Hanno Boeck discovered a stack-based buffer overflow in the dpkg-deb
component of dpkg, the Debian package management system. This flaw could
potentially lead to arbitrary code execution if a user or an automated
system were tricked into processing a specially crafted Debian binary
package (.deb) in the old style Debian binary package format.
Tero Marttila discovered that the Debian packaging for smokeping
installed it in such a way that the CGI implementation of Apache httpd
(mod_cgi) passed additional arguments to the smokeping_cgi program,
potentially leading to arbitrary code execution in response to crafted
Working with Docker requires understanding quite a few Docker-specific concepts, and most of the documentation focuses on explaining how to use Docker's toolset without much explanation of why you'd want to use any of those tools.
Make: Now that there are two capable, sub-$10 computers for Makers — the $5 Pi Zero and the $9 C.H.I.P. — the debate will rage online over which board is faster, cheaper, and the right one to use in a project.
To provide the best experience for the most-used Linux versions, we will end support for Google Chrome on 32-bit Linux, Ubuntu Precise (12.04), and Debian 7 (wheezy) in early March, 2016. Chrome will continue to function on these platforms but will no longer receive updates and security fixes.
We intend to continue supporting the 32-bit build configurations on Linux to support building Chromium. If you are using Precise, we'd recommend that you to upgrade to Trusty.
The first signs of the end of 32bit are on the wall - starting with Linux. I wonder how long Google will continue to support 32bit Chrome on Windows. For some strange reason, Microsoft is still selling 32bit Windows 10.
The following series of maps depicts the speed at which news traveled to Venice, fron 1500 to 1765. The isochronic lines represent one week, and give a broad indication of the time required for letters to reach their destination. All three maps describe the speed of letters traveling toward Venice.
Today, thanks to telephony and internet, this is all instantaneous. Kind of amazing how we went from weeks and weeks for news to get around, to mere seconds, in a matter of just several centuries. The moment I press 'publish' on this news item, it's there in your browser, hitting the RSS feeds, going on Twitter.
If a report from the Japanese blog Macotakara is to be believed, Apple is planning on getting rid of the headphone jack in the next iPhone. As it attempts to once again shrink its flagship device, Apple is reportedly planning on shipping EarPods that connect through the Lighting port with the next iPhone in order to remove the thicker 3.5mm headphone jack. This is a bad idea.
Indeed it is. If Apple were to really remove the 3.5mm jack, it will do so for one reason: control. The 3.5mm jack is obviously an open standard, and Apple can do little to control what kind of headphones you use. Now that Apple owns a very popular brand of headphones, I'n sure the company is itching to lock consumers into its Lightning port.
If true, yet another terrible anti-consumer move from Apple.
Tomasz Jokiel has announced the release of Porteus Kiosk 3.6.0, the latest quarterly update of the project's single-purpose Gentoo-based distribution for web kiosks. This release introduces a server edition which designed for monitoring, accessing and managing Porteus Kiosk clients: "I'm pleased to announce that Porteus Kiosk 3.6.0 is....
The deepin development team has announced the availability of the second alpha build of the upcoming deepin 15, a major new version of the project's desktop Linux distribution featuring the Deepin desktop: "deepin 15 alpha 2 is thoroughly changed with a brand new system architecture. System performance and....
This week in DistroWatch Weekly: Review: Qubes OS 3.0, KaOS with Plasma and NetBSD 7.0News: Fedora seeks Wayland testers, a new application for scheduling tasks and how to deal with rootkit warningsQuestions and answers: What an ELF is and an HTTPS optionTorrent corner: CRUX, KNOPPIX, NetrunnerReleased last week:....