Hírolvasó

Proof-of-concept exploit kód került nyilvánosságra a VMware Aria Operations for Networks (korábbi nevén vRealize Network Insight) elemző eszközének kritikus kockázati besorolású SSH hitelesítési bypass sebezhetőségéhez.

The post Egy újabb kritikus VMware sebezhetőség ütötte fel a fejét first appeared on Nemzeti Kibervédelmi Intézet.

For this release, developers have been working in high gear (no pun intended) as there were important improvements made to many of Gear’s most iconic applications. Not only that: just a little over a year after its arrival, the Kalendar app is going through a name change as it morphs into what appears will eventually become a full-featured email application.

Linux Plumbers is now sold out and in-person registration is closed.

This year it happened not as fast as in 2022, but the registration is still sold out long before the event.

We are setting up a waitlist for in-person registration (virtual attendee places are still available). Please fill in this form and try to be clear about your reasons for wanting to attend. This year we’re giving waitlist priority to new attendees and people expected to contribute content.

The Containers and Checkpoint/Restore micro-conference focuses on both userspace and kernel related work. The micro-conference targets the wider container ecosystem ideally with participants from all major container runtimes as well as init system developers.

The microconference will be discussing recent advancements in container technologies with some of the usual candidates being:

• CGroupV2 feature parity with CGroupV1
• Emulation of various files and system calls through FUSE and/or Seccomp
• Dealing with the eBPF-ification of the world
• Making user namespaces more accessible
• VFS idmap improvements

On the checkpoint/restore front, some of the potential topics include:

• Restoring FUSE services
• Handling GPUs
• Dealing with restartable sequences

And quite likely a variety of other container and checkpoint/restore topics as things evolve between now and the event.

Past editions of this micro-conference have been the source of many developments in the Linux kernel, including:

• PIDfds
• VFS idmap
• FUSE in user namespace
• Unprivileged overlayfs
• Time namespace
• A variety of CRIU features and checkpoint/restore kernel interfaces with the latest among them being
  • Unpriviledged checkpoint/restore
  • Support of rseq(2) checkpointing

Use LPC abstract submission page to submit your proposals and select “Containers and Checkpoint/Restart” track.

 Sriram invited me to the oneAPI meetup, and I felt I hadn't summed up the state of compute and community development in a while. Enjoy 45 minutes of opinions!

https://www.youtube.com/watch?v=HzzLY5TdnZo

Biztonsági frissítés érkezett a Juniper Junos OS-hez, ami olyan sérülékenységeket foltoz be, amelyek együttes kihasználása távoli kódfuttatást (RCE) vagy szolgáltatásmegtagadásos támadást (DoS) tesz lehetővé. PoC nyilvános elérhetősége miatt nagy a valószínűsége, hogy kiberfenyegetési szereplők aktívan ki is fogják használni. Javasolt a sérülékeny eszközök frissítés mielőbbi frissítése.

The post Kritikus Juniper Junos OS hibajavítás érhető el first appeared on Nemzeti Kibervédelmi Intézet.

Mintegy 2,6 millió Duolingo felhasználó adata szivárgott ki egy hacker fórumon, amit fenyegetési szereplők felhasználhatnak célzott adathalász támadásokhoz.

The post Doulingót használ nyelvtanuláshoz? Ellenőrizze, hogy az Ön adatai is kiszivárogtak-e! first appeared on Nemzeti Kibervédelmi Intézet.

The Power Management and Thermal Control microconference focuses on power management and thermal control infrastructure, CPU and device power-management mechanisms, and thermal control methods.

In particular, we are interested in improving the thermal control infrastructure in the kernel to cover more use cases and utilizing energy-saving opportunities offered by modern hardware in new ways.

The goal is to facilitate cross-framework and cross-platform discussions that can help improve energy-awareness and thermal control in Linux.

The current list of topics proposed so far includes the following:

• Thermal control framework improvements and possible extensions.
• Problems with using netlink for communication between the kernel and users space in the thermal control framework.
• Thermal control debug infrastructure.
• Memory power management.
• CPU performance scaling in virtualized systems.
• Extensions and improvements related to energy-saving states.