This week’s news about the "Looney Tunes flaw" highlighted a condition which can allow a local user to access root privileges from the command line. Part of the RL Security team's task is to have mitigation strategies ready for such cases - reporting vulnerabilities and suggesting fixes upstream, and also writing our own extra packages.
This week, the Security SIG has published our extra packages and formalized a wiki: https://rockylinux.org/news/security-sig-update/ #looneytunables #securityupdate #glibc
Rocky Linux :rockylinux: /
npub1kg…vw7kf
2023-10-05 14:06:53
Author Public Key
npub1kg2v55zndpp3ullwdr268qz8ehzvq2rpjyf69a98ac2n93gkzp8sdvw7kfPublished at
2023-10-05 14:06:53Event JSON
{
"id": "5da20d0b77a03b8a1d4ca44d54a10d45acf195c1447ed8d5fe3ab2ac32893978",
"pubkey": "b214ca505368431e7fee68d5a38047cdc4c028619113a2f4a7ee1532c516104f",
"created_at": 1696514813,
"kind": 1,
"tags": [
[
"t",
"looneytunables"
],
[
"t",
"securityupdate"
],
[
"t",
"glibc"
],
[
"proxy",
"https://fosstodon.org/users/rockylinux/statuses/111182794839391466",
"activitypub"
]
],
"content": "This week’s news about the \"Looney Tunes flaw\" highlighted a condition which can allow a local user to access root privileges from the command line. Part of the RL Security team's task is to have mitigation strategies ready for such cases - reporting vulnerabilities and suggesting fixes upstream, and also writing our own extra packages.\n\nThis week, the Security SIG has published our extra packages and formalized a wiki: https://rockylinux.org/news/security-sig-update/ #looneytunables #securityupdate #glibc\n\nhttps://cdn.fosstodon.org/media_attachments/files/111/182/794/702/760/097/original/bab8b12ed0e4d23d.mp4",
"sig": "f21ba06b202f2ced918c1a08bb5f70a70e6dfbac77954ba0626a91e26243d45a0dec1cec6fd65e28ec8ab5bc163998c7314f385ac6d9a4cfe7b88373965ccf78"
}