LWN.net's Journal
 
[Most Recent Entries] [Calendar View]

Tuesday, April 2nd, 2013

    Time Event
    3:04a
    McIntyre: Scanning for assembly code in Free Software packages
    On his blog, Steve McIntyre writes about work he has been doing to identify assembly code in Linux packages:
    In the Linaro Enterprise Group, my task for the last several weeks was to work through a huge number of packages looking for assembly code. Why? So that we could identify code that would need porting to work well on AArch64, the new 64-bit execution state coming to the ARM world Real Soon Now.

    Working with some Ubuntu and Fedora developers, we generated a list of packages included in each distribution that seemed to contain assembly code of some sort. Then I worked through that list, checking to see:

    1. if there was actually any assembly there;
    2. if so, what it was for, and
    3. whether it was actually used

    That work resulted in a report with his findings.

    4:29p
    Tuesday's security updates
    openSUSE has updated fail2ban (12.x; 11.4: unspecified vulnerability), openstack-keystone (revocation check bypass), and libxslt (12.x; 11.4: denial of service).

    Ubuntu has updated libxslt (denial of service) and poppler (multiple vulnerabilities).

    << Previous Day 2013/04/02
    [Calendar]
    Next Day >>

LWN.net   About LJ.Rossia.org