LWN.net's Journal
 
[Most Recent Entries] [Calendar View]

Tuesday, September 2nd, 2014

    Time Event
    1:10p
    The first LuneOS release
    LuneOS is the new name for the mobile system once known as WebOS; the first release is available for brave testers now. "The main focus of LuneOS is to provide an operating system which is driven by the community and continues what we love(d) about webOS. We’re not trying to reach feature comparison with Android or iOS but rather building a system to satisfy basic needs in the mobile environment." The Nexus 4 and HP TouchPad appear to be the best devices for those wanting to try LuneOS out on real hardware.

    Clarification: LuneOS is not really a direct successor to webOS; it, instead, can be thought of as a sort of fork of the Open webOS project (managed by LG) focused on porting the system to other devices.

    6:16p
    Tuesday's security updates

    CentOS has updated glibc (C7; C6; C5: two vulnerabilities).

    Debian has updated lua5.1 (code execution), lua5.2 (code execution), and openjdk-7 (regression in previous update).

    Fedora has updated cas-client (F20: security constraints bypass), distcc (F20; F19: denial of service/possible code execution), gvfs (F20: file overwrite and device key access), httpcomponents-client (F20; F19: SSL server spoofing), ifuse (F20: file overwrite and device key access), kernel (F20: privilege escalation), libgpod (F20: file overwrite and device key access), libimobiledevice (F20: file overwrite and device key access), libplist (F20: file overwrite and device key access), libusbmuxd (F20: file overwrite and device key access), php (F20; F19: multiple vulnerabilities), pixman (F19: denial of service), ppp (F19: privilege escalation), smack (F20: man-in-the-middle attack), springframework-security (F20; F19: access control restrictions bypass), upower (F20: file overwrite and device key access), usbmuxd (F20: file overwrite and device key access), and zarafa (F20; F19: multiple vulnerabilities).

    Gentoo has updated chromium (multiple vulnerabilities), jinja (privilege escalation), net-snmp (multiple vulnerabilities), nrpe (code execution), openoffice-bin (multiple vulnerabilities), postgresql-server (multiple vulnerabilities), qemu (multiple vulnerabilities), stunnel (private key leak), and wireshark (multiple vulnerabilities).

    Mageia has updated blender (denial of service/possible code execution) and distcc (denial of service/possible code execution).

    Mandriva has updated bugzilla (BS1.0: cross-site request forgery), catfish (BS1.0: privilege escalation), dhcpcd (BS1.0: denial of service), file (BS1.0: denial of service), gpgme (BS1.0: code execution), jakarta-commons-httpclient (BS1.0: SSL server spoofing), krb5 (BS1.0: multiple vulnerabilities), libvncserver (BS1.0: denial of service/possible code execution), phpmyadmin (BS1.0: multiple vulnerabilities), python-imaging (BS1.0: denial of service), serf (BS1.0: information leak), and subversion (BS1.0: information leak).

    Oracle has updated glibc (OL7; OL6; OL5: two vulnerabilities).

    Red Hat has updated glibc (RHEL5,6,7: two vulnerabilities).

    Scientific Linux has updated glibc (SL5,6: two vulnerabilities).

    7:11p
    The GNOME Foundation's 2013 annual report
    The GNOME Foundation has put out its annual report for 2013 as a
    24-page PDF file
    . "As you will see when you read this annual
    report, there have been a lot of great things that have happened for the
    GNOME Foundation during this period. Two new companies joined our advisory
    board, the Linux Foundation and Private Internet Access. The work funded by
    our accessibility campaign was completed and we ran a successful campaign
    for privacy. During this period, there was a fantastic Board of Directors,
    a dedicated Engagement team (who worked so hard to put this report
    together), and the conference teams (GNOME.Asia, GUADEC and the Montreal
    Summit) knocked it out of the park. Most importantly, we’ve had an influx
    of contributors, more so than I’ve seen in some time.
    "
    7:12p
    [$] Supporting filesystems in persistent memory
    For a few years now, we have been told that upcoming non-volatile memory (NVM) devices are going to change how we use our systems. These devices provide large amounts (possibly terabytes) of memory that is persistent and that can be accessed at RAM speeds. Just what we will do with so much persistent memory is not entirely clear, but it is starting to come into focus. It seems that we'll run ordinary filesystems on it — but those filesystems will have to be tweaked to allow users to get full performance from NVM.

    Click below (subscribers only) for the full article from this week's Kernel Page.

    7:33p
    Firefox 32
    Firefox 32 has been released. This version adds new HTTP cache for
    improved performance and crash recovery, public key pinning support has
    been enabled, and much more. See the release
    notes
    for details.

    << Previous Day 2014/09/02
    [Calendar]
    Next Day >>

LWN.net   About LJ.Rossia.org