Friday, July 31st, 2015

Time	Event
3:28p	Friday's security updates CentOS has updated java-1.6.0-openjdk (C5; C7: multiple vulnerabilities). Debian has updated openafs (multiple vulnerabilities) and xmltooling (denial of service). Fedora has updated libuser (F22: multiple vulnerabilities), openssh (F22: authentication limits bypass; F22: improper output filtering), and xrdp (F22: denial of service). Mageia has updated groovy (M4, M5: code execution). openSUSE has updated bind (11.4: multiple vulnerabilities) and openldap2 (13.1, 13.2: multiple vulnerabilities). Oracle has updated java-1.6.0-openjdk (O6; O7: ). Red Hat has updated java-1.6.0-openjdk (multiple vulnerabilities). Scientific Linux has updated openafs (multiple vulnerabilities). SUSE has updated bind (SLES 10: denial of service), java-1_7_0-openjdk (SLE 11; SLE 12: multiple vulnerabilities), java-1_7_1-ibm (SLE 11; SLE 12: multiple vulnerabilities), and kernel (SLE 12: multiple vulnerabilities). Ubuntu has updated hplip (12.04, 14.04, 15.04: man-in-the-middle attack), kernel (14.04: multiple vulnerabilities), linux-lts-trusty (12.04: multiple vulnerabilities), and sqlite3 (12.04, 14.04, 15.04: multiple vulnerabilities). (Comment on this)
3:45p	A leadership change at FFmpeg FFmpeg leader Michael Niedermayer has announced his departure from the project. "I hope my resignation will make it easier for the teams to find back together and avoid a more complete split which would otherwise be the result sooner or later as the trees diverge and merging all improvements becomes too difficult for me to do." (Comment on this)
9:50p	Mozilla criticizes browser-selection change in Windows Mozilla has launched a multi-pronged campaign to challenge a recent change in Windows that has the effect of overriding users' choice of Firefox as the default web browser. Mozilla CEO Chris Beard posted a blog entry outlining the problem as well as an open letter to Microsoft CEO Satya Nadella. The change apparently landed with the recent Windows 10 release and, as Beard explains it, "while it is technically possible for people to preserve their previous settings and defaults, the design of the new Windows 10 upgrade experience and user interface does not make this obvious nor easy." Mozilla has also posted tutorials and videos to help users restore Firefox as their default browser. (Comment on this)
10:10p	OpenSSL: License Agreements and Changes Are Coming At the OpenSSL blog, Rich Salz has announced the project's decision to migrate away from the "rather unique and idiosyncratic" OpenSSL license to the Apache 2.0 license. In order to make the change in an upcoming release, though, the project "will soon require almost every contributor to have a signed a Contributor License Agreement (CLA) on file." Individual and corporate versions of the CLA are posted; trivial patches will evidently not trigger the need for the submitter to sign and file an agreement. Salz closes by noting that more details are still to come, since "there is a lot of grunt work needed to clean up the backlog and untangle all the years of work from the time when nobody paid much attention to this sort of detail." (Comment on this)

<< Previous Day

2015/07/31 [Calendar]

Next Day >>