Sign up to save your podcasts
Or
Share Episode 36
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Episode 36
Overview
Security updates for DBus, vim, elfutils, GLib and more, plus Joe and Alex look at another npm package hijack as well as some wider discussions around the big vim RCE of this week.
This week in Ubuntu Security Updates
43 unique CVEs addressed
[USN-4012-1] elfutils vulnerabilities
from crafted input files
libdw) on crafted ELF input
other tools to process .a archive files)
[USN-4013-1] libsndfile vulnerabilities
[USN-4014-1, USN-4014-2] GLib vulnerability
and then once copy was done would then set the correct permissions (based
on the original files permissions)
accessible by the current user) to avoid this
[USN-4015-1, USN-4015-2] DBus vulnerability
credentials passed via UNIX sockets (is secure as is enforced by the
kernel), but this is not supported on all platforms (Windows etc)
say by being able to read and provide a magic value from a keyring file
which dbus drops in the user’s home directory
keyring at some other file and cause DBus to read / write to some other
file which was not intended
and cause DBus to eventually confuse the local user’s authentication to
the bus as that of the root user and so allow an unprivileged user to
authenticate as root and so then perform operations as root via DBus
same user as the DBus server owner - ie. if running DBus as root you can
only authenticate as root, not as your local user (since this use-case is
not actually used in practice)
[USN-4016-1] Vim vulnerabilities
type etc so that editing is consistent
everything can be set by modelines - and is meant to be side-effect
free
commands from a file as though typed by the user and is done so outside
the sandbox
the modeline (since vim supports running external commands from the
editor itself)
so unless a user had specifically enabled it in their own vimrc they are
safe
sandbox at all
crafted spell file (this is used to store locally spelling additions etc)
[USN-4016-2] Neovim vulnerability
[USN-3991-3] Firefox regression
updated to 67.0.1 (Episode 35) - this also contained another regression
where Firefox would fail to load correctly if run in safe-mode. So
upstream released 67.0.2 which is this new update.
Goings on in Ubuntu Security Community
Alex and Joe talk about another npm package hijack attack and the vim issue
Hiring
Robotics Security Engineer
Get in contact
View all episodes
By Ubuntu Security Team
4.8
1010 ratings
Overview
Security updates for DBus, vim, elfutils, GLib and more, plus Joe and Alex look at another npm package hijack as well as some wider discussions around the big vim RCE of this week.
This week in Ubuntu Security Updates
43 unique CVEs addressed
[USN-4012-1] elfutils vulnerabilities
from crafted input files
libdw) on crafted ELF input
other tools to process .a archive files)
[USN-4013-1] libsndfile vulnerabilities
[USN-4014-1, USN-4014-2] GLib vulnerability
and then once copy was done would then set the correct permissions (based
on the original files permissions)
accessible by the current user) to avoid this
[USN-4015-1, USN-4015-2] DBus vulnerability
credentials passed via UNIX sockets (is secure as is enforced by the
kernel), but this is not supported on all platforms (Windows etc)
say by being able to read and provide a magic value from a keyring file
which dbus drops in the user’s home directory
keyring at some other file and cause DBus to read / write to some other
file which was not intended
and cause DBus to eventually confuse the local user’s authentication to
the bus as that of the root user and so allow an unprivileged user to
authenticate as root and so then perform operations as root via DBus
same user as the DBus server owner - ie. if running DBus as root you can
only authenticate as root, not as your local user (since this use-case is
not actually used in practice)
[USN-4016-1] Vim vulnerabilities
type etc so that editing is consistent
everything can be set by modelines - and is meant to be side-effect
free
commands from a file as though typed by the user and is done so outside
the sandbox
the modeline (since vim supports running external commands from the
editor itself)
so unless a user had specifically enabled it in their own vimrc they are
safe
sandbox at all
crafted spell file (this is used to store locally spelling additions etc)
[USN-4016-2] Neovim vulnerability
[USN-3991-3] Firefox regression
updated to 67.0.1 (Episode 35) - this also contained another regression
where Firefox would fail to load correctly if run in safe-mode. So
upstream released 67.0.2 which is this new update.
Goings on in Ubuntu Security Community
Alex and Joe talk about another npm package hijack attack and the vim issue
Hiring
Robotics Security Engineer
Get in contact