LWN.net's Journal
 
 [Most Recent Entries] [Calendar View]

Monday, April 18th, 2016

    Time Event
    11:17a
    Kernel prepatch 4.6-rc4
    The 4.6-rc4 kernel prepatch is out for testing.
    "So there really isn't anything particularly interesting here. Just
    like I like it in the rc series. Let's hope it stays that way.    "
    11:50a
    [$] Maru: a pocket desktop
    It appears to be widely accepted that the Linux desktop has achieved
    limited success at best, while the Linux palmtop — in the form of
    Android — has been wildly successful. The two classes of systems are
    generally thought of as being quite different, but it is worth remembering
    that the handsets we carry now have more computing power than the desktop
    systems we were using in the recent past. Given the right peripherals, an
    Android handset should be more than capable of providing a reasonable
    desktop experience. The Maru
    distribution     is an experiment intended to prove that point by turning a
    smartphone device into a portable Debian desktop.
    1:14p
    How Badlock was discovered and fixed
    This
    post on the Red Hat Enterprise Linux blog     describes the discovery and
    repair of the "Badlock" vulnerability. One begins to understand a little
    better why it took as long as it did. "The code was rewritten; in
    March 2016 the changes needed to fix all eight CVEs amounted to about 200
    individual patches against a development version of Samba, with about half
    of those responsible for fixing CVE-2015-5370. When backported to previous
    stable Samba versions, they needed additional hundred patches. To oldest
    supported Samba version — about four hundred patches. What started as an
    individual snowflake became an avalanche but it wasn’t finished
    yet.    "
    4:36p
    Security updates for Monday

    Arch Linux has updated chromium (multiple vulnerabilities) and libtasn1 (denial of service).

    Debian has updated fuseiso (two vulnerabilities), openssh (privilege escalation), and tomcat7 (multiple vulnerabilities).

    Fedora has updated firefox (F23: multiple vulnerabilities) and xerces-c (F22: code execution).

    openSUSE has updated Chromium (Leap42.1; 13.1: multiple vulnerabilities), gcc5 (Leap42.1: predictable random values), krb5 (Leap42.1: null pointer dereference), mercurial (Leap42.1: three vulnerabilities), optipng (Leap42.1; 13.2: three vulnerabilities), perl-YAML-LibYAML (Leap42.1: three vulnerabilities, one from 2013), samba (13.2: multiple vulnerabilities), and tiff (13.2: denial of service).

    Red Hat has updated chromium-browser (RHEL6: multiple vulnerabilities).

    Slackware has updated thunderbird (multiple vulnerabilities) and samba (multiple vulnerabilities).

    SUSE has updated Chromium (SPH for SLE12: multiple vulnerabilities) and openssl (SOSC5&SM2.1: multiple vulnerabilities).

    Ubuntu has updated optipng (multiple vulnerabilities) and samba (multiple vulnerabilities).

    10:01p
    Garrett: Remembering David MacKay
    Matthew Garrett remembers
    David MacKay    , shortly after his passing. "I was already aware of
    the importance of free software in terms of developers, but working with
    David made it clear to me how important it was to users as well. A
    community formed around Dasher, helping us improve it and allowing us to
    develop support for new use cases that made the difference between someone
    being able to type at two words per minute and being able to manage
    twenty. David saw that this collaborative development would be vital to
    creating something bigger than his original ideas, and it succeeded in ways
    he couldn't have hoped for.    " (Thanks to Paul Wise)

    << Previous Day 2016/04/18
    [Calendar]     		Next Day >>

LWN.net   About LJ.Rossia.org