Népszerű fórum témák
FreeBSD Project News
Linux Weekly News
LWN.net is a comprehensive source of news and opinions from and about the Linux community. This is the main LWN.net feed, listing all articles which are posted to the site front page.
Frissült: 8 perc 50 másodperc
Debian has updated openssl (multiple vulnerabilities).
Fedora has updated firefox (F20: multiple vulnerabilities), java-1.7.0-openjdk (F20: multiple vulnerabilities), java-1.8.0-openjdk (F20: multiple vulnerabilities), kernel (F20: multiple vulnerabilities), php-ZendFramework (F19; F20: multiple vulnerabilities), and thunderbird (F20: multiple vulnerabilities).
Oracle has updated cups (O6: multiple vulnerabilities), file (O6: multiple vulnerabilities), firefox (O5; O6: multiple vulnerabilities), glibc (O6: multiple vulnerabilities), java-1.6.0-openjdk (O6: multiple vulnerabilities), java-1.7.0-openjdk (O6: multiple vulnerabilities), krb5 (O6: multiple vulnerabilities), libxml2 (O7: denial of service), openssh (O6: multiple vulnerabilities), openssl (O5; O6; O7: multiple vulnerabilities), thunderbird (O6: multiple vulnerabilities), and trousers (O6: denial of service).
Red Hat has updated java-1.6.0-sun (multiple vulnerabilities), java-1.7.0-oracle (multiple vulnerabilities), libxml2 (RHEL6,7: denial of service), openssl (RHEL5: protocol downgrade), openssl (RHEL6,7: multiple vulnerabilities), and rsyslog7 (RHEL6: denial of service).
Ian Jackson has resurrected the general resolution prohibiting Debian packages from depending on a single init system. This resolution failed to obtain enough seconds to proceed to a vote back in March, but this time more seconds have appeared and a vote will take place after the two-week discussion period. The initial discussion suggests that there is some support for the idea, but that not everybody appreciates seeing this resolution just before the jessie release is supposed to go into a freeze.
The 1.3 release of the Docker container system is available. "First up, in this release, the Docker Engine will now automatically verify the provenance and integrity of all Official Repos using digital signatures. Official Repos are Docker images curated and optimized by the Docker community to be the best building blocks for assembling distributed applications. A valid signature provides an added level of trust by indicating that the Official Repo image has not been tampered with."
The Red Hat Developer Blog has an article about the undefined behavior sanitizer that was a part of the GCC 4.9 release. "One of the most important [checks] is the signed integer overflow checking. The practice shows that this undefined behavior is very common in real programs. Ubsan is able to check that the result of addition, subtraction, multiplication and negation does not overflow in signed arithmetic."
Version 4.0 of the Tor Browser is now available. "The primary user-facing change since the 3.6 series is the transition to Firefox 31-ESR. More importantly for censored users who were using 3.6, the 4.0 series also features the addition of three versions of the meek pluggable transport. In fact, we believe that both meek-amazon and meek-azure will work in China today, without the need to obtain bridge addresses."
CentOS has updated thunderbird (C5: multiple vulnerabilities).
Slackware has updated openssl (multiple vulnerabilities).
Ubuntu has updated mysql-5.5 (12.04, 14.04: multiple vulnerabilities).
The LWN.net Weekly Edition for October 16, 2014 is available.
Very few presenters at technical conferences come equipped with gallons of water and a small inflatable swimming pool to contain it. But that is just how Stephen Hemminger showed up at the 2014 Linux Plumbers Conference. Stephen was there to talk about the current state of the fight against bufferbloat; while there was some good news to share, the sad fact is that, in a number of areas, we are still all wet.
Greg Kroah-Hartman has released four kernel updates: 3.17.1, 3.16.6, 3.14.22, and 3.10.58. All contain the usual set of important fixes.
Debian has updated wireshark (yet another pile of dissector flaws).
Oracle has updated java-1.6.0-openjdk (OL7: multiple vulnerabilities).
Red Hat has updated firefox (RHEL5,6,7: multiple vulnerabilities), java-1.6.0-openjdk (RHEL5,6,7: multiple vulnerabilities), java-1.7.0-openjdk (RHEL6,7; RHEL5: multiple vulnerabilities), and java-1.8.0-openjdk (RHEL6: multiple vulnerabilities).
SUSE has updated rsyslog (SLES11 SP3: two vulnerabilities).
Google has disclosed a new SSL vulnerability that goes by the name POODLE. In essence: a man-in-the-middle attacker can force a connection to drop back to the obsolete SSL 3.0 protocol, then recover plaintext data. "Disabling SSL 3.0 support, or CBC-mode ciphers with SSL 3.0, is sufficient to mitigate this issue, but presents significant compatibility problems, even today. Therefore our recommended response is to support TLS_FALLBACK_SCSV. This is a mechanism that solves the problems caused by retrying failed connections and thus prevents attackers from inducing browsers to use SSL 3.0. It also prevents downgrades from TLS 1.2 to 1.1 or 1.0 and so may help prevent future attacks." The OpenSSL project has issued an advisory describing its response to a few vulnerabilities, POODLE included.
For those with an interest in the KVM hypervisor: the Linux Foundation's Open Virtualization Alliance has published a white paper [PDF] with an overview of KVM and where it is going. "OpenStack is one of the brightest spots for KVM. As cloud deployments gain in adoption, OpenStack is the leading open source option and has tremendous community momentum behind it. KVM is the most popular hypervisor for OpenStack deployments, so as OpenStack succeeds, so will KVM."
Fedora Magazine looks at new features in the Fedora 21 graphics stack. "This article details some of the driver support and feature updates that will be available for the graphics stack in Fedora 21. Note that this post does contain some pretty low level details about new drivers and features in Fedora 21. While most users won’t directly see many of these features in day to day usage, the effects of all these low-level updates make more graphics cards work better on Fedora. Special thanks to Adam Jackson for collating this list of updates for this article."
Red Hat has announced the release of the sixth update to RHEL 6. "From the kernel to the network stack, Red Hat Enterprise Linux 6.6 has been tuned to optimize performance. With support for higher processor counts and memory limits as well as kernel optimizations that allow for more efficient CPU utilization on large NUMA systems, Red Hat Enterprise Linux 6.6 better accommodates dense single-server workloads. Other system performance enhancements include support for additional 40 GbE network adapters, reductions in network latency and jitter, and support for high performance, low latency applications." See the release notes for details.
CentOS has updated rsyslog (C7: denial of service).
Oracle has updated rsyslog (OL7: denial of service).
Red Hat has updated chromium-browser (RHEL6: multiple vulnerabilities), cups (RHEL6: multiple vulnerabilities), file (RHEL6: multiple vulnerabilities), glibc (RHEL6: two vulnerabilities), kernel (RHEL6: multiple vulnerabilities), krb5 (RHEL6: multiple vulnerabilities), luci (RHEL6: code execution), openssh (RHEL6: two vulnerabilities), rsyslog (RHEL7: denial of service), trousers (RHEL6: denial of service), and X11 client libraries (RHEL6: many vulnerabilities).
Scientific Linux has updated bind97 (SL5: denial of service), conga (SL5: multiple vulnerabilities), krb5 (SL5: multiple vulnerabilities), krb5 (SL5: code execution), php53 and php (SL5, SL6: multiple vulnerabilities), and rsyslog (SL7: denial of service).
SUSE has updated Containment-Studio (SUSE Studio: multiple vulnerabilities).
Version 2.0 of the CUPS printing system was released on October 1. In addition to marking the 15th anniversary of version 1.0, the 2.0 milestone primarily designates that CUPS has implemented a full set of APIs for running an HTTP and Internet Printing Protocol (IPP) service. This includes support for the IPP Everywhere effort that makes IPP printers available to smartphones, tablets, and other sub-PC devices. But there are many other enhancements as well, including improved system compatibility for Linux and several security fixes.
Scientific Linux has released version 7.0 of its enterprise Linux clone. "Fermilab's intention is to continue the development and support of Scientific Linux and refine its focus as an operating system for scientific computing." It is recommended to read both the Scientific Linux release notes and the RHEL7 release notes.
CentOS has updated krb5 (C5: code execution).
Fedora has updated check-mk (F20; F19: code execution and more), cscope (F19: insecure snapshots), ctags (F20: denial of service), golang (F20; F19: forged certificate ownership), kdelibs (F19: authorization bypass), lzo (F19: code execution), mantis (F20; F19: null byte poisoning), mksh (F20; F19: multiple issues), nginx (F20; F19: virtual host confusion attacks), nss (F19: signature forgery), nss-softokn (F19: signature forgery), nss-util (F19: signature forgery), openstack-neutron (F20: denial of service), phpMyAdmin (F19: cross-site scripting), rubygem-bundler (F20; F19: installs malicious gem files), seamonkey (F20; F19: multiple vulnerabilities), and xen (F20; F19: multiple vulnerabilities).
Gentoo has updated locale-maketext (multiple vulnerabilities).
The Linux Foundation has announced a new project, called Dronecode, that is concerned with free systems to drive autonomous vehicles — drones, in other words. There is a lot of code already in place, it seems. "Today more than 1,200 developers are working on Dronecode projects with more than 150 code commits a day on some projects." Andrew "Tridge" Tridgell is the chair of the project's steering committee.
HUP napi hírlevél
Legfrissebb Linux játékvideók
Legfrissebb HUP képek
Legfrissebb HUP dokumentumok
IQ-m az online Mensa teszt alapján:
125-nél _NEM_ kevesebb
Csak az eredmény érdekel.
Összes szavazat: 322