Népszerű fórum témák
FreeBSD Project News
Linux Weekly News
LWN.net is a comprehensive source of news and opinions from and about the Linux community. This is the main LWN.net feed, listing all articles which are posted to the site front page.
Frissült: 19 perc 51 másodperc
The LWN.net Weekly Edition for March 24, 2016 is available.
GNOME 3.20 has been released. "This release brings significant improvements to many of our core applications, such as system upgrades and reviews in Software, simple photo editing in Photos and improved search in Files. Improvements to our platform include shortcut help windows which are now available in many applications, a refined font and better control of location services." See the release notes for details.
openSUSE has updated bind (Leap42.1: two vulnerabilities).
Red Hat has updated foomatic (RHEL6: three vulnerabilities), git (RHEL6,7: code execution), git19-git (RHSCL: code execution), kernel (RHEL6: memory leak), krb5 (RHEL6: two vulnerabilities), nss-util (RHEL6.2, 6.4, 6.5, 6.6, 7.1: code execution), RHOSE (multiple vulnerabilities), and tomcat6 (RHEL6: Security Manager bypass).
Scientific Linux has updated foomatic (SL6: three vulnerabilities), git (SL6,7: code execution), kernel (SL6: memory leak), krb5 (SL6: two vulnerabilities), and tomcat6 (SL6: Security Manager bypass).
SUSE has updated rubygem-actionview-4_1 (SOSC5: two vulnerabilities).
KubeCon EU, held in London March 10th, was the second conference dedicated to the Kubernetes container orchestration system. The sold-out attendance of 500 showed how popular the project has become since the release of version 1.0 by Google in July 2015. One week after the conference, version 1.2 was released, which included many long-awaited features.
Subscribers can click below for part 1 of our coverage—two talks about new 1.2 features—by guest author Josh Berkus.
KDE Plasma 5.6 has been released. This version brings many improvements to the task manager, KRunner, activities, and Wayland support. The look and feel has been enhanced with a slicker Plasma theme and smoother widgets. For those that missed having a weather widget, that feature has returned. See the changelog for details.
Ars Technica reports that former Intel CEO, chairman, and first employee hired Andy Grove has died. "Intel may have been a footnote in history were it not for Grove. The company started its life making DRAM chips. With this business under pressure from dumped Japanese DRAM, Grove changed the company's direction, deciding to build microprocessors instead. After a few early iterations, this work led to the development of the x86 processor line that made Intel a household name and one of the largest companies in the world. Grove was also instrumental in persuading IBM to use Intel's x86 processors for its newly invented Personal Computer."
The Free Software Foundation has announced the winners of its 2015 Software Freedom Awards: the Library Freedom Project won the award for projects of social benefit, while GnuPG maintainer Werner Koch received the award for the advancement of free software.
InfoWorld takes a look at Redox OS. "Redox uses Rust for its kernel-level code to provide more memory safety considerations than C allows by default. But the project doesn't simply rewrite Linux in a new language. Redox discards as much from Linux's version of the Unix tradition as it keeps. As explained in the project's wiki and design documents, Redox uses a minimal set of syscalls -- a deliberately smaller subset than what Linux supports so as to avoid legacy bloat. The OS also uses a microkernel design to stay slender, in contrast to Linux's monolithic kernel."
Fedora has updated drupal6-emfield (F23; F22: access bypass), firefox (F23: multiple vulnerabilities), git (F23: code execution), libotr (F23; F22: code execution), libvpx (F23: code execution), mod_auth_mellon (F23: denial of service), proftpd (F23; F22: weak key usage), webkitgtk3 (F23: multiple vulnerabilities), websvn (F23; F22: cross-site scripting), and xen (F23; F22: multiple vulnerabilities).
Gentoo has updated openssl (multiple vulnerabilities).
openSUSE has updated bind (13.2; 13.1; 11.4: two vulnerabilities), bsh2 (13.2: code execution), cgit (13.1; 11.4: code execution), Chromium (13.1: multiple vulnerabilities), git (13.1; 11.4: code execution), and rubygem-actionpack-3_2 (13.2: two vulnerabilities).
SUSE has updated bind (SLE11-SP2,3,4: two vulnerabilities), firefox (SLES10-SP4: multiple vulnerabilities), samba (SLE11-SP4: privilege escalation), tomcat (SLES12: multiple vulnerabilities), and tomcat6 (SLES11-SP4: multiple vulnerabilities).
At his blog, Alexander Larsson announces the release of version 0.5 of the GNOME xdg-app application sandboxing framework. The mailing list announcement provides a bit more detail on what is new, such as an API for creating graphical xdg-app front-ends, support for AppData metadata, and a new helper tool for those building app bundles. Larsson notes that his initial goals for the project were "make it possible for 3rd parties to create and distribute applications that work on multiple distributions" and "run applications with as little access as possible to the host. (For example access to the network or the users files.)" With the 0.5 release, he said, he considers the first goal met.
Debian has updated xen (multiple vulnerabilities).
Fedora has updated jenkins (F23; F22: multiple vulnerabilities), jenkins-remoting (F23; F22: multiple vulnerabilities), python-django (F23; F22: multiple vulnerabilities), rubygem-actionpack (F23; F22: code injection), and rubygem-actionview (F23; F22: code injection).
Scientific Linux has updated OpenAFS (SL 5,6,7: multiple vulnerabilities).
Slackware has updated mozilla-firefox (multiple vulnerabilities).
Ubuntu has updated pam (12.04: multiple vulnerabilities).
The information is unsurprising, since it has been strongly suspected for years, but its method of disclosure is rather amusing: Edward Snowden was the target when the US government went after the Lavabit email service. In the response to a request that the government unseal more documents in its case against him, Lavabit owner Ladar Levison got more than he bargained for—the target email address, Ed_Snowden@lavabit.com, was not redacted in one place, as WIRED reports. "WIRED spoke with Levison, prior to his learning that the government had made the redaction error, about his struggle to obtain transparency. 'Three years later, I still cannot tell you who they were after. I keep getting asked the question, and I can't answer.' Now, it appears he doesn't have to. The government has answered for him."
openSUSE has updated bsh2 (42.1: code execution), cgit (42.1, 13.2: two code execution flaws), git (42.1, 13.2: two code execution flaws), graphite2 (13.2: multiple vulnerabilities), and rubygem-actionview-4_2 (42.1: code execution).
Oracle has updated bind (OL5; OL6; OL7: two vulnerabilities), bind97 (OL5: two vulnerabilities), kernel (OL5: two vulnerabilities, one from 2013), and thunderbird (OL6; OL7: multiple vulnerabilities).
Ubuntu has updated pam (regression in earlier security update).
The LWN.net Weekly Edition for March 17, 2016 is available.
Greg Kroah Hartman has released stable kernels 4.4.6, 3.14.65, and 3.10.101. Each contains the usual set of important fixes.
No Starch Press recently released a book about working with automotive software systems: The Car Hacker's Handbook: A Guide for the Penetration Tester, written by Craig Smith. The book is an expansion of Smith's popular and widely circulated e-book of the same title. The old version remains available online at no cost, but there is considerably more content in the new revision—enough to make it a tempting purchase not just for automotive-software fans in general, but for those interested in embedded-device security and in reverse engineering other classes of consumer product.
The kernel's control-group mechanism allows processes to be divided into groups for the purposes of tracking and resource control. Both the API and underlying implementation of this mechanism have been going through considerable change in recent years. As part of that change, the newer control-group API has lost the ability to separately manage threads within a process, a loss that is not welcome in some quarters. Current work to replace that functionality is not finding an entirely warm reception either, though.
Debian has updated spip (two vulnerabilities).
Red Hat has updated kernel (RHEL5: two vulnerabilities), rh-php56-php (RHSCL: multiple vulnerabilities), rh-ror41-rubygem-actionview (RHSCL: two vulnerabilities), ror40 (RHSCL: multiple vulnerabilities), and ruby193 (RHSCL: multiple vulnerabilities).
SUSE has updated bind (SLE12: two vulnerabilities), graphite2 (SLE12-SP1: multiple vulnerabilities), java-1_6_0-ibm (SLES11-SP3; SLES10-SP4: multiple vulnerabilities), firefox, nspr, nss (SLE11-SP4: multiple vulnerabilities), sles11sp4-docker-image (SLEM12: multiple vulnerabilities), sles12-docker-image (SLEM12: multiple vulnerabilities), and kernel (SLE12: multiple vulnerabilities).
The CyanogenMod Android distribution has finally moved into the "Marshmallow" era with CM13.0 Release 1. "We left the M release builds in the oven longer than we thought, but nothing a little graham cracker and chocolate can’t make that much better. CM13.0 brings Android 6.0.1 (r17) goodies such as the battery saving ‘doze’ functionality and new permissions model, alongside the CM features you’d expect." Other changes include the removal of WhisperPush, the removal of the "quick unlock" feature, a switch to the standard Android messaging app, a new "Snap" camera app, and more.
HUP napi hírlevél
Legfrissebb HUP képek
Téglásítottál (brick) már el eszközt életedben (mobil, router, konzo, tablet stb.)?
Igen, de helyrehoztam.
Igen, de nem tudtam helyrehozni. Más helyrehozta.
Igen és helyrehozhatatlan lett.
Nem, de debrick-eltem más által eltéglásított eszközt.
Összes szavazat: 536