Linux Weekly News

Tartalom átvétel
LWN.net is a comprehensive source of news and opinions from and about the Linux community. This is the main LWN.net feed, listing all articles which are posted to the site front page.
Frissült: 16 perc 36 másodperc

Kügler: Plasma Pow-wow Produces Detailed Plans for Workspace Convergence

sze, 2013-04-24 19:42
Sebastian Kügler covers a meeting of the Plasma team. "The developers laid out the plans for an eventual release of Plasma Workspaces 2, based on KDE Frameworks 5 and Qt5. Wayland is also part of this plan. Starting with Plasma Worskpaces 2, Wayland will join X11 as a supported windowing environment, and all new development is taking this into consideration. Wayland is a replacement for most of the functionality which is today offered by Xorg. Wayland simplifies the graphics stack significantly with the goal of making every frame shown on screen perfect, something that is hard to achieve reliably with X11. Wayland's leaner graphics stack and improved security model also make it more appropriate for use on modern devices. As such, it is widely seen as the successor to X11 in the Free software ecosystem. Most of the gruntwork needed for this transition is already offered in Qt, however, there are still quite some X11-dependent code pathes in the KDE Frameworks, especially in KWin and the Oxygen widget style. While KWin is making excellent progress towards being able to be used as Wayland compositor, the future of the Oxygen widget style is still an unsolved problem."
Kategóriák: Linux

Security advisories for Wednesday

sze, 2013-04-24 18:51
CentOS has updated kernel (C6: multiple vulnerabilities).

Fedora has updated owncloud (F18: unspecified vulnerability).

Oracle has updated kernel (OL6: multiple vulnerabilities).

Red Hat has updated kernel (RHEL6: multiple vulnerabilities).

Scientific Linux has updated kernel (SL6: multiple vulnerabilities).

SUSE has updated java-1_4_2-ibm (multiple vulnerabilities), postgresql (multiple vulnerabilities), and java-1_6_0-ibm (multiple vulnerabilities).

Ubuntu has updated openjdk-7 (multiple vulnerabilities) and icedtea-web (regression in previous update).

Kategóriák: Linux

[$] The 2013 Linux Filesystem, Storage, and Memory Management Summit

k, 2013-04-23 23:45
The 2013 Linux Filesystem, Storage, and Memory Management Summit was held April 18 and 19 in San Francisco, California, immediately after the Linux Foundation's Collaboration Summit. The first set of notes from that gathering is now available; at this point, we have most of the plenary sessions and the entire memory management track written up. The rest of our notes from the Summit will be added in the near future.
Kategóriák: Linux

FSFE: German Parliament says: Stop Granting Software Patents

k, 2013-04-23 20:55
The Free Software Foundation Europe reports that the German Parliament has adopted a joint motion against software patents. "In the resolution, the Parliament says that patents on software restrict developers from exercising their copyright privileges, including the right to distribute their programs as Free Software. Patents help to create monopolies in the software market, and hurt innovation and job creation. The Parliament calls on the German government to make sure that Free Software development is not restricted by patents."
Kategóriák: Linux

Tuesday's security updates

k, 2013-04-23 18:23
Debian has updated tinc (code execution).

Mandriva has updated roundcubemail (ES 5.0; BS 1.0: cross-site scripting/file disclosure) and mysql (multiple unspecified vulnerabilities).

Kategóriák: Linux

Villa: Why feed reading is an open web problem, and what browsers could do about it

k, 2013-04-23 17:31
At his blog, Luis Villa muses on the topic of RSS and what can be learned from Google's decision to kill Google Reader. Villa contends that "the widely perceived failure of RSS is not really a failure of RSS, but rather a failure of the user experience of discovering and subscribing to RSS." In other words, Mozilla and other browser vendors have dropped the ball by not treating feeds as "a first-class web citizen," which helps walled-in, proprietary solutions like Facebook and Twitter. Solving the problem is not simple, he admits, but he does float the idea that browsers "provide a minimum viable product for light web users – possibly by supplementing the current 'here are your favorite sites' links with a clean, light reader focused on only the current top headlines."
Kategóriák: Linux

Fedora 19 Alpha released

k, 2013-04-23 16:19
The Fedora 19 alpha release is available for testers. "We need your help to make Fedora 19 the best release yet, so please take a moment of your time to download and try out the Alpha and make sure the things that are important to you are working." There is a lot of new stuff in this release; see the announcement for an overview.
Kategóriák: Linux

Security advisories for Monday

h, 2013-04-22 18:40
Debian has updated curl (cookie information disclosure).

Fedora has updated xorg-x11-server (F18: information disclosure) and phpmyadmin (F18; F17: cross-site scripting).

Mandriva has updated libarchive (denial of service).

Slackware has updated xorg-server (information disclosure).

Kategóriák: Linux

Kernel prepatch 3.9-rc8

h, 2013-04-22 02:46
The 3.9-rc8 prepatch is out. "Yes, I was really hoping (and originally planning) to release 3.9 final this weekend, but we had enough issues that I just didn't feel comfy about it. It was borderline, and none of the issues were huge, and maybe I could have called this just 3.9 and opened the merge window, but hey, another week won't hurt."
Kategóriák: Linux

[$] LFCS: Preparing Linux for nonvolatile memory devices

p, 2013-04-19 20:28
Since the demise of core memory, there has been a fundamental dichotomy in data storage technology: memory is either fast and ephemeral, or slow and persistent. The situation is changing, though, and that leads to some interesting challenges for the Linux kernel. How will we adapt to the coming world where nonvolatile memory (NVM) devices are commonplace? Ric Wheeler led a session at the 2013 Linux Foundation Collaboration Summit to discuss this issue.
Kategóriák: Linux

Friday's security updates

p, 2013-04-19 16:55

Fedora has updated icedtea-web (F17, multiple vulnerabilities), java-1.7.0-openjdk (F17, multiple vulnerabilities), and kernel (F18, PAE pagetable corruption).

Mandriva has updated icedtea-web (multiple vulnerabilities) and java-1.6.0-openjdk (multiple vulnerabilities).

Oracle has updated java-1.7.0-openjdk (multiple vulnerabilities).

Red Hat has updated java-1.6.0-sun (multiple vulnerabilities) and java-1.7.0-oracle (multiple vulnerabilities).

Ubuntu has updated icedtea-web (multiple vulnerabilities) and kernel (10.04 LTS, multiple vulnerabilities).

Kategóriák: Linux

Huang: The $12 Gongkai Phone

cs, 2013-04-18 21:21
Andrew "bunnie" Huang dissects a Chinese phone. "However, if you know a bit of Chinese, and know the right websites to go to, you can download schematics, board layouts, and software utilities for something rather similar to this phone…”for free”. I could, in theory, at this point attempt to build a version of this phone for myself, with minimal cash investment. It feels like open-source, but it’s not: it’s a different kind of open ecosystem." (Thanks to Paul Wise)
Kategóriák: Linux

Thursday's security updates

cs, 2013-04-18 20:35
CentOS has updated java-1.7.0-openjdk (C6; C5: multiple vulnerabilities) and icedtea-web (C6: multiple vulnerabilities).

Debian has updated xorg-server (information disclosure) and xen (denial of service).

Fedora has updated krb5 (F18; F17: denial of service), curl (F18: cookie information disclosure), libxslt (F18: denial of service), libuser (F18: multiple vulnerabilities), java-1.7.0-openjdk (F18: multiple vulnerabilities), and icedtea-web (F18: multiple vulnerabilities).

Mageia has updated bugzilla (multiple vulnerabilities), mongodb (code execution), libarchive (denial of service), iceape (multiple vulnerabilities), curl (cookie information disclosure), phpmyadmin (cross-site scripting), icedtea-web (multiple vulnerabilities), and java-1.6.0-openjdk (multiple vulnerabilities).

Oracle has updated kernel (OL5: multiple vulnerabilities), kernel (OL5: multiple vulnerabilities), java-1.7.0-openjdk (OL6: multiple vulnerabilities), and icedtea-web (OL6: multiple vulnerabilities).

Red Hat has updated java-1.7.0-openjdk (RHEL6; RHEL5: multiple vulnerabilities) and icedtea-web (RHEL6: multiple vulnerabilities).

Scientific Linux has updated kernel (SL5: multiple vulnerabilities), java-1.7.0-openjdk (SL6; SL5: multiple vulnerabilities), and icedtea-web (SL6: multiple vulnerabilities).

SUSE has updated java-1_7_0-ibm (multiple vulnerabilities).

Ubuntu has updated xorg-server (information disclosure).

Kategóriák: Linux

Debian 7.0 "Wheezy" release planned for May 5

cs, 2013-04-18 18:03
The (hopefully) final update for the Debian Wheezy release has gone out; the current plan is to release on May 4 or 5. "The intention is only to lift the date if something really critical pops up that is not possible to handle as an errata, or if we end up technically unable to release that weekend (e.g. a required machine crashes or d-i explodes in a giant ball of fire)."
Kategóriák: Linux

LWN.net Weekly Edition for April 18, 2013

cs, 2013-04-18 02:45
The LWN.net Weekly Edition for April 18, 2013 is available.
Kategóriák: Linux

[$] A taste of Rust

cs, 2013-04-18 00:35
Rust, the new programming language being developed by the Mozilla project, has a number of interesting features. One that stands out is the focus on safety. There are clear attempts to increase the range of errors that the compiler can detect and prevent, and thereby reduce the number of errors that end up in production code.

Click below (subscribers only) for an overview of the Rust language by LWN contributor Neil Brown.

Kategóriák: Linux

New stable kernels

sze, 2013-04-17 19:25
Greg KH has released stable kernels 3.8.8, 3.4.41, and 3.0.74. All contain important fixes.
Kategóriák: Linux

Security advisories for Wednesday

sze, 2013-04-17 19:01
CentOS has updated kernel (C5: multiple vulnerabilities) and krb5 (C6: denial of service).

Mandriva has updated phpmyadmin (cross-site scripting).

Oracle has updated krb5 (OL6: denial of service).

Red Hat has updated kernel (RHEL6.2 EUS; RHEL5: multiple vulnerabilities) and krb5 (RHEL6: denial of service).

Scientific Linux has updated krb5 (SL6: denial of service).

Ubuntu has updated samba (12.04 LTS: multiple vulnerabilities).

Kategóriák: Linux

Faure: Report from the freedesktop summit

sze, 2013-04-17 16:51
David Faure has posted a terse report from the free desktop summit held April 8 in Nuremberg. "Perhaps most importantly we have come to agreement on a plan for improving the maintenance of freedesktop specifications going forward. One representative from each of GNOME, KDE and Unity will form a joint maintainer team. This team will monitor and participate in conversations on the xdg list and decide when consensus has been reached. The intention is to revive the usefulness of the xdg list as the primary point of communication between desktop projects."
Kategóriák: Linux

[$] Current challenges in the free software ecosystem

sze, 2013-04-17 10:54
Given Eben Moglen's long association with the Free Software Foundation, his work on drafting the GPLv3, and his role as President and Executive Director of the Software Freedom Law Center, his talk at the 2013 Free Software Legal and Licensing Workshop promised to be thought-provoking. He chose to focus on two topics that he saw as particularly relevant for the free software ecosystem within the next five years: patents and the decline of copyleft licenses.
Kategóriák: Linux