- sidux security advisory, 2008-11-18 (Nov 18, 2008)
- sidux 2008-03 (Sep 22, 2008)
- sidux 2008-03 preview 1 (Sep 14, 2008)
| Last 3 Contributions | |
| 16-11-2008 | 10.00 |
| 02-11-2008 | 20.00 |
| 31-10-2008 | 20.00 |
Donate
What is sidux? - Debian Hot & Spicy!
sidux is an operating system based on the Linux kernel, Debian's most modern branch (called "Sid") and many free and open source applications.This is where sidux starts – join us!
You're new to sidux? No problem – continue here.
Current release: sidux-2008-03 Ουρέα
Look at the current release plan
Today, while refactoring the sidux installer, a potential local privilege escalation issue has been discovered, which leaves a copy of the installer's configuration file on the target system. This configuration file also contains the salted MD5 password hashes for root and the first user account (UID 1000) and remains readable for local users. While this does not reveal these passwords directly, it can be used for a brute force attack against them.
Affected releases:- 2007-01 Χάος
- 2007-02 Τάρταρς
- 2007-03/ 2007-03.1 Γάια
- 2007-04/ 2007-04.5 Έρως
- 2008-01 Νυξ
- 2008-02 Έρεβος
- 2008-03 Ουρέα
# find /root /home -maxdepth 2 -type f -name '.sidconf*' -delete
Especially on multi-user systems, it is recommended to change the passwords for root and the first user (UID 1000) as well, this can be done using "passwd" as root/ user.
The cause for this issue has been found and upcoming releases will not be affected.
Later than planned (due to a hard to find bug in virtualbox-ose), we now have the pleasure to announce the immediate availability of the sidux 2008-03 "Ουρέα" release, available in the following flavours:
- KDE-lite, amd64, en/ de, ≈485 MB.
- KDE-lite, i686, en/ de, ≈480 MB.
- KDE-full, amd64+i686, en/ de (da, el, es, fr, hr, it, ja, nl, pt, pt_BR, ro, ru through liveapt) ≈2 GB.
- XFCE, amd64, en/ de, ≈400 MB.
- XFCE, i686, en/ de, ≈400 MB.
sidux is a full featured Debian sid based live CD with a special focus on hard disk installations, a clean upgrade path within sid and additional hard- and software support. The ISO is completely based on Debian sid, enriched and stabilized with sidux' own packages and scripts.
Later than planned (due to a hard to find bug in virtualbox-ose), sidux 2008-03 "Ουρέα" is now ready to enter the preview season for amd64 and i686 systems. As usual the previews are shipping only as a small (≈460 MB), but fully functional, KDE-lite flavour, accompanied by a ≈695 MB large combined xfce-lite flavour for amd64+i386.
sidux is a full featured Debian sid based live CD with a special focus on hard disk installations, a clean upgrade path within sid and additional hard- and software support. The ISO is completely based on Debian sid, enriched and stabilized with sidux' own packages and scripts.
The Ourea Wallpaper competition has run, and a winner has been chosen.First off, I would like to thank all entrants for their submissions - there is artistic talent out there and I appreciate everyone who took the time to apply their skills for this competition :-)
Unfortunately, there can only be one winner...
The Greek -el (Ελληνικά) version of the the sidux Operating System manual hits the sidux site withgrigris and edhunter as the translators and maintainers.
