LWN.net's Journal
[Most Recent Entries]
[Calendar View]
Tuesday, August 9th, 2016
| Time |
Event |
| 2:32p |
Christoph Hellwig's case against VMware dismissed The GPL-infringement case brought against VMware by Christoph Hellwig in Germany has been dismissed by the court; the ruling is available in Germanand English. The decision seems to be based entirely on uncertainty over where his copyrights actually lie and not on the infringement claims. " Nonetheless, these questions (on which the legal interest of the
parties and their counsel presumably focus) can and must remain
unanswered. This is because the very first requirement for conducting an
examination, namely that code possibly protected for the Plaintiff as a
holder of adapter’s copyright has been used in the Defendant’s product,
cannot be established. " The ruling will be
appealed. | | 4:36p |
Security advisories for Tuesday Arch Linux has updated curl (three vulnerabilities).
Debian has updated chromium-browser (multiple vulnerabilities) and fontconfig (privilege escalation).
Debian-LTS has updated libreoffice (code execution) and python-django (rebase to 1.4.x).
Fedora has updated bind99 (F23:
denial of service), ca-certificates (F23:
certificate update), dhcp (F23: denial of
service), dnsmasq (F23: denial of service),
flex (F24: buffer overflow), fontconfig (F24: privilege escalation),
kernel (F24; F23: two vulnerabilities), libidn (F23: multiple vulnerabilities), libreswan (F23: unspecified), nodejs-tough-cookie (F24: denial of service),
pdns (F24: denial of service),
perl-CGI-Emulate-PSGI (F24; F23: HTTP redirect),
perl-Module-Load-Conditional (F24;
F23: privilege escalation), v8 (F24; F23:
denial of service), and xen (F23: multiple vulnerabilities).
Mageia has updated chromium-browser-stable (multiple vulnerabilities), firefox (multiple vulnerabilities), and openntpd/busybox (denial of service).
Red Hat has updated chromium-browser (RHEL6: multiple
vulnerabilities), kernel (RHEL6.4:
privilege escalation), nodejs010-nodejs-minimatch (RHSCL: denial of
service), and rh-nodejs4-nodejs-minimatch
(RHSCL: denial of service).
SUSE has updated kernel
(SLE11-SP4: multiple vulnerabilities).
Ubuntu has updated curl (three vulnerabilities). | | 6:56p |
The People’s Code (White House blog) US Chief Information Officer Tony Scott introducesthe Federal Source Code Policy, on the White House blog. " By making source code available for
sharing and re-use across Federal agencies, we can avoid duplicative custom
software purchases and promote innovation and collaboration across Federal
agencies. By opening more of our code to the brightest minds inside and
outside of government, we can enable them to work together to ensure that
the code is reliable and effective in furthering our national
objectives. And we can do all of this while remaining consistent with the
Federal Government’s long-standing policy of technology neutrality, through
which we seek to ensure that Federal investments in IT are merit-based,
improve the performance of our government, and create value for the
American people." (Thanks to David A. Wheeler) | | 7:22p |
Study Highlights Serious Security Threat to Many Internet Users (UCR Today) UCR Today reports that researchers at the University of California, Riverside have identified a weakness in the Transmission Control Protocol (TCP) in Linux that enables attackers to hijack users’ internet communications remotely. " The
UCR researchers didn’t rely on chance, though. Instead, they identified a
subtle flaw (in the form of ‘side channels’) in the Linux software that
enables attackers to infer the TCP sequence numbers associated with a
particular connection with no more information than the IP address of the
communicating parties. This means that given any two arbitrary machines on
the internet, a remote blind attacker, without being able to eavesdrop on
the communication, can track users’ online activity, terminate connections
with others and inject false material into their communications." | | 9:11p |
EFF Announces 2016 Pioneer Award Winners The Electronic Frontier Foundation (EFF) has announcedthe winners of the 2016 Pioneer Awards: " Malkia Cyril of the Center for Media Justice, data protection activist Max Schrems, the authors of the “Keys Under Doormats” report that counters calls to break encryption, and the lawmakers behind CalECPA—a groundbreaking computer privacy law for Californians." |
|