LWN.net's Journal
 
[Most Recent Entries] [Calendar View]

Wednesday, December 16th, 2015

    Time Event
    3:30p
    [$] The PhotoFlow 0.2.5 release
    [Photoflow] The PhotoFlow image editor is a relative newcomer to the field of free-software photography tools. The project was started in 2014, and some people might consider it an odd choice of undertaking—given that there are, these days, quite a few capable raw-photo editors to choose from. But PhotoFlow does bring something new to the table.

    Click below (subscribers only) for the full review.

    5:53p
    Security advisories for Wednesday

    Arch Linux has updated bind (denial of service) and firefox (multiple vulnerabilities).

    CentOS has updated grub2 (C7: code execution).

    Debian has updated bind9 (denial of service) and cups-filters (command execution).

    Debian-LTS has updated pygments (shell injection).

    Fedora has updated kernel (F23; F22: multiple vulnerabilities) and seamonkey (F23; F22: multiple vulnerabilities).

    Oracle has updated grub2 (OL7: code execution) and kernel (OL6: multiple vulnerabilities).

    Scientific Linux has updated kernel (SL6: multiple vulnerabilities), libreoffice (SL6: multiple vulnerabilities), and openssl (SL6; SL5: multiple vulnerabilities).

    Slackware has updated bind (multiple vulnerabilities), libpng (two vulnerabilities), firefox (multiple vulnerabilities), and openssl (multiple vulnerabilities).

    Ubuntu has updated bind9 (denial of service), firefox (multiple vulnerabilities), git (code execution), and grub2 (code execution).

    7:56p
    [$] Ubuntu Touch, three years later
    [Overview screen] Back in early 2013, your editor dedicated a sacrificial handset to the testing of the then-new Ubuntu Touch distribution. At that time, things were so unbaked that the distribution came with mocked-up data for unready apps; it even came with a set of fake tweets. Nearly three years later, it seemed time to give Ubuntu Touch another try on another sacrificial device. This distribution has certainly made some progress in those years, but, sadly, it still seems far from being a competitive offering in this space.
    9:53p
    An authentication bypass issue in GRUB
    The GRUB bootloader (versions 1.98 to 2.02) has an
    integer underflow issue
    which can enable a local attacker to bypass
    authentication on a locked-down system. "Grub2 is the bootloader
    used by most Linux systems including some embedded systems. This results in
    an incalculable number of affected devices.
    "

    << Previous Day 2015/12/16
    [Calendar]
    Next Day >>

LWN.net   About LJ.Rossia.org