Episode 200

FromUbuntu Security Podcast

Start listening View podcast show

Episode 200

FromUbuntu Security Podcast

ratings:

Length:

20 minutes

Released:

Jun 23, 2023

Format:

Podcast episode

Description

For our 200th episode, we discuss the impact of Red Hat's decision to stop
publicly releasing the RHEL source code, plus we cover security updates for
libX11, GNU SASL, QEMU, VLC, pngcheck, the Linux kernel and a whole lot more.

Released:

Jun 23, 2023

Format:

Podcast episode

Titles in the series (100)

A weekly podcast talking about the latest developments and updates from the Ubuntu Security team, including a summary of the security vulnerabilities and fixes from the last week as well as a discussion on some of the goings on in the wider Ubuntu Security community.

Skip carousel

Episode 24: A look at recent fixes for vulnerabilities in poppler, WALinuxAgent, the Linux kernel and more. We also talk about some listener feedback on Ubuntu hardening and the launch of Ubuntu 14.04 ESM. by Ubuntu Security Podcast
13 min listen
Episode 4: A quieter week in package updates - this week we look at some details of the 9 unique CVEs addressed across the supported Ubuntu releases and talk about various hardening guides for Ubuntu. by Ubuntu Security Podcast
11 min listen
Episode 8: This week we look at some details of the 15 unique CVEs addressed across the supported Ubuntu releases and discuss some of the security relevant changes in Ubuntu 18.10, plus a refresh of the Ubuntu CVE tracker and more. by Ubuntu Security Podcast
9 min listen
Episode 1: Another week, another speculative execution vulnerablity... and more! by Ubuntu Security Podcast
11 min listen
Episode 0: The first ever episode of the Ubuntu Security Podcast! by Ubuntu Security Podcast
13 min listen
Episode 18: This week we look at some details of the 46 unique CVEs addressed across the supported Ubuntu releases and take a deep dive into the recent apt security bug. by Ubuntu Security Podcast
14 min listen
Episode 12: This week we look at some details of the 33 unique CVEs addressed across the supported Ubuntu releases, including some significant updates for systemd and the kernel, plus we talk about even more Intel side-channel vulnerabilities and more. by Ubuntu Security Podcast
20 min listen
Episode 3: This week we look at 29 unique CVEs addressed across the supported Ubuntu releases, a discussion of the Main Inclusion Review process and recent news around the bubblewrap package, and open positions within the team. by Ubuntu Security Podcast
10 min listen
Episode 7: This week we look at some details of the 78 unique CVEs addressed across the supported Ubuntu releases including more GhostScript, ImageMagick, WebKitGTK, Linux kernel and more. by Ubuntu Security Podcast
11 min listen
Episode 32: This week we look at updates to cover the latest Intel CPU vulnerabilities (MDS - aka RIDL, Fallout, ZombieLoad), plus other vulnerabilies in PostgreSQL, ISC DHCP, Samba and more, whilst special guest this week is Seth Arnold from the... by Ubuntu Security Podcast
24 min listen
Episode 5: This week we look at some details of the 43 unique CVEs addressed across the supported Ubuntu releases and talk about the recently announced Extended Security Maintenance support for Ubuntu 14.04 Trusty Tahr. by Ubuntu Security Podcast
16 min listen
Episode 2: L1TF kernel regressions, WPA2 key recovery, mirror fail and more! by Ubuntu Security Podcast
8 min listen
Episode 6: This week we look at some details of the 17 unique CVEs addressed across the supported Ubuntu releases and more. by Ubuntu Security Podcast
12 min listen
Episode 9: This week we look at some details of the 61 unique CVEs addressed across the supported Ubuntu releases, with a particular focus on the recent Xorg vulnerability ([CVE-2018-14665](https://ubuntu.com/security/CVE-2018-14665)), plus Cosmic is now... by Ubuntu Security Podcast
12 min listen
Episode 15: Security updates for 29 CVEs including Perl, the kernel, OpenSSL (PortSmash) and more, plus in response to some listener questions, we discuss how to make sure you always have the latest security updates by using unattended-upgrades. by Ubuntu Security Podcast
17 min listen
Episode 10: This week we look at some details of the 17 unique CVEs addressed across the supported Ubuntu releases, have a brief look at some Canonical presentations from LSS-EU and more. by Ubuntu Security Podcast
9 min listen
Episode 13: This week we look at some details of the 16 unique CVEs addressed across the supported Ubuntu releases and more. by Ubuntu Security Podcast
9 min listen
Episode 43: This week we cover vulnerabilities in Ghostscript, the Linux kernel, nginx and more, and we follow up last weeks interview with another interview with Jamie Strandboge, this time talking about the history of the Ubuntu Security team. by Ubuntu Security Podcast
26 min listen
Episode 14: This week we look at some details of the 32 unique CVEs addressed across the supported Ubuntu releases and talk open source software supply chain integrity and how this relates to Ubuntu compared to the recent npm event-stream compromise. by Ubuntu Security Podcast
22 min listen
Episode 22: This week we cover security updates including Firefox, Thunderbird, OpenSSL and another Ghostscript regression, plus we look at a recent report from Capsule8 comparing Linux hardening features across various distributions and we answer some... by Ubuntu Security Podcast
16 min listen
Episode 20: This week we look at Linux kernel updates for all releases, OpenSSH, dovecot, curl and more. Plus we answer some frequently asked questions for Ubuntu security, in particular the perennial favourite of why we choose to just backport security... by Ubuntu Security Podcast
17 min listen
Episode 21: Double episode covering the security updates from the last 2 weeks, including snapd (DirtySock), systemd and more, plus we talk responsible disclosure and some open positions on the Ubuntu Security team. by Ubuntu Security Podcast
18 min listen
Episode 29: This week we look at fixes from the past two weeks including BIND, NTFS-3G, Dovecot, Pacemaker and more, plus we follow up last episodes IoT security discussion with Joe McManus talking about Ubuntu Core. Finally we cover the release... by Ubuntu Security Podcast
21 min listen
Episode 11: This week we look at some details of the 23 unique CVEs addressed across the supported Ubuntu releases, discuss the latest purported Intel side-channel vulnerability PortSmash and more. by Ubuntu Security Podcast
13 min listen
Episode 27: Carpe Diem for Apache HTTP Server, plus updates for Dovecot, PolicyKit and the Linux kernel, and we talk to Joe McManus about the recent Asus ShadowHammer supply chain attack and more. by Ubuntu Security Podcast
30 min listen
Episode 30: Fixes for 19 different vulnerabilities across MySQL, Dovecot, Memcached and others, plus we talk to Joe McManus about the recent iLnkP2P IoT hack and the compromise of DockerHub's credentials database and more. by Ubuntu Security Podcast
21 min listen
Episode 16 by Ubuntu Security Podcast
11 min listen
Episode 23: This week we look at security updates for the Linux kernel, PHP and NVIDIA drivers, revealing recent research into GPU based side-channel attacks plus we call for suggestions on hardening features and more. by Ubuntu Security Podcast
13 min listen
Episode 37: The big new this week is SackPANIC! updates for the Linux kernel, plus we look at vulnerabilities in, and updates for, Samba, SQLite, Bind, Thunderbird and more, and we are hiring! by Ubuntu Security Podcast
20 min listen
Episode 35: We look at vulnerabilities and updates for Exim, the Linux kernel, Berkeley DB, Qt and more, plus Joe and Alex discuss some recent malware campaigns including Hiddenwasp, and we cover some open positions too. by Ubuntu Security Podcast
20 min listen

More Episodes from Ubuntu Security Podcast

Skip carousel

Episode 226: John and Georgia are at the Linux Security Summit presenting on some long awaited developments in AppArmor and we give you all the details in a sneak peek preview as well as some of the other talks to look out for, plus we cover... by Ubuntu Security Podcast
24 min listen
Episode 225: This week we cover the recent reports of a new local privilege escalation exploit against the Linux kernel, follow-up on the xz-utils backdoor from last week and it's the beta release of Ubuntu 24.04 LTS - plus we talk security... by Ubuntu Security Podcast
20 min listen
Episode 224: It's been an absolutely manic week in the Linux security community as the news and reaction to the recent announcement of a backdoor in the xz-utils project was announced late last week, so we dive deep into this issue and discuss how it... by Ubuntu Security Podcast
29 min listen
Episode 223: This week we bring you a sneak peak of how Ubuntu 23.10 fared at Pwn2Own Vancouver 2024, plus news of malicious themes in the KDE Store and we cover security updates for the Linux kernel, X.Org X Server, TeX Live, Expat, Bash and more.... by Ubuntu Security Podcast
17 min listen
Episode 222: We cover recent Linux malware from the Magnet Goblin threat actor, plus the news of Ubuntu 23.10 as a target in Pwn2Own Vancouver 2024 and we detail vulnerabilities in Puma, AccountsService, Open vSwitch, OVN, and more. by Ubuntu Security Podcast
24 min listen
Episode 221: Andrei is back to discuss recent academic research into malware within the Python/PyPI ecosystem and whether it is possible to effectively combat it with open source tooling, plus we cover security updates for Unbound, libuv, node.js,... by Ubuntu Security Podcast
23 min listen
Episode 220: The Linux kernel.org CNA has assigned their first CVEs so we revisit this topic to assess the initial impact on Ubuntu and the CVE ecosystem, plus we cover security updates for Roundcube Webmail, less, GNU binutils and the Linux kernel... by Ubuntu Security Podcast
19 min listen
Episode 219: This week the Linux kernel project announced they will be assigning their own CVEs so we discuss the possible implications and fallout from such a shift, plus we cover vulnerabilities in the kernel, Glance_store, WebKitGTK, Bind and... by Ubuntu Security Podcast
21 min listen
Episode 218: AppArmor unprivileged user namespace restrictions are back on the agenda this week as we survey the latest improvements to this hardening feature in the upcoming Ubuntu 24.04 LTS, plus we discuss SMTP smuggling in Postfix, runC... by Ubuntu Security Podcast
18 min listen
Episode 217: For the first episode of 2024 we take a look at the case of a raft of bogus FOSS CVEs reported on full-disclosure as well as AppSec tools in Ubuntu and the EOL announcement for 23.04, plus we cover vulnerabilities in the Linux kernel,... by Ubuntu Security Podcast
15 min listen
Episode 216: For the final episode of 2023 we discuss creating PoCs for vulns in tar and the looming EOL for Ubuntu 23.04, plus we look into security updates for curl, BlueZ, Netatalk, GNOME Settings and a heap more. by Ubuntu Security Podcast
21 min listen
Episode 215: Mark Esler is our special guest on the podcast this week to discuss the OpenSSF's Compiler Options Hardening Guide for C/C++ plus we cover vulnerabilities and updates for GIMP, FreeRDP, GStreamer, HAProxy and more. by Ubuntu Security Podcast
31 min listen
Episode 214: This week we take a deep dive into the Reptar vuln in Intel processors plus we look into some relic vulnerabilities in Squid and OpenZFS and finally we detail new hardening measures in tracker-miners to keep your desktop safer. by Ubuntu Security Podcast
20 min listen
Episode 213: As we ease back into regular programming, we cover the various activities the team got up to over the past few weeks whilst away in Riga for the Ubuntu Summit and Ubuntu Engineering Sprint. by Ubuntu Security Podcast
9 min listen
Episode 212: With the Ubuntu Summit just around the corner, we preview a couple talks by the Ubuntu Security team, plus we look at security updates for OpenSSL, Sofia-SIP, AOM, ncurses, the Linux kernel and more. by Ubuntu Security Podcast
23 min listen
Episode 211: After a well-deserved break, Alex is back looking at the recent Ubuntu 23.10 release and the significant security technologies it introduces along with a call for testing of unprivileged user namespace restrictions, plus the details of... by Ubuntu Security Podcast
20 min listen
Episode 210: It's the Linux Security Summit in Bilbao this week and we bring you some highlights from our favourite talks, plus we cover the 25 most stubborn software weaknesses, and we look at security updates for Open VM Tools, libwebp, Django,... by Ubuntu Security Podcast
21 min listen
Episode 209: Andrei is back this week with a deep dive into recent research around CVSS scoring inconsistencies, plus we look at a recent Ubuntu blog post on the internals of package updates and the repositories, and we cover security updates in... by Ubuntu Security Podcast
25 min listen
Episode 208: This week we detail the recently announced and long-awaited feature of TPM-backed full-disk encryption for the upcoming Ubuntu 23.10 release, plus we cover security updates for elfutils, GitPython, atftp, BusyBox, Docker Registry and... by Ubuntu Security Podcast
25 min listen
Episode 207: This week we cover reports of "fake" CVEs and their impact on the FOSS security ecosystem, plus we look at security updates for PHP, Fast DDS, JOSE for C/C++, the Linux kernel, AMD Microcode and more. by Ubuntu Security Podcast
22 min listen
Episode 206: This week we talk about HTTP Content-Length handling, intricacies of group management in container environments and making sure you check your return codes while covering vulns in HAProxy, Podman, Inetutils and more, plus we put a call... by Ubuntu Security Podcast
16 min listen
Episode 205: We're back after unexpectedly going AWOL last week to bring you the latest in Ubuntu Security including the recently announced Downfall and GameOver(lay) vulnerabilities, plus we look at security updates for OpenSSH and GStreamer **and**... by Ubuntu Security Podcast
20 min listen
Episode 204: This week we look at the recent Zenbleed vulnerability affecting some AMD processors, plus we cover security updates for the Linux kernel, a high profile OpenSSH vulnerability and finally Andrei is back with a deep dive into recent... by Ubuntu Security Podcast
28 min listen
Episode 203: This week we talk about the dual use purposes of eBPF - both for security and for exploitation, and how you can keep your systems safe, plus we cover security updates for the Linux kernel, Ruby, SciPy, YAJL, ConnMan, curl and more. by Ubuntu Security Podcast
17 min listen
Episode 202: We take a sneak peek at the upcoming AppArmor 4.0 release, plus we cover vulnerabilities in AccountsService, the Linux Kernel, ReportLab, GNU Screen, containerd and more. by Ubuntu Security Podcast
22 min listen
Episode 201: This week we look at the top 25 most dangerous vulnerability types, as well as the announcement of the program for LSS EU, and we cover security updates for Bind, the Linux kernel, CUPS, etcd and more. by Ubuntu Security Podcast
20 min listen
Episode 199: For our 199th episode Andrei looks at Fuzzing Configurations of Program Options plus we discuss Google's findings on the `io_uring` kernel subsystem and we look at vulnerability fixes for Netatalk, Jupyter Core, Vim, SSSD, GNU binutils,... by Ubuntu Security Podcast
27 min listen
Episode 198: This week we investigate the mystery of failing GPG signatures for the 16.04 ISO images, plus we look at security updates for CUPS, Avahi, the Linux kernel, FRR, Go and more. by Ubuntu Security Podcast
18 min listen
Episode 197: The venerable Ubuntu 18.04 LTS release has transitioned into ESM, plus we look at Till Kamppeter's excellent guide on how to set up your GitHub projects to receive private vulnerability reports, and we cover the week in security updates... by Ubuntu Security Podcast
24 min listen
Episode 196: This week we look at some recent security developments from PyPI, the Linux Security Summit North America and the pending transition of Ubuntu 18.04 to ESM, plus we cover security updates for cups-filter, the Linux kernel, Git, runC,... by Ubuntu Security Podcast
21 min listen

Related podcast episodes

Skip carousel

A Non-Traditional Path into the SRE Folds with Serena Tiede: This week Serena Tiede, an SRE at Optum, joins Corey to talk about the world of SREs. Serena discusses their mix of traditional and non-traditional background and making the jump from electrical engineering to tech. Serena tells us about their beginnings by Screaming in the Cloud
39 min listen
Distributed Systems Tradeoffs with Camille Fournier: Distributed systems products are often marketed with terms like “real-time data” and “hassle-free scaling”, but what do those terms actually mean? Is data in a distributed system ever reliably “real time”? Do we ever have strong enough plans about our ... by Cloud Engineering Archives - Software Engineering Daily
56 min listen
A Different Monitoring Philosophy with Costa Tsaousis: Observability is becoming an increasingly competitive space in the software world. Many developers have heard of Datadog and New Relic, but there are a seemingly countless number of observability products out there. by Cloud Engineering Archives - Software Engineering Daily
49 min listen
The Future of HTTP with Nick Shadrin and Roman Arutyunyan: The Hypertext Transfer Protocol, or HTTP, is used to load webpages using hypertext links, and it’s the foundation of the web. Tim Berners-Lee famously created HTTP version 0.9 in 1989, and defined the essential behavior of a client and a server. by Cloud Engineering Archives - Software Engineering Daily
41 min listen
AI, Machine Learning and Human Creativity: Just as manufacturing automation cuts into human jobs, the prospect of creative artificial intelligence raises the specter of robot writers, robot artists and robot musicians who never sleep and always agree with their patron. But paranoia aside, where wi by Stuff To Blow Your Mind
78 min listen
210: Kotlin Multiplatform Mobile (KMM) with Mitch Tabian: In this episode, Donn talks with Mitch Tabian about Kotlin Multiplatform Mobile, also known as KMM. by Fragmented - An Android Developer Podcast
53 min listen
Pulumi and Kubernetes Releases with Kat Cosgrove: and welcome of this week to talk about what’s new with Kubernetes 1.24. Pulumi is infrastructure as code, allowing developers to use whatever language they are comfortable with to create and test infrastructure. Kat walks us through typical... by Google Cloud Platform Podcast
34 min listen
Observability with Eduardo Silva: There are hundreds of observability companies out there, and many ways to think about observability, such as application performance monitoring, server monitoring, and tracing. In a production application, multiple tools are often needed to get proper ... by Cloud Engineering Archives - Software Engineering Daily
45 min listen
Open Source at Google Cloud Platform with Sarah Novotny: Mark and Melanie are joined by Sarah Novotny, Head of Open Source Strategy for GCP, to talk all about Open Source, the Cloud Native Compute Foundation & their relationships to Google Cloud Platform. by Google Cloud Platform Podcast
38 min listen
Service Mesh with William Morgan: Containers make it easier for engineers to deploy software. Orchestration systems like Kubernetes make it easier to manage and scale the different containers that contain services. The popular container infrastructure powered by Kubernetes is often cal... by Cloud Engineering Archives - Software Engineering Daily
54 min listen
Flightcontrol and Going Beyond Heroku with Brandon Bayer: A platform as a service, or PaaS, is the concept of a complete development and deployment environment in the cloud. One of the best examples is Heroku, which was created in 2007 and later acquired by Salesforce. by Cloud Engineering Archives - Software Engineering Daily
48 min listen
A New Distributed Cloud Architecture by The Cloudcast
33 min listen
C101 86: Powershell 1/4: The Martian, Mutation Testing, and Powershell by Coding 101 (Video)
60 min listen
Kubernetes 1.25, with Cici Huang: It's release day! We discuss today's Kubernetes 1.25 with release team lead Cici Huang, Software Engineer at Google Cloud. What's in, what's out, and what is it like to lead a release you are also promoting a feature in? by Kubernetes Podcast from Google
27 min listen
Reviewing Microsoft Insight & GitHub Universe by The Cloudcast
28 min listen
All Things Azure with Dwayne Monroe: Dwayne Monroe is a senior cloud architect at Cloudreach, an organization that helps enterprises maximize their cloud investments, who’s focused on Azure. Prior to joining Cloudreach, Dwayne worked as a senior Microsoft and cloud architect at High Availabi by Screaming in the Cloud
38 min listen
E168: Can Google save itself? AI takes over Customer Support, Reddit IPO teardown: (0:00) Bestie intros! Jato Caelin (1:36) Groq update!: The key metric developer platforms should care about (5:55) Google's make or break moment: Should Sundar be fired, AI safety team's power, RIF potential, stock pressure, and more (29:17) How... by All-In with Chamath, Jason, Sacks & Friedberg
87 min listen
Postman and the Growth of APIs with Joyce Lin: If you’re a developer, you’ve probably worked with an API, or application programming interface. An API is a set of rules for how to communicate with an applications or device. For example, when you build an app and want to use Stripe to handle payment... by Cloud Engineering Archives - Software Engineering Daily
49 min listen
This Week In Machine Learning & AI - 5/20/16: AI at Google I/O, Amazon's Deep Learning DSSTNE: This Week In Machine Learning & AI - May 20, 2016… by The TWIML AI Podcast (formerly This Week in Machine Learning & Artificial Intelligence)
19 min listen
From Determined Searcher to $75m Accidental Holdco by Acquiring Minds
107 min listen
Domain Driven Design For Python: An interview about software architecture patterns in Python for large and complex systems by The Python Podcast.__init__
56 min listen
Using AI to supercharge DevX with Deepak Singh of AWS: Developer experience, or DevX, is a critical aspect of modern software development that focuses on creating a seamless and productive environment for developers. It encompasses everything from the tools and technologies used in the development process ... by Cloud Engineering Archives - Software Engineering Daily
52 min listen
Infrastructure Mistakes with Avi Freedman: The blueprint for a typical startup involves investing heavily in cloud services–either from Amazon, Google, or Microsoft. The high costs can quickly eat away at all of the money that startup has raised. In today’s episode, by Cloud Engineering Archives - Software Engineering Daily
60 min listen
E0: COVID-19 Political, Economic & Social Ramifications featuring The Production Board's David Friedberg (frmly Founder/CEO, The Climate Corporation): Follow @chamath: Follow @jason: 0:01 Jason intros Chamath and Episode 0 of All-In and they discuss their current self-quarantine 0:55 Jason intros David Friedberg 1:35 Chamath gives the inaugural (& potentially final) All-In ad... by All-In with Chamath, Jason, Sacks & Friedberg
89 min listen
Modern Coding Superpowers with Varun Mohan: Exafunction is a leader in deploying deep learning models at scale. One of their products is Codeium, a coding assistant for software developers based on Exafunction’s deep learning technology. Codeium provides AI-assisted autocompletion in your IDE, by Cloud Engineering Archives - Software Engineering Daily
34 min listen
Fiverr Engineering with Gil Sheinfeld: As the gig economy grows, that growth necessitates innovations in the online infrastructure powering these new labor markets. In our previous episodes about Uber, we explored the systems that balance server load and gather geospacial data. by Cloud Engineering Archives - Software Engineering Daily
54 min listen
Going Linux #301 · Open Source for Online Media: Going Linux #301 · Open Source for Online Media by Going Linux
37 min listen
High Volume Event Processing with John-Daniel Trask: A popular software application serves billions of user requests. These requests could be for many different things. These requests need to be routed to the correct destination, load balanced across different instances of a service, by Cloud Engineering Archives - Software Engineering Daily
57 min listen
Serverless Code with Ryan Scott Brown: The unit of computation has evolved from on premise servers to virtual machines in the cloud to containers running in those virtual machines. Serverless computation is another stage in the evolution of computational unit management. by Cloud Engineering Archives - Software Engineering Daily
55 min listen
Managed Kafka with Tom Crayford: Kafka is a distributed log for producers and consumers to publish messages to each other. We’ve done many shows about Kafka as a key building block for distributed systems, but we often leave out the discussion of the complexities of setting up Kafka a... by Cloud Engineering Archives - Software Engineering Daily
48 min listen

Discover this podcast and so much more

Episode 200

Episode 200

Description

Titles in the series (100)

More Episodes from Ubuntu Security Podcast

Related podcast episodes