An Interest In:
Web News this Week
- April 23, 2024
- April 22, 2024
- April 21, 2024
- April 20, 2024
- April 19, 2024
- April 18, 2024
- April 17, 2024
Some of Our Sources
- Mashable
- Techcrunch
- Team Treehouse
- Smashing Magazine
- Vandelay Design
- Naldz Graphics
- 24 Ways
- CSS Tricks
- Codrops
- Dev To
Help Webnuz
Referal links:
August 27, 2018 06:41 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/QcpCxic7t94/ubuntu-and-centos-are-undoing-a-gnome-security-feature
Ubuntu and CentOS Are Undoing a GNOME Security Feature
An anonymous reader writes: Current versions of Ubuntu and CentOS are disabling a security feature that was added to the GNOME desktop environment last year. The feature's name is Bubblewrap, which is a sandbox environment that the GNOME Project added to secure GNOME's thumbnail parsers in July 2017, with the release of GNOME 3.26. In recent years, security researchers have proven that thumbnail parses can be an attack vector [1, 2, 3]. Ubuntu Security Tech Lead Alex Murray said the Ubuntu team chose to disable Bubblewrap inside Ubuntu because they did not have the time to perform a security audit. Murray blamed the many CPU bugs (Spectre, Meltdown, etc.), which kept the team busy and prevented them to audit the feature.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/QcpCxic7t94/ubuntu-and-centos-are-undoing-a-gnome-security-feature
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot