All Other Malware and Miners
Fedora logo redesign — The current Fedora Logo has been used by Fedora and the Fedora Community since 2005. However, over the past few months, Máirín Duffy and the Fedora Design team, along with the wider Fedora community have been working on redesigning the Fedora logo.
Fedora's FESCo Approves Of A "Sane" Approach For Counting Fedora Users Via DNF — Baked over the past month was a new privacy-minded plan for counting users via DNF that relies upon a "countme" bit that will be incremented weekly or so and not have any UUID as originally envisioned
Fedora 30 Will Get Bash 5.0 But Yum's Death Sentence Postponed To F31
Draft Fedora 31 schedule available – Fedora Community Blog — After some discussion before the end of the year, we decided not to go with an extended development cycle for Fedora 31.
SCALE Saturday Dinner JB Meetup — Let's eat and be merry at P.F. Changes Saturday night of SCALE17x!
Containers: What you need to know; so you know what you need to know - Ell Marquez at S
Elementary Staging COPR Repo — This repository contains packages of official elementaryOS projects which are not (yet) ready for inclusion in fedora as official packages.
Ellopunk/OSchallenge - openSUSE — Ell's openSUSE journey notes.
Pantheon Desktop on Fedora — The Pantheon desktop environment is the DE that powers elementaryOS. It builds on GNOME technologies, but utilizes components that were written from scratch in vala, using the GTK+3 toolkit.
UberWriter — It's a simple markdown editor that offers a lot of features.
solVItaire — An implementation of the classic solitaire games Klondike and Spider which has some nice to use vi(1) like keybindings, but can also be played with standard cursor keys, the number pad/row or even the mouse.
VIM Adventures — Learn VIM while playing a game!
Solvitaire As a SNAP
FireQOS Reference
FireQOS New User Tutorial