Thursday, September 1st, 2016

Time	Event
1:39a	[$] LWN.net Weekly Edition for September 1, 2016 The LWN.net Weekly Edition for September 1, 2016 is available. (Comment on this)
9:07a	Building a new Tor that can resist next-generation state surveillance (ars technica) Here's a lengthy ars technica article on efforts to replace Tor with something more secure. "As a result, these known weaknesses have prompted academic research into how Tor could be strengthened or even replaced by some new anonymity system. The priority for most researchers has been to find better ways to prevent traffic analysis. While a new anonymity system might be equally vulnerable to adversaries running poisoned nodes, better defences against traffic analysis would make those compromised relays much less useful and significantly raise the cost of de-anonymising users." (Comment on this)
3:08p	Thursday's security updates Debian-LTS has updated cacti (authentication bypass). Mageia has updated eog (M5: out-of-bounds write), python3/python (M5: HTTPoxy attack), redis (M5: information leak), and webkit2 (M5: multiple vulnerabilities). openSUSE has updated cracklib (Leap 42.1: code execution), gd (13.2: out-of-bounds read), and libgcrypt (13.2: flawed random number generation). Red Hat has updated ipa (RHEL 6,7: denial of service). Slackware has updated mozilla thunderbird (14.1, 14.2: unspecified vulnerabilities). (Comment on this)
8:54p	OpenBSD 6.0 OpenBSD 6.0 has been released. An EFI bootloader has been added to the armv7 platform along with other improvements for that platform. Also in this release, new and improved hardware support, IEEE 802.11 wireless stack improvements, generic network stack improvements, installer improvements, routing daemons and other userland network improvements, security improvements, and more. The announcement also contains information about OpenSMTPD 6.0.0, OpenSSH 7.3, OpenNTPD 6.0, and LibreSSL 2.4.2. (Comment on this)

<< Previous Day

2016/09/01 [Calendar]

Next Day >>