LWN.net's Journal
[Most Recent Entries]
[Calendar View]
Thursday, January 7th, 2016
| Time |
Event |
| 2:20a |
[$] LWN.net Weekly Edition for January 7, 2016
The LWN.net Weekly Edition for January 7, 2016 is available. | | 1:54p |
Mozilla: Man-in-the-Middle Interfering with Increased Security Mozilla has
run into a hitch with its plans to deprecate SHA-1 certificates. " However, for Firefox users who are behind certain
'man-in-the-middle' devices (including some security scanners and antivirus
products), this change removed their ability to access HTTPS web sites.
When a user tries to connect to an HTTPS site, the man-in-the-middle device
sends Firefox a new SHA-1 certificate instead of the server’s real
certificate. Since Firefox rejects new SHA-1 certificates, it can’t
connect to the server." An update backing out the SHA-1 deprecation has been posted, but affected users will have to install it manually (assuming they don't use a distribution-supported version, of course). | | 2:50p |
Security updates for Thursday CentOS has updated thunderbird (C7; C6; C5: multiple vulnerabilities).
Fedora has updated libpng (F23:
two vulnerabilities).
openSUSE has updated grub2 (42.1:
code execution).
Red Hat has updated kernel
(RHEL6: two vulnerabilities).
Scientific Linux has updated thunderbird (multiple vulnerabilities).
Ubuntu has updated libpng (two
vulnerabilities) and pygments (code execution). | | 3:15p |
PostgreSQL 9.5 released
PostgreSQL 9.5 has been released
with lots of new features for the database management system, including
UPSERT, row-level security, and several "big data" features. We previewed
some of these features back in July and August. "A most-requested feature by application developers for several years,
'UPSERT' is shorthand for 'INSERT, ON CONFLICT UPDATE', allowing new
and updated rows to be treated the same. UPSERT simplifies web and
mobile application development by enabling the database to handle
conflicts between concurrent data changes. This feature also removes
the last significant barrier to migrating legacy MySQL applications to
PostgreSQL." |
|