Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

Grinch "Vulnerability"

Here you can discuss every aspect of Debian. Note: not for support requests!
Post Reply
Message
Author
n_hologram
Posts: 459
Joined: 2013-06-16 00:10

Grinch "Vulnerability"

#1 Post by n_hologram »

http://linux.slashdot.org/story/14/12/1 ... x-stocking
In a blog post Tuesday, security service provider Alert Logic warned of a Linux vulnerability, named grinch after the well-known Dr. Seuss character, that could provide attackers with unfettered root access. The fundamental flaw resides in the Linux authorization system, which can inadvertently allow privilege escalation, granting a user full administrative access. Alert Logic warned that Grinch could be as severe as the Shellshock flaw that roiled the Internet in September.
And then adds:
Reader deathcamaro points out that Red Hat and others say this is not a flaw at all, but expected behavior.
Is technology just falling to the fate of sensationalized journalism, or is this a genuine concern for users/admins?
bester69 wrote:There is nothing to install in linux, from time to time i go to google searching for something fresh to install in linux, but, there is nothing
the crunkbong project: scripts, operating system, the list goes on...


Post Reply