USN-4754-2: Python regression

USN-4754-1 fixed a vulnerability in Python. The fix for CVE-2021-3177 introduced a
regression in Python 2.7. This update reverts the security fix pending further investigation.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)

Smash a Button
[Total: 0 Average: 0]
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


Fixing gdebi. The Ugly Hack!

One of my favorite software installation tools (when using Aptitude) is a little number known as gdebi. It makes installing applications with a .deb a very painless and rapid process. On top of that, you can later click on the original .deb and use gdebi to uninstall it. Best of all, it’ll resolve dependencies when that is a situation it can handle.

You don’t have to mess around with anything – just click and install. It’s lovely, small, and effective. It’s just like a Linux application should be!

This is how the manual describes gdebi:

gdebi lets you install local deb packages resolving and installing its dependencies. apt does the same, but only for remote (http, ftp) located packages. It can also resolve build-depends of debian/control files.

Note the lack of excessive adjectives. It was obviously not written by me. I have oft sung the praises of gdebi and am personally the motivation for hundreds of folks installing it. Seriously… I’ve told countless people to install gdebi! It’s just that awesome. I’ve probably been using gdebi since I first used a distro with the Aptitude package manager.

gdebi installing balena etcher
See? It’s so lovely and simple.

Imagine my dismay when I discovered gdebi was broken!

I’d open gdebi, click on install, gdebi would close without asking me for a password, crash, and not install the software. This is an ugly, ugly hack to fix it. It’s so very ugly – but it works.

Crack open your terminal with CTRL + ALT + T and enter the following:

Find this line:

And change it to:

Then save it. (CTRL + X, Y, and ENTER)

Now for the ugliness. This will fix the problem, but every time you use gdebi a terminal window will open up along with it. Fortunately, the terminal window will close itself after you’re done. It’s an ugly, ugly hack – but it does work when gdebi closes without installing the application.

As always, thanks for reading. Leave a comment below or look to your right where you can sign up to get notifications when new articles are published. If you’re feeling energetic, go ahead and register so that you can write an article or two yourself! If you want to write an article without registering, you can do that too – just click here!

Smash a Button
[Total: 0 Average: 0]
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


Linux Foundation, LF Networking, and LF Edge Announce Speaker Line-up for Open Networking & Edge Executive Forum, March 10-12

Technology leaders, change makers and visionaries from across the global networking & edge communities will gather virtually for this unique, one-of-a-kind executive event focusing on deployment progress, 2021 priorities, challenges and more.

SAN FRANCISCO, February 25, 2020 The Linux Foundation, the nonprofit organization enabling mass innovation through open source, along with co-hosts LF Networking, the umbrella organization fostering collaboration and innovation across the entire open networking stack, and LF Edge, the umbrella organization building an open source framework for the edge, announced today the speaker line-up for Open Networking & Edge Executive Forum. The schedule can be viewed here and the speaker details can be viewed here

Open Networking & Edge Executive Forum (ONEEF) is a special edition of Open Networking & Edge Summit, the industry’s premier open networking & edge event, gathering senior technologists and executive leaders from enterprises, telecoms and cloud providers for timely discussions on the state of the industry, imminent priorities and insights into Service Provider, Cloud, Enterprise Networking, and Edge/IOT requirements.

ONEEF will take place virtually, March 10-12. Times vary each day to best accommodate the global audience. Attendees will be able to interact with speakers and attendees directly via chat, schedule 1:1 meetings and more as they participate in this community call to action.

“ONEEF is a great opportunity for the community to come together virtually after a very hard year,” said Arpit Joshipura, General Manager, Networking, Edge, and IoT, The Linux Foundation. “We have an impressive line-up of speakers from across a diverse set of global organizations, ready to share their knowledge and passion about what’s next for our burgeoning industry. Hope you can join us!”

Confirmed Keynote Speakers Include:

  • Madeleine Noland, President, Advanced Television Systems Committee
  • Andre Fuetsch, Executive Vice President & Chief Technology Officer, AT&T Services, Inc.
  • Steve Mullaney, Chief Executive Officer & President, Aviatrix
  • Jacob Smith, Vice President, Bare Metal Marketing & Strategy, Equinix
  • Dr. Junlan Feng, Chief Scientist & General Manager, China Mobile Research
  • Sun Qiong, SDN Research Center Director, China Telecom Research Institute
  • Dr. Jonathan Smith, Program Manager, Information Innovation Office (I2O), DARPA
  • Tom Arthur, Chief Executive Officer, Dianomic     
  • Chris Bainter, Vice President, Global Business Development, FLIR Systems
  • George Nazi, Global Vice President, Telco, Media & Entertainment Industry Solutions Lead, Google Cloud
  • Amol Phadke, Managing Director: Global Telecom Industry Solutions, Google Cloud
  • Shawn Zandi, Head of Network Engineering, LinkedIn
  • Tareq Amin, Group Chief Technology Officer, Rakuten
  • Johan Krebbers, IT Chief Technology Officer & Vice President, TaCIT Architecture, Shell
  • Pablo Espinosa, Vice President, Network Engineering, Target
  • Manish Mangal, Chief Technology Officer, Network Services, Tech Mahindra
  • Matt Trifiro, Chief Marketing Officer, Vapor IO
  • Subha Tatavarti, Sr. Director Technology Commercialization, Walmart   
  • Said Ouissal, Founder & CEO, ZEDEDA

Registration for the virtual event is open and is just US$50. Members of The Linux Foundation, LF Networking and LF Edge can attend for free – members can contact us to request a member discount code. The Linux Foundation provides diversity and need-based registration scholarships for this event to anyone that needs it; for information on eligibility and to apply, click here. Visit our website and follow us on Twitter, Facebook, and LinkedIn for all the latest event updates and announcements.

Members of the press who would like to request a media pass should contact Jill Lovato.

ONEEF sponsorship opportunities are available through Tuesday, March 2. All packages include a keynote speaking opportunity, prominent branding, event passes and more. View the sponsorship prospectus here or email us to learn more. 

About The Linux Foundation
The Linux Foundation is the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and industry adoption. Together with the worldwide open source community, it is solving the hardest technology problems by creating the largest shared technology investment in history. Founded in 2000, The Linux Foundation today provides tools, training and events to scale any open source project, which together deliver an economic impact not achievable by any one company. More information can be found at www.linuxfoundation.org.

The Linux Foundation Events are where the world’s leading technologists meet, collaborate, learn and network in order to advance innovations that support the world’s largest shared technologies.

The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page: https://www.linuxfoundation.org/trademark-usage.

Linux is a registered trademark of Linus Torvalds.

####

Media Contact:

Kristin O’Connell

The Linux Foundation

koconnell@linuxfoundation.org

The post Linux Foundation, LF Networking, and LF Edge Announce Speaker Line-up for Open Networking & Edge Executive Forum, March 10-12 appeared first on Linux Foundation.

Smash a Button
[Total: 0 Average: 0]
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


USN-4755-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.
Smash a Button
[Total: 0 Average: 0]
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


USN-4754-1: Python vulnerabilities

It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
Smash a Button
[Total: 0 Average: 0]
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


Linux Tips
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 International License.
SITEMAP