Issue #275 / Oct 2023

Last month I used this space to talk about IBM/Red Hat's plan to restrict access to Red Hat Enterprise Linux (RHEL) source code. This eerie announcement, which seemed quite contrary to the ideals of free software, sent shock waves through the community.

AlmaLinux 9.2 and blendOS

In the news: Nitrux 2.9.1 Available and Uses a Newer Linux Kernel; Zorin OS 16.3; Mageia 9 RC1; Linux Mint 21.2; AlmaLinux Will No Longer Aim for 1:1 RHEL Compatibility; Canonical Announces Real-Time Ubuntu for Intel Core; EU-US Data Privacy Framework Ensures Safe Data Transfers; and IEEE Releases New Standard for LiFi Communications.

In kernel news: Heap Hardening Against Hostile Spraying; and Core Contention Improvements … or Not.

Firewalls block shell access from outside the network. But what if the shell is launched from the inside?

Even a small configuration error or oversight can create an opening for privilege escalation. These real-world escalation techniques will help you understand what to watch for.

A local file inclusion attack uses files that are already on the target system.

WordPress is an incredibly popular tool for building websites, and don't think the attackers haven't noticed. We'll show you what to watch for.

Matthew Miller, Fedora Project Leader, discusses Fedora's relationship with Red Hat and its role in the Linux community.

CardStock provides a simple development environment for building a Python graphical application.