Polkit vulnerability. Ubuntu 20.04 but not Ubuntu 18.04 according to this:
@AZorin any comment re Z15, Z16 being vulnerable?
1 Like
Zorin OS 15 is not vulnerable as the code in question is not present in its version of polkit.
The issue has been fixed in Zorin OS 16 with version 0.105-26ubuntu1.1 of the polkit package, which was created on 26 May (a week before the vulnerability was publicly announced). Simply install the latest updates in the Software Updater to stay safe.
7 Likes
I wonder if this news is related to these issues?:
In case you missed this (I did) - Audacity is now spyware:
https://www.youtube.com/watch?v=2yFpU2rSGGM
Alternatives:
1 Like
Agreed. In fact...
Well guess I missed your post with not being around for a bit. Just checked my Feren OS install and still on 2.2 so good for now in that regard. 
1 Like
Changed from General to Tutorial.
Latest Linux Security News:
1 Like
SuSE Linux has issued multiple fixes for this issue in 2022:
https://linuxsecurity.com/search?searchword=IO-u r i n g &searchphrase=all
Latest Linux Malware News:
And cross platform weak vectors where Java is running, primarily in Browsers:
https://linuxsecurity.com/news/security-vulnerabilities/openjdk-dos-info-disclosure-vulns-fixed
Ice Cat browser refuses web pages with Java and Stallman urges users to complain to owners of websites to remove Java code.
Chinese Hack attacks:
And fake security researchers using stolen ID:
Note stupid censorship not allowing "u r i n g" remove spaces when in browser.
Tools for checking exploit vulnerabilities of the Linux kernel:
1 Like
Crosslink:
Reference 10 Aug 23:
Intel Response:
Oh, I wouldn't go that far...
"Zenception":
Interestingly, I notice today that the link I posted yesterday is down. Apparently hackread has been ummm... cough...
hacked...
1 Like
Link is still working here. Maybe they put another 5cents in the meter.
3 Likes
**[Q] Is there any mitigation for Downfall?**
[A] Intel is releasing a microcode update which blocks transient results of gather instructions and prevent attacker code from observing speculative data from *Gather*.
I'd never heard of a "microcode update", some info if anyone's interested.
These Intel updates: will they work on Zorin, or if things like Secure Boot / UEFI are disabled?
Yes. These are not related to Secure Boot.
The microcode and firmware deal with the hardware (motherboard) Operating System, not Windows or Linux operating system.
I ask because, often, the update to fix firmware issues comes as a Windows .exe file only. Not sure what we could do if that's the case here.