Friday, January 17th, 2020

Time	Event
3:37p	Security updates for Friday Security updates have been issued by Arch Linux (chromium), Fedora (gnulib, ImageMagick, jetty, ocsinventory-agent, phpMyAdmin, python-django, rubygem-rmagick, thunderbird, and xar), Mageia (e2fsprogs, kernel, and libjpeg), openSUSE (icingaweb2), Oracle (git, java-11-openjdk, and thunderbird), Red Hat (.NET Core), Scientific Linux (git, java-11-openjdk, and thunderbird), SUSE (fontforge and LibreOffice), and Ubuntu (kamailio and thunderbird). (Comment on this)
3:41p	Fedora CoreOS out of preview (Fedora Magazine) Fedora Magazine reports that the Fedora CoreOS distribution is now deemed ready for use. "Fedora CoreOS is a new Fedora Edition built specifically for running containerized workloads securely and at scale. It’s the successor to both Fedora Atomic Host and CoreOS Container Linux and is part of our effort to explore new ways of assembling and updating an OS. Fedora CoreOS combines the provisioning tools and automatic update model of Container Linux with the packaging technology, OCI support, and SELinux security of Atomic Host." (Comment on this)
10:55p	[$] KRSI and proprietary BPF programs The "kernel runtime security instrumentation" (or KRSI) patch set enables the attachment of BPF programs to every security hook in the kernel; LWN covered this work in December. That article focused on ABI issues, but it deferred another potential problem to our 2020 predictions: the possibility that vendors could start shipping proprietary BPF programs for use with frameworks like KRSI. Other developers did pick up on the possibility that KRSI could be abused this way, though, leading to a discussion on whether KRSI should continue to allow the loading of BPF programs that do not carry a GPL-compatible license. (Comment on this)
11:57p	Three stable kernels Stable kernels 5.4.13, 4.19.97, and 4.14.166 have been released. They all contain important fixes and users should upgrade. (Comment on this)

<< Previous Day

2020/01/17 [Calendar]

Next Day >>