Tuesday, May 7th, 2013

Time	Event
1:49p	Remote execution vulnerability in nginx The nginx web server suffers from a remotely exploitable buffer overflow that can lead to the execution of arbitrary code. Versions 1.4.1 and 1.5.0 contain the fix; there is also a workaround in the announcement. This seems like a good one to apply quickly. (Comment on this)
2:13p	A PyPy 2.0 alpha release for ARM The PyPy project has announced an alpha release of its Python interpreter for the ARM architecture. "This is the first release that supports a range of ARM devices - anything with ARMv6 (like the Raspberry Pi) or ARMv7 (like Beagleboard, Chromebook, Cubieboard, etc.) that supports VFPv3 should work." Benchmark results are included in the announcement; it seems that, in many cases, PyPy speeds things up on ARM even more than on the x86 architecture, even in its current, unpolished state. (Comment on this)
4:14p	[$] LFCS: The LLVMLinux project The Linux Foundation Collaboration Summit (LFCS) seems to be a likely venue for an update on the status of building the kernel with Clang/LLVM. Both in 2011 and 2012, we covered those updates. LFCS 2013 continued the trend as LLVMLinux project lead Behan Webster presented the status and plans for the project at LFCS. The gathering lived up to its name as well, since two problems faced by the project were solved through collaboration at the summit. (Comment on this)
4:48p	Tuesday's security updates Red Hat has updated subscription-manager (man-in-the-middle attack). Ubuntu has updated libxml2 (13.04: code execution) and mesa (12.04 LTS: code execution). (Comment on this)
8:04p	Garrett: A short introduction to TPMs Matthew Garrett has posted an introduction to the trusted platform module (TPM) chip and what can be done with it. "I've been working on TPMs lately. It turns out that they're moderately awful, but what's significantly more awful is basically all the existing documentation. So here's some of what I've learned, presented in the hope that it saves someone else some amount of misery." (Comment on this)

<< Previous Day

2013/05/07 [Calendar]

Next Day >>