Author Archive

LWN.net : Poettering: systemd for Administrators, Part XII

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

The twelfth
installment
of systemd for administrators covers securing services. “In this iteration of the series we want to focus on a couple of these security features of systemd and how to make use of them in your services. These features take advantage of a couple of Linux-specific technologies that have been available in the kernel for a long time, but never have been exposed in a widely usable fashion. These systemd features have been designed to be as easy to use as possible, in order to make them attractive to administrators and upstream developers…

LWN.net : Friday’s security advisories

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Fedora has updated F16: php (denial
of service and information disclosure), F16:
php-eaccelerator
(denial of service and information disclosure), F16: maniadrive (denial of service and
information disclosure), F16:
xkeyboard-config
(screensaver lock bypass), and F16: openstack-nova (directory traversal).

openSUSE 11.3 has reached its end of
life.

Ubuntu has updated t1lib (multiple
vulnerabilities) and libxml2 (denial of
service and code execution).

LWN.net : Web Protests Piracy Bills, and 2 Senators Change Course (New York Times)

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

The New York Times reports
that Internet protests against anti-piracy legislation (SOPA and PIPA) are
working. “Freshman Senator Marco Rubio of Florida, a rising Republican star, was first out of the starting gate Wednesday morning with his announcement that he would no longer back anti-Internet piracy legislation he had co-sponsored. Senator John Cornyn, the Texas Republican who heads the campaign operation for his party, quickly followed suit and urged Congress take more time to study the measure that had been set for a test vote next week.

LWN.net : Wednesday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Fedora has updated F15: glibc (heap
overflow).

Mandriva has updated perl (2010.1, 2011.0; ES5.0: multiple vulnerabilities).

LWN.net : Stable kernel 3.1.10

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Stable kernel 3.1.10 has been released with
a pile of important fixes. “This is the LAST release of the 3.1
kernel series, please move to the 3.2 kernel series at this time. Again,
3.1.y is end-of-life.

LWN.net : Security advisories for Tuesday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Fedora has updated rubygem-rack (F16; F15:
denial of service) and wordpress (F16; F15:
cross-site scripting).

Mandriva has updated openssl (2010.1, ES5.0; 2011.0: multiple vulnerabilities).

openSUSE has updated acroread (code
execution).

SUSE has updated acroread (code
execution).

Ubuntu has updated libav (multiple
code-execution vulnerabilities).

LWN.net : Monday’s security advisories

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated t1lib (multiple
vulnerabilities), openssl (multiple
vulnerabilities), and kernel (multiple
vulnerabilities).

Fedora has updated F16: 3.1.9 kernel
(syscall instruction induces guest panic), F16:
3.1.8 kernel
(denial of service), F15:
kernel
(multiple vulnerabilities), plib (F16; F15:
arbitrary code execution), and F15: openssl
(multiple vulnerabilities).

Mandriva has updated libxml2 (code
execution).

openSUSE has updated system-config-printer (multiple
vulnerabilities) and openssl (multiple
vulnerabilities).

SUSE has updated openssl (multiple
vulnerabilities).

LWN.net : Tuesday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated pdns (denial of
service).

Mandriva has updated apache
(multiple vulnerabilities).

Red Hat has updated java (multiple
vulnerabilities).

LWN.net : Security advisories for Monday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated ecryptfs-utils
(multiple vulnerabilities), super
(buffer overflow), and cacti (multiple
vulnerabilities).

Fedora has updated zabbix (F16; F15:
multiple cross-site scripting vulnerabilities), F16: kernel (denial of service), and F15: pidgin (multiple vulnerabilities).

Gentoo has updated chromium
(multiple vulnerabilities).

openSUSE has updated pidgin
(multiple vulnerabilities).

Ubuntu has updated firefox (multiple
vulnerabilities), mozvoikko & ubufox
(updated for Firefox 9), and kernel (multiple
vulnerabilities).

LWN.net : First FOSDEM 2012 Speaker Interviews

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

As in years past, the FOSDEM (Free and Open source Software Developers’
European Meeting) team has been interviewing
the main track speakers. Interviews available so far are:

LWN.net : Friday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated squid3 (denial of
service).

Fedora has updated krb5-appl (F16; F15: code
execution with root privileges), libguestfs (F16; F15:
restriction bypass), pythonvirtualenv (F16; F15:
symlink attack), F16: libvirt (Fedora
specific bug
firewalled port exposure), and pidgin (multiple
vulnerabilities).

Gentoo has updated mysql (multiple
vulnerabilities).

LWN.net : Security advisories for Thursday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated krb5 (multiple
vulnerabilities) and foomatic-filters
(command execution).

Gentoo has updated phpmyadmin
(multiple vulnerabilities).

openSUSE has updated fastcgi (authentication bypass), seamonkey (multiple vulnerabilities), net6 (multiple vulnerabilities), freetype2 (code execution), krb5-appl (privilege escalation/code
execution), chasen (code execution), mozilla-nss (man-in-the-middle/code
execution), and glibc (heap overflow).

SUSE has updated krb5 (SLE S10 SP2; SLE SDK
11 SP1, SLE 11 SP1, SLED 11 SP1, SLES 10 SP4, SLED 10 SP4
: multiple vulnerabilities),
glibc (SLES 10 SP4, SLED 10 SP4, SLE SDK
SP4
; SLE SDK 11 SP1, SLES 11 SP1, SLED 11
SP1
: heap overflow), heimdal
(CORE 9: code execution with root privileges), and openSSL (SLE 11 SP1: multiple vulnerabilities).

Ubuntu has updated kernel (linux-fsl-imx51; linux-ti-omap4: multiple vulnerabilities) and
ffmpeg (multiple code-execution
vulnerabilities).

LWN.net : Stable kernels 3.0.15 and 3.1.7

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Stable kernels 3.0.15 and 3.1.7 are out with a single bug fix for resume
issues.

LWN.net : Version 1.0 of the Clementine music player arrives (The H)

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

The H covers
the release
of version 1.0 of the Clementine music player. “The
major update adds support for the Spotify and Grooveshark music streaming
services. A Global Search feature has been added that allows users to find
music on their local system or on the internet. Other changes include audio
CD support, and improvements to the settings dialog and album cover
searches, as well as the addition of more transcoder options. A number of
bugs found in the previous versions have also been fixed.
” A brief
announcement can be
found on the project’s website. See the changelog
for more detailed information.

LWN.net : Stable kernel 2.6.32.52

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

The 2.6.32.52 stable kernel is available.
It contains a single bugfix for resume issues that were reported by a
lot of people. If you didn’t have this problem, no need to upgrade.

LWN.net : Security advisories for Tuesday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Fedora has updated ipmitool (F16; F15:
denial of service), F15: jasper (two code
execution flaws), and F15: dhcp (denial of
service).

Mandriva has updated t1lib (code
execution).

LWN.net : Monday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated ipmitool (denial
of service) and cyrus-imapd (denial of
service).

Fedora has updated F16: jasper (two
code execution flaws), F16: glibc
(unspecified vulnerabilities), unbound (F16; F15:
denial of service), and phpmyadmin (F16; F15:
cross-site scripting).

Mandriva has updated phpmyadmin
(cross-site scripting) and fcgi
(authentication bypass).

LWN.net : Security advisories for Friday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated ipmitool (denial
of service) and movabletype-opensource
(multiple vulnerabilities).

Mandriva has updated php (denial of
service).

LWN.net : Security advisories for Tuesday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Mandriva has updated squid (denial
of service) and icu (code execution).

Red Hat has updated krb5 (RHEL6; RHEL4&5: code execution with root
privileges).

Scientific Linux has updated SL6:
kernel
(multiple vulnerabilities), another SL6: kernel (restriction bypass), and SL6: krb5-appl (code execution with root
privileges).

LWN.net : Monday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated jasper (two code
execution flaws), heimdal (code execution
with root privileges), inetutils (code
execution with root privileges), openswan
(denial of service), and krb5 (code
execution with root privileges).

Fedora has updated F16: kernel
(denial of service).

Mandriva has updated mozilla
(multiple vulnerabilities).

LWN.net : Security advisories for Friday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

CentOS has updated C6: kernel
(restriction bypass).

Debian has updated unbound (denial
of service).

Fedora has updated cacti (F16; F15:
multiple vulnerabilities), clearsilver (F16; F15:
arbitrary code execution), icu (F16;
F15: code execution), F16: openstack-nova (directory traversal), F16: firefox (man-in-the-middle attack), F16: nss (man-in-the-middle attack), F16: nss-util (man-in-the-middle attack), F16: nss-softokn (man-in-the-middle attack),
and F16: thunderbird (man-in-the-middle
attack).

Red Hat has updated kernel
(restriction bypass).

Ubuntu has updated thunderbird
(multiple vulnerabilities).

LWN.net : Security advisories for Tuesday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Red Hat has updated tomcat5
(multiple vulnerabilities).

Ubuntu has updated kernel (10.04
LTS
; 11.04; 10.04 LTS backport: multiple vulnerabilities),
python3 (multiple vulnerabilities), and jasper (two code execution flaws).

LWN.net : Monday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated xorg (restriction
bypass), dtc (multiple vulnerabilities), mediawiki (multiple vulnerabilities), and asterisk (multiple vulnerabilities).

Fedora has updated phpmyadmin (F16; F15:
cross-site scripting), ejabberd (F16; F15:
denial of service), F16: abrt (information
disclosure), and F16: libreport
(information disclosure).

Mandriva has updated php-suhosin
(crackable password hashing), libarchive (2010.1, 2011.0; ES5.0: arbitrary code execution).

Oracle has updated OL6: krb5 (denial
of service), OL6: squid (denial of
service), OL6: jasper (two code execution
flaws), OL6: icu (code execution), OL6: dhcp (denial of service), OL6: pidgin (denial of service), OL6: qemu-kvm (privilege escalation), and OL6: ipmitool (denial of service).

Red Hat has updated libxfont
(privilege escalation).

Ubuntu has updated libarchive
(arbitrary code execution).

LWN.net : Security advisories for Friday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated tor (arbitrary code execution).

Mandriva has updated jasper (two
code execution flaws).

openSUSE has updated jasper (two
code execution flaws) and system-config-printer (multiple
vulnerabilities).

Oracle has updated enterprise kernel
(multiple vulnerabilities).

Scientific Linux has updated pidgin (SL6; SL4&5: multiple vulnerabilities), SL6: ipmitool (multiple vulnerabilities), SL5&6: icu: (code execution), SL6: dhcp (denial of service), SL6: jasper (two code execution flaws), and SL6: virt-v2v (privilege escalation).

LWN.net : Tuesday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

CentOS has updated netpbm (C5; C4:
multiple vulnerabilities).

Fedora has updated dovecot (F16; F15:
certificate validation flaw), F16: ykclient
(Authentication bypass via NULL password), F16:
pam_yubico
(Authentication bypass via NULL password), F16: yubikey-val (Authentication bypass via
NULL password), F16: arora (certificate
spoof), and krb5 (denial of service).

Mandriva has updated nfs-utils
(user-controlled /etc/mtab corruption).

openSUSE has updated dhcp (denial of
service).

Red Hat has updated netpbm (multiple
vulnerabilities).

Scientific Linux has updated netpbm
(multiple vulnerabilities).

SUSE has updated kernel (SLE11
SP1
; SLES11 SP1, SLES SP1 VMware, SLE HA 11
SP1, SLED 11 SP1
: multiple vulnerabilities).

Ubuntu has updated ec2 kernel
(multiple vulnerabilities), fsl-imx51
kernel
(multiple vulnerabilities), natty
backport kernel
(multiple vulnerabilities), marvell dove kernel (multiple
vulnerabilities), nova (file overwrite),
and omap4 kernel (10.10; 11.04: multiple vulnerabilities).

LWN.net : Security advisories for Monday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated acpid (multiple
vulnerabilities).

Fedora has updated python-celery (F16; F15:
privilege escalation), openswan (F16; F15; F14: denial of service), zabbix (F16; F15:
remote SQL command execution), F15: kernel
(multiple vulnerabilities), F15: pam
(arbitrary code execution), F15: hardlink
(multiple vulnerabilities).

Mandriva has updated pidgin (denial
of service), krb5 (denial of service), and
libcap (unauthorized directory access).

SUSE has updated quagga (multiple
vulnerabilities) and jasper (two code
execution flaws).

Ubuntu has updated commons-daemon (remote access to superuser files/directories).

LWN.net : Security advisories for Tuesday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Fedora has updated nginx (F16; F15:
remote code execution) and psi (F16; F15: input validation failure).

Oracle has updated OL6: tomcat6
(multiple vulnerabilities).

LWN.net : Ubuntu’s Precise Pangolin Alpha 1 Released

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

The first alpha for Ubuntu 12.04 is available for testing. Images are
currently available for Ubuntu Desktop, Server, ARM, Server Cloud and EC2,
as well as Xubuntu, Edubuntu and Lubuntu.

LWN.net : Security advisories for Thursday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

CentOS has updated cyrus-imapd (C5; C4:
multiple vulnerabilities).

Debian has updated clearsilver
(arbitrary code execution).

openSUSE has updated seamonkey
(multiple vulnerabilities) and pidgin
(denial of service).

Red Hat has updated RHEL6:
libarchive
(arbitrary code execution) and RHEL4,5&6: cyrus-imapd (multiple
vulnerabilities).

Scientific Linux has updated SL5:
kernel
(multiple vulnerabilities).

LWN.net : Tuesday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

CentOS has updated C4: bind (denial
of service).

Fedora has updated ReviewBoard (F16; F15:
arbitrary HTML or web script execution), F15:
rest
(multiple vulnerabilities), F15:
libsocialweb
(multiple vulnerabilities), F14: freetype (code execution), and F14: kernel (multiple vulnerabilities).

openSUSE has updated puppet
(multiple vulnerabilities).

Red Hat has updated kernel (multiple
vulnerabilities) and bind (denial of
service).

Ubuntu has updated kernel (multiple
vulnerabilities).

LWN.net : Web Search By The People, For The People: YaCy 1.0

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

The Free Software Foundation Europe covers the release of YaCy 1.0, a
peer-to-peer Free Software search engine. “The YaCy search engine
runs on each user’s own computer. Search terms are encrypted before they
leave the user and the user’s computer. Different from conventional search
engines, YaCy is designed to protect users’ privacy. A user’s computer
creates its individual search indexes and rankings, so that results better
match what the user is looking for over time. YaCy also makes it easy to
create a customised search portal with a few clicks.

LWN.net : Security advisories for Monday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Fedora has updated bind (F15;
F14: denial of service) and F14: nss: (certificate removal).

Mandriva has updated glibc (2010.1, ES5.0; 2011.0: multiple vulnerabilities).

Oracle has updated unbreakable enterprise kernel (OL6; OL5:
multiple vulnerabilities) and OL6: kernel
(multiple vulnerabilities).

Ubuntu has updated thunderbird
(multiple vulnerabilities), apt (repository
credential disclosure), and update-manager
(multiple vulnerabilities).

LWN.net : Friday’s security advisories

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated ldns (arbitrary
code execution).

Fedora has updated phpldapadmin (F16; F15; F14: multiple vulnerabilities),
cherokee (F16; F15; F14:
multiple vulnerabilities), net6 (F16; F15; F14: multiple vulnerabilities), rest
(F16: multiple vulnerabilities),
libsocialweb: (F16: multiple
vulnerabilities), and kernel (F16:
denial of service).

LWN.net : Tool kills hidden Linux bugs, vulnerabilities (SC Magazine)

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

SC Magazine looks
at a tool
to help look for holes in Linux. “It identifies similar source files based on file names and content to identify relationships between source packages. Fuzzy hashing using ssdeep produces hashes that can be used to determine similar packages. Graph Theory is used to perform the analysis.

LWN.net : Open Source and the Open Road, Part 1 (Linux Insider)

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Linux Insider looks
at the role of Linux
in the automotive industry. “One key factor
driving the decision on what operating system car makers will use for this
new generation of connected cars is uniqueness. Car makers want to
differentiate their products the same way Apple has done with its
smartphone technology, said [Peter Vescuso, executive vice president of Black Duck Software].

That same driving force exists with consideration for the Linux subset, Android. The same dynamics that thrust the use of Android into the mobile device market could have a huge impact on the automotive industry, he noted.”

LWN.net : Tuesday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated wireshark
(denial of service code execution).

Fedora has updated F16: freetype
(code execution).

openSUSE has updated bind (denial
of service).

Red Hat has updated RHEL6: kernel
(multiple vulnerabilities).

SUSE has updated bind (SLE11 SP1,
SLE10 SP4
; SLE10 SP3: denial of
service) and networkmanager (man in the
middle attack).

Ubuntu has updated kernel (10.10; 10.04
LTS
; Marvell DOVE 10.10; 11.10: multiple vulnerabilities), pidgin (denial of service), and kdeutils (directory traversal).

LWN.net : Security advisories for Monday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated spip (privilege
escalation/cross-site scripting), freetype
(code execution), and systemtap (privilege
escalation/denial of service).

Fedora has updated puppet (F16; F15; F14: man-in-the-middle attack), proftpd (F16; F15; F14: remote code execution), moodle (F16; F15; F14: multiple vulnerabilities),
drupal6-views (F16; F15; F14: SQL
injection), F16: bind (denial of service),
F16: kernel (multiple vulnerabilities), and
F16: kdelibs (multiple vulnerabilities).

Gentoo has updated chromium
(multiple vulnerabilities), maradns (denial
of service), tintin++ (multiple
vulnerabilities from 2008), radvd (multiple
vulnerabilities), perl-core/Safe
(restriction bypass), evince (arbitrary
code execution), tar (arbitrary code
execution), and abcm2ps (multiple
vulnerabilities).

Mandriva has updated freetype2 (code
execution).

openSUSE has updated wireshark
(denial of service).

SUSE has updated wireshark (denial
of service), mozilla-nss (multiple
vulnerabilities), firefox (privilege
escalation/cross-site scripting), and acroread (multiple vulnerabilities).

Ubuntu has updated software-center
(man-in-the-middle attack/information disclosure) and kernel (multiple vulnerabilities).

LWN.net : Friday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

CentOS has updated freetype (C5; C4: code
execution), C5: bind (denial of service),
and C5: bind97 (denial of service).

Fedora has updated F15: kernel
(multiple vulnerabilities) and squid (F15; F14:
denial of service).

Mandriva has updated bind (denial of service) and bind (packaging fix to previous update).

openSUSE has updated empathy
(cross-site scripting ) and libcap
(unauthorized directory access).

Oracle has updated bind (OL5; OL6:
denial of service) and OL5: bind97 (denial
of service).

Red Hat has updated RHEL5&6:
bind
(denial of service) and RHEL5:
bind97
(denial of service).

Scientific Linux has updated SL5&6:
bind
(denial of service) and SL5:
bind97
(denial of service).

SUSE has updated firefox (multiple
vulnerabilities).

Ubuntu has updated freetype (code
execution).

LWN.net : W3C privacy workgroup issues first draft of Do Not Track standard (ars technica)

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Ars technica reports
on the availability
of W3C’s first draft of a Web standard that
addresses online privacy. “Mozilla originally introduced the DNT
setting in Firefox 4 earlier this year. The feature consists of a simple
HTTP header flag that can be toggled through the browser’s preference
dialog. The flag tells website operators and advertisers that the user
wants to opt out of invasive tracking and other similar practices that have
become pervasive with the rise of behavioral advertising. Of course, the
mechanism just indicates a preference and doesn’t actively block tracking
activity. The success and efficacy of the DNT header is predicated on
voluntary compliance from the Internet advertisers that will have to take
steps to implement support for the feature.

LWN.net : Security updates for Tuesday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Fedora has updated wireshark (F16; F15; F14: multiple vulnerabilities).

Mandriva poppler (multiple
vulnerabilities).

openSUSE has updated acroread
(multiple scary vulnerabilities), flash-player (multiple scary vulnerabilities),
mozilla-nss (insecure pkcs11.txt load path
(possible code execution), firefox (11.3; 11.4:
multiple vulnerabilities), and radvd
(multiple vulnerabilities).

SUSE has updated acroread (multiple
scary vulnerabilities) and flash-player
(multiple scary vulnerabilities).

Ubuntu has updated quagga (buffer
overflow and denial of service) and lightdm
(privilege escalation).

LWN.net : FSFE: Swedish activist receives Nordic Free Software Award 2011

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

The Free Software Foundation Europe (FSFE) reports that Erik Josefsson is
the winner of the Nordic Free Software Award 2011. “From a career as
a professional double-bass player, Josefsson gradually moved to full-time
activism for freedom in the information society. He founded the Swedish
Foundation for a Free Information Infrastructure (FFII Sweden) in
2004. Listed among Sweden’s 30 most influential people during the European
debate about software patents in 2005, Josefsson is among Europe’s foremost
defenders of software freedom.

LWN.net : FSFE: Swedish activist receives Nordic Free Software Award 2011

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

The Free Software Foundation Europe (FSFE) reports that Erik Josefsson is
the winner of the Nordic Free Software Award 2011. “From a career as
a professional double-bass player, Josefsson gradually moved to full-time
activism for freedom in the information society. He founded the Swedish
Foundation for a Free Information Infrastructure (FFII Sweden) in
2004. Listed among Sweden’s 30 most influential people during the European
debate about software patents in 2005, Josefsson is among Europe’s foremost
defenders of software freedom.

LWN.net : Monday’s security advisories

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated python-django-piston (remote code execution)
and icedove (multiple vulnerabilities).

Fedora has updated cacti (F16; F15; F14: SQL injection/cross-site scripting),
phpmyadmin (F16; F15; F14:
multiple vulnerabilities), and ocsinventory (F15; F14:
cross-site scripting).

Gentoo has updated openttd (multiple
vulnerabilities) and phpdocumentor (arbitrary code execution via crafted search string).

Mandriva has updated networkmanager
(privilege escalation), libreoffice
(arbitrary code execution), openssl
(provides updated library), and graphite2
(unspecified vulnerabilities).

Ubuntu has updated omap4 kernel
(information disclosure).

LWN.net : OpenBSD 5.0

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

OpenBSD 5.0 has been released. This version includes improved hardware
support, generic network stack improvements, routing daemons and other
userland network improvements, SCSI improvements, OpenSSH 5.9, and much
more. See the release notes for
details.

LWN.net : Security advisories for Tuesday

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Gentoo has updated chromium
(multiple vulnerabilities).

Mandriva has updated kdelibs4
(multiple vulnerabilities).

Red Hat has updated kernel (RHEL5.3 Long Life; RHEL 5.6 Extended Update Support: multiple vulnerabilities).

LWN.net : Shuttleworth: Ubuntu on phones, tablets, TV’s and smart screens everywhere

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Mark Shuttleworth shares his vision
of Ubuntu on a wide range of devices. “Canonical and the Ubuntu community have established Ubuntu’s place in desktop, server and cloud deployments. We have also invested in the design and engineering of Unity, motivated by the belief that desktop interfaces would merge with mobile, touch interfaces into a seamless personal computing platform in the future. Today we are inviting the whole Ubuntu community – both commercial and personal – to shape that possibility and design that future; a world where Ubuntu runs on mobile phones, tablets, televisions and traditional PC’s, creating a world where content is instantly available on all devices, in a form that is delightful to use.

LWN.net : Hoogland: Q&A with Enlightenment Lead Developer “Rasterman”

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Jeff Hoogland talks
with “Rasterman”
about the Enlightenment desktop. “In your
opinion what are the EFLs [Enlightenment Foundation Libraries] strongest
advantages over other libraries such as GTK or QT?
Smaller, leaner and
built for a more modern graphics era. They are designed from the ground up
as a scene graph. GTK and QT are just beginning to explore that and see the
light. EFLs have been there and mature for many years now.
” (LWN looked at Enlightenment and the foundation
libraries in August 2011)

LWN.net : Monday’s security updates

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Debian has updated python-django
(multiple vulnerabilities) and phpldapadmin
(multiple vulnerabilities).

Fedora has updated F14: kernel (file
corruption).

LWN.net : Intel’s Dirk Hohndel on 20 Years of Linux (Linux.com)

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

Nathan Willis covers
Dirk Hohndel’s LinuxCon Europe presentation. “Hohndel was one of the earliest kernel contributors, and said that he wanted to present his take on the history of the project to provide a perspective that was not focused on the growth of Linux adoption, because for the founders of the kernel, it’s primary appeal was as a technical challenge. World domination was an afterthought. In addition, he said, the core kernel team’s continued focus on the “next technical hurdle” over the years is actually one of Linux’s strengths. That is, they work on the kernel for its own sake. If it wasn’t fun for them, it likely wouldn’t be a platform for success for anyone else.

LWN.net : GNOME 3.3.1 Development Release

This post was syndicated from: LWN.net and was written by: ris. Original post: at LWN.net

GNOME 3.3.1 is the first development release of the 3.3 development cycle.
This release is a snapshot of early development code. Although it is
buildable and usable, it is primarily intended for testing and hacking
purposes. GNOME uses odd minor version numbers to indicate development
status.