LWN.net's Journal
 
[Most Recent Entries] [Calendar View]

Monday, June 23rd, 2014

    Time Event
    5:01p
    Security advisories for Monday

    Debian has updated iodine (authentication bypass), samba (multiple vulnerabilities), and tiff (code execution).

    Fedora has updated kernel (F19: privilege escalation), python-jinja2 (F20; F19: code execution), and rb_libtorrent (F20: stop UPNP from opening port 0).

    Gentoo has updated curl (two vulnerabilities), nginx (code execution), and nss (multiple vulnerabilities).

    Mageia has updated ansible (MG4: insecure evaluation function), kernel (MG3: multiple vulnerabilities), pdns (denial of service), sendmail (denial of service), and smb4k (credential cache leak).

    SUSE has updated firefox (SLE11 SP3, SLES10 SP3 LTSS: multiple vulnerabilities).

    Ubuntu has updated libreoffice (14.04 LTS: unexpected VBA macro execution), php5 (multiple vulnerabilities), and openssl (regression in previous update).

    7:36p
    [$] Questioning EXPORT_SYMBOL_GPL()
    There have been arguments about the legality of binary-only kernel modules
    for almost as long as the kernel has had loadable module support. One of
    the key
    factors in this disagreement is the EXPORT_SYMBOL_GPL() directive,
    which is intended to keep certain kernel functions out of the reach of
    proprietary modules. A recent discussion about the merging of a proposed
    new kernel subsystem has revived some questions about the meaning and value
    of EXPORT_SYMBOL_GPL() — and whether it is worth bothering with at
    all.
    8:29p
    Steps to diversity in your open source group (Opensource.com)
    Opensource.com covers a talk
    by Coraline Ehmke
    about diversity in open source. "She came at the topic from the angle of diversity as a value of the culture of our groups. By now we've heard from many open source thought leaders on why we need diversity in open source—arguments mainly center around the more people of the greater population that we include in our groups, and make feel welcome to our groups, the better our results will be. Why? Coraline points to a study indicating that groupthinking is a real thing—we tend to agree with and value the things that are said and done by other people that are simply like us. So, the presence of someone different in our group increases accuracy by reducing knee-jerk agreements."

    << Previous Day 2014/06/23
    [Calendar]
    Next Day >>

LWN.net   About LJ.Rossia.org