LWN.net's Journal
 
[Most Recent Entries] [Calendar View]

Thursday, May 12th, 2016

    Time Event
    12:55a
    [$] LWN.net Weekly Edition for May 12, 2016
    The LWN.net Weekly Edition for May 12, 2016 is available.
    4:44p
    Thursday's security advisories

    Debian-LTS has updated ocaml (code execution) and xerces-c (code execution).

    Fedora has updated kernel (F23: information leak), ntp (F22: multiple vulnerabilities), php (F22: multiple vulnerabilities), subversion (F23: two vulnerabilities), and xen (F23: two vulnerabilities).

    Mageia has updated libtasn1 (denial of service) and squid (two vulnerabilities).

    Oracle has updated pcre (OL7: multiple vulnerabilities).

    Red Hat has updated kernel (RHEL7: privilege escalation), kernel-rt (RHEL7; RHEL6: privilege escalation), and thunderbird (two vulnerabilities).

    Slackware has updated thunderbird (multiple vulnerabilities).

    SUSE has updated mysql (SLE11: multiple vulnerabilities), ntp (SLE11: multiple vulnerabilities), and php5 (SLE12: multiple vulnerabilities).

    Ubuntu has updated qemu, qemu-kvm (multiple vulnerabilities).

    10:29p
    Announcing Certbot: EFF's Client for Let's Encrypt
    The Electronic Frontier Foundation (EFF) has announced a new name and web site for the Let's Encrypt client. The Let's Encrypt project is a free certificate authority for TLS certificates that enable HTTPS for the web. The client, now called "Certbot", uses Automatic Certificate Management Environment (ACME) to talk to the Let's Encrypt CA, though it will no longer be the "official" client and there are other ACME clients that can be used.

    "Along with the rename, we've also launched a brand new website for Certbot, found at https://certbot.eff.org. The site includes frequently asked questions as well as links to how you can learn more and help support the project, but by far the biggest feature of the website is an interactive instruction tool. To get the specific commands you need to get Certbot up and running, just input your operating system and webserver. No more searching through pages and pages of documentation or Google search results!

    While a new name has the potential for creating technical issues, the Certbot team has worked hard to make this transition as seamless as possible. Packages installed from PyPI, letsencrypt-auto, and third party plugins should all continue to work and receive updates without modification. We expect OS packages to begin using the Certbot name in the next few weeks as well. On many systems, the current client packages will automatically transition to Certbot while continuing to support the letsencrypt command so you won't have to edit any scripts you're currently using.
    "

    << Previous Day 2016/05/12
    [Calendar]
    Next Day >>

LWN.net   About LJ.Rossia.org