
- sidux-2008-04 DVD (Dec 31, 2008)
- sidux 2008-04 (Dec 23, 2008)
- sidux 2008-04 pre1 (Dec 14, 2008)
| Last 3 Contributions | |
| 04-01-2009 | 20.00 |
| 01-01-2009 | 20.00 |
| 31-12-2008 | 15.00 |
Donate
After fixing the problem with multiple optical disc drives, which occured in our first preview, and quite some infrastructural changes, we now have the pleasure to announce the immediate availability of sidux 2008-04 "Πόντος", available in the following flavours:
- KDE-lite, amd64, en/ de, ≈460 MB.
- KDE-lite, i686, en/ de, ≈455 MB.
- KDE-full, amd64+i686, en/ de (da, el, es, fr, hr, it, ja, nl, pt, pt_BR, ro, ru through liveapt) ≈1.9 GB.
- XFCE, amd64, en/ de, ≈400 MB.
- XFCE, i686, en/ de, ≈395 MB.
sidux is a full featured Debian sid based live CD with a special focus on hard disk installations, a clean upgrade path within sid and additional hard- and software support. The ISO is completely based on Debian sid, enriched and stabilized with sidux' own packages and scripts.
After quite some infrastructural changes is sidux 2008-04 "Πόντος" now ready to enter the preview season, available in the following flavours for now:
- KDE-lite, amd64, en/ de, ≈460 MB.
- KDE-lite, i686, en/ de, ≈455 MB.
- XFCE-lite, amd64+i686, ≈685 MB.
Please note this is not the final release, the full featured final release of "Πόντος" will be ready in about 1-2 weeks, further previews might be provided as needed until then.
sidux is a full featured Debian sid based live CD with a special focus on hard disk installations, a clean upgrade path within sid and additional hard- and software support. The ISO is completely based on Debian sid, enriched and stabilized with sidux' own packages and scripts.
"On 24th of November 2006 sidux was formed by a group of people who strive to do the impossible: Making Debian Sid (aka “Unstable”) stable." Now, 2 years later, while we celebrate sidux' second birthday, it's time to check if we actually kept our promise to you:
Today, while refactoring the sidux installer, a potential local privilege escalation issue has been discovered, which leaves a copy of the installer's configuration file on the target system. This configuration file also contains the salted MD5 password hashes for root and the first user account (UID 1000) and remains readable for local users. While this does not reveal these passwords directly, it can be used for a brute force attack against them.
Affected releases:- 2007-01 Χάος
- 2007-02 Τάρταρς
- 2007-03/ 2007-03.1 Γάια
- 2007-04/ 2007-04.5 Έρως
- 2008-01 Νυξ
- 2008-02 Έρεβος
- 2008-03 Ουρέα
# find /root /home -maxdepth 2 -type f -name '.sidconf*' -delete
Especially on multi-user systems, it is recommended to change the passwords for root and the first user (UID 1000) as well, this can be done using "passwd" as root/ user.
The cause for this issue has been found and upcoming releases will not be affected.
