Episode 31

FromUbuntu Security Podcast

Start listening View podcast show

Episode 31

FromUbuntu Security Podcast

ratings:

Length:

22 minutes

Released:

May 13, 2019

Format:

Podcast episode

Description

This week we cover security fixes for GNOME Shell, FFmpeg, Sudo, Ghostscript and others, and we talk to Joe McManus about malicious Dockerhub images, Git repos being ransomed more.

Released:

May 13, 2019

Format:

Podcast episode

Titles in the series (100)

A weekly podcast talking about the latest developments and updates from the Ubuntu Security team, including a summary of the security vulnerabilities and fixes from the last week as well as a discussion on some of the goings on in the wider Ubuntu Security community.

Skip carousel

Episode 6: This week we look at some details of the 17 unique CVEs addressed across the supported Ubuntu releases and more. by Ubuntu Security Podcast
12 min listen
Episode 1: Another week, another speculative execution vulnerablity... and more! by Ubuntu Security Podcast
11 min listen
Episode 4: A quieter week in package updates - this week we look at some details of the 9 unique CVEs addressed across the supported Ubuntu releases and talk about various hardening guides for Ubuntu. by Ubuntu Security Podcast
11 min listen
Episode 15: Security updates for 29 CVEs including Perl, the kernel, OpenSSL (PortSmash) and more, plus in response to some listener questions, we discuss how to make sure you always have the latest security updates by using unattended-upgrades. by Ubuntu Security Podcast
17 min listen
Episode 21: Double episode covering the security updates from the last 2 weeks, including snapd (DirtySock), systemd and more, plus we talk responsible disclosure and some open positions on the Ubuntu Security team. by Ubuntu Security Podcast
18 min listen
Episode 16 by Ubuntu Security Podcast
11 min listen
Episode 9: This week we look at some details of the 61 unique CVEs addressed across the supported Ubuntu releases, with a particular focus on the recent Xorg vulnerability ([CVE-2018-14665](https://ubuntu.com/security/CVE-2018-14665)), plus Cosmic is now... by Ubuntu Security Podcast
12 min listen
Episode 38: This week we look at the latest security updates for the Linux kernel, Firefox, ImageMagick, OpenStack and more, plus we have a special guest, the maintainer and lead developer of the AppArmor project, John Johansen, to talk about the project... by Ubuntu Security Podcast
28 min listen
Episode 2: L1TF kernel regressions, WPA2 key recovery, mirror fail and more! by Ubuntu Security Podcast
8 min listen
Episode 11: This week we look at some details of the 23 unique CVEs addressed across the supported Ubuntu releases, discuss the latest purported Intel side-channel vulnerability PortSmash and more. by Ubuntu Security Podcast
13 min listen
Episode 0: The first ever episode of the Ubuntu Security Podcast! by Ubuntu Security Podcast
13 min listen
Episode 22: This week we cover security updates including Firefox, Thunderbird, OpenSSL and another Ghostscript regression, plus we look at a recent report from Capsule8 comparing Linux hardening features across various distributions and we answer some... by Ubuntu Security Podcast
16 min listen
Episode 12: This week we look at some details of the 33 unique CVEs addressed across the supported Ubuntu releases, including some significant updates for systemd and the kernel, plus we talk about even more Intel side-channel vulnerabilities and more. by Ubuntu Security Podcast
20 min listen
Episode 5: This week we look at some details of the 43 unique CVEs addressed across the supported Ubuntu releases and talk about the recently announced Extended Security Maintenance support for Ubuntu 14.04 Trusty Tahr. by Ubuntu Security Podcast
16 min listen
Episode 20: This week we look at Linux kernel updates for all releases, OpenSSH, dovecot, curl and more. Plus we answer some frequently asked questions for Ubuntu security, in particular the perennial favourite of why we choose to just backport security... by Ubuntu Security Podcast
17 min listen
Episode 8: This week we look at some details of the 15 unique CVEs addressed across the supported Ubuntu releases and discuss some of the security relevant changes in Ubuntu 18.10, plus a refresh of the Ubuntu CVE tracker and more. by Ubuntu Security Podcast
9 min listen
Episode 19: This week we look at updates to the Linux kernel in preparation for the 18.04.2 release, plus updates for Open vSwitch, Firefox, Avahi, LibVNCServer and more. We also revisit and discuss upstream changes to the mincore() system call to thwart... by Ubuntu Security Podcast
15 min listen
Episode 3: This week we look at 29 unique CVEs addressed across the supported Ubuntu releases, a discussion of the Main Inclusion Review process and recent news around the bubblewrap package, and open positions within the team. by Ubuntu Security Podcast
10 min listen
Episode 23: This week we look at security updates for the Linux kernel, PHP and NVIDIA drivers, revealing recent research into GPU based side-channel attacks plus we call for suggestions on hardening features and more. by Ubuntu Security Podcast
13 min listen
Episode 13: This week we look at some details of the 16 unique CVEs addressed across the supported Ubuntu releases and more. by Ubuntu Security Podcast
9 min listen
Episode 35: We look at vulnerabilities and updates for Exim, the Linux kernel, Berkeley DB, Qt and more, plus Joe and Alex discuss some recent malware campaigns including Hiddenwasp, and we cover some open positions too. by Ubuntu Security Podcast
20 min listen
Episode 7: This week we look at some details of the 78 unique CVEs addressed across the supported Ubuntu releases including more GhostScript, ImageMagick, WebKitGTK, Linux kernel and more. by Ubuntu Security Podcast
11 min listen
Episode 27: Carpe Diem for Apache HTTP Server, plus updates for Dovecot, PolicyKit and the Linux kernel, and we talk to Joe McManus about the recent Asus ShadowHammer supply chain attack and more. by Ubuntu Security Podcast
30 min listen
Episode 25: Ghostscript is back to haunt us for another week, plus we look at vulnerabilities in ntfs-3g, snapd, firefox and more. by Ubuntu Security Podcast
15 min listen
Episode 26: This week we look security updates for a heap of packages including Firefox &amp; Thunderbird, PHP &amp; QEMU, plus we discuss Facebook's recent password storage incident as well as some listener hardening tips and more. by Ubuntu Security Podcast
20 min listen
Episode 18: This week we look at some details of the 46 unique CVEs addressed across the supported Ubuntu releases and take a deep dive into the recent apt security bug. by Ubuntu Security Podcast
14 min listen
Episode 17: First episode of 2019! This week we look "System Down" in systemd, as well as updates for the Linux kernel, GnuPG, PolicyKit and more, and discuss a recent cache-side channel attack using the mincore() system call. by Ubuntu Security Podcast
22 min listen
Episode 40: Big roundup of security updates from the past 2 weeks including Docker, ZeroMQ, Squid, Redis and more, plus we talk with Joe McManus about some recent big fines for companies breaching their GDPR responsibilities and it's EOL for... by Ubuntu Security Podcast
27 min listen
Episode 10: This week we look at some details of the 17 unique CVEs addressed across the supported Ubuntu releases, have a brief look at some Canonical presentations from LSS-EU and more. by Ubuntu Security Podcast
9 min listen
Episode 30: Fixes for 19 different vulnerabilities across MySQL, Dovecot, Memcached and others, plus we talk to Joe McManus about the recent iLnkP2P IoT hack and the compromise of DockerHub's credentials database and more. by Ubuntu Security Podcast
21 min listen

More Episodes from Ubuntu Security Podcast

Skip carousel

Episode 229: As the podcast winds down for a break over the next month, this week we talk about RSA timing side-channel attacks and the recently announced DNSBomb vulnerability as we cover security updates in VLC, OpenSSL, Netatalk, WebKitGTK,... by Ubuntu Security Podcast
13 min listen
Episode 228: The team is back from Madrid and this week we bring you some of our plans for the upcoming Ubuntu 24.10 release, plus we talk about Google's kernelCTF project and Mozilla's PDF.js sandbox when covering security updates for the Linux... by Ubuntu Security Podcast
16 min listen
Episode 227: Ubuntu 24.04 LTS is finally released and we cover all the new security features it brings, plus we look at security vulnerabilities in, and updates for, FreeRDP, Zabbix, CryptoJS, cpio, less, JSON5 and a heap more. by Ubuntu Security Podcast
25 min listen
Episode 226: John and Georgia are at the Linux Security Summit presenting on some long awaited developments in AppArmor and we give you all the details in a sneak peek preview as well as some of the other talks to look out for, plus we cover... by Ubuntu Security Podcast
24 min listen
Episode 225: This week we cover the recent reports of a new local privilege escalation exploit against the Linux kernel, follow-up on the xz-utils backdoor from last week and it's the beta release of Ubuntu 24.04 LTS - plus we talk security... by Ubuntu Security Podcast
20 min listen
Episode 224: It's been an absolutely manic week in the Linux security community as the news and reaction to the recent announcement of a backdoor in the xz-utils project was announced late last week, so we dive deep into this issue and discuss how it... by Ubuntu Security Podcast
29 min listen
Episode 223: This week we bring you a sneak peak of how Ubuntu 23.10 fared at Pwn2Own Vancouver 2024, plus news of malicious themes in the KDE Store and we cover security updates for the Linux kernel, X.Org X Server, TeX Live, Expat, Bash and more.... by Ubuntu Security Podcast
17 min listen
Episode 222: We cover recent Linux malware from the Magnet Goblin threat actor, plus the news of Ubuntu 23.10 as a target in Pwn2Own Vancouver 2024 and we detail vulnerabilities in Puma, AccountsService, Open vSwitch, OVN, and more. by Ubuntu Security Podcast
24 min listen
Episode 221: Andrei is back to discuss recent academic research into malware within the Python/PyPI ecosystem and whether it is possible to effectively combat it with open source tooling, plus we cover security updates for Unbound, libuv, node.js,... by Ubuntu Security Podcast
23 min listen
Episode 220: The Linux kernel.org CNA has assigned their first CVEs so we revisit this topic to assess the initial impact on Ubuntu and the CVE ecosystem, plus we cover security updates for Roundcube Webmail, less, GNU binutils and the Linux kernel... by Ubuntu Security Podcast
19 min listen
Episode 219: This week the Linux kernel project announced they will be assigning their own CVEs so we discuss the possible implications and fallout from such a shift, plus we cover vulnerabilities in the kernel, Glance_store, WebKitGTK, Bind and... by Ubuntu Security Podcast
21 min listen
Episode 218: AppArmor unprivileged user namespace restrictions are back on the agenda this week as we survey the latest improvements to this hardening feature in the upcoming Ubuntu 24.04 LTS, plus we discuss SMTP smuggling in Postfix, runC... by Ubuntu Security Podcast
18 min listen
Episode 217: For the first episode of 2024 we take a look at the case of a raft of bogus FOSS CVEs reported on full-disclosure as well as AppSec tools in Ubuntu and the EOL announcement for 23.04, plus we cover vulnerabilities in the Linux kernel,... by Ubuntu Security Podcast
15 min listen
Episode 216: For the final episode of 2023 we discuss creating PoCs for vulns in tar and the looming EOL for Ubuntu 23.04, plus we look into security updates for curl, BlueZ, Netatalk, GNOME Settings and a heap more. by Ubuntu Security Podcast
21 min listen
Episode 215: Mark Esler is our special guest on the podcast this week to discuss the OpenSSF's Compiler Options Hardening Guide for C/C++ plus we cover vulnerabilities and updates for GIMP, FreeRDP, GStreamer, HAProxy and more. by Ubuntu Security Podcast
31 min listen
Episode 214: This week we take a deep dive into the Reptar vuln in Intel processors plus we look into some relic vulnerabilities in Squid and OpenZFS and finally we detail new hardening measures in tracker-miners to keep your desktop safer. by Ubuntu Security Podcast
20 min listen
Episode 213: As we ease back into regular programming, we cover the various activities the team got up to over the past few weeks whilst away in Riga for the Ubuntu Summit and Ubuntu Engineering Sprint. by Ubuntu Security Podcast
9 min listen
Episode 212: With the Ubuntu Summit just around the corner, we preview a couple talks by the Ubuntu Security team, plus we look at security updates for OpenSSL, Sofia-SIP, AOM, ncurses, the Linux kernel and more. by Ubuntu Security Podcast
23 min listen
Episode 211: After a well-deserved break, Alex is back looking at the recent Ubuntu 23.10 release and the significant security technologies it introduces along with a call for testing of unprivileged user namespace restrictions, plus the details of... by Ubuntu Security Podcast
20 min listen
Episode 210: It's the Linux Security Summit in Bilbao this week and we bring you some highlights from our favourite talks, plus we cover the 25 most stubborn software weaknesses, and we look at security updates for Open VM Tools, libwebp, Django,... by Ubuntu Security Podcast
21 min listen
Episode 209: Andrei is back this week with a deep dive into recent research around CVSS scoring inconsistencies, plus we look at a recent Ubuntu blog post on the internals of package updates and the repositories, and we cover security updates in... by Ubuntu Security Podcast
25 min listen
Episode 208: This week we detail the recently announced and long-awaited feature of TPM-backed full-disk encryption for the upcoming Ubuntu 23.10 release, plus we cover security updates for elfutils, GitPython, atftp, BusyBox, Docker Registry and... by Ubuntu Security Podcast
25 min listen
Episode 207: This week we cover reports of "fake" CVEs and their impact on the FOSS security ecosystem, plus we look at security updates for PHP, Fast DDS, JOSE for C/C++, the Linux kernel, AMD Microcode and more. by Ubuntu Security Podcast
22 min listen
Episode 206: This week we talk about HTTP Content-Length handling, intricacies of group management in container environments and making sure you check your return codes while covering vulns in HAProxy, Podman, Inetutils and more, plus we put a call... by Ubuntu Security Podcast
16 min listen
Episode 205: We're back after unexpectedly going AWOL last week to bring you the latest in Ubuntu Security including the recently announced Downfall and GameOver(lay) vulnerabilities, plus we look at security updates for OpenSSH and GStreamer **and**... by Ubuntu Security Podcast
20 min listen
Episode 204: This week we look at the recent Zenbleed vulnerability affecting some AMD processors, plus we cover security updates for the Linux kernel, a high profile OpenSSH vulnerability and finally Andrei is back with a deep dive into recent... by Ubuntu Security Podcast
28 min listen
Episode 203: This week we talk about the dual use purposes of eBPF - both for security and for exploitation, and how you can keep your systems safe, plus we cover security updates for the Linux kernel, Ruby, SciPy, YAJL, ConnMan, curl and more. by Ubuntu Security Podcast
17 min listen
Episode 202: We take a sneak peek at the upcoming AppArmor 4.0 release, plus we cover vulnerabilities in AccountsService, the Linux Kernel, ReportLab, GNU Screen, containerd and more. by Ubuntu Security Podcast
22 min listen
Episode 201: This week we look at the top 25 most dangerous vulnerability types, as well as the announcement of the program for LSS EU, and we cover security updates for Bind, the Linux kernel, CUPS, etcd and more. by Ubuntu Security Podcast
20 min listen
Episode 200: For our 200th episode, we discuss the impact of Red Hat's decision to stop publicly releasing the RHEL source code, plus we cover security updates for libX11, GNU SASL, QEMU, VLC, pngcheck, the Linux kernel and a whole lot more. by Ubuntu Security Podcast
20 min listen

Related podcast episodes

Skip carousel

Episode 101: In the first episode for 2021 we bring back Joe McManus to discuss the SolarWinds hack plus we look at vulnerabilities in sudo, NVIDIA graphics drivers and mutt. We also cover some open positions in the team and say farewell to... by Ubuntu Security Podcast
27 min listen
Episode 29: This week we look at fixes from the past two weeks including BIND, NTFS-3G, Dovecot, Pacemaker and more, plus we follow up last episodes IoT security discussion with Joe McManus talking about Ubuntu Core. Finally we cover the release... by Ubuntu Security Podcast
21 min listen
Late Night Linux – Episode 121: We go through a load of your feedback about Auacity’s new file format and UI toolkit, hacking a Firestick, Google search, the future of Fedora, and more. Plus Joe gives up on KDE. We mentioned Launcher Manager. by Late Night Linux
30 min listen
Late Night Linux – Episode 121: We go through a load of your feedback about Auacity’s new file format and UI toolkit, hacking a Firestick, Google search, the future of Fedora, and more. Plus Joe gives up on KDE. We mentioned Launcher Manager. by Late Night Linux Family All Episodes
30 min listen
Late Night Linux – Episode 71: We catch up with the news from a busy couple of weeks including KDE, exFAT, Google tracking, a new Fairphone, GIMP controversy, and more. News KPeople contacts for Plasma Mobile, KHighlighting Crosses 300, Plasma Browser Integration 1. by Late Night Linux Family All Episodes
41 min listen
Late Night Linux – Episode 71: We catch up with the news from a busy couple of weeks including KDE, exFAT, Google tracking, a new Fairphone, GIMP controversy, and more. News KPeople contacts for Plasma Mobile, KHighlighting Crosses 300, Plasma Browser Integration 1. by Late Night Linux
41 min listen
Episode 40: Big roundup of security updates from the past 2 weeks including Docker, ZeroMQ, Squid, Redis and more, plus we talk with Joe McManus about some recent big fines for companies breaching their GDPR responsibilities and it's EOL for... by Ubuntu Security Podcast
27 min listen
Flash: This week we talk about GeoCities, Adobe Flash, and the Digital Dark Age. by Let's Know Things
37 min listen
Episode 199: For our 199th episode Andrei looks at Fuzzing Configurations of Program Options plus we discuss Google's findings on the `io_uring` kernel subsystem and we look at vulnerability fixes for Netatalk, Jupyter Core, Vim, SSSD, GNU binutils,... by Ubuntu Security Podcast
27 min listen
Destination Linux EP108 – Ubuntu Studio Amped Up: On this episode of Destination Linux, we discuss some news for Makulu Linux, GNOME 3.32, IPFire 2.21 and more. We’ll also check out a cool new system deployment tool that could change how multi-booting is done. by Destination Linux
103 min listen
Episode 200: Gnome in the Shell | LUP 200: Alook at the next release of Gnome 3, special features we’re looking forward to & new extensions that make Gnome even better. Then Google’s solution to old Linux kernel’s in Android, differences between Chrome & Chromium, a Plasma desktop feature & more! by LINUX Unplugged
71 min listen
Destination Linux 182: Security Keys, Disk Encryption & Two Factor Authentication (2FA): Coming up on this week’s episode of Destination Linux: Google & Canonical are teaming up to bring Flutter to Linux for a cross-platform game changer. How Important is Disk Encryption & Security Keys – should you be using them or do you just prefer bein... by Destination Linux
60 min listen
Episode 157: Ubuntu 22.04 LTS (Jammy Jellyfish) is officially released ? and so this week we take a quick look at the new features and enhancements, with a particular focus on security, plus we cover security updates for the Linux kernel, Firefox,... by Ubuntu Security Podcast
19 min listen
199: Linux 5.18, Firefox Snap, Budgie Desktop, KDE Plasma 5.25 and more Linux news!: On this episode of This Week in Linux: Linux 5.18, System76 & HP Team Up To Make HP Dev One Laptop, the State of the Budgie Desktop, KDE Plasma 5.25 Beta Released, KDE Participating in Google Summer of Code, Ubuntu Improving Firefox Snap Performance, by This Week in Linux
22 min listen
Mac Geek Gab #49: Pot Luck Show, Listener Questions Answered!: Swap files, Human Clocks, Voice over IP, BitTorrent, port forwarding, and nondestructively resizing partitions on your Mac's hard drive are all covered in this episode... by Mac Geek Gab — Your Questions Answered, Tips Shared, Troubleshooting Assistance
44 min listen
Episode 86: Incredible & Impossible Deals by More Than Just Code podcast - iOS and Swift development, news and advice
86 min listen
Episode 8: Cloud Guilt | LINUX Unplugged 8: Should Linux users be anti-cloud? Why do so many of us feel guilty for using the”cloud”? This week will dig into this conundrum and maybe even solve this more and more complex question. by LINUX Unplugged
69 min listen
Mac Geek Gab #113: Batteries, Security, College, and Hosting: Opening up the show to a few extended discussions about security, batteries, hosting and more, John and Dave dig deep for you while making sure... by Mac Geek Gab — Your Questions Answered, Tips Shared, Troubleshooting Assistance
20 min listen
247: Is Firefox Slowly Dying? Can Mozilla Save It?: This week’s episode of Destination Linux, we’re going to discuss the topic of Mozilla Firefox and whether we can stop it’s continued decline. Then we’re going to discuss the literal game changer, and the device that has everyone looking at Linux in a b... by Destination Linux
63 min listen
GGH 268: Randomize LIV: Danno (Team Pugatch) is back to talk through a variety of subjects for the two hundred sixty-eighth edition of the GeoGearHeads. The conversation was kicked off with an e-mail from Superted about caching apps compatible with older version of iOS in... by GeoGearHeads; The weekly show for Geocaching and Location-Based Gaming
61 min listen
MGG 528: Everything’s Broken (and Your Geeks Fix It): Third party DNS risks, Yosemite email issues, Comcast's hotspot concerns and managing large Dropboxes on systems with smaller SSDs are just the tip of this... by Mac Geek Gab — Your Questions Answered, Tips Shared, Troubleshooting Assistance
20 min listen
234: GNOME 45, Ubuntu 23.10, Fedora 39, Linux Mint, Unity Fiasco, Purism & more Linux news!: In this episode of This Week in Linux (234), we cover exciting news: GNOME 45 released, Ubuntu 23.10 beta, Fedora Linux 39 beta, LMDE 6 beta, Purism controversy, Photopea’s 10th anniversary, Mortal Kombat support for Linux, Unity’s runtime policies, by This Week in Linux
20 min listen
Git Vulnerability with Edward Thomson: Git is a distributed file system for version control. Git is extremely reliable, fast, and secure, owing to the fact that it is one of the oldest pieces of open source software. But even battle-tested software can have vulnerabilities. by Cloud Engineering Archives - Software Engineering Daily
50 min listen
203: Linus Torvalds at Open Source Summit, Manjaro 21.3, AMD, KDE, Steam Summer Sale and more Linux news: On this episode of This Week in Linux: Linus Torvalds Fireside Chat at Open Source Summit, Manjaro Linux 21.3.0, Steam Summer Sale, Help Shape the Future of KDE, Flameshot 12.0, Dooit Terminal Task / To-do Manager, FidelityFX Super Resolution (FSR) 2. by This Week in Linux
24 min listen
210: GNOME, KDE, LibreOffice, Android 13, DEF CON, Krita, Spider-Man and more Linux news!: On this episode of This Week in Linux: Happy 25th Birthday to GNOME, KDE Gear 22.08 Released, LibreOffice 7.4 Released, Android 13 Released, GLIBC Update Breaks Easy Anti-Cheat, John Deere Tractor Hacked To Run Doom, Krita 5.1 Released, by This Week in Linux
42 min listen
349: Entropy Overhaul: Encrypted Crash Dumps in FreeBSD, Time on Unix, Improve ZVOL sync write performance with a taskq, central log host with syslog-ng, NetBSD Entropy overhaul, Setting Up NetBSD Kernel Dev Environment, and more. by BSD Now
58 min listen
Mac Geek Gab #39: Xgrid, Distributed Computing, and More!: Dave and John spend some time discussing Xgrid and distributed computing in general. Listen in for their guide to getting started with Xgrid and also... by Mac Geek Gab — Your Questions Answered, Tips Shared, Troubleshooting Assistance
44 min listen
Late Night Linux – Episode 65: It’s our show from FOSS Talk Live! After KDE, Firefox, GMail, and Stadia in the news, missed opportunities for FOSS and how we can seize the next one. News KDE Apps Website Google Browser Control via DRM; Use Firefox & block fingerprinting while you’... by Late Night Linux Family All Episodes
46 min listen
Late Night Linux – Episode 65: It’s our show from FOSS Talk Live! After KDE, Firefox, GMail, and Stadia in the news, missed opportunities for FOSS and how we can seize the next one. News KDE Apps Website Google Browser Control via DRM; Use Firefox & block fingerprinting while you’... by Late Night Linux
46 min listen
209: Ubuntu LTS, Kali Linux, Rescuezilla, GitLab and more Linux news!: On this episode of This Week in Linux: Ubuntu 22.04.1 LTS, Kali Linux 2022.3, Rescuezilla 2.4, GitLab To Delete Dormant Projects?, JingOS & JingPad Discontinued?, CuteFishOS Disappears & Returns, AlmaLinux Community Election, by This Week in Linux
27 min listen

Discover this podcast and so much more

Episode 31

Episode 31

Description

Titles in the series (100)

More Episodes from Ubuntu Security Podcast

Related podcast episodes