Fellow Linux admins-
When you update or upgrade packages on a Linux system, it is often necessary to restart certain services or even reboot the system to ensure that changes take effect correctly and that outdated libraries or executables are not in use. That's where the needrestart utility comes in handy. Except what happens when a handful of local privilege escalation vulnerabilities are found? Are you protected?
These exploits require that a local attacker set environment variables in a very specific way for them to work, but they are significant enough that they could lead to the attacker executing their code on your machine. Find out more about how to configure needrestart securely and which needrestart updates you need to protect your users.
You'll also learn about a critical vulnerability in the Samba Active Directory (AD) that allows attackers to gain elevated privileges and seize control of entire domains.
If you found value in today’s newsletter, please share it with your friends! Do you have a Linux security-related topic you'd like to cover for our audience? We welcome contributions from passionate, insightful community members who share our love for Linux and security!
Stay safe out there,
needrestartThe DiscoveryResearchers from Qualys recently revealed critical vulnerabilities in the Linux utility needrestart. This tool is essential for admins as it monitors whether systems or services need restarting after package updates. |
SambaThe DiscoveryA critical vulnerability in the Samba Active Directory (AD) (CVE-2023-3961) was recently found, allowing attackers to gain elevated privileges and seize control of entire domains. |
