Wednesday, September 16th, 2015

Time	Event
4:41p	Security advisories for Wednesday CentOS has updated kernel (C7: multiple vulnerabilities). Debian has updated icu (denial of service). Fedora has updated moodle (F22; F21: multiple vulnerabilities). Oracle has updated kernel (OL7: multiple vulnerabilities) and qemu-kvm (OL7: information leak). Red Hat has updated kernel (RHEL7: multiple vulnerabilities), kernel-rt (RHEL7; RHEMRG: multiple vulnerabilities), and qemu-kvm (RHEL7: information leak). Scientific Linux has updated kernel (SL7: multiple vulnerabilities) and qemu-kvm (SL7: information leak). (Comment on this)
5:26p	[$] Python and crypto-strength random numbers by default There are various types of random number generators (RNGs) that target different use cases, but a programming language can only have one default. For high-security random numbers (e.g. cryptographic keys and the like), it is a grievous error to use the wrong kind of RNG, while other use cases are typically more forgiving. The Python community is in the middle of a debate about how it should be handling random numbers within the language's standard library. Click below (subscribers only) for the full report. (Comment on this)
7:09p	Library’s Tor relay now restored (Ars Technica) Last week we reported that the Kilton Public Library in Lebanon, New Hampshire suspended its Tor node deployment due to criticism by the local police department. Ars Technica now reports that the Tor relay has been restored. "As Ars reported earlier, the goal of the Library Freedom Project is to set up Tor exit relays in as many of these ubiquitous public institutions as possible. As of now, only about 1,000 exit relays exist worldwide. If this plan is successful, it could vastly increase the scope and speed of the famed anonymizing network. For now, Kilton has a middle relay but has plans to convert it to an exit relay. A middle relay passes traffic to another relay before departing the Tor network on the exit relay." (Comment on this)
7:59p	[$] How Debian managed the systemd transition Debian's decision to move to systemd as the default init system was a famously contentious (and rather public) debate. Once all the chaos regarding the decision itself had died down, however, it was left to project members to implement the change. At DebConf 2015 in Heidelberg, Martin Pitt and Michael Biebl gave a down-to-earth talk about how that implementation work had gone and what was still ahead. (Comment on this)

<< Previous Day

2015/09/16 [Calendar]

Next Day >>