LWN.net's Journal
 
[Most Recent Entries] [Calendar View]

Thursday, May 29th, 2014

    Time Event
    12:08p
    Git 2.0.0 released
    Version 2.0.0 of the Git source code management system is available. See
    What to expect in Git 2.0 for an overview
    of new features; there is also an extensive set of release notes in the
    announcement.
    2:01p
    A Core Infrastructure Initiative announcement
    The Linux Foundation has put out a
    press release
    describing the evolution of its new "Core Infrastructure
    Initiative," which directs funding to developers of projects deemed to be
    both critical and short of resources. The first projects to be funded will
    be OpenSSL, OpenSSH, and the network time protocol (NTP) implementation.
    The steering committee for the initiative has been picked; it includes Alan
    Cox, Eben Moglen, Bruce Schneier, and Ted Ts'o. And a few more companies
    (Adobe, Bloomberg, HP, Huawei and salesforce.com) have added their support
    to the program.
    2:31p
    Security advisories for Thursday

    Fedora has updated libpng (F20: two denial of service flaws), libtiff (F20: code execution), openstack-neutron (F20: access restriction bypass), and php-ZendFramework2 (F20; F19: multiple vulnerabilities).

    Mageia has updated cifs-utils (code execution), libvirt (two vulnerabilities), mono (M3: denial of service from 2012), qt4 (M3: denial of service), and qt4 and qtbase5 (M4: denial of service).

    openSUSE has updated libgadu (two vulnerabilities).

    SUSE has updated firefox (SLE10SP4; SLE10SP3: multiple vulnerabilities) and IBM Java 6 (SLE11SP2: multiple vulnerabilities).

    9:50p
    [$] PyPI, pip, and external repositories

    A debate about Python modules—and where and how they are hosted—raged in early May on two separate Python mailing lists. There are a number of interrelated issues that make up the debate, but the core question seems to be: should the now-default pip package manager treat the "official" module repository differently than other repositories? Some see "external modules"—those not hosted at the Python Package Index (PyPI)—as a potential reliability problem, while others don't see much difference between external and PyPI-hosted modules.

    Subscribers can click below for a look at the discussion from this week's edition.

    << Previous Day 2014/05/29
    [Calendar]
    Next Day >>

LWN.net   About LJ.Rossia.org