February 1, 2021 | Page 2 of 13

[CentOS-announce] CESA-2020:5408 Important CentOS 7 xorg-x11-server Security Update

CentOS Errata and Security Advisory 2020:5408 Important

Upstream details at : https://access.redhat.com/errata/RHSA-2020:5408

The following updated files have been uploaded and are currently

syncing to the mirrors: ( sha256sum Filename )

x86_64:

5ba93bb7af0fa5612cec66a27e5736fb8c5460ccfc0e32ff2e9e8c97c2587a3f xorg-x11-server-common-1.20.4-15.el7_9.x86_64.rpm

8300c30550c66d4567d56de5063d79d5818aea066707cfcf6638dd2811bd74fc xorg-x11-server-devel-1.20.4-15.el7_9.i686.rpm

40a441051ed2bb80ba7bf16effb6ef562dc02cffbcb40be34952dcdc20a3b66c xorg-x11-server-devel-1.20.4-15.el7_9.x86_64.rpm

bb3864015d5c6e8d0e5f6d4ad1683af99c0b275dcf2efcaee1e4aebf6d78082d xorg-x11-server-source-1.20.4-15.el7_9.noarch.rpm

375dc1e4e253dad77a1c726888c330f2d32bfac978fb2501318c810a4fb93843 xorg-x11-server-Xdmx-1.20.4-15.el7_9.x86_64.rpm

fc23786485123d8fc0e167c65ecee809b1c1047c61cea465e243cf4b64b2a78e xorg-x11-server-Xephyr-1.20.4-15.el7_9.x86_64.rpm

a79594486e59ec5b826e79499c455a6d627baff4bdc3f3df763e5018309b5f9c xorg-x11-server-Xnest-1.20.4-15.el7_9.x86_64.rpm

38116fc986dbde5d1071bccc99bf83579d9cf9cfe210af409971b02a8225df2e xorg-x11-server-Xorg-1.20.4-15.el7_9.x86_64.rpm

27534a1920262b79fa35a9509e192cd19a2916bb7b11d0db13f71ae7cff375a9 xorg-x11-server-Xvfb-1.20.4-15.el7_9.x86_64.rpm

b0d7b591888b6fd49b457c15fa981112edaa1d269c881960174a8676102cad81 xorg-x11-server-Xwayland-1.20.4-15.el7_9.x86_64.rpm

Source:

aa1a835131bbf66abfd0409afc8d8cf66e6ae6e5c446c0aa7c773d037b730a41 xorg-x11-server-1.20.4-15.el7_9.src.rpm

—

Johnny Hughes

CentOS Project { http://www.centos.org/ }

irc: hughesjr, #[hidden email]

Twitter: @JohnnyCentOS

_______________________________________________

CentOS-announce mailing list

[hidden email]

https://lists.centos.org/mailman/listinfo/centos-announce

Smash a Button

[Total: 0 Average: 0]

Get PDF Print This

About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?

USN-4756-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, conduct cross-site scripting (XSS) attacks, bypass HTTP auth
phishing warnings, or execute arbitrary code.

Smash a Button

[Total: 0 Average: 0]

Get PDF Print This

USN-4754-2: Python regression

USN-4754-1 fixed a vulnerability in Python. The fix for CVE-2021-3177 introduced a
regression in Python 2.7. This update reverts the security fix pending further investigation.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)

Smash a Button

[Total: 0 Average: 0]

Get PDF Print This

Fixing gdebi. The Ugly Hack!

One of my favorite software installation tools (when using Aptitude) is a little number known as gdebi. It makes installing applications with a .deb a very painless and rapid process. On top of that, you can later click on the original .deb and use gdebi to uninstall it. Best of all, it’ll resolve dependencies when that is a situation it can handle.

You don’t have to mess around with anything – just click and install. It’s lovely, small, and effective. It’s just like a Linux application should be!

This is how the manual describes gdebi:

gdebi lets you install local deb packages resolving and installing its dependencies. apt does the same, but only for remote (http, ftp) located packages. It can also resolve build-depends of debian/control files.

Note the lack of excessive adjectives. It was obviously not written by me. I have oft sung the praises of gdebi and am personally the motivation for hundreds of folks installing it. Seriously… I’ve told countless people to install gdebi! It’s just that awesome. I’ve probably been using gdebi since I first used a distro with the Aptitude package manager.

gdebi installing balena etcher — See? It’s so lovely and simple.

Imagine my dismay when I discovered gdebi was broken!

I’d open gdebi, click on install, gdebi would close without asking me for a password, crash, and not install the software. This is an ugly, ugly hack to fix it. It’s so very ugly – but it works.

Crack open your terminal with CTRL + ALT + T and enter the following:

sudo nano /usr/share/applications/gdebi.desktop

Find this line:

Terminal=false

And change it to:

Terminal=true

Then save it. (CTRL + X, Y, and ENTER)

Now for the ugliness. This will fix the problem, but every time you use gdebi a terminal window will open up along with it. Fortunately, the terminal window will close itself after you’re done. It’s an ugly, ugly hack – but it does work when gdebi closes without installing the application.

As always, thanks for reading. Leave a comment below or look to your right where you can sign up to get notifications when new articles are published. If you’re feeling energetic, go ahead and register so that you can write an article or two yourself! If you want to write an article without registering, you can do that too – just click here!

Smash a Button

[Total: 0 Average: 0]

Get PDF Print This

Linux Foundation, LF Networking, and LF Edge Announce Speaker Line-up for Open Networking & Edge Executive Forum, March 10-12

Technology leaders, change makers and visionaries from across the global networking & edge communities will gather virtually for this unique, one-of-a-kind executive event focusing on deployment progress, 2021 priorities, challenges and more.

SAN FRANCISCO, February 25, 2020 — The Linux Foundation, the nonprofit organization enabling mass innovation through open source, along with co-hosts LF Networking, the umbrella organization fostering collaboration and innovation across the entire open networking stack, and LF Edge, the umbrella organization building an open source framework for the edge, announced today the speaker line-up for Open Networking & Edge Executive Forum. The schedule can be viewed here and the speaker details can be viewed here.

Open Networking & Edge Executive Forum (ONEEF) is a special edition of Open Networking & Edge Summit, the industry’s premier open networking & edge event, gathering senior technologists and executive leaders from enterprises, telecoms and cloud providers for timely discussions on the state of the industry, imminent priorities and insights into Service Provider, Cloud, Enterprise Networking, and Edge/IOT requirements.

ONEEF will take place virtually, March 10-12. Times vary each day to best accommodate the global audience. Attendees will be able to interact with speakers and attendees directly via chat, schedule 1:1 meetings and more as they participate in this community call to action.

“ONEEF is a great opportunity for the community to come together virtually after a very hard year,” said Arpit Joshipura, General Manager, Networking, Edge, and IoT, The Linux Foundation. “We have an impressive line-up of speakers from across a diverse set of global organizations, ready to share their knowledge and passion about what’s next for our burgeoning industry. Hope you can join us!”

Confirmed Keynote Speakers Include:

Madeleine Noland, President, Advanced Television Systems Committee
Andre Fuetsch, Executive Vice President & Chief Technology Officer, AT&T Services, Inc.
Steve Mullaney, Chief Executive Officer & President, Aviatrix
Jacob Smith, Vice President, Bare Metal Marketing & Strategy, Equinix
Dr. Junlan Feng, Chief Scientist & General Manager, China Mobile Research
Sun Qiong, SDN Research Center Director, China Telecom Research Institute
Dr. Jonathan Smith, Program Manager, Information Innovation Office (I2O), DARPA
Tom Arthur, Chief Executive Officer, Dianomic
Chris Bainter, Vice President, Global Business Development, FLIR Systems
George Nazi, Global Vice President, Telco, Media & Entertainment Industry Solutions Lead, Google Cloud
Amol Phadke, Managing Director: Global Telecom Industry Solutions, Google Cloud
Shawn Zandi, Head of Network Engineering, LinkedIn
Tareq Amin, Group Chief Technology Officer, Rakuten
Johan Krebbers, IT Chief Technology Officer & Vice President, TaCIT Architecture, Shell
Pablo Espinosa, Vice President, Network Engineering, Target
Manish Mangal, Chief Technology Officer, Network Services, Tech Mahindra
Matt Trifiro, Chief Marketing Officer, Vapor IO
Subha Tatavarti, Sr. Director Technology Commercialization, Walmart
Said Ouissal, Founder & CEO, ZEDEDA

Registration for the virtual event is open and is just US$50. Members of The Linux Foundation, LF Networking and LF Edge can attend for free – members can contact us to request a member discount code. The Linux Foundation provides diversity and need-based registration scholarships for this event to anyone that needs it; for information on eligibility and to apply, click here. Visit our website and follow us on Twitter, Facebook, and LinkedIn for all the latest event updates and announcements.

Members of the press who would like to request a media pass should contact Jill Lovato.

ONEEF sponsorship opportunities are available through Tuesday, March 2. All packages include a keynote speaking opportunity, prominent branding, event passes and more. View the sponsorship prospectus here or email us to learn more.

About The Linux Foundation
The Linux Foundation is the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and industry adoption. Together with the worldwide open source community, it is solving the hardest technology problems by creating the largest shared technology investment in history. Founded in 2000, The Linux Foundation today provides tools, training and events to scale any open source project, which together deliver an economic impact not achievable by any one company. More information can be found at www.linuxfoundation.org.

The Linux Foundation Events are where the world’s leading technologists meet, collaborate, learn and network in order to advance innovations that support the world’s largest shared technologies.

The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page: https://www.linuxfoundation.org/trademark-usage.

Linux is a registered trademark of Linus Torvalds.

####

Media Contact:

Kristin O’Connell

The Linux Foundation

koconnell@linuxfoundation.org

The post Linux Foundation, LF Networking, and LF Edge Announce Speaker Line-up for Open Networking & Edge Executive Forum, March 10-12 appeared first on Linux Foundation.

Smash a Button

[Total: 0 Average: 0]

Get PDF Print This