Wednesday, March 16th, 2016

Time	Event
6:52a	The first CyanogenMod 13.0 release The CyanogenMod Android distribution has finally moved into the "Marshmallow" era with CM13.0 Release 1. "We left the M release builds in the oven longer than we thought, but nothing a little graham cracker and chocolate can’t make that much better. CM13.0 brings Android 6.0.1 (r17) goodies such as the battery saving ‘doze’ functionality and new permissions model, alongside the CM features you’d expect." Other changes include the removal of WhisperPush, the removal of the "quick unlock" feature, a switch to the standard Android messaging app, a new "Snap" camera app, and more. (Comment on this)
4:18p	Security advisories for Wednesday CentOS has updated samba (C7; C6: arbitrary file access) and samba4 (C6: arbitrary file access). Debian has updated spip (two vulnerabilities). Fedora has updated bind99 (F23: multiple vulnerabilities), firefox (F22: multiple vulnerabilities), and pcre (F22: denial of service). Oracle has updated kernel (OL5: two vulnerabilities), samba (OL7; OL6: arbitrary file access), and samba4 (OL6: arbitrary file access). Red Hat has updated kernel (RHEL5: two vulnerabilities), rh-php56-php (RHSCL: multiple vulnerabilities), rh-ror41-rubygem-actionview (RHSCL: two vulnerabilities), ror40 (RHSCL: multiple vulnerabilities), and ruby193 (RHSCL: multiple vulnerabilities). Scientific Linux has updated kernel (SL5: two vulnerabilities), samba (SL6,7: arbitrary file access), and samba4 (SL6: arbitrary file access). Slackware has updated git (code execution) and seamonkey (multiple vulnerabilities). SUSE has updated bind (SLE12: two vulnerabilities), graphite2 (SLE12-SP1: multiple vulnerabilities), java-1_6_0-ibm (SLES11-SP3; SLES10-SP4: multiple vulnerabilities), firefox, nspr, nss (SLE11-SP4: multiple vulnerabilities), sles11sp4-docker-image (SLEM12: multiple vulnerabilities), sles12-docker-image (SLEM12: multiple vulnerabilities), and kernel (SLE12: multiple vulnerabilities). Ubuntu has updated linux-raspi2 (15.10: multiple vulnerabilities) and pam (multiple vulnerabilities). (Comment on this)
4:24p	[$] Thread-level control with resource groups The kernel's control-group mechanism allows processes to be divided into groups for the purposes of tracking and resource control. Both the API and underlying implementation of this mechanism have been going through considerable change in recent years. As part of that change, the newer control-group API has lost the ability to separately manage threads within a process, a loss that is not welcome in some quarters. Current work to replace that functionality is not finding an entirely warm reception either, though. (Comment on this)
6:48p	[$] The Car Hacker's Handbook No Starch Press recently released a book about working with automotive software systems: The Car Hacker's Handbook: A Guide for the Penetration Tester, written by Craig Smith. The book is an expansion of Smith's popular and widely circulated e-book of the same title. The old version remains available online at no cost, but there is considerably more content in the new revision—enough to make it a tempting purchase not just for automotive-software fans in general, but for those interested in embedded-device security and in reverse engineering other classes of consumer product. (Comment on this)
8:21p	Stable kernel updates Greg Kroah Hartman has released stable kernels 4.4.6, 3.14.65, and 3.10.101. Each contains the usual set of important fixes. (Comment on this)

<< Previous Day

2016/03/16 [Calendar]

Next Day >>