Episode 210

FromUbuntu Security Podcast

Start listening View podcast show

Episode 210

FromUbuntu Security Podcast

ratings:

Length:

21 minutes

Released:

Sep 22, 2023

Format:

Podcast episode

Description

It's the Linux Security Summit in Bilbao this week and we bring you some
highlights from our favourite talks, plus we cover the 25 most stubborn software
weaknesses, and we look at security updates for Open VM Tools, libwebp, Django,
binutils, Indent, the Linux kernel and more.

Released:

Sep 22, 2023

Format:

Podcast episode

Titles in the series (100)

A weekly podcast talking about the latest developments and updates from the Ubuntu Security team, including a summary of the security vulnerabilities and fixes from the last week as well as a discussion on some of the goings on in the wider Ubuntu Security community.

Skip carousel

Episode 6: This week we look at some details of the 17 unique CVEs addressed across the supported Ubuntu releases and more. by Ubuntu Security Podcast
12 min listen
Episode 9: This week we look at some details of the 61 unique CVEs addressed across the supported Ubuntu releases, with a particular focus on the recent Xorg vulnerability ([CVE-2018-14665](https://ubuntu.com/security/CVE-2018-14665)), plus Cosmic is now... by Ubuntu Security Podcast
12 min listen
Episode 2: L1TF kernel regressions, WPA2 key recovery, mirror fail and more! by Ubuntu Security Podcast
8 min listen
Episode 12: This week we look at some details of the 33 unique CVEs addressed across the supported Ubuntu releases, including some significant updates for systemd and the kernel, plus we talk about even more Intel side-channel vulnerabilities and more. by Ubuntu Security Podcast
20 min listen
Episode 0: The first ever episode of the Ubuntu Security Podcast! by Ubuntu Security Podcast
13 min listen
Episode 16 by Ubuntu Security Podcast
11 min listen
Episode 8: This week we look at some details of the 15 unique CVEs addressed across the supported Ubuntu releases and discuss some of the security relevant changes in Ubuntu 18.10, plus a refresh of the Ubuntu CVE tracker and more. by Ubuntu Security Podcast
9 min listen
Episode 23: This week we look at security updates for the Linux kernel, PHP and NVIDIA drivers, revealing recent research into GPU based side-channel attacks plus we call for suggestions on hardening features and more. by Ubuntu Security Podcast
13 min listen
Episode 20: This week we look at Linux kernel updates for all releases, OpenSSH, dovecot, curl and more. Plus we answer some frequently asked questions for Ubuntu security, in particular the perennial favourite of why we choose to just backport security... by Ubuntu Security Podcast
17 min listen
Episode 5: This week we look at some details of the 43 unique CVEs addressed across the supported Ubuntu releases and talk about the recently announced Extended Security Maintenance support for Ubuntu 14.04 Trusty Tahr. by Ubuntu Security Podcast
16 min listen
Episode 10: This week we look at some details of the 17 unique CVEs addressed across the supported Ubuntu releases, have a brief look at some Canonical presentations from LSS-EU and more. by Ubuntu Security Podcast
9 min listen
Episode 4: A quieter week in package updates - this week we look at some details of the 9 unique CVEs addressed across the supported Ubuntu releases and talk about various hardening guides for Ubuntu. by Ubuntu Security Podcast
11 min listen
Episode 46: A massive 85 CVEs addressed this week, including updates for Exim, the Linux Kernel, Samba, systemd and more, plus we discuss hacking BMCs via remote USB devices and password stashes. by Ubuntu Security Podcast
26 min listen
Episode 28: This week we look at updates for vulnerabilities in wpa_supplicant, Samba, systemd, wget and more and we talk to Joe about IoT security (or the prevailing lack-thereof). by Ubuntu Security Podcast
22 min listen
Episode 7: This week we look at some details of the 78 unique CVEs addressed across the supported Ubuntu releases including more GhostScript, ImageMagick, WebKitGTK, Linux kernel and more. by Ubuntu Security Podcast
11 min listen
Episode 3: This week we look at 29 unique CVEs addressed across the supported Ubuntu releases, a discussion of the Main Inclusion Review process and recent news around the bubblewrap package, and open positions within the team. by Ubuntu Security Podcast
10 min listen
Episode 1: Another week, another speculative execution vulnerablity... and more! by Ubuntu Security Podcast
11 min listen
Episode 18: This week we look at some details of the 46 unique CVEs addressed across the supported Ubuntu releases and take a deep dive into the recent apt security bug. by Ubuntu Security Podcast
14 min listen
Episode 11: This week we look at some details of the 23 unique CVEs addressed across the supported Ubuntu releases, discuss the latest purported Intel side-channel vulnerability PortSmash and more. by Ubuntu Security Podcast
13 min listen
Episode 13: This week we look at some details of the 16 unique CVEs addressed across the supported Ubuntu releases and more. by Ubuntu Security Podcast
9 min listen
Episode 15: Security updates for 29 CVEs including Perl, the kernel, OpenSSL (PortSmash) and more, plus in response to some listener questions, we discuss how to make sure you always have the latest security updates by using unattended-upgrades. by Ubuntu Security Podcast
17 min listen
Episode 17: First episode of 2019! This week we look "System Down" in systemd, as well as updates for the Linux kernel, GnuPG, PolicyKit and more, and discuss a recent cache-side channel attack using the mincore() system call. by Ubuntu Security Podcast
22 min listen
Episode 14: This week we look at some details of the 32 unique CVEs addressed across the supported Ubuntu releases and talk open source software supply chain integrity and how this relates to Ubuntu compared to the recent npm event-stream compromise. by Ubuntu Security Podcast
22 min listen
Episode 49: This week we look at updates for Sudo, Python, OpenStack Octavia and more, plus we discuss a recent CVE for Python which resulted in erroneous scientific research results, and we go over some of your feedback from Episode 48. by Ubuntu Security Podcast
23 min listen
Episode 22: This week we cover security updates including Firefox, Thunderbird, OpenSSL and another Ghostscript regression, plus we look at a recent report from Capsule8 comparing Linux hardening features across various distributions and we answer some... by Ubuntu Security Podcast
16 min listen
Episode 29: This week we look at fixes from the past two weeks including BIND, NTFS-3G, Dovecot, Pacemaker and more, plus we follow up last episodes IoT security discussion with Joe McManus talking about Ubuntu Core. Finally we cover the release... by Ubuntu Security Podcast
21 min listen
Episode 25: Ghostscript is back to haunt us for another week, plus we look at vulnerabilities in ntfs-3g, snapd, firefox and more. by Ubuntu Security Podcast
15 min listen
Episode 44: This week Joe and Alex discuss a recently disclosed backdoor in Webmin, plus we cover security updates from the past week, including for Nova, KDE, LibreOffice, Docker, CUPS and more. by Ubuntu Security Podcast
22 min listen
Episode 39: A look at security updates for Django, Thunderbird, ZNC, Irssi and more, plus news on the CanonicalLtd GitHub account credentials compromise, SKS PGP keyservers under attack and Ubuntu 18.10 Cosmic Cuttlefish reaches EOL. by Ubuntu Security Podcast
12 min listen
Episode 27: Carpe Diem for Apache HTTP Server, plus updates for Dovecot, PolicyKit and the Linux kernel, and we talk to Joe McManus about the recent Asus ShadowHammer supply chain attack and more. by Ubuntu Security Podcast
30 min listen

More Episodes from Ubuntu Security Podcast

Skip carousel

Episode 227: Ubuntu 24.04 LTS is finally released and we cover all the new security features it brings, plus we look at security vulnerabilities in, and updates for, FreeRDP, Zabbix, CryptoJS, cpio, less, JSON5 and a heap more. by Ubuntu Security Podcast
25 min listen
Episode 226: John and Georgia are at the Linux Security Summit presenting on some long awaited developments in AppArmor and we give you all the details in a sneak peek preview as well as some of the other talks to look out for, plus we cover... by Ubuntu Security Podcast
24 min listen
Episode 225: This week we cover the recent reports of a new local privilege escalation exploit against the Linux kernel, follow-up on the xz-utils backdoor from last week and it's the beta release of Ubuntu 24.04 LTS - plus we talk security... by Ubuntu Security Podcast
20 min listen
Episode 224: It's been an absolutely manic week in the Linux security community as the news and reaction to the recent announcement of a backdoor in the xz-utils project was announced late last week, so we dive deep into this issue and discuss how it... by Ubuntu Security Podcast
29 min listen
Episode 223: This week we bring you a sneak peak of how Ubuntu 23.10 fared at Pwn2Own Vancouver 2024, plus news of malicious themes in the KDE Store and we cover security updates for the Linux kernel, X.Org X Server, TeX Live, Expat, Bash and more.... by Ubuntu Security Podcast
17 min listen
Episode 222: We cover recent Linux malware from the Magnet Goblin threat actor, plus the news of Ubuntu 23.10 as a target in Pwn2Own Vancouver 2024 and we detail vulnerabilities in Puma, AccountsService, Open vSwitch, OVN, and more. by Ubuntu Security Podcast
24 min listen
Episode 221: Andrei is back to discuss recent academic research into malware within the Python/PyPI ecosystem and whether it is possible to effectively combat it with open source tooling, plus we cover security updates for Unbound, libuv, node.js,... by Ubuntu Security Podcast
23 min listen
Episode 220: The Linux kernel.org CNA has assigned their first CVEs so we revisit this topic to assess the initial impact on Ubuntu and the CVE ecosystem, plus we cover security updates for Roundcube Webmail, less, GNU binutils and the Linux kernel... by Ubuntu Security Podcast
19 min listen
Episode 219: This week the Linux kernel project announced they will be assigning their own CVEs so we discuss the possible implications and fallout from such a shift, plus we cover vulnerabilities in the kernel, Glance_store, WebKitGTK, Bind and... by Ubuntu Security Podcast
21 min listen
Episode 218: AppArmor unprivileged user namespace restrictions are back on the agenda this week as we survey the latest improvements to this hardening feature in the upcoming Ubuntu 24.04 LTS, plus we discuss SMTP smuggling in Postfix, runC... by Ubuntu Security Podcast
18 min listen
Episode 217: For the first episode of 2024 we take a look at the case of a raft of bogus FOSS CVEs reported on full-disclosure as well as AppSec tools in Ubuntu and the EOL announcement for 23.04, plus we cover vulnerabilities in the Linux kernel,... by Ubuntu Security Podcast
15 min listen
Episode 216: For the final episode of 2023 we discuss creating PoCs for vulns in tar and the looming EOL for Ubuntu 23.04, plus we look into security updates for curl, BlueZ, Netatalk, GNOME Settings and a heap more. by Ubuntu Security Podcast
21 min listen
Episode 215: Mark Esler is our special guest on the podcast this week to discuss the OpenSSF's Compiler Options Hardening Guide for C/C++ plus we cover vulnerabilities and updates for GIMP, FreeRDP, GStreamer, HAProxy and more. by Ubuntu Security Podcast
31 min listen
Episode 214: This week we take a deep dive into the Reptar vuln in Intel processors plus we look into some relic vulnerabilities in Squid and OpenZFS and finally we detail new hardening measures in tracker-miners to keep your desktop safer. by Ubuntu Security Podcast
20 min listen
Episode 213: As we ease back into regular programming, we cover the various activities the team got up to over the past few weeks whilst away in Riga for the Ubuntu Summit and Ubuntu Engineering Sprint. by Ubuntu Security Podcast
9 min listen
Episode 212: With the Ubuntu Summit just around the corner, we preview a couple talks by the Ubuntu Security team, plus we look at security updates for OpenSSL, Sofia-SIP, AOM, ncurses, the Linux kernel and more. by Ubuntu Security Podcast
23 min listen
Episode 211: After a well-deserved break, Alex is back looking at the recent Ubuntu 23.10 release and the significant security technologies it introduces along with a call for testing of unprivileged user namespace restrictions, plus the details of... by Ubuntu Security Podcast
20 min listen
Episode 209: Andrei is back this week with a deep dive into recent research around CVSS scoring inconsistencies, plus we look at a recent Ubuntu blog post on the internals of package updates and the repositories, and we cover security updates in... by Ubuntu Security Podcast
25 min listen
Episode 208: This week we detail the recently announced and long-awaited feature of TPM-backed full-disk encryption for the upcoming Ubuntu 23.10 release, plus we cover security updates for elfutils, GitPython, atftp, BusyBox, Docker Registry and... by Ubuntu Security Podcast
25 min listen
Episode 207: This week we cover reports of "fake" CVEs and their impact on the FOSS security ecosystem, plus we look at security updates for PHP, Fast DDS, JOSE for C/C++, the Linux kernel, AMD Microcode and more. by Ubuntu Security Podcast
22 min listen
Episode 206: This week we talk about HTTP Content-Length handling, intricacies of group management in container environments and making sure you check your return codes while covering vulns in HAProxy, Podman, Inetutils and more, plus we put a call... by Ubuntu Security Podcast
16 min listen
Episode 205: We're back after unexpectedly going AWOL last week to bring you the latest in Ubuntu Security including the recently announced Downfall and GameOver(lay) vulnerabilities, plus we look at security updates for OpenSSH and GStreamer **and**... by Ubuntu Security Podcast
20 min listen
Episode 204: This week we look at the recent Zenbleed vulnerability affecting some AMD processors, plus we cover security updates for the Linux kernel, a high profile OpenSSH vulnerability and finally Andrei is back with a deep dive into recent... by Ubuntu Security Podcast
28 min listen
Episode 203: This week we talk about the dual use purposes of eBPF - both for security and for exploitation, and how you can keep your systems safe, plus we cover security updates for the Linux kernel, Ruby, SciPy, YAJL, ConnMan, curl and more. by Ubuntu Security Podcast
17 min listen
Episode 202: We take a sneak peek at the upcoming AppArmor 4.0 release, plus we cover vulnerabilities in AccountsService, the Linux Kernel, ReportLab, GNU Screen, containerd and more. by Ubuntu Security Podcast
22 min listen
Episode 201: This week we look at the top 25 most dangerous vulnerability types, as well as the announcement of the program for LSS EU, and we cover security updates for Bind, the Linux kernel, CUPS, etcd and more. by Ubuntu Security Podcast
20 min listen
Episode 200: For our 200th episode, we discuss the impact of Red Hat's decision to stop publicly releasing the RHEL source code, plus we cover security updates for libX11, GNU SASL, QEMU, VLC, pngcheck, the Linux kernel and a whole lot more. by Ubuntu Security Podcast
20 min listen
Episode 199: For our 199th episode Andrei looks at Fuzzing Configurations of Program Options plus we discuss Google's findings on the `io_uring` kernel subsystem and we look at vulnerability fixes for Netatalk, Jupyter Core, Vim, SSSD, GNU binutils,... by Ubuntu Security Podcast
27 min listen
Episode 198: This week we investigate the mystery of failing GPG signatures for the 16.04 ISO images, plus we look at security updates for CUPS, Avahi, the Linux kernel, FRR, Go and more. by Ubuntu Security Podcast
18 min listen
Episode 197: The venerable Ubuntu 18.04 LTS release has transitioned into ESM, plus we look at Till Kamppeter's excellent guide on how to set up your GitHub projects to receive private vulnerability reports, and we cover the week in security updates... by Ubuntu Security Podcast
24 min listen

Related podcast episodes

Skip carousel

237: What’s The Most Underated Linux Distro?: This week’s episode of Destination Linux, we’re discussing what’s the most underrated distro in Linux? Then we’re going to cover the amazingly awesome and repairable Framework Laptop. Plus we’ve also got our famous tips, tricks and software picks. by Destination Linux
69 min listen
Destination Linux 168: EARN IT Act is Disgusting, Behind The Scenes of DL, Eric Adams (DLN Xtend): Coming up on this week’s episode of Destination Linux, we’re going to be discussing the tools used to produce DL and all our individual shows, we’re going to take a look at Ubuntu 20.04, giving tips and tricks along with our Software Pick and much much... by Destination Linux
90 min listen
269: Rockin’ Web Browsers That You Haven’t Heard Of!: Do you watch on YouTube?Subscribe to our NEW DL Channel on YouTube! This week’s episode of Destination Linux, we’re going to be discussing lesser known browsers and see which browsers are worthy of checking out. by Destination Linux
72 min listen
243: Vivaldi CEO Interview – Jon Stephenson von Tetzchner: This week’s episode of Destination Linux, we have the CEO of Vivaldi joining us to discuss their partnership with Manjaro and their support for Linux. Then we’re going to talk about two great anonymous, privacy focused distros that both had a new relea... by Destination Linux
87 min listen
224: Linux Kernel Bans UMN & Interview with Neal Gompa of Fedora Project: This week’s episode of Destination Linux, we are going to talk with Neal Gompa, a DevOps Engineer by day and a Linux systems aficionado and developer by night about Fedora Linux 34 as well as Fedora KDE. Then we’ll check out the latest release of the o... by Destination Linux
65 min listen
Linux 5.0, UBports, Librem 5, Bash 5.0, Fedora, Funtoo, AMD, SuperTuxKart | This Week in Linux 50 by This Week in Linux
49 min listen
214: Linux Plumbers Conference, Fedora, Kdenlive Fundraiser, Linux Malware and more Linux news!: On this episode of This Week in Linux, developers of the Linux kernel met to discuss various different things at the annual Linux Plumbers Conference. We’ve got a lot of Betas to talk about this week, usually I like to wait for things to release before... by This Week in Linux
30 min listen
Destination Linux EP102 – Forecasting Linux Dominance: On this episode of Destination Linux, we discuss the latest release of the Linux kernel. We check out some application news for Darktable, LibreELEC, and Polo File Manager. Later in the show, we’ll talk about some Linux trends and some Linux Gaming new... by Destination Linux
77 min listen
Destination Linux EP107 – Linux Laptop Envy: On this episode of Destination Linux, we discuss some news for openSUSE, the Awesome window manager, Mozilla’s release of Firefox 65 and Mozilla’s announcement for AV1 standard. We also check out a new open source video editor coming to Linux called Ol... by Destination Linux
76 min listen
Episode 280: FOSS Clothing | BSD Now 280: A EULA in FOSS clothing, NetBSD with more LLVM support, Thoughts on FreeBSD 12.0, FreeBSD Performance against Windows and Linux on Xeon, Microsoft shipping NetBSD, and more. by BSD Now
52 min listen
235: Raspberry Pi 5, openSUSE, Linux Mint, GNU 40 Years & more Linux news!: In this episode of This Week in Linux (235), we cover exciting news: Raspberry Pi 5 Announced, Shorter LTS Kernel Maintenance, GNU’s 40th Anniversary, LINBIT, openSUSE’s Slowroll Distro & Survey, Mozilla Firefox 118 Released. by This Week in Linux
16 min listen
Late Night Linux – Episode 280: Ubuntu 24.04 is out and we have mixed feelings about it. Plus bad news for RISC-V, a new Linux distro might control safety systems in cars, a classic media player is back from the dead, and more. With guest host Jim from 2.5 Admins. by Late Night Linux
25 min listen
Late Night Linux – Episode 280: Ubuntu 24.04 is out and we have mixed feelings about it. Plus bad news for RISC-V, a new Linux distro might control safety systems in cars, a classic media player is back from the dead, and more. With guest host Jim from 2.5 Admins. by Late Night Linux Family All Episodes
25 min listen
246: Linus Tech Tips Linux Challenge & Malware Found In WSL: This week’s episode of Destination Linux, we’re going to discuss the Linux Challenge that the hosts of the WAN Show from Linus Tech Tips are doing. We’ll give our thoughts on this news and offer a helping hand to the WAN Show team. by Destination Linux
57 min listen
112: LibreOffice 7.0, Ubuntu 20.04.1, elementary OS 6, Kdenlive, Mageia 8 & More: On this episode of This Week in Linux, we’ve got some big news from LibreOffice with the release of LibreOffice 7.0! Ubuntu has announced the first point release of Ubuntu 20.04 LTS. I’m going to show you a cool app that lets you view and interact with... by This Week in Linux
44 min listen
Destination Linux 170: Emma Marshall (System76), Linux Appliances to Open Source Your Home: Coming up in this week’s episode of Destination Linux we deep dive into the topics of Linux Appliances, how Open Source can save lives, Raspberry Pi ventilator, Community Feedback, AI Dungeon in the Gaming section, our Software Spotlight, by Destination Linux
76 min listen
The Kitchen Sink of Conversations: Fellow Windows Insider Program team member is our guest this month as we cover a variety of topics including Surface devices, features in recent WIP builds, the seventh anniversary of the Windows Insider Program, and even TikTok videos! Tune in... by Windows Insider Podcast
39 min listen
Linux Dev Time – Episode 87: Linux Downtime is now Linux Dev Time! In this first episode we talk about “sharpening our tools” – changing your dev tools, trying out new languages, using existing code vs writing something new, how to get over creative blocks, and more. by Linux Dev Time
18 min listen
Linux Dev Time – Episode 87: Linux Downtime is now Linux Dev Time! In this first episode we talk about “sharpening our tools” – changing your dev tools, trying out new languages, using existing code vs writing something new, how to get over creative blocks, and more. by Late Night Linux Family All Episodes
18 min listen
Destination Linux EP91 – CoC A Doodle Do: On this special episode of Destination Linux, we are joined by a friend of the show, Liam from GamingonLinux.com to discuss the hottest topics in Linux Gaming! We also cover some interesting discussion topics about Security, by Destination Linux
80 min listen
257: You Down With IDEs? Yea You Know Me!: This week’s episode of Destination Linux, we discuss our favorite IDE’s and text editors for writing code and discuss some of the future tools and enhancements to several popular options. Then we’re going to discuss Kdenlive’s new features which are go... by Destination Linux
71 min listen
The Cloudcast #296 - KubeCon, DockerCon, Azure Functions and Bears, Oh My!: Aaron and Brian review KubeCon 2017 (Berlin), DockerCon 2017 (Austin) and Aaron’s trip to Seattle to learn more about Azure Functions. They also read a bunch of sponsor ads for sponsors they don't have. Use offer code CLOUDCAST to get awesome discounts... by The Cloudcast
45 min listen
Pinebook Pro, VLC Bug Debunked, Fedora CoreOS, SUSE New CEO, Mageia, Arco | This Week in Linux 76: [tdpodcast mode=”ytembed” podcast=”thisweekinlinux” episode=”76″] On this episode of This Week in Linux, the Pinebook Pro is now available for Pre-Orders and a Critical Security Bug reported for VLC but that was quickly debunked so we’ll talk about the... by This Week in Linux
46 min listen
259: The Solus Saga & Log4Shell: This week’s episode of Destination Linux, we’re going to dig into the infamous Log4j vulnerability and attacks with Bo Weaver! Then we’re going to discuss the recent Solus Saga and what the community can expect. Plus we’ve also got our famous tips, by Destination Linux
48 min listen
Destination Linux EP89 – Kernel Poppin’: On this episode of Destination Linux, we cover some new distro news, interview a member of our community and discuss Linus taking a break along with a controversial code of conduct. Then we’ll round out the show with Tips, by Destination Linux
96 min listen
ElixirConf 2020 Preview: With ElixirConf 2020 just around the corner, today’s episode is a sneak peek where we talk with six of this year’s speakers. by Elixir Wizards
77 min listen
242: License To Thrill With Open Source (Explaining Licenses & Why To Use Them): This week’s episode of Destination Linux, we’re going to discuss open source licensing and help everyone navigate this critical part of open source ecosystem. Then we’re going to discuss some disturbing surveillance laws that are currently impacting ou... by Destination Linux
59 min listen
Episode 124: Linux’s Amazing Year | LUP 124: We look back at the big year for Linux, for our show & our virtual LUG. Some of the most interesting projects in open source were discussed first in our LUG, we look at some of the great moments & then give you our fresh take on the big events. by LINUX Unplugged
119 min listen
Episode 188: This week the common theme is vulnerabilities in setuid-root binaries and their use of environment variables, so we take a look at a great blog post from the Trail of Bits team about one such example in the venerable `chfn` plus we look... by Ubuntu Security Podcast
19 min listen
Revenge Leaking: This week, we've got new builds, rage over promotional banners, more bad news for the future of HoloLens, and loads more! Links by Windows Central Podcast
94 min listen

Discover this podcast and so much more

Episode 210

Episode 210

Description

Titles in the series (100)

More Episodes from Ubuntu Security Podcast

Related podcast episodes