Major Crypto Bug Cripples Ubuntu Linux Security: related news

[USN-618-1] Linux kernel vulnerabilities

Ubuntu Security Notice USN-618-1        June 19, 2008 linux-source-2.6.15/20/22 vulnerabilities CVE-2007-4571, CVE-2007-5904, CVE-2007-6694, CVE-2008-0007, CVE-2008-1294, CVE-2008-1375, CVE-2008-1669 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.04 Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS:  linux-image-2.6.15-52-386    2.6.15-52.67  linux-image-2.6.15-52-686    2.6.15-52.67  linux-image-2.6.15-52-amd64-generic  2.

[RHSA-2008:0537-01] Important: openoffice.org security update

Red Hat Security Advisory Synopsis: Â Â Â Â Â Important: openoffice.org security update Advisory ID: Â Â Â RHSA-2008:0537-01 Product: Â Â Â Â Â Red Hat Enterprise Linux Advisory URL: Â Â Â https://rhn.redhat.com/errata/RHSA-2008-0537.html Issue date: Â Â Â Â 2008-06-12 CVE Names: Â Â Â Â CVE-2008-2152 ===================================================================== 1. Summary: Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ppc, x86_64 Red Hat Enterprise Linux Desktop versi

Major Crypto Bug Cripples Ubuntu Linux Security

Desktops Digital Cameras DVD Creation Handhelds Laptops LCDs MP3 Players PDAs & Phones Printers VoIP Windows XP Wireless Networks All categories

Samba (SUSE-SA:2008:026)

______________________________________________________________________________ SUSE Security Announcement Package: samba Announcement ID: SUSE-SA:2008:026 Date: Wed, 04 Jun 2008 17:00:00 +0000 Affected Products: SUSE LINUX 10.1 openSUSE 10.2 openSUSE 10.3 SuSE Linux Enterprise Server 8 SUSE SLES 9 Novell Linux Desktop 9 Open Enterprise Server Novell Linux POS 9 SUSE Linux Enterprise Desktop 10 SP1 SUSE Linux Enterprise Server 10 SP1 SLE SDK 10 SP1 SUSE Linux Enterprise Desktop 10 SP2 SUSE Linux Enterprise Server 10 SP2 SLE SDK 10 SP2 Vulnerability Type: remote code execution Severity (1-10): 7 SUSE Default Package: no Cross-References: CVE-2008-1105 Content of This Advisory: 1) Security Vulnerability Resolved: Samba security update Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Che

Linux Desktop

Linux desktop news, tips and how-tos for value-added resellers (VARs), solution providers, consultants and systems integrators helping customers select, install and manage Linux desktops. You'll find expert advice, best practices and tutorials to help you manage and support Linux desktops, including information on choosing Linux distributions and platforms, offering Linux desktop support services, configuring Linux desktops, migrating to Linux, the advantages of Linux for the desktop and more open source considerations and channel opportunities around the Linux desktop.

BitDefender: BitDefender Security for Linux Wins VB100 Award; Virus Bulletin Comparative Review Conducted on Ubuntu Linux Server Edition Platform

BitDefender: BitDefender Security for Linux Wins VB100 Award; Virus Bulletin Comparative Review Conducted on Ubuntu Linux Server Edition Platform

BitDefender Security for Linux Wins VB100 Award

an award-winning provider of antivirus software and data security solutions, announced today that BitDefender Security for Linux has won a VB100 Award from Virus Bulletin, adding to the company's growing list of awards for its proactive threat prevention solutions. BitDefender Security for Linux won the award in the latest Virus Bulletin comparative review on the Ubuntu Linux Server Edition Platform.

Ubuntu MID makes Linux upwardly mobile (iTWire)

Ubuntu Linux owner Canonical has launched Ubuntu into the realm of mobile Internet devices with a release called Ubuntu MID. The new version of arguably the world's most popular desktop Linux distribution initially targeted the Samsung Q1U though the OS also runs on Intel's Atom-based Crown Beach development system. Ubuntu MID 8.04 is a developer release, but the software is expected to start to ship on commercial devices by the end of the year.

MontaVista Linux CGE 5.0 Complies with CGL 4.0, LSB 3.0, IPv6

MontaVista® Software, Inc., the leader in embedded Linux® commercialization, announced that its Linux Carrier Grade Edition (CGE) 5.0 has registered compliance with the Linux Foundation's Carrier Grade Linux (CGL) 4.0 specification, has earned Linux Standard Base (LSB) 3.0 certification, and is Internet Protocol version 6 (IPv6) logo certified. This achievement makes MontaVista the only Linux distribution in the world to comply with the three key requirements issued by the industry's major standards bodies, demonstrating that MontaVista Linux CGE interoperates with industry software and hardware, and meets the rigorous demands of today's carrier infrastructures.

Windows-Linux Integration

"The use of Linux is no longer the sole preserve of IT administrators and tech-savvy computer users. Linux can now easily be incorporated into your environment without even having to go through the hassle of re-partitioning a disk. My previous article on VMWare illustrates that Linux is now pretty much a tool for everyone to use. However, one argument often made against the use of Linux is the difficulty of managing it. For instance, can you easily store and retrieve files on a Linux machine? Also, what about the problem of just interacting with and running the Linux machine? Isn't keeping up to date with Linux security patches a big problem? These are all good questions that I answer in the remainder of this article.

MontaVista Linux Carrier Grade Edition First to Comply with Three Key Specifications for Telecom Industry

SANTA CLARA, Calif. — July 15, 2008 — MontaVista® Software, Inc., the leader in embedded Linux® commercialization, today announced that its Linux Carrier Grade Edition (CGE) 5.0 has registered compliance with the Linux Foundations Carrier Grade Linux (CGL) 4.0 specification, has earned Linux Standard Base (LSB) 3.0 certification, and is Internet Protocol version 6 (IPv6) logo certified. This achievement makes MontaVista the only Linux distribution in the world to comply with the three key requirements issued by the industrys major standards bodies, demonstrating that MontaVista Linux CGE interoperates with industry software and hardware, and meets the rigorous demands of todays carrier infrastructures.

MontaVista Linux Carrier Grade Edition First to Comply with Three Key Specifications for Telecom Industry

SANTA CLARA, Calif.--(BUSINESS WIRE)--July 15, 2008--MontaVista® Software, Inc., the leader in embedded Linux® commercialization, today announced that its Linux Carrier Grade Edition (CGE) 5.0 has registered compliance with the Linux Foundation’s Carrier Grade Linux (CGL) 4.0 specification, has earned Linux Standard Base (LSB) 3.0 certification, and is Internet Protocol version 6 (IPv6) logo certified. This achievement makes MontaVista the only Linux distribution in the world to comply with the three key requirements issued by the industry’s major standards bodies, demonstrating that MontaVista Linux CGE interoperates with industry software and hardware, and meets the rigorous demands of today’s carrier infrastructures.

[RHSA-2008:0538-01] Important: openoffice.org security update

Red Hat Security Advisory Synopsis: Â Â Â Â Â Important: openoffice.org security update Advisory ID: Â Â Â RHSA-2008:0538-01 Product: Â Â Â Â Â Red Hat Enterprise Linux Advisory URL: Â Â Â https://rhn.redhat.com/errata/RHSA-2008-0538.html Issue date: Â Â Â Â 2008-06-12 CVE Names: Â Â Â Â CVE-2008-2152 CVE-2008-2366 ===================================================================== 1. Summary: Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 - i386, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat En

Kernel Devs Publish Position Statement on Linux Kernel Modules

We, the undersigned Linux kernel developers, consider any closed-source Linux kernel module or driver to be harmful and undesirable. We have repeatedly found them to be detrimental to Linux users, businesses, and the greater Linux ecosystem. Such modules negate the openness, stability, flexibility, and maintainability of the Linux development model and shut their users off from the expertise of the Linux community. Vendors that provide closed-source kernel modules force their customers to give up key Linux advantages or choose new vendors. Therefore, in order to take full advantage of the cost savings and shared support benefits open source has to offer, we urge vendors to adopt a policy of supporting their customers on Linux with open-source kernel code.

Avnet Launches MicroBlaze Processor Linux Design Solution

Avnet Inc. has released its Xilinx MicroBlaze Processor Linux DVD, MicroBlaze Processor Linux Starter Kit and the launch of the Linux for MicroBlaze Processor SpeedWay Design Workshop. The stand-alone Linux for MicroBlaze Processor DVD is based on both PetaLogix Petalinux and LynuxWork’s BlueCAT Linux distribution and tool chains. The DVD demonstrates how to port Linux into a Field Programmable Gate Array (FPGA) design using the 32-bit Xilinx MicroBlaze processor. It also highlights the benefits and tradeoffs when using the Memory Management Unit (MMU) in the MicroBlaze processor. The MMU enables designers to use commercial-grade operating systems when implementing their embedded designs with Xilinx FPGAs. The MicroBlaze Processor Linux Starter Kit includes the Linux for MicroBlaze Processor DVD, the Xilinx Embedded Development Kit - Spar

HP makes another contribution to Linux community

Continuing its efforts to advance customer adoption of Linux, HP has announced the contribution of its Tru64 UNIX Advanced File System (AdvFS) source code to the open source community. The AdvFS source code includes capabilities that increase uptime, enhance security and help ensure maximum performance of Linux file systems. HP will contribute the code as a reference implementation of an enterprise Linux file system under the terms of General Public License Version 2 for compatibility with the Linux kernel, as well as provide design documentation, test suites and engineering resources. The source code serves as a rich technology base to advance ongoing development of Linux by providing a comprehensive foundation for Linux kernel developers to leverage and improve Linux file system functionality.

AMD's New Card Supports Linux From the Get-Go

Michael writes "Back in September AMD had announced a new ATI Linux driver as well as opening up their GPU specifications, and today they have taken an additional step to better support the Linux OS. With the just-announced Radeon HD 4850 RV770 they have provided same-day Linux support, and the Linux driver is now shipping alongside the Windows driver on their product CDs. In addition, they are encouraging their AIB partners to showcase Tux on the product packaging as a sign of Linux support. Last but certainly not least, AMD is committed from top-to-bottom product support on Linux and they will be introducing high-end features in their Linux driver such as MultiGPU CrossFire technology. Phoronix has a run-down on AMD's evolutionary leap in Linux support along with information on the open-source support for the RV770 GPU.

Security Flaw Found in Linux

A bug found in Debian Linux, from which the popular Linux version Ubuntu is derived, puts at risk a number of cryptographic keys generated on Debian systems between September 2006 and May 13, 2008, according to security researcher H.D. Moore. The keys placed at risk include the type typically used to protect e-commerce transactions. The bug resulted from the deletion of a section of code that was responsible for providing the random numbers that are the foundation of the keys. As a consequence, keys generated could be vulnerable to attackers.

Linux's Security Through Obscurity

An anonymous reader writes "The age-old full disclosure debate has been raging again, this time in no other place than at the foundations of the open-source flagship GNU/Linux operating system: within the Linux kernel itself. It beggars belief, but even Linux creator, Linus Torvalds, has advocated against the sort of openness on which Linux has thrived, arguing that security fixes to the kernel should be obscured in changelogs, saying 'If it's not a very public security issue already, I don't want a simple "git log + grep" to help find it.' Unfortunately, it's not kernel exploit writers who need to grep the changelog in order to find kernel vulnerabilities. On the contrary, it's downstream distributors who rely on changelog information in order to decide when to patch the kernels of their distributions, in order to keep their users safe.

Critical Week for Canonical and Ubuntu Linux

"Ubuntu got a big mainstream win in mid-2007 when Dell agreed to pre-install Ubuntu on selected Desktops. The VAR Guy and other Ubuntu followers expected (perhaps foolishly) that Dell rivals like Hewlett-Packard would quickly jump on the Ubuntu desktop bandwago. HP has won some Ubuntu-related customer deals, but has said little about its Ubuntu plans."

Super Talent Adds Ubuntu Linux to MasterDrive

If you've kept tabs on recent Linux happenings at all, it has become abundantly clear that Ubuntu Linux has become rather popular and what some might call the "Linux distro of choice". This trend seems to be pretty obvious to memory manufacture Super Talent, and for a limited time they will bundle a free CD containing the Ubuntu Desktop Edition Linux operating system and the OpenOffice software suite with its line of MasterDrive MX SSDs. This is obviously a way to add value rather cost efficiently for a high priced product like an SSD.

Arch Linux for the DIY Linux user

There's no dearth of Linux distributions for desktop users or even for running high availability servers. But if you are a do-it-yourself computer user, your choice of Linux distros is fairly limited. You can build Linux from scratch with Linux from Scratch or compile your own set of packages with Gentoo. But if you want a distro that teaches you the basics of Linux as you set it up; is well documented, lightweight, and zippy; and has a dependency-resolving packaging system, you need Arch Linux.

Ubuntu being sold retail by Best Buy. But will it stay?

The news is out that Best Buy is selling Ubuntu Linux retail for $19.95. It's a nice step forward for Ubuntu, but not for Linux. It used to be possible to buy Red Hat Linux and SUSE Linux retail. That's actually where I bought my first copy of SUSE Linux while working at Novell.

Linux Kernel Tuning for IP Version 6 Networking

This paper describes the procedure for enhancing the Linux operating system with Internet Protocol version 6 (IPv6) networking feature. This paper also describes the linux kernel with IPV6 networking support, booting linux desktop machines with new IPV6 network supportive kernel, and its graphical representation. This paper lists the procedure to test the IPv6 enabled linux desktop kernel. The resultant IPv6 enabled linux kernels scale over Internet Protocol version 4 linux kernels in terms of built-in security support (IPSEC), efficient routing, address auto configuration, automated network (router) renumbering, and built in mobility support(MIPv6).

Search took 0.78 seconds.