LWN.net's Journal
 
 [Most Recent Entries] [Calendar View]

Monday, June 27th, 2016

    Time Event
    2:57a
    Kernel prepatch 4.7-rc5
    The 4.7-rc5 kernel prepatch is out.
    "I think things are calming down, although with almost two thirds
    of the commits coming in since Friday morning, it doesn't feel that
    way - my Fridays end up feeling very busy. But looking at the numbers,
    we're pretty much where we normally are at this time of the rc
    series.    "
    5:33p
    Security updates for Monday

    Arch Linux has updated chromium (multiple vulnerabilities), libdwarf (multiple vulnerabilities), libpurple (multiple vulnerabilities), phpmyadmin (multiple vulnerabilities), vlc (code execution), and xerces-c (code execution).

    Debian has updated libpdfbox-java (XML External Entity (XXE) attacks).

    Debian-LTS has updated gimp (use-after-free), java-common (OpenJDK 6 no longer supported), libcommons-fileupload-java (denial of service), mysql-connector-java (information disclosure), nss (denial of service), and tomcat7 (denial of service).

    Fedora has updated drupal7 (F24: privilege escalation), mirrormanager (F24; F23; F22: unspecified), optipng (F23: code execution), python (F23: man-in-the-middle attack), and qemu (F24: multiple vulnerabilities).

    Gentoo has updated claws-mail (multiple vulnerabilities), freexl (multiple vulnerabilities), hostapd (multiple vulnerabilities), imagemagick (multiple vulnerabilities), libssh (multiple vulnerabilities), plib (code execution from 2011), and sudo (privilege escalation).

    openSUSE has updated libarchive (13.2: denial of service), libav (Leap42.1: two vulnerabilities), libtasn1 (Leap42.1: denial of service), libtorrent-rasterbar (13.1: denial of service), mariadb (Leap42.1: multiple vulnerabilities), p7zip (Leap42.1: code execution), php5 (Leap42.1: multiple vulnerabilities), and rsync (Leap42.1: unsafe destination path).

    Oracle has updated kernel 2.6.32 (OL6; OL5: privilege escalation).

    Red Hat has updated kernel-rt (RHEMRG2.5: multiple vulnerabilities).

    Scientific Linux has updated kernel (SL7: two vulnerabilities).

    Slackware has updated php (multiple vulnerabilities).

    9:25p
    Open Source Projects as part of MOSS “Mission Partners” Program
    The Mozilla blog has announced
    the first recipients of its Mozilla Open Source Support (MOSS) “Mission
    Partners” awards. "For many years people with visual impairments and
    the legally blind have paid a steep price to access the Web on
    Windows-based computers. The market-leading software for screen readers
    costs well over $1,000. The high price is a considerable obstacle to
    keeping the Web open and accessible to all. The NVDA Project has developed an open
    source screen reader that is free to download and to use, and which works
    well with Firefox. NVDA aligns with one of the Mozilla
    Manifesto’s     principles: “The Internet is a global public resource that
    must remain open and accessible.”    " The NVDA project received
    $15,000. Other award recipients include Tor, Tails, Caddy, Mio, DNSSEC/DANE Chain Stapling, Godot Engine, and PeARS. (Thanks to Paul Wise)
    10:36p
    Project Triforce: Run AFL on Everything!
    The developers of "Project Triforce," an effort to run the "american fuzzy
    lop" fuzz-testing tool in a system-wide manner, have posted a
    detailed description     of what they are up to.
    "AFL is an awesome tool. The power of an easy to use, feedback-driven
    fuzzer has produced an absolutely staggering number of bugs. Still, at
    first AFL required being able to build the executable, something sadly not
    available on a lot of targets. With the addition of AFL's qemu_mode, it
    became possible to fuzz binaries without source, exposing a whole new world
    of targets to AFL. I'd been on a number of Linux container engagements
    recently where we'd managed to escape through kernel exploits. I fell
    asleep one night to several AFL screens running, and I awoke suddenly with
    a crazy idea: 'Run AFL on the Linux Kernel.'    "
    10:58p
    Reding: What's new for Tegra in Linux v4.7
    Thierry Reding looks
    at Tegra support     in Linux 4.7. "The XUSB driver has been
    under development for a ridiculously long time. One of the reasons is that
    it relies on the XUSB pad controller to configure its pins as required by
    the board design. The XUSB pad controller is very likely one of the
    least-intuitive pieces of hardware I've ever encountered, and the attempts
    to come up with a device tree binding to describe it have been very
    numerous. We did finally settle on something earlier this year and after
    the existing code was updated for the new binding, we're finally able to
    support super-speed USB on Tegra124 and later.    " (Thanks to Martin Michlmayr)

    << Previous Day 2016/06/27
    [Calendar]     		Next Day >>

LWN.net   About LJ.Rossia.org