LWN.net's Journal
 
 [Most Recent Entries] [Calendar View]

Friday, November 21st, 2014

    Time Event
    4:07p
    Friday's security updates

    CentOS has updated libxml2 (C5: denial of service).

    Debian has updated drupal7 (multiple vulnerabilities).

    Fedora has updated kernel (F20: multiple vulnerabilities).

    Gentoo has updated adobe-flash (multiple vulnerabilities).

    Mageia has updated boinc-client (denial of service), ffmpeg (M3; M4: multiple vulnerabilities), hawtjni (M3: code execution), kdebase4-runtime, kwebkitpart (code execution), kdebase4-workspace (M4: privilege escalation), kdenetwork4 (M3: multiple vulnerabilities), kernel (M3; M4: multiple vulnerabilities), kernel-vserver (M3: multiple vulnerabilities), krb5 (ticket forgery), libvirt (information disclosure), php-smarty (M3; M4: code execution), privoxy (denial of service), python-djblets (M4: multiple vulnerabilities), python-imaging, python-pillow (multiple vulnerabilities), qemu (M4: multiple vulnerabilities), ruby (multiple vulnerabilities), srtp (M3: denial of service), and wireshark (multiple vulnerabilities).

    Mandriva has updated asterisk (BS1: multiple vulnerabilities).

    openSUSE has updated gnutls (multiple vulnerabilities) and libvirt (password leak).

    Oracle has updated bash (O5; O6; O7: multiple vulnerabilities), libvirt (O6: multiple vulnerabilities), libXfont (O6; O7: multiple vulnerabilities), libxml2 (O5: denial of service), mariadb (O7: multiple vulnerabilities), and mysql55-mysql (O5: multiple vulnerabilities).

    Red Hat has updated java-1.5.0-ibm (RHEL5,6: multiple vulnerabilities), java-1.7.0-ibm (RHEL6: multiple vulnerabilities), java-1.7.1-ibm (RHEL6,7: multiple vulnerabilities), and libxml2 (RHEL5: denial of service).

    Scientific Linux has updated libxml2 (SL5: denial of service).

    Ubuntu has updated apparmor (14.04: privilege escalation) and ruby1.8, ruby1.9.1, ruby2.0, ruby2.1 (12.04, 14.04, 14.10: denial of service).

    6:22p
    Version 2 of the kdbus patches posted
    The second version of the kdbus patches have been posted to the Linux kernel mailing list by
    Greg Kroah-Hartman. The biggest change since the original patch set (which
    we looked at in early November) is that
    kdbus now provides a filesystem-based interface (kdbusfs) rather than the
    /dev/kdbus device-based interface. There are lots of other
    changes in response to v1 review comments as well. "kdbus is a kernel-level IPC implementation that aims for resemblance to
    [the] protocol layer with the existing userspace D-Bus daemon while
    enabling some features that couldn't be implemented before in userspace.    "
    9:05p
    A Friday kernel collection

    Greg Kroah-Hartman has released three new stable kernels: 3.10.61, 3.14.25, and 3.17.4, each containing important updates and fixes.

    10:09p
    Introducing AcousticBrainz

    MusicBrainz, the not-for-profit project that maintains an assortment of "open content" music metadata databases, has announced a new effort named AcousticBrainz. AcousticBrainz is designed to be an open, crowd-sourced database cataloging various "audio features" of music, including "low-level spectral information such as tempo, and additional high level descriptors for genres, moods, keys, scales and much more." The data collected is more comprehensive than MusicBrainz's existing AcoustID database, which deals only with acoustic fingerprinting for song recognition. The new project is a partnership with the Music Technology Group at Universitat Pompeu Fabra, and uses that group's free-software toolkit Essentia to perform its acoustic analyses. A follow-up post digs into the AcousticBrainz analysis of the project's initial 650,000-track data set, including examinations of genre, mood, key, and other factors.

    << Previous Day 2014/11/21
    [Calendar]     		Next Day >>

LWN.net   About LJ.Rossia.org