Friday, March 20th, 2015

Time	Event
3:39p	Friday's security updates Debian has updated openssl (multiple vulnerabilities). Fedora has updated csync2 (F20; F21: file checksum collision), duplicity (F20; F21: file checksum collision), librsync (F20; F21: file checksum collision), libssh2 (F21: denial of service), mapserver (F20; F21: code execution), php-ZendFramework2 (F22: cross-site forgery), and rdiff-backup (F20; F21: file checksum collision). Gentoo has updated openssl (multiple vulnerabilities). Mageia has updated openssl (M4: multiple vulnerabilities). openSUSE has updated krb5 (13.1, 13.2: multiple vulnerabilities). Oracle has updated kernel (O6; O7: multiple vulnerabilities). Red Hat has updated qpid (RHEL6 MRG; RHEL7 MRG: multiple vulnerabilities). SUSE has updated compat-openssl098 (SLEM-LS12; SLED12: multiple vulnerabilities) and openssl (SLE12: multiple vulnerabilities). Ubuntu has updated openssl (multiple vulnerabilities). (Comment on this)
10:09p	Snellman: On open sourcing existing code Juho Snellman has an interesting treatise on the oft-overlooked challenge that face developers attempting to release an existing, proprietary codebase under open-source terms. "As soon as you get outside of the "one self-contained file or directory" level of complexity, the threshold for releasing code becomes much higher. And likewise every change to a program that was made in order to open source it will make it less likely that the two versions can really be kept in sync in the long term. In this case the core code is maybe 2k-3k lines and won't require much work. It's all the support infrastructure that's going to be an issue." Snellman also reflects on possible strategies for writing internal code that may some day be released to the public. (Comment on this)

<< Previous Day

2015/03/20 [Calendar]

Next Day >>