Re: today's high-publicity security issue
by Matthew Miller
On Mon, Dec 19, 2016 at 07:43:35AM -0500, Bastien Nocera wrote:
> As for the apps, when do we start shipping Flatpak'ed applications?
I'd like to see a plan for this too — Flatpak'd with sandboxing,
ideally. We have the layered image build service for OCI/Docker
containers, it'd be nice to fit Flatpak into that work.
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader
6 years, 5 months
- 1
- 0
today's high-publicity security issue
by Matthew Miller
So, this has been going around the press
https://scarybeastsecurity.blogspot.com/2016/12/redux-compromising-linux-...
Upstream tracker added seccomp sandboxing in response to an earlier
exploit (against F24) found by the same researcher, and we actually
have an update for that
https://bodhi.fedoraproject.org/updates/FEDORA-2016-cc3ab3b292
unfortunately sitting in testing at the time of the blog post's
publication and just out to stable updates today.
Can someone confirm that this update at least mitigates the issue
highlighted in the blog?
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader
6 years, 5 months
- 1
- 0
- ← Newer
- 1
- Older →