LWN.net's Journal
 
[Most Recent Entries] [Calendar View]

Tuesday, January 21st, 2014

    Time Event
    1:14a
    [$] A Debian init system update
    When LWN last looked at the Debian Project's
    init system debate
    , the issue had just been referred to the project's
    Technical Committee for resolution. The hope was that a ruling from the
    committee would bring to an end a debate which has been long and
    acrimonious, even by Debian's standards. The committee has yet to call a
    vote as of this writing, but the early signs suggest that the project may
    not get the clear answer it was hoping for.
    3:36p
    Fedora Workstation proposal: ease installation of non-free software
    The Fedora Workstation working group has come out with a proposal to ease
    Fedora's traditional "see no evil" approach to non-free software in the
    hope of making the distribution appealing to a wider group of users.
    "In order to keep with the Fedora policy of only shipping free
    software we will only make available 3rd party software that offers their
    own repository for their software. Examples here include Google Chrome and
    Adobe Acrobat.
    "
    4:30p
    Deadline scheduler merged for 3.14
    After years of development, the deadline
    scheduling class
    has finally been merged for the 3.14 kernel. This
    class allows processes to declare an amount of work needing to be done and
    a deadline by which it must happen; with care, it can guarantee that all
    processes will meet their deadlines. It has applications in the realtime
    world, in streaming media processing, and elsewhere.
    5:47p
    Security advisories for Tuesday

    CentOS has updated augeas (C6: world writable config files) and bind (C6: denial of service).

    Debian has updated drupal7 (multiple vulnerabilities).

    Fedora has updated libvirt (F20: denial of service), nss (F20: information disclosure), nss-softokn (F20: information disclosure), nss-util (F20: information disclosure), and rubygem-will_paginate (F19; F20: cross-site scripting).

    Gentoo has updated asterisk (multiple vulnerabilities).

    Mageia has updated cups (information disclosure), elinks (does not properly verify SSL certificates), java-1.7.0-openjdk (multiple vulnerabilities), libxfont (privilege escalation), memcached (multiple vulnerabilities), net-snmp (denial of service), nss (information disclosure), ruby-i18n (cross-site scripting), spice (denial of service), x11-server (code execution), and zabbix (multiple vulnerabilities).

    Mandriva has updated java-1.7.0-openjdk (multiple vulnerabilities), libxfont (privilege escalation), and nss (information disclosure).

    openSUSE has updated quassel (13.1: information leak).

    Oracle has updated augeas (OL6: world writable config files) and bind (OL6: denial of service).

    Red Hat has updated augeas (RHEL6: world writable config files) and bind (RHEL6: denial of service).

    Scientific Linux has updated augeas (SL6: world writable config files) and bind (SL6: denial of service).

    Ubuntu has updated devscripts (code execution), hplip (multiple vulnerabilities), and mysql-5.5, mysql-dfsg-5.1 (multiple vulnerabilities).

    << Previous Day 2014/01/21
    [Calendar]
    Next Day >>

LWN.net   About LJ.Rossia.org