Ubuntu Security (@[email protected])

Come follow us in the #fediverse @ubuntusecurity@fosstodon.org

It’s the end of the year for official duties for the #Ubuntu #Security team so on the podcast this week we take a look back on the security highlights of 2024 for Ubuntu and predict what is coming in 2025 ubuntusecuritypodcast.org/episode-243/

On the latest episode of the #Ubuntu Security Podcast we dive into the local privesc vulns discovered by @qualys in needrestart, covering topics from confused deputies to the inner workings of the /proc filesystem and responsible disclosure as well ubuntusecuritypodcast.org/episode-242/

We're diving into the scariest topics of all: cybersecurity. The Ubuntu Security Team @ubuntu_sec recorded the third episode of our three-part #CybersecurityAwareness month podcast series live, during the #UbuntuSummit. Diogo Sousa and Luci Stanescu join Alex Murray to talk about the exciting developments coming to the security landscape and even trying to make some predictions about the future. Tune in to the episode on the Ubuntu Security Podcast: ubuntusecuritypodcast.org/episode-240/ #Cybersecurity #CybersecurityAwareness

The #Ubuntu Security Podcast is back in your ears with the first series for Cybersecurity Awareness month - Luci Stanescu joins @alex_murray to discuss the recent CUPS vulns as well as the evolution of cybersecurity since the origin of the internet ubuntusecuritypodcast.org/episode-238/

On the #Ubuntu Security Podcast this week we cover some bits from @LinuxSecSummit EU including @ApparmorProject userns restrictions, the official announcement of permission prompting in Ubuntu 24.10, a new release of Intel TDX for Ubuntu 24.04 LTS and more ubuntusecuritypodcast.org/episode-237/

On the latest episode of the #Ubuntu Security Podcast the long awaited preview of snapd-based AppArmor file prompting is finally seeing the light of day, plus we cover the recent 24.04.1 LTS release and the podcast officially moves to a fortnightly cycle ubuntusecuritypodcast.org/episode-236/

A recent Microsoft Windows update breaks Linux dual-boot - or does it? This week on the #Ubuntu Security Podcast we look into reports of the recent Windows patch-Tuesday update breaking dual-boot, and a vuln GNOME Shell's captive portal handling as well ubuntusecuritypodcast.org/episode-235/

On the #Ubuntu Security Podcast this week we take a behind-the-scenes look into the handling of a recent report from Snyk’s Security Lab of a local privesc vuln in wpa_supplicant plus we cover security updates for OpenSSL, Exim, snapd, Gross, curl and more ubuntusecuritypodcast.org/episode-234/

The podcast is back - this week we think about possible improvements to the Ubuntu security update process in light of the recent Crowdstrike outage, plus we cover vulnerabilities in poppler, phpCAS, EDK II, Python, and over 300 CVE fixes the Linux kernel ubuntusecuritypodcast.org/episode-233/

This week on the #Ubuntu Security Podcast we deep-dive into one of the best vulns we’ve seen in a long time #regreSSHion - unauth remote root code-exec in OpenSSH. Plus we cover updates for Plasma Workspace, Ruby, Netplan, FontForge, OpenVPN and more ubuntusecuritypodcast.org/episode-232/

A new episode of the #Ubuntu Security Podcast just dropped! A look into CISA’s Known Exploited Vulnerability Catalogue is on our minds this week, plus we look at vulnerability updates for gdb, Ansible, CUPS, libheif, Roundcube, the Linux kernel and more ubuntusecuritypodcast.org/episode-231/

The #Ubuntu Security Podcast is back with a special interview between Ijlal Loutfi and Karen Horovitz who deep-dive into Confidential Computing - from a high-level discussion to the low-level implementation in Ubuntu and a look at future security tech too ubuntusecuritypodcast.org/episode-230/

As the #Ubuntu #Security Podcast winds down for a break over the next month, this week we talk RSA timing side-channel attacks and the DNSBomb vulnerability as we cover updates in OpenSSL, Netatalk, WebKitGTK, amavisd-new, Unbound, Intel Microcode and more ubuntusecuritypodcast.org/episode-229/

The #Ubuntu #Security Podcast is back in your ears! This week we bring you some of our plans for the upcoming Ubuntu 24.10 release, plus we talk about Google’s kernelCTF project and Mozilla’s PDF.js sandbox and the week's security updates as well ubuntusecuritypodcast.org/epis

Ubuntu 24.04 LTS is finally released and this week on the #Ubuntu #Security Podcast we've got your back, covering all its new security features, plus we look at vulns in, and updates for, FreeRDP, Zabbix, CryptoJS, cpio, less, JSON5 and a heap more ubuntusecuritypodcast.org/episode-227/

On the @Ubuntu #Security Podcast this week, we give you a sneak peek of the talk John and Georgia are giving at the Linux Security Summit tomorrow, plus we cover security updates and put out a call for testing of a pending AppArmor security fix too ubuntusecuritypodcast.org/episode-226/

This week on the @Ubuntu Security Podcast we cover recent reports of a privesc exploit against the Linux kernel, follow-up on the xz-utils backdoor and the beta release of Ubuntu 24.04 LTS - plus we talk vulns in the X Server, Django, util-linux and more ubuntusecuritypodcast.org/episode-225/

It’s been a manic week in the Linux security community as a backdoor in xz-utils targeting openssh on Linux was discovered, so on the podcast this week we deep-dive to discuss the impact to Ubuntu and what this means for the OSS community in the future ubuntusecuritypodcast.org/episode-224/

On the #Ubuntu #Security Podcast this week we bring you a sneak peak of how Ubuntu 23.10 fared at @thezdi #Pwn2Own Vancouver 2024, plus news of malicious themes in the KDE Store + security updates for the Linux kernel, TeX Live, Expat, Bash and more ubuntusecuritypodcast.org/episode-223/

Better late than never... it's Ubuntu Security Podcast time! This week we cover recent Linux malware from "Magnet Goblin", plus Ubuntu 23.10 as a target in Pwn2Own Vancouver 2024 and we detail vulns in Puma, AccountsService, Open vSwitch, OVN, and more ubuntusecuritypodcast.org/episode-222/