Linux Tipps & HardeningVAXEE NP-01 Ergo Wireless (8K) mouse thoughts(24.09.2026 um 12:38 Uhr)

•

Linux Tipps & HardeningQualcomm Announces Snapdragon X2 Series Processors Will Support Linux(24.09.2026 um 12:04 Uhr)

•

Linux Tipps & HardeningMeet Qualcomm’s Next-Gen Snapdragon Chips Behind 2027’s Biggest Android Phones(24.09.2026 um 12:12 Uhr)

•

Linux Tipps & HardeningBuying an ASUS Laptop? You May Get Google AI Pro and 5TB Storage at No Extra Cost(24.09.2026 um 12:25 Uhr)

•

Linux Tipps & HardeningBlack Friday 2026 Phone Deals: Best iPhone, Samsung and More(24.09.2026 um 12:39 Uhr)

•

Linux Tipps & HardeningDont Trust Qualcomm for X2 Elite Linux Support! Liars!(24.09.2026 um 12:59 Uhr)

•

KI & AI VideosJulian Goldie SEO: LIVE: Building Agent OS with Claude!(24.09.2026 um 12:16 Uhr)

•

KI & AI VideosJulian Goldie SEO: Claude Opus 5.5 AI Full COURSE 1 HOUR (Build & Automate Anything)(24.09.2026 um 12:21 Uhr)

•

IT Security VideoIndirect Prompt Injection in the Wild: An Empirical Study of Prevalence, Techniques, and Objectives (god2026)(24.09.2026 um 00:00 Uhr)

•

IT Security VideoOWASP Cornucopia - Gamifying AI Threat Modeling and Security Requirement Analysis (god2026)(24.09.2026 um 00:00 Uhr)

•

Linux Tipps & HardeningVAXEE NP-01 Ergo Wireless (8K) mouse thoughts(24.09.2026 um 12:38 Uhr)

•

Linux Tipps & HardeningQualcomm Announces Snapdragon X2 Series Processors Will Support Linux(24.09.2026 um 12:04 Uhr)

•

Linux Tipps & HardeningMeet Qualcomm’s Next-Gen Snapdragon Chips Behind 2027’s Biggest Android Phones(24.09.2026 um 12:12 Uhr)

•

Linux Tipps & HardeningBuying an ASUS Laptop? You May Get Google AI Pro and 5TB Storage at No Extra Cost(24.09.2026 um 12:25 Uhr)

•

Linux Tipps & HardeningBlack Friday 2026 Phone Deals: Best iPhone, Samsung and More(24.09.2026 um 12:39 Uhr)

•

Linux Tipps & HardeningDont Trust Qualcomm for X2 Elite Linux Support! Liars!(24.09.2026 um 12:59 Uhr)

•

KI & AI VideosJulian Goldie SEO: LIVE: Building Agent OS with Claude!(24.09.2026 um 12:16 Uhr)

•

KI & AI VideosJulian Goldie SEO: Claude Opus 5.5 AI Full COURSE 1 HOUR (Build & Automate Anything)(24.09.2026 um 12:21 Uhr)

•

IT Security VideoIndirect Prompt Injection in the Wild: An Empirical Study of Prevalence, Techniques, and Objectives (god2026)(24.09.2026 um 00:00 Uhr)

•

IT Security VideoOWASP Cornucopia - Gamifying AI Threat Modeling and Security Requirement Analysis (god2026)(24.09.2026 um 00:00 Uhr)

•

Intelligence View

⚡ tsecurity.de Intelligence

CentOS Blog: CentOS Community newsletter, March 2020 (#2003)

Dear CentOS enthusiast, For the past several months, the focus has been on FOSDEM, as usual this time of year. Now that FOSDEM is behind us, it's time to turn our attention to the upcoming Dojo at Facebook, and Red Hat Summit. We'd love…

Unix & Linux Server blog.centos.org 03.03.2020, 06:00 Uhr 7 Min. Lesezeit Cloud & IT-Enterprise

↗ Quelle (blog.centos.org)

Reagiere als Erste:r — dein Feedback zählt!

Dear CentOS enthusiast,

For the past several months, the focus has been on FOSDEM, as usual this time of year. Now that FOSDEM is behind us, it's time to turn our attention to the upcoming Dojo at Facebook, and Red Hat Summit. We'd love to see you at one of these events. (or both!) The call for presentations is open for the Dojo, and we're looking for presentations about anything you're doing on top of CentOS. More details below.

IN THIS EDITION:

News

Releases and updates

Events

SIG reports

Contributing

News

The CentOS team is pleased to announce that we have updated the kernel, kmod-kvdo, vdo, createrepo_c, and drpm packages in CentOS 8 Stream. These updates have already been published and are propagating out to the mirror network now.

You can read more about that in the CentOS-Devel mailing list archive.

The call for presentations is open for the upcoming CentOS Dojo at Facebook. While the emphasis will be on running CentOS at huge scale (like at Facebook), we'd like to hear about anything interesting you're doing on top of CentOS. Submit your talk today - the CFP closes in under two weeks - or register to attend. EVENT DETAILS.

Releases and updates

We had a fairly typical month of releases and updates:

Errata and Security Advisories

We issued the following CESA (CentOS Errata and Security Advisories) during February:

Mon Feb 3 2020: CESA-2020:0316 Important CentOS 6 git Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035619.html

Thu Feb 6 2020: CESA-2020:0375 Important CentOS 7 kernel Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035620.html

Thu Feb 6 2020: CESA-2020:0366 Important CentOS 7 qemu-kvm Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035623.html

Thu Feb 6 2020: CESA-2018:2916 Important CentOS 7 spamassassin Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035628.html

Thu Feb 6 2020: CESA-2019:2079 Moderate CentOS 7 xorg-x11-drv-ati Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035636.html

Tue Feb 11 2020: CESA-2020:0471 Moderate CentOS 6 spice-gtk Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035638.html

Tue Feb 18 2020: CESA-2020:0521 Important CentOS 6 firefox Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035639.html

Tue Feb 18 2020: CESA-2020:0515 Important CentOS 6 ksh Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035640.html

Tue Feb 18 2020: CESA-2020:0520 Important CentOS 7 firefox Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035641.html

Tue Feb 18 2020: CESA-2020:0541 Important CentOS 7 java-1.7.0-openjdk Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035642.html

Tue Feb 18 2020: CESA-2020:0540 Important CentOS 7 sudo Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035643.html

Thu Feb 20 2020: CESA-2020:0550 Important CentOS 7 openjpeg2 Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035644.html

Wed Feb 26 2020: CESA-2020:0374 Important CentOS 7 kernel Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035645.html

Wed Feb 26 2020: CESA-2020:0578 Important CentOS 7 python-pillow Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035646.html

Wed Feb 26 2020: CESA-2020:0568 Important CentOS 7 ksh Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035647.html

Wed Feb 26 2020: CESA-2020:0576 Important CentOS 7 thunderbird Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035648.html

Wed Feb 26 2020: CESA-2020:0574 Important CentOS 6 thunderbird Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035649.html

Thu Feb 27 2020: CESA-2020:0631 Important CentOS 6 ppp Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035650.html

Thu Feb 27 2020: CESA-2020:0632 Important CentOS 6 java-1.7.0-openjdk Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035651.html

Thu Feb 27 2020: CESA-2020:0630 Important CentOS 7 ppp Security - https://lists.centos.org/pipermail/centos-announce/2020-February/035652.html

Errata and Bugfix Advisories

We issued the following CEBA (CentOS Errata and Bugfix Advisories) during February:

Thu Feb 6 2020: CEBA-2020:0380 CentOS 7 mesa BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035621.html

Thu Feb 6 2020: CEBA-2020:0376 CentOS 7 pcp BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035622.html

Thu Feb 6 2020: CEBA-2020:0379 CentOS 7 sg3_utils BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035624.html

Thu Feb 6 2020: CEBA-2020:0373 CentOS 7 libguestfs BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035625.html

Thu Feb 6 2020: CEBA-2020:0367 CentOS 7 libvirt BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035626.html

Thu Feb 6 2020: CEBA-2020:0381 CentOS 7 NetworkManager BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035627.html

Thu Feb 6 2020: CEBA-2020:0364 CentOS 7 net-snmp BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035629.html

Thu Feb 6 2020: CEBA-2020:0386 CentOS 7 postgresql BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035630.html

Thu Feb 6 2020: CEBA-2020:0369 CentOS 7 systemd BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035631.html

Thu Feb 6 2020: CEBA-2020:0325 CentOS 7 pki-core BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035632.html

Thu Feb 6 2020: CEBA-2020:0370 CentOS 7 mutter BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035633.html

Thu Feb 6 2020: CEBA-2020:0370 CentOS 7 gnome-shell BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035634.html

Thu Feb 6 2020: CEBA-2020:0368 CentOS 7 cups-filters BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035635.html

Thu Feb 6 2020: CEBA-2020:0384 CentOS 7 firewalld BugFix - https://lists.centos.org/pipermail/centos-announce/2020-February/035637.html

Events

We have a full schedule of events shaping up for this year - both events that we are producing, as well as larger events at which we will have some kind of presence. Come see us:

FOSSAsia, March 19-21, Singapore. Details

CentOS Dojo at Facebook, April 24th, Menlo Park, California. Details

Red Hat Summit, April 27th - 29th, San Francisco, California. Details

ISC HPC (Supercomputing), June 21-25, Frankfurt, Germany. (Tentative)

September 2020 - Dojo at ORNL/UTenn - (Tentative)

CentOS Dojo at CERN, October 23rd, Meyrin, Switzerland. Details

SIG Reports

The SIGs - special interest groups - are where most of the interesting stuff in CentOS happens. They are communities packaging and testing layered projects on top of CentOS, and ensuring that they work reliably.

Virtualization SIG

From the oVirt perspective:

- Preparing for oVirt 4.4.0 GA which will support execution on CentOS Linux 8 / CentOS Stream with Advanced Virtualization rebuilt from RHEL.

- Produced Advanced Virtualization builds for Virt SIG and Cloud SIG consumption

- Presented several sessions at DevConfCZ (slides available from https://devconfcz2020a.sched.com/ , video not yet available as far as I can tell) and Fosdem (presentation and videos available from https://fosdem.org/2020/schedule/ ) in January 2020

- New members joined the SIG for helping with oVirt: Miguel Barroso (oVirt Networking), Danilo de Paula (Advanced Virtualization)

For Xen:

- Updated kernel 4.9.212

- Made official policy for updating default Xen versions; soon to move to Xen 4.12

- Investigating possibility of joining efforts with Xen Made Easy in maintaining kernel, packages

- Still waiting for CentOS 8 CBS

OpsTools SIG Quarterly Report

01 December 2019 - 29 February 2020.

this report also includes reporting for the Messaging SIG, which is marked explicitly, where it's appropriate.

Purpose
-------

Provide tools for second day operations for operators of large infrastructure.

The Messaging SIG is providing infrastructure for sending messages like RabbitMQ or Apache QPID.

The OpsTools SIG depends on deliverables of the Messaging SIG. CentOS Opstools builds were consumed by OpenStack Kolla; we would need CentOS 8 builds to move forward, or we'd loose CentOS based container images.

We are interested in getting the builds integrated in OpenStack and to finally have builds CI tested.

Contributing

We we come up on several Dojos, it's worth reminding you that you can step up to host or plan (or both) a dojo in your part of the world. While most of our Dojos are at research institutions (CERN, ORNL) or located alongside other major events (FOSDEM, Red Hat Summit), Dojos are intended to be local gatherings, and so we rely on you to tell us where we should run them.

If you're curious what's involved in running a Dojo, you're in luck. We've been working on a comprehensive playbook to document the various steps, so that you can pick it up and run your own event. It's not done yet, but it's getting there.

Want to run a Dojo? Get in touch with the centos-promo mailing list at https://lists.centos.org/mailman/listinfo/centos-promo

And, as always have a look at the many opportunities for contribution on the 'Contribute' page on the wiki.

CTI Threat Relationship Graph4 Knoten / 3 Relationen

CVE / Incident Software MITRE ATT&CK CWE Weakness IoC

IR-PLAYBOOK-VULN-REMEDIATIONMEDIUM

Schritte anzeigen

SOC Incident Playbook: Vulnerability Remediation & Verification

Asset Inventory

Asset-Datenbank nach betroffenen Komponenten, Versionen und exposed Ports abfragen.

nmap -sV --script vuln -p- <target-network>

Exploit MonitoringSofort

SIEM-Regeln und IDS-Signaturen (Snort/Suricata) auf Angriffsversuche schärfen.

tail -f /var/log/suricata/fast.log | grep <cve>

Patch DeploymentSofort

Patch oder offiziellen Workaround gemäß Hersteller-Empfehlung einspielen.

Check Vendor Security Advisory Bulletin

1-Click Detection Engineering: Sigma & YARA RulesSOC Ready

Regeln anzeigen

title: Detect Exploitation - CentOS Blog: CentOS Community newsletter, March 2020 (#2003)
id: 6dcbcbdf-ea2a-47c6-b560-a48592666f67
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "CentOS Blog: CentOS Community " ascii wide
    condition:
        any of them
}

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 1 Min

You Now Have No Excuse Not to Install Facebook Messenger on Your iPhone

IT Security Nachrichten

NÄCHSTER BEITRAG 1 Min

Cisco Offering Free 90-day Webex Licenses Due to Coronavirus

IT Security NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich CentOS Blog: CentOS Community newsletter.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC

Schnell-Prompts für Analysten

⚠️ DEFANGED SANDBOX VIEW (tsecurity.de): Alle Netzwerkindikatoren und URLs wurden neutralisiert (2 Indikatoren entschärft). Nur zur defensiven Analyse!

Format: python

#!/usr/bin/env python3
# Exploit Title: PoC for Target
import socket, sys
target = '192[.]168[.]1[.]10'
url = 'hxxp://target[.]local/vuln'
s = socket.socket()
s.connect((target, 80))
s.send(b'GET / HTTP/1.1\r\nHost: target.local\r\n\r\n')

Auch interessante Nachrichten CentOS Blog: CentOS Community newsletter, March 2020 (#2003)

Thematisch verwandte Begriffe: CentOS, Blog, Community, newsletter · 6 Treffer

IT Security Downloads GitHub · openclaw/openclaw

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

Release v2026.7.34 von openclaw/openclaw auf GitHub: test(release): use entitled Gemini live model (#153189)

vor 4 Tagen 📆 20.09.2026 um 00:00 Uhr

Weiterlesen ↗

IT Security Downloads GitHub · google-gemini/gemin

GitHub Release: google-gemini/gemini-cli v0.62.0-nightly.20260920.gcfbcaa8df (20.09.2026)

Release v0.62.0-nightly.20260920.gcfbcaa8df von google-gemini/gemini-cli auf GitHub: Full Changelog…

vor 4 Tagen 📆 20.09.2026 um 03:25 Uhr

Weiterlesen ↗

IT Security Downloads GitHub · openclaw/openclaw

GitHub Release: openclaw/openclaw vrelease-publish/91926f9b61a5-1789871489 (20.09.2026)

Release release-publish/91926f9b61a5-1789871489 von openclaw/openclaw auf GitHub: fix(release): repair 7.34 validation gates (#153190)

vor 4 Tagen 📆 20.09.2026 um 00:26 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

Arc Chain, in Numbers: One Dollar, Two Decimals, and 97,000 Tokens in a Day

vor 4 Tagen 📆 20.09.2026 um 04:50 Uhr

Weiterlesen ↗

IT Security Nachrichten The CyberWire

Standardizing space cybersecurity.

vor 4 Tagen 📆 20.09.2026 um 07:00 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

How Many MikroTik Devices Are Actually Reachable From the Internet?

vor 4 Tagen 📆 19.09.2026 um 23:40 Uhr

Weiterlesen ↗

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

🚀 Auf tsecurity.de entdecken

Kommentare über CentOS Blog: CentOS Community newsletter, March 2020 (#2003)

💬 Social News Network

Community Debatte 0 Beiträge

Tags:Noch keine Tags.

Noch keine Diskussion eröffnet

Sei der Erste, der seine Einschätzung oder PoC zu diesem Thema teilt.

🚀 Auf tsecurity.de entdecken

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

🕒 tsecurity.de Such-Trends & Chronologie

CentOS Blog: CentOS Community newsletter, March 2020 (#2003)

IN THIS EDITION:

News

Releases and updates

Errata and Security Advisories

Errata and Bugfix Advisories

Events

SIG Reports

Virtualization SIG

OpsTools SIG Quarterly Report

Contributing

SOC Incident Playbook: Vulnerability Remediation & Verification

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten CentOS Blog: CentOS Community newsletter, March 2020 (#2003)

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

GitHub Release: google-gemini/gemini-cli v0.62.0-nightly.20260920.gcfbcaa8df (20.09.2026)

GitHub Release: openclaw/openclaw vrelease-publish/91926f9b61a5-1789871489 (20.09.2026)

Arc Chain, in Numbers: One Dollar, Two Decimals, and 97,000 Tokens in a Day

Standardizing space cybersecurity.

How Many MikroTik Devices Are Actually Reachable From the Internet?

tsecurity.de App

tsecurity.de Live Threat Radar

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen

🔖 Gespeicherte Artikel

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

CentOS Blog: CentOS Community newsletter, March 2020 (#2003)

IN THIS EDITION:

News

Releases and updates

Errata and Security Advisories

Errata and Bugfix Advisories

Events

SIG Reports

Virtualization SIG

OpsTools SIG Quarterly Report

Contributing

SOC Incident Playbook: Vulnerability Remediation & Verification

Mehr aus dieser Kategorie

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten CentOS Blog: CentOS Community newsletter, March 2020 (#2003)

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

GitHub Release: google-gemini/gemini-cli v0.62.0-nightly.20260920.gcfbcaa8df (20.09.2026)

GitHub Release: openclaw/openclaw vrelease-publish/91926f9b61a5-1789871489 (20.09.2026)

Arc Chain, in Numbers: One Dollar, Two Decimals, and 97,000 Tokens in a Day

Standardizing space cybersecurity.

How Many MikroTik Devices Are Actually Reachable From the Internet?

tsecurity.de App

Themen-Radar & Intelligence Matrix

tsecurity.de Live Threat Radar

Community Radar & Live Chat

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen Aktualisieren

🔖 Gespeicherte Artikel

Heiß diskutierte Einreichungen