Tuesday, September 27th, 2016

Time	Event
2:11p	[$] Systemd programming, 30 months later Some time ago, we published a pair of articles about systemd programming that extolled the value of providing high-quality unit files in upstream packages. The hope was that all distributions would use them and that problems could be fixed centrally rather than each distribution fixing its own problems independently. Now, 30 months later, it seems like a good time to see how well that worked out for nfs-utils, the focus of much of that discussion. Did distributors benefit from upstream unit files, and what sort of problems were encountered? (Comment on this)
3:31p	Tuesday's security updates Arch Linux has updated gnutls (certificate verification bypass), lib32-gnutls (certificate verification bypass), lib32-openssl (multiple vulnerabilities), openssl (multiple vulnerabilities), and wireshark-cli (multiple vulnerabilities). Debian has updated jackrabbit (cross-site request forgery) and python-django (cross-site request forgery). Debian-LTS has updated firefox-esr (multiple vulnerabilities). Fedora has updated community-mysql (F24: SQL injection/privilege escalation). openSUSE has updated firefox, nss (13.1: multiple vulnerabilities) and openssl (13.2: multiple vulnerabilities). Red Hat has updated openssl (RHEL6,7: multiple vulnerabilities). Slackware has updated openssl (denial of service). SUSE has updated openssl (SLES12: multiple vulnerabilities). Ubuntu has updated python-django (cross-site request forgery). (Comment on this)
6:31p	Firefox OS, B2G OS, and Gecko Ari Jaaksi and David Bryant posted a note to the B2G (Boot to Gecko) OS community looking at the end of Firefox OS development and at what happens to the code base going forward. "In the spring and summer of 2016 the Connected Devices team dug deeper into opportunities for Firefox OS. They concluded that Firefox OS TV was a project to be run by our commercial partner and not a project to be led by Mozilla. Further, Firefox OS was determined to not be sufficiently useful for ongoing Connected Devices work to justify the effort to maintain it. This meant that development of the Firefox OS stack was no longer a part of Connected Devices, or Mozilla at all. Firefox OS 2.6 would be the last release from Mozilla. Today we are announcing the next phase in that evolution. While work at Mozilla on Firefox OS has ceased, we very much need to continue to evolve the underlying code that comprises Gecko, our web platform engine, as part of the ongoing development of Firefox. In order to evolve quickly and enable substantial new architectural changes in Gecko, Mozilla’s Platform Engineering organization needs to remove all B2G-related code from mozilla-central. This certainly has consequences for B2G OS. For the community to continue working on B2G OS they will have to maintain a code base that includes a full version of Gecko, so will need to fork Gecko and proceed with development on their own, separate branch." (Thanks to Paul Wise) (Comment on this)

<< Previous Day

2016/09/27 [Calendar]

Next Day >>