Linux Weekly News

LWN.net is a comprehensive source of news and opinions from and about the Linux community. This is the main LWN.net feed, listing all articles which are posted to the site front page.

Webcím: http://lwn.net

Frissült: 41 másodperc

Thursday's security updates

cs, 2013-09-26 15:05

Debian has updated libvirt (denial of service).

Fedora has updated lightdm (F18; information disclosure), rtkit (F19; privilege escalation), and wordpress (F19; multiple vulnerabilities).

Gentoo has updated libvirt (multiple vulnerabilities), monkeyd (multiple vulnerabilities), and tpp (code execution).

Mandriva has updated kernel (multiple vulnerabilities).

Red Hat has updated openstack-keystone (incorrect token revocation).

Kategóriák: Linux

VLC media player 2.1.0 released

cs, 2013-09-26 08:36

Version 2.1.0 ("Rincewind") of the VLC media player is out. "With a new audio core, hardware decoding and encoding, port to mobile platforms, preparation for Ultra-HD video and a special care to support more formats, it is a major upgrade for VLC. Rincewind fixes around a thousand bugs, in more than 7000 commits from 140 volunteers."

Kategóriák: Linux

[$] LWN.net Weekly Edition for September 26, 2013

cs, 2013-09-26 01:51

The LWN.net Weekly Edition for September 26, 2013 is available.

Kategóriák: Linux

GNOME 3.10 Released

sze, 2013-09-25 20:23

The GNOME Project has announced the release of GNOME 3.10. Many components in this release have initial support for Wayland. See the release notes for details.

Kategóriák: Linux

Security advisories for Wednesday

sze, 2013-09-25 17:50

CentOS has updated rtkit (C6: authorization bypass).

Debian has updated pyopenssl (certificate spoofing).

Fedora has updated python-django (F19: multiple vulnerabilities) and python-django14 (F19: multiple vulnerabilities).

Gentoo has updated chromium (multiple vulnerabilities), libzrtpcpp (multiple vulnerabilities), moinmoin (multiple vulnerabilities), and proftpd (multiple vulnerabilities).

Mageia has updated libtiff (multiple vulnerabilities), perl-Crypt-DSA (improperly secure randomness), and polarssl (multiple vulnerabilities).

Mandriva has updated glpi (multiple vulnerabilities) and perl-Crypt-DSA (improperly secure randomness).

openSUSE has updated subversion (11.4: privilege escalation), tiff (11.4: multiple code execution flaws), and wireshark (11.4: multiple vulnerabilities).

Oracle has updated rtkit (OL6: authorization bypass).

Red Hat has updated puppet (RHOS3: multiple vulnerabilities), rtkit (RHEL6: authorization bypass), and ruby193-puppet (RHOS3: multiple vulnerabilities).

Scientific Linux has updated rtkit (SL6: authorization bypass).

Ubuntu has updated python-django (multiple vulnerabilities) and samba (denial of service).

Kategóriák: Linux

GStreamer 1.2 released

sze, 2013-09-25 02:00

Version 1.2 of the GStreamer multimedia framework has been released. Packages for GStreamer Core and GStreamer Plugins are available. The 1.2 release is API- and ABI-backwards-compatible with GStreamer 1.0, however there are several new features introduced. Several new plugins are included, including support for DASH adaptive streaming, JPEG2000 images, VP9 and Daala video, and decoding-only support for WebP. There is also a new command-line playback tool called gst-play-1.0 (designed for testing purposes), as well as numerous bugfixes and improvements.

Kategóriák: Linux

[$] A perf ABI fix

k, 2013-09-24 19:14

It is often said that the kernel developers are committed to avoiding ABI breaks at almost any cost. But ABI problems can, at times, be hard to avoid. Some have argued that the perf events interface is particularly subject to incompatible ABI changes because the perf tool is part of the kernel tree itself; since perf can evolve with the kernel, there is a possibility that developers might not even notice a break. So the recent discovery of a perf ABI issue is worth looking at as an example of how compatibility problems are handled in that code.

Kategóriák: Linux

Tuesday's security updates

k, 2013-09-24 17:07

Debian has updated icedove (multiple vulnerabilities).

Fedora has updated proftpd (F18; F19: denial of service).

Gentoo has updated apache (multiple vulnerabilities) and subversion (multiple vulnerabilities).

openSUSE has updated tiff (multiple vulnerabilities) and wireshark (multiple vulnerabilities).

Ubuntu has updated libraw (denial of service) and pyopenssl (certificate spoofing).

Kategóriák: Linux

NVIDIA to provide documentation for Nouveau

k, 2013-09-24 08:12

Nouveau is the reverse-engineered driver for NVIDIA GPUs; it has been developed for a number of years with no assistance from NVIDIA. Now, though, an NVIDIA developer has surfaced on the Nouveau list with an offer to help: "NVIDIA is releasing public documentation on certain aspects of our GPUs, with the intent to address areas that impact the out-of-the-box usability of NVIDIA GPUs with Nouveau. We intend to provide more documentation over time, and guidance in additional areas as we are able." This would appear to be a big step in the right direction.

Kategóriák: Linux

Kernel prepatch 3.12-rc2

k, 2013-09-24 08:01

The second 3.12 kernel prepatch is out. Linus said: "Things have been fairly quiet, probably because lots of people were traveling for LinuxCon and Linux Plumbers conference last week. So nothing very exciting stands out. It's mainly driver updates/fixes (gpu drivers stand out, but there's networking too, and smaller stuff all over). Apart from drivers there's arch updates (tile/arm/mips) and some filesystem noise (mainly btrfs)."

Kategóriák: Linux

Valve launches SteamOS

h, 2013-09-23 18:39

Valve has announced the launch of a new gaming-oriented operating system. "As we’ve been working on bringing Steam to the living room, we’ve come to the conclusion that the environment best suited to delivering value to customers is an operating system built around Steam itself. SteamOS combines the rock-solid architecture of Linux with a gaming experience built for the big screen. It will be available soon as a free stand-alone operating system for living room machines." There is little in the way of details available at this time.

Kategóriák: Linux

Garrett: Implementing UEFI Boot to Zork

h, 2013-09-23 18:39

Matthew Garrett has finally implemented what we all really wanted in the first place: direct boot into the Zork game from UEFI. "But despite having a set of functionality that makes it look much more like an OS than a boot environment, UEFI doesn't actually expose a standard C library. The EFI Application Development Kit solves this particular design decision."

Kategóriák: Linux

Security advisories for Monday

h, 2013-09-23 17:15

Fedora has updated firefox (F19: multiple vulnerabilities), glpi (F19; F18: multiple vulnerabilities), hplip (F19: authorization bypass), icedtea-web (F19: code execution), kernel (F18: privilege escalation), mediawiki (F18; F19: multiple vulnerabilities), moodle (F19; F18: man-in-the-middle attack), polarssl (19; F18: denial of service), polkit (F19; F18: privilege escalation), pyOpenSSL (F19; F18: certificate spoofing), rubygems (F18; F19: denial of service), systemd (F18; F19: authorization bypass), tinyproxy (F19: access restriction bypass), and xulrunner (F19: multiple vulnerabilities).

SUSE has updated kernel (SLE 11 SP3; SLE 11 SP2: multiple vulnerabilities).

Kategóriák: Linux

Ten years of Fedora

h, 2013-09-23 09:19

It has been ten years since Michael K. Johnson announced: "Red Hat and Fedora Linux are pleased to announce an alignment of their mutually complementary core proficiencies leveraging them synergistically in the creation of the Fedora Project, a paradigm shift for Linux technology development and rolling early deployment models." One decade and nearly twenty releases later, Fedora has clearly accomplished quite a bit; it will be interesting to see what the next ten years will bring.

Kategóriák: Linux

Security advisories for Friday

p, 2013-09-20 17:46

CentOS has updated hplip (C6: authorization bypass), libvirt (C6: multiple vulnerabilities), polkit (C6: privilege escalation), and spice-gtk (C6: authorization bypass).

Debian has updated puppet (multiple vulnerabilities).

Fedora has updated hplip (F19: authorization bypass).

Mageia has updated glpi (multiple vulnerabilities).

Oracle has updated hplip (OL6: authorization bypass), libvirt (OL6: multiple vulnerabilities), polkit (OL6: privilege escalation), and spice-gtk (OL6: authorization bypass).

Red Hat has updated hplip (RHEL6: authorization bypass), libvirt (RHEL6: multiple vulnerabilities), polkit (RHEL6: privilege escalation), and spice-gtk (RHEL6: authorization bypass).

Scientific Linux has updated hplip (SL6: authorization bypass), libvirt (SL6: multiple vulnerabilities), polkit (SL6: privilege escalation), and spice-gtk (SL6: authorization bypass).

Kategóriák: Linux

Tails 0.20.1

p, 2013-09-20 00:04

The Amnesic Incognito Live System (Tails) has announced the release of Tails 0.20.1 which fixes numerous security issues. All users should upgrade as soon as possible.

Kategóriák: Linux

openSUSE 13.1 Beta 1 ready

cs, 2013-09-19 18:31

OpenSUSE 13.1 Beta 1 is ready for testing. "It's pretty solid as it received an extra amount of automated checks via openQA. Nevertheless there's still quite some work to be done to get the quality we need for the final release. So please help testing and file bug reports!"

Kategóriák: Linux

Thursday's security updates

cs, 2013-09-19 18:07

Fedora has updated kernel (F19: privilege escalation) and xen (F18; F19: privilege escalation).

Mageia has updated freeswitch (code execution), lightdm (information leak), moodle (sql injection), python-django (MG2; MG3: directory traversal), wireshark (MG2; MG3: multiple vulnerabilities), wordpress (multiple vulnerabilities), and firefox, thunderbird (multiple vulnerabilities).

Mandriva has updated wireshark (multiple vulnerabilities) and wordpress (multiple vulnerabilities).

Oracle has updated firefox (OL5: multiple vulnerabilities).

Ubuntu has updated apt-xapian-index (authorization bypass), hplip (authorization bypass), jockey (authorization bypass), language-selector (authorization bypass), libvirt (multiple vulnerabilities), policykit-1 (privilege escalation), rtkit (authorization bypass), software-properties (authorization bypass), systemd (authorization bypass), thunderbird (multiple vulnerabilities), ubuntu-system-service (authorization bypass), and usb-creator (authorization bypass).

Kategóriák: Linux

[$] LWN.net Weekly Edition for September 19, 2013

cs, 2013-09-19 01:25

The LWN.net Weekly Edition for September 19, 2013 is available.

Kategóriák: Linux

[$] Asteroid "mining" with Linux and FOSS

sze, 2013-09-18 23:23

Planetary Resources is a company with a sky-high (some might claim "pie in the sky") goal: to find and mine asteroids for useful minerals and other compounds. It is also a company that uses Linux and lots of free software. So two of the engineers from Planetary Resources, Ray Ramadorai and Marc Allen, gave a presentation at LinuxCon North America to describe how and why the company uses FOSS—along with a bit about what it is trying to do overall. Subscribers can read the full account of the talk from this week's edition.

Kategóriák: Linux