LWN.net's Journal
 
 [Most Recent Entries] [Calendar View]

Wednesday, February 24th, 2021

    Time Event
    2:58p
    Security updates for Wednesday
    Security updates have been issued by openSUSE (firefox and tor), Oracle (stunnel and xterm), Red Hat (virt:8.2 and virt-devel:8.2 and xterm), SUSE (avahi, gnuplot, java-1_7_0-ibm, and pcp), and Ubuntu (openssl).
    5:52p
    A new Debian debuginfod service
    Sergio Durigan Junior has announced the availability of a debuginfod server for Debian
    systems. "In a nutshell, by using a debuginfod service you will not need to
    install debuginfo (a.k.a. dbgsym) files anymore; the symbols will be
    served to GDB (or any other debuginfo consumer that supports debuginfod)
    over the network. Ultimately, this makes the debugging experience much
    smoother (I myself never remember the full URL of our debuginfo
    repository when I need it).    "
    9:55p
    [$] A pair of Python vulnerabilities
    Two separate vulnerabilities led to the fast-tracked release
    of Python 3.9.2 and 3.8.8 on February 19, though source-only
    releases     of 3.7.10 and 3.6.13 came a few days earlier. The
    vulnerabilities may be problematic for some Python users and
    workloads; one could potentially lead to remote code execution. The other
    is, arguably, not exactly a flaw in the Python standard library—it simply
    also follows an older standard—but it can lead to web cache
    poisoning     attacks.

    << Previous Day 2021/02/24
    [Calendar]     		Next Day >>

LWN.net   About LJ.Rossia.org