Friday, January 23rd, 2015

Time	Event
3:35p	Friday's security updates CentOS has updated jasper (C6: multiple vulnerabilities). openSUSE has updated dbus-1 (13.1, 13.2: multiple vulnerabilities), elfutils (13.1, 13.2: directory traversal), flash-player (13.1, 13.2: memory randomization circumvention), otrs (13.1, 13.2: authentication bypass), roundcubemail (13.2: cross-site request forgery), strongswan (13.1, 13.2: denial of service), and wireshark (13.1, 13.2: multiple vulnerabilities). Oracle has updated jasper (O6; O7: multiple vulnerabilities). Red Hat has updated jasper (RHEL6,7: multiple vulnerabilities), java-1.7.0-oracle (multiple vulnerabilities), and java-1.8.0-oracle (RHEL6: multiple vulnerabilities). Scientific Linux has updated jasper (SL6,7: multiple vulnerabilities). SUSE has updated flash-player (memory randomization circumvention) and rpm (SLE12: multiple vulnerabilities). Ubuntu has updated elfutils (directory traversal), mysql-5.5 (12.04, 14.04, 14.10): multiple vulnerabilities, and samba (14.04, 14.10: privilege escalation). (Comment on this)
11:38p	New open source dependency manager on the scene (Opensource.com) At Opensource.com, Jordi Mon introduces the biicode project, an open-source dependency-management system for C and C++ applications that is akin to Ruby Gems or the Python Package Index. It is a challenging goal, he says, "because there are approximately 4 million C/C++ developers, and both languages represent up to almost 20% of the world's code." The project was started as a proprietary service, and only recently transitioned into an open-source project. (Comment on this)

<< Previous Day

2015/01/23 [Calendar]

Next Day >>