HTTP/2 200 cache-control: max-age=900, public content-language: en content-type: text/html; charset=UTF-8 etag: W/"1557499212" expires: Sun, 19 Nov 1978 05:00:00 GMT last-modified: Fri, 10 May 2019 14:40:12 GMT link: ; rel="canonical" link: ; rel="shortlink" link: ; rel="revision" server: nginx x-content-type-options: nosniff x-drupal-cache: HIT x-drupal-dynamic-cache: HIT x-frame-options: SAMEORIGIN x-generator: Drupal 8 (https://www.drupal.org) x-pantheon-styx-hostname: styx-fe2-84cbb5f474-6cgfq x-styx-req-id: styx-a2003ed78d0fd01bc5e4de1f4de54b53 x-ua-compatible: IE=edge via: 1.1 varnish accept-ranges: bytes date: Fri, 10 May 2019 17:25:03 GMT via: 1.1 varnish age: 0 x-served-by: cache-mdw17342-MDW, cache-yul8924-YUL x-cache: HIT, MISS x-cache-hits: 1, 0 x-timer: S1557509104.907381,VS0,VE42 vary: Accept-Encoding, Cookie, Cookie, Cookie content-length: 52177 Alpine Linux Docker Images Shipped with Unlock Root Accounts, Mozilla Offering a Research Grant to Embed Tor into Firefox, Plasma 5.16 to Get a Rewritten Notification System, Unity 2019.2 Beta Released and Emirates NBD Wins Red Hat's 2019 Innovation Award | Linux Journal Skip to main content [1]
Synaptic Web News
Alpine Linux Docker Images Shipped with Unlock Root Accounts, Mozilla Offering a Research Grant to Embed Tor into Firefox, Plasma 5.16 to Get a Rewritten Notification System, Unity 2019.2 Beta Released and Emirates NBD Wins Red Hat's 2019 Innovation Award
- Written by: J D
- Category: News
- Hits: 440
News briefs for May 10, 2019.
Alpine Linux Docker images available on Docker Hub shipped for three years with unlocked root accounts. Threatpost reports[2] that "For three years, some Alpine Linux Docker images have shipped with a root account and no password, opening the door for attackers to easily access vulnerable servers and workstations provisioned for the images. Affected versions of Alpine Linux Docker distros include 3.3, 3.4, 3.5, 3.6, 3.7, 3.8 and 3.9 Alpine Docker Edge, according to Cisco Talos researchers[3] who discovered the bug, tested each version and released their findings on Wednesday. Vulnerable images of Alpine Linux Dockers were available via the official Docker Hub portal since late 2015."
Mozilla has offered a research grant to find a way to