LWN.net Weekly Edition for January 18, 2007

lca2007: Christopher Blizzard

The keynote speaker on the second day of linux.conf.au 2007 was Christopher Blizzard, currently with Red Hat. His topic was "relevance," and, in particular, the relevance of the free software movement to the rest of the world.

One way to be relevant is to create top-quality products. There was an emphasis on the word "product," rather than "project"; Chris was talking about making things for people. The best products, he says, are those which genuinely change the way we live. The example he used was cellular telephones, which have truly changed the ways in which people communicate. Your editor, often reduced to communicating with his children via text message, is not convinced that all these changes are for the better, but the talk did not address this side of things.

The next slide was a marketing shot of the iPhone. Is this a product which will change how people live? Nobody in the audience was willing to argue that it was.

Then came Firefox - a project which Chris worked on for some years. Firefox "makes the web less annoying," and makes a point of respecting its users, which is important. It's still not clear that Firefox has changed the way people live, however. Even so, Firefox had some lessons to offer:

• You can't change the web from the back end. No matter how much good and innovative work is being done on the server side, the software which controls the user experience will shape the web. Firefox has been successful because it is "driving from the front," and influencing how the users see and work with the net.

• Going direct to users is important; you can't count on others to distribute your software for you.

• Stick to your core values. The Mozilla project gets significant amounts of money from its sponsors, but it is unwilling to consider sponsorships which would require user-hostile changes.

• Have a mission. A project will only produce a great project if it has a strong idea of what it is trying to accomplish.

How many years, asked Chris, has it been the year of the Linux desktop? Is Linux relevant for desktop users. In general, his answer was "no." Linux is showing up in interesting places, however: the Nokia N800, telephones, and the One Laptop Per Child project.

OLPC, says Chris, truly is a relevant project which will be changing lives. It has a well-defined mission - providing computing technology in a way which furthers the education of children in the developing world - and it is creating a product which furthers that mission. To that end, a number of interesting innovations have been made; these include the OLPC display (which, among other things, is readable in full sunlight), the mesh networking feature, and the ability to power it with a hand-operated generator. The sugar user interface also rates high on the list; it has tossed out much of the standard desktop metaphor in favor of a new design aimed at the OLPC's target user base.

So, based on this, how should a project make itself relevant? Chris suggests:

• Find an important set of clients, and work toward their needs. In the OLPC example, the clients are developing-world children (or, perhaps, the governments which represent them).

• Find good designers and trust them. Free software developers are often dismissive of the need for good design, but you cannot create a great product without it. Once you have found people who can do this design, you must trust them, even if their work takes you in directions which are surprising and unfamiliar.

• Make your product for other people. Doing so requires developing a certain amount of empathy for the intended clients and getting past the "itch scratching" mode of development.

A project which follows these guidelines, says Chris, has a good chance of being relevant well into the future.

Comments (9 posted)

Interview with Second Life's Cory Ondrejka

Cory Ondrejka, CTO of Linden Lab, has some serious programming credentials. Before joining Linden Lab in late 2000, he worked on US government projects and Nintendo games; as well as writing much of the original core code for Second Life, he also designed the Linden Scripting Language (LSL), and wrote the LSL execution engine. He talks to Glyn Moody about the background to Linden Lab's decision to take the Second Life client open source, how things will work in practice, and what's going to happen server-side.

When did Linden Lab start to think about the possibility of opening up Second Life's source code?

Was there any particular stimulus at that time?

Was the decision to open the viewer's code a difficult one?

Why did you choose GNU GPLv2 license for the code?

In fact, you already offer a commercial license, I believe?

When did you start the detailed preparatory work, and what did that entail in terms of preparing the viewer code for release?

Did you have to do much in terms of making the code more legible or more modular?

Could you say a little about these big changes that are coming through?

What are the things that you haven't been able to open source?

Why do you distribute binary copies of libraries that are almost certain to be found on any GNU/Linux system -- zlib and ogg/vorbis, for example?

In terms of the timing, Linden Lab's been very circumspect in talking about this move: the signals were later this year rather than at the beginning. Why is it happening now, much earlier than you originally indicated?

What do you hope to gain from open sourcing the viewer?

Were you surprised by the large number of positive comments on the blog posting that announced the move?

What are the resources that you've put in place to work with the community that you hope to build around the code?

What's he going to be doing, and how will the code submissions be processed?

You mentioned JIRA for issue tracking, what about the actual code management?

Will you be giving accounts on that to outside contributors?

To foster external contributions, how about moving to a plug-in architecture?

You've indicated that you view opening up the client as a learning experience for open-sourcing the server in the right way: what additional issues will you need to address here - presumably the proprietary Havok physics engine is going to be a problem?

What kind of things are you having to deal with?

Does that mean centralizing certain Second Life services?

Do you think that these future worlds will be part of the main Second Life geography or will there be portals from them through to your world?

Presumably you've also got to deal with issues like identity as avatars move between different worlds, and the tricky one of money?

What does that imply about the convergence of 3D virtual worlds with the Web?

Finally, once you've opened up the code to the client and server, what will be left for Linden Lab to make some money from?

Glyn Moody writes about open source and virtual worlds at opendotdotdot.

Comments (4 posted)

The Grumpy Editor's Guide to graphical IRC clients

This article is part of the LWN Grumpy Editor series.

IRC (Internet Relay Chat) is a venerable protocol which allows people to type messages at each other across the net. Your editor remembers a fascinating day in 1991, when observers in Moscow used an IRC channel to report on the Soviet coup attempt; it was an early example of the power the net would come to have. In subsequent years, however, your editor has had little time for IRC. Getting LWN together every week requires a strong focus on getting things done, and IRC can be a real productivity killer. Pretending that IRC does not exist has been most helpful in getting the Real Work done.

Recently, however, your editor has had reason to wander into IRC again. Having not done much in this area for a while, your editor lacked a favorite IRC client - or any IRC client at all. Thus began the search for the best tool for this particular job - and, eventually, this article.

Anybody who has investigated the topic knows that there is no shortage of IRC clients to choose from. It would appear that free software developers are often afflicted with this particular itch. There is no real hope of reviewing them all, so your editor will not even try. Instead, this review is restricted to graphical clients which appear to have a real user base and which are under active development. Your editor also lacks access to AOL instant messaging, MSN messaging, etc., so this review will be focused on IRC functionality. Some clients can work with many networks; that capability will be mentioned when appropriate, but it will not be reviewed further. Finally, your editor has little to say about channel operator commands, file downloads, or other such features of IRC; this article will focus on the basics.

Gaim

Gaim is a longstanding GNOME messaging client. It does IRC, along with AIM, ICQ, MSN Messenger, Yahoo, Jabber, Gadu-Gadu, and so on. If it's a messaging protocol, Gaim can probably handle it. Those using it for IRC only will find that Gaim brings a certain amount of baggage ("buddy lists" and such) which is not useful in that context, and that some of the terminology used ("rooms") does not quite match the IRC conventions. None of this is particularly problematic in real use, however.

The main Gaim window is tab-oriented, with each IRC channel in its own tab. This organization is space-efficient, but it can make it hard to monitor more than one channel - though the color-coded tab tags help. Tabs can be detached, however, allowing the user to fill the screen with single-channel windows. Gaim windows use smooth scrolling, a feature your editor got tired of back in the VT100 days; unfortunately, there appears to be no easy way to turn it off. On the other hand, users can turn off the insertion of cloyingly cute smiley graphics into the message stream.

Private messages result in the quiet creation of a new tab - something which can be easy for the user to miss. In general, the handling of private messages in IRC clients seems a little awkward.

Gaim has support for IRC servers which can authenticate nicknames with passwords. It also has a plugin feature which can be used to extend the client; available plugins add support for additional protocols, expose more preference options, perform encryption, and more.

Finally, on your editor's system, the Gaim client was a huge process. It should not be that hard to create an IRC client which requires less that a 50MB resident set, but the Gaim developers have not done that. Running Gaim made the whole system visibly slower. Gaim also doesn't take the hint when all of its windows are closed; one must explicitly tell it to go away by selecting "Quit" from the "Buddies" menu in the "Buddy list" window - something your editor found less than entirely intuitive.

Konversation

Konversation is a KDE-based client centered around IRC. Like many KDE clients, it is feature-heavy and visually pleasing.

Like Gaim, Konversation is based on a single window with tabs. In this case, however, there does not appear to be any way to detach the tabs into their own windows. One nice feature in Konversation is "remember lines," lines drawn in each conversation window when it goes out of view. When returning to a channel, the user knows just where to start reading to catch up on the new stuff. This feature gets a little aggressive at times, drawing several lines together in low-activity channels; one presumes this little glitch can be ironed out. Konversation also has an option to suppress all of the channel event lines (comings and goings) which tend to clutter up the conversation.

Konversation can handle passwords, but it required a bit more setup work than some other clients. Also available is a "URL catcher" tab which simply accumulates URLs posted on subscribed channels.

Overall, Konversation comes across as a featureful and useful IRC client. The documentation which comes with it is well-done and comprehensive; it helped your editor get past his initial questions ("how do I make it stop joining #kde?") quickly. Detachable tabs would make it nearly perfect.

ERC

Perhaps your editor is pushing it a bit by including ERC in this list. ERC is an emacs-based IRC client; it can be added onto emacs 21, and it has been bundled into the upcoming emacs 22 release. Emacs is a strongly graphical environment these days, and ERC offers all of the point-and-click configuration and operation options that the other clients reviewed here have.

ERC maintains a separate buffer for each open IRC channel. It tends to hide those buffers, and there is no simple tab bar for switching between them. It is a simple matter for an emacs user to configure the display as desired, with different channels displayed in different windows or frames. Somebody who is not familiar with the emacs way of doing things would have a harder time of it, however.

There is a separate buffer for managing the connection with the IRC server, and that is where private messages show up. It is probably safe to say that very few users will keep that buffer visible, with the result that private messages tend to go unnoticed. ERC also arguably features the ugliest, most unreadable channel list window of any of the clients reviewed.

Display is highly configurable. By default, ERC is less color-happy than most other graphical clients, a feature which your editor appreciates. There is a full list of options for filtering users and message types, performing text transformations, etc. And, of course, the experienced emacs user can simply attach elisp functions to any events requiring more involved customization.

There is no provision for marking the last-read text in ERC. This functionality is easily obtained by moving point off the end of the buffer, essentially saving the current location - but the user must remember to do it.

Overall, your editor likes the feel of working with ERC - but, then, he is known to be sympathetic to emacs-based solutions. There is no need to figure out how to search for specific text, for example - all of the normal text searching functions work as expected. Saving text or a partial log is straightforward. There is no one-line text window to type into; one simply types into the buffer and long lines are broken naturally. And so on. Emacs users will probably be happy with ERC; the rest of the world is unlikely to pick up emacs to be able to use it.

XChat

XChat is a popular client with a relatively long history. Your editor tried out the GNOME version of XChat on several networks. Finding servers was relatively easy, since XChat comes equipped with a long list built into it. One thing which becomes immediately apparent, however, is that XChat grabs the channel list in a blocking operation. The client can go completely unresponsive for several minutes until the listing is complete - not the friendliest introduction possible.

The main XChat window features a tree listing of servers and open panels on the left, and a display of one of those channels in the main pane. There does not appear to be any way to view more than one channel's traffic at any given time. The left pane marks channels with unread activity - with a separate mark if the only activity is enter and leave events.

The XChat feature list is long. It has a "last read" line in each window, though how it decides when something was read remains a bit of a mystery. It is not directly related to expose, focus, or mouse button events. Those who are relatively uninterested in actually reading IRC traffic can set up window transparency and background images. There is a plugin mechanism which can used to set up a URL grabber window or to script the client in Perl or Python. Moving the pointer over a correspondent's name yields a popup with that person's name and origin information. There is no password support, however. Unlike some other clients, XChat appears to have relatively little support for channel operator functions.

Graphically, XChat is reasonably pleasing, with a use of color which is not entirely excessive. Private messages are handled in a relatively straightforward and visible way - but the dialog for selecting a user to talk to is painful. Overall, it is a capable and easy client adequate for the needs of a large subset of IRC users.

SeaMonkey

Once upon a time, the Mozilla client looked as if it were about to grow to encompass the functionality of most other programs found on a typical desktop system. The Mozilla project eventually decided to redirect its efforts toward the more focused Firefox and Thunderbird tools, leaving the old, comprehensive application behind. There were users who did not like that state of affairs, and who dedicated some time to continuing its development. The result was the SeaMonkey project. Tucked into one corner of this tool is an IRC client.

Your editor's introduction to this tool was somewhat rocky. It offered up Undernet as one of its connection possibilities. Your editor decided to check it out and see what channels were available. After a long period where the client was completely unresponsive (attempting to list information for over 20,000 channels), it simply crashed. Note to the SeaMonkey developers: if you must crash, please have the courtesy to do so before making the user wait for a long network transfer.

When SeaMonkey is operating, it provides a single, tabbed window with nicknames on the left. There is no way to have more than one channel on-screen at a time. There is no password support. All told, the SeaMonkey IRC client ("ChatZilla") comes across as unfinished and rough compared to a number of the alternatives. Your editor has seen nothing here to convince him that web browsers need to support IRC too.

ksirc

Ksirc is a simple IRC client shipped with KDE; it does not appear to have a web page dedicated to it. It offers less help than many other clients; your editor's install of ksirc did not know about any IRC servers, for example. Once configured, however, it operates well enough.

The bulk of the interface is done through a single window, with each channel represented by a tab. It is possible to detach the tabs into separate windows, making it possible to see multiple windows at once. There is also a "ticker mode" where messages scroll by in a single-line window, but this mode did not render properly on your editor's system. A separate window shows the list of servers and open channels, but it does not appear to actually be useful for much.

Your editor appreciates restraint in the use of color, but ksirc, perhaps, takes the idea too far by default. The window is essentially monochromatic, dense, and difficult to read. The use of color can be configured, however, and there is a set of filters which can be used to highlight messages with text of interest. When the automatic colorizing mode is enabled, however, it has an unhealthy tendency to pick gray for some of the more active users - a bit of a pain considering that the window background is, by default, gray.

Overall, ksirc is a sufficiently capable tool for most needs. It gives the impression of having been left behind by some of the other KDE-based IRC clients, however, and of not getting much development attention in recent times.

Kopete

A more contemporary KDE client is Kopete. This tool, perhaps, is the KDE answer to Gaim; it appears to have support for just about any messaging protocol one can imagine. Once again, your editor only looked at the IRC functionality.

If ksirc is dense and hard to read, Kopete is the opposite. The default display is full of white space, divider bars, icons, smilies, and more. Here, too, it can be hard to follow a conversation for the simple reason that very little of it actually fits into the window. Kopete supports themes, however, and it does not take long to find a theme which makes a little better use of screen real estate.

At the outset, Kopete's interface is a bit intimidating. The small window that comes up seems to offer little in the way of interesting operations - joining a channel, say. For that, one must know to right-click on the little icon which shows up in the taskbar tray and wander through the menus. It all works fine once one gets the hang of it, but a new user trying to get started without having read the manual is likely to be frustrated for a while.

It is hard to miss private messages in Kopete - the application creates a new window and throws it at you. For the serious messaging user, there is a whole set of options for configuring just how hard the client tries to let you know about various sorts of events. About the only thing that is lacking is a "last read" line. With that in place, and with an appropriate theme, Kopete is a powerful and attractive tool.

KVirc

Finally, your editor tried out KVirc, which is a bit of a different approach to IRC clients. Unlike Kopete, which leaves the first-time user trying to figure out what to do, KVirc starts with a set of configuration windows - one of which even displays the GPL text for approval. The user ends up with a big window containing another for server selection. It would appear that just about every IRC server on the planet has been put into this dialog; it's a long list.

After selecting a server (and, perhaps. entering password information), the user encounters one of the more peculiar aspects of KVirc. Every channel has its own window, but all of those windows are contained within the big KVirc window. There is a background image in the big window, and the channel windows are all translucent. It is all visually striking, but your editor could not help wondering why the developers felt the need to implement their own window manager. It even has options for tiling all of the subwindows - with a choice of several different algorithms.

KVirc also has KVS, its own, special-purpose scripting language "inspired by C++, sh, perl, php and mIrc". There is a separate window for monitoring socket operations, no end of options for playing sounds, a set of anti-spam and anti-flood filters, and more. It's all powerful and striking, but it's hard to help wondering if all that brilliant development energy couldn't have gone into something more generally useful than another IRC client.

For people who spend much of their lives in IRC, KVirc might well be the tool of choice. It's visually striking, feature-rich, and users can script their own bots directly within the client. For your editor's purposes, however, KVirc is an overly heavy tool, wanting the full screen and ongoing attention.

Conclusion

Some readers will certainly note the biggest omission from this review: bitchx. It is, beyond doubt, a powerful client; bitchx was left out primarily because it is not a graphical client. Those who are determined to remain in the curses world are unlikely to be much interested in the other clients listed here, so there doesn't seem to be much point in trying to compare them.

So which client will your editor use when he wishes to be grumpy with others in real time, one line at a time? ERC probably remains at the top of the list, but XChat is also a useful and capable client. If your editor were a user of other messaging protocols as well, it would pretty much come down to Gaim or Kopete, depending on one's desktop orientation. Your editor's high-school son tends to quickly minimize windows when others walk into the room, but he would appear to have settled on Gaim.

In the end, however, just about any of these clients is adequate for the job. One cannot help but wonder why the free software community has produced such a large set of IRC clients. Yes, IRC is an important communication channel, and a well-designed client can make IRC more pleasant to work with, but it still does not seem like there would be room for that many applications doing essentially the same thing. One cannot fault developers for scratching an itch and giving the result to the world. Perhaps, once they have achieved the creation of the world-dominating IRC client, some of these developers will move on to the creation of something truly revolutionary.

Comments (37 posted)

Page editor: Rebecca Sobol

Security

Brief items

Chaostables for confusing nmap scans

Chaostables is a recently released collection of code that provides a means to confuse an nmap scan. The author, Jan Engelhardt, has provided these capabilities as both netfilter modules for Linux 2.6.18-20 and as iptables rules. He has an excellent description of what he is trying to accomplish and how he does it, as well.

Utilities like nmap (described in an LWN article last year) are often used by those with malicious intent to discover available hosts, open ports, OS versions, and the like to help target their attacks. Chaostables seeks to generate confusing results to these probes. To that end, Engelhardt has derived a set of behaviors that correspond to these types of scans and a set of rules to detect and deflect them.

Since 2.4, the standard way of doing Linux packet filtering is by using the iptables utility which provides a userspace interface to the netfilter kernel modules. Netfilter provides a set of kernel hooks for examining and manipulating network packets and is the framework for Linux firewall implementations. Administrators define rules that identify particular kinds of packets and specify what to do with them; those rules are ordered and collected into chains which are then grouped into tables. All of this packet policy can then be pushed into the kernel via the iptables utility.

The chaostables rules start with dropping some ICMP packets that could reveal the existence of the host and then start concentrating on the kinds of packets sent by scanning utilities. Techniques like TCP stealth, SYN, connect and grab scans are detected and dropped to attempt to hide the host while still allowing 'real' network traffic. These rules are then rolled up into the 'portscan' netfilter module in order to reduce the complexity of the chains that need to be installed.

A second kind of chain provides ways to disguise the underlying system by making Linux appear to be another OS entirely. Network scanning utilities often try to throttle their scans when they detect a system that limits the number of ICMP or RST packets sent per second. Linux is not one of those kinds of systems, but the CHAOS chain makes it look as if it is by limiting RST and ICMP packets to two per second. It also uses the 'random' netfilter rule to generate negative responses on closed ports only some of the time. The net effect is that the scanner will get inconsistent results, sometimes ports will appear closed and sometimes not with the added bonus of potentially slowing down the scan.

The CHAOS chain can be combined with the TARPIT chain to cause ports to appear to be open when in fact they are not. This can slow down a network scan as it attempts to elicit additional information from a seemingly open port. The TARPIT chain can consume router and/or firewall resources by appearing to be an open connection, so chaostables provides the DELUDE chain. It will make ports appear to be open on an initial connect (SYN), but revert to their true closed state for any additional traffic.

Chaostables is quite an interesting use of the netfilter technology and probably uses it in ways that the authors never expected. It may be that only the most paranoid of system administrators will want to implement these chains, but they will be available if needed. In addition, the techniques and code provided in the package are very useful as examples for other applications.

Comments (3 posted)

Security reports

Phishing Attacks Continue to Grow in Sophistication (Netcraft)

Netcraft examines the latest trends in the world of Phishing. "Phishing attacks are continually evolving, as fraudsters develop new strategies and quickly refine them in an effort to stay a step ahead of banking customers and the security community. Here are some of the phishing trends and innovations we noted in 2006".

Comments (none posted)

New vulnerabilities

acroread: multiple vulnerabilities

Package(s):	acroread	CVE #(s):	CVE-2006-5857 CVE-2007-0045 CVE-2007-0046
Created:	January 11, 2007	Updated:	October 26, 2009
Description:	Adobes acrobat reader has the following vulnerabilities: The Adobe Reader Plugin has a cross site scripting vulnerability that can be triggered by processes malformed URLs. Arbitrary JavaScript can be served by a malicious web server, leading to a cross-site scripting attack. Maliciously crafted PDF files can be used to trigger two vulnerabilities, if an attacker can trick a user into viewing the files, arbitrary code can be executed with the user's privileges.
Alerts:	SuSE SUSE-SA:2009:049 2009-10-26 Gentoo 200910-03 2009-10-25 Red Hat RHSA-2007:0021-01 2007-01-22 Gentoo 200701-16 2007-01-22 SuSE SUSE-SA:2007:011 2007-01-22 Red Hat RHSA-2007:0017-01 2007-01-11

Comments (1 posted)

bluez-utils: hidd vulnerability

Package(s):	bluez-utils	CVE #(s):	CVE-2006-6899
Created:	January 16, 2007	Updated:	May 14, 2007
Description:	hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the Mouse and Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.
Alerts:	Red Hat RHSA-2007:0065-01 2007-05-14 Ubuntu USN-413-1 2007-01-24 Mandriva MDKSA-2007:014 2006-01-15

Comments (none posted)

horde-kronolith: local file inclusion

Package(s):	horde-kronolith	CVE #(s):	CVE-2006-6175
Created:	January 17, 2007	Updated:	March 7, 2008
Description:	Kronolith contains a mistake in lib/FBView.php where a raw, unfiltered string is used instead of a sanitized string to view local files. An authenticated attacker could craft an HTTP GET request that uses directory traversal techniques to execute any file on the web server as PHP code, which could allow information disclosure or arbitrary code execution with the rights of the user running the PHP application (usually the webserver user).
Alerts:	Gentoo 200701-11 2007-01-16

Comments (none posted)

kdenetwork: denial of service

Package(s):	kdenetwork	CVE #(s):	CVE-2006-6811
Created:	January 11, 2007	Updated:	February 1, 2007
Description:	The KsIRC 1.3.12 utility in kdenetwork is vulnerable to a remote denial of service attack that can be caused by a malicious IRC server sending a long PRIVMSG string. This causes an assertion failure and an associated NULL pointer dereference.
Alerts:	Gentoo 200701-26 2007-01-29 rPath rPSA-2007-0007-1 2007-01-15 Ubuntu USN-409-1 2007-01-15 Mandriva MDKSA-2007:009 2007-01-10

Comments (none posted)

libgtop2: buffer overflow

Package(s):	libgtop2	CVE #(s):	CVE-2007-0235
Created:	January 15, 2007	Updated:	August 9, 2007
Description:	The /proc parsing routines in libgtop are vulnerable to a buffer overflow. If an attacker can run a process in a specially crafted long path then trick a user into running gnome-system-monitor, arbitrary code can be executed with the user's privileges.
Alerts:	Fedora FEDORA-2007-657 2007-08-02 Red Hat RHSA-2007:0765-01 2007-08-07 Debian DSA-1255-1 2007-01-31 rPath rPSA-2007-0014-1 2007-01-23 Gentoo 200701-17 2007-01-23 Mandriva MDKSA-2007:023 2007-01-18 Ubuntu USN-407-1 2007-01-15

Comments (none posted)

libneon: denial of service

Package(s):	libneon	CVE #(s):	CVE-2007-0157
Created:	January 13, 2007	Updated:	January 17, 2007
Description:	The URI parser in neon versions 0.26.0 through 0.26.2 has a denial of service vulnerability. Remote servers can cause a crash by sending a URI with non-ASCII characters.
Alerts:	Mandriva MDKSA-2007:013 2007-01-12

Comments (none posted)

libsoup: denial of service

Package(s):	libsoup	CVE #(s):	CVE-2006-5876
Created:	January 13, 2007	Updated:	January 29, 2007
Description:	The libsoup HTTP library does not sanitize input sufficiently when parsing HTTP headers. This can be exploited to cause a denial of service.
Alerts:	Fedora FEDORA-2007-109 2007-01-29 Mandriva MDKSA-2007:029 2006-01-26 Ubuntu USN-411-1 2007-01-23 rPath rPSA-2007-0015-1 2007-01-23 Debian DSA-1248-1 2007-01-12

Comments (none posted)

oftpd: denial of service

Package(s):	oftpd	CVE #(s):	CVE-2006-6767
Created:	January 16, 2007	Updated:	January 17, 2007
Description:	By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Remote, unauthenticated attackers may be able to terminate any oftpd process, denying service to legitimate users.
Alerts:	Gentoo 200701-09 2007-01-15

Comments (none posted)

opera: multiple vulnerabilities

Package(s):	opera	CVE #(s):	CVE-2007-0126 CVE-2007-0127
Created:	January 13, 2007	Updated:	January 17, 2007
Description:	The opera browser has a heap overflow vulnerability involving the DHT markers in JPEG files. If a specially crafted JPEG files is read on a web site, arbitrary code may be executed with the privileges of the user. Also, the createSVGTransformFromMatrix() function does not correctly handle passed-in objects, this can be used to execute arbitrary code.
Alerts:	SuSE SUSE-SA:2007:009 2007-01-15 Gentoo 200701-08 2007-01-12

Comments (none posted)

wget: denial of service

Package(s):	wget	CVE #(s):	CVE-2006-6719
Created:	January 11, 2007	Updated:	January 23, 2007
Description:	The wget http file retriever application has a problem with the ftp_syst function in ftp-basic.c. A malicious FTP server which sends a large number of blank 220 responses to the SYST command can cause wget to crash, resulting in a denial of service.
Alerts:	rPath rPSA-2007-0011-1 2007-01-23 Mandriva MDKSA-2007:017 2006-01-15 Fedora FEDORA-2007-043 2007-01-10 Fedora FEDORA-2007-037 2007-01-10

Comments (2 posted)

wordpress: multiple vulnerabilities

Package(s):	wordpress	CVE #(s):	CVE-2006-6808 CVE-2007-0107 CVE-2007-0109
Created:	January 16, 2007	Updated:	January 17, 2007
Description:	When decoding trackbacks with alternate character sets, WordPress does not correctly sanitize the entries before further modifying a SQL query. WordPress also displays different error messages in wp-login.php based upon whether or not a user exists. David Kierznowski has discovered that WordPress fails to properly sanitize recent file information in /wp-admin/templates.php before sending that information to a browser. An attacker could inject arbitrary SQL into WordPress database queries. An attacker could also determine if a WordPress user existed by trying to login as that user, better facilitating brute force attacks. Lastly, an attacker authenticated to view the administrative section of a WordPress instance could try to edit a file with a malicious filename; this may cause arbitrary HTML or JavaScript to be executed in users' browsers viewing /wp-admin/templates.php.
Alerts:	Gentoo 200701-10 2007-01-15

Comments (none posted)

Updated vulnerabilities

apache: cross-site scripting

Package(s):	apache	CVE #(s):	CVE-2006-3918
Created:	August 9, 2006	Updated:	April 4, 2008
Description:	From the Red Hat advisory: "A bug was found in Apache where an invalid Expect header sent to the server was returned to the user in an unescaped error message. This could allow an attacker to perform a cross-site scripting attack if a victim was tricked into connecting to a site and sending a carefully crafted Expect header."
Alerts:	SuSE SUSE-SA:2008:021 2008-04-04 Ubuntu USN-575-1 2008-02-04 SuSE SUSE-SA:2006:051 2006-09-08 Debian DSA-1167-1 2005-09-04 Red Hat RHSA-2006:0619-01 2006-08-10 Red Hat RHSA-2006:0618-01 2006-08-08

Comments (none posted)

apache-mod_auth_kerb: off-by-one error

Package(s):	apache-mod_auth_kerb	CVE #(s):	CVE-2006-5989
Created:	November 24, 2006	Updated:	January 23, 2007
Description:	An off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.
Alerts:	Gentoo 200701-14 2007-01-22 Debian DSA-1247-1 2007-01-08 Red Hat RHSA-2006:0746-01 2006-12-06 Fedora FEDORA-2006-1341 2006-11-29 Mandriva MDKSA-2006:218 2006-11-23

Comments (none posted)

avahi: denial of service

Package(s):	avahi	CVE #(s):	CVE-2006-6870
Created:	January 5, 2007	Updated:	January 15, 2007
Description:	A flaw was discovered in Avahi's handling of compressed DNS packets. If a specially crafted reply were received over the network, the Avahi daemon would go into an infinite loop, causing a denial of service.
Alerts:	Fedora FEDORA-2007-019 2007-01-15 Mandriva MDKSA-2007:003 2007-01-08 Ubuntu USN-402-1 2007-01-05

Comments (none posted)

bind: denial of service

Package(s):	bind	CVE #(s):	CVE-2006-4095 CVE-2006-4096
Created:	September 7, 2006	Updated:	February 1, 2007
Description:	Bind has two denial of service vulnerabilities. Recursive servers queries for SIG records will trigger an assertion failure if more than one RR set is returned. An INSIST failure can be triggered by sending a large number of recursive queries.
Alerts:	Fedora FEDORA-2007-164 2007-01-31 Gentoo 200609-11 2006-09-15 Slackware SSA:2006-257-01 2006-09-15 Fedora FEDORA-2006-966 2006-09-11 Debian DSA-1172-1 2006-09-09 Mandriva MDKSA-2006:163 2006-09-08 rPath rPSA-2006-0166-1 2006-09-08 Ubuntu USN-343-1 2006-09-07 OpenPKG OpenPKG-SA-2006.019 2006-09-07

Comments (none posted)

bugzilla: multiple vulnerabilities

Package(s):	bugzilla	CVE #(s):	CVE-2006-5453 CVE-2006-5454 CVE-2006-5455
Created:	November 10, 2006	Updated:	August 28, 2007
Description:	Bugzilla has the following vulnerabilities: Input data passed to various fields is not properly sanitized before being passed back to users. Users can gain unauthorized access to read attachment descriptions while using diff mode. HTTP GET and HTTP POST requests can be used to perform unauthorized actions due to improper verification. Input that is passed to showdependencygraph.cgi is not properly sanitized before being returned to users.
Alerts:	Debian DSA-1208-1 2006-11-11 Gentoo 200611-04 2006-11-09

Comments (none posted)

busybox: insecure password generation

Package(s):	busybox	CVE #(s):	CVE-2006-1058
Created:	May 5, 2006	Updated:	May 2, 2007
Description:	The BusyBox 1.1.1 passwd command does not use a proper salt when generating passwords. This would create an instance where a brute force attack could take very little time.
Alerts:	Red Hat RHSA-2007:0244-02 2007-05-01 Fedora FEDORA-2006-511 2006-05-04 Fedora FEDORA-2006-510 2006-05-04

Comments (2 posted)

bzip2: race condition and infinite loop

Package(s):	bzip2	CVE #(s):	CAN-2005-0953 CAN-2005-1260
Created:	May 17, 2005	Updated:	January 10, 2007
Description:	A race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete. Also specially crafted bzip2 archives may cause an infinite loop in the decompressor.
Alerts:	rPath rPSA-2007-0004-1 2007-01-09 Debian DSA-741-1 2005-07-07 Red Hat RHSA-2005:474-01 2005-06-16 OpenPKG OpenPKG-SA-2005.008 2005-06-10 SuSE SUSE-SR:2005:015 2005-06-07 Debian DSA-730-1 2005-05-27 Mandriva MDKSA-2005:091 2005-05-18 Ubuntu USN-127-1 2005-05-17

Comments (2 posted)

cacti: multiple vulnerabilities

Package(s):	cacti	CVE #(s):	CVE-2006-6799
Created:	January 1, 2007	Updated:	January 26, 2007
Description:	The network monitoring and graphing frontend Cacti has three vulnerabilities. The cmd.php script allows command line usage and is also installed in a web-accessible location. The cmd.php input is insufficiently sanitized, a passed-in URL can be used to inject arbitrary SQL code. The cmd.php script can be used by a remote attacker to execute arbitrary shell commands via improperly sanitized results from SQL queries.
Alerts:	Gentoo 200701-23 2007-01-26 Debian DSA-1250-1 2007-01-17 Mandriva MDKSA-2007:015 2007-01-15 SuSE SUSE-SA:2007:007 2007-01-12 OpenPKG OpenPKG-SA-2007.001 2007-01-01

Comments (none posted)

cpio: arbitrary code execution

Package(s):	cpio	CVE #(s):	CVE-2005-4268
Created:	January 2, 2006	Updated:	March 17, 2010
Description:	Richard Harms discovered that cpio did not sufficiently validate file properties when creating archives. Files with e. g. a very large size caused a buffer overflow. By tricking a user or an automatic backup system into putting a specially crafted file into a cpio archive, a local attacker could probably exploit this to execute arbitrary code with the privileges of the target user (which is likely root in an automatic backup system).
Alerts:	CentOS CESA-2010:0145 2010-03-17 Red Hat RHSA-2010:0145-01 2010-03-15 rPath rPSA-2007-0094-1 2007-05-07 Red Hat RHSA-2007:0245-02 2007-05-01 Ubuntu USN-234-1 2006-01-02

Comments (none posted)

vixie-cron: privilege escalation

Package(s):	cron	CVE #(s):	CVE-2006-2607
Created:	May 31, 2006	Updated:	June 1, 2009
Description:	The Vixie cron daemon does not check the return code from setuid(); if that call can be made to fail, a local attacker may be able to execute commands as root.
Alerts:	Ubuntu USN-778-1 2009-06-01 Red Hat RHSA-2006:0539-01 2006-07-12 Gentoo 200606-07 2006-06-09 SuSE SUSE-SA:2006:027 2006-05-31 rPath rPSA-2006-0082-1 2006-05-25

Comments (1 posted)

cscope: buffer overflows

Package(s):	cscope	CVE #(s):	CVE-2006-4262
Created:	October 2, 2006	Updated:	June 16, 2009
Description:	Will Drewry of the Google Security Team discovered several buffer overflows in cscope, a source browsing tool, which might lead to the execution of arbitrary code.
Alerts:	CentOS CESA-2009:1101 2009-06-16 Red Hat RHSA-2009:1101-01 2009-06-15 Gentoo 200610-08 2006-10-20 Debian DSA-1186-1 2006-09-30

Comments (none posted)

cscope: buffer overflows

Package(s):	cscope	CVE #(s):	CVE-2004-2541
Created:	May 22, 2006	Updated:	June 19, 2009
Description:	A buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
Alerts:	CentOS CESA-2009:1102 2009-06-19 CentOS CESA-2009:1101 2009-06-16 Red Hat RHSA-2009:1102-01 2009-06-15 Red Hat RHSA-2009:1101-01 2009-06-15 Gentoo 200606-10 2006-06-11 Debian DSA-1064-1 2006-05-19

Comments (1 posted)

Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of Service

Package(s):	cyrus-sasl	CVE #(s):	CVE-2006-1721
Created:	April 21, 2006	Updated:	September 4, 2007
Description:	Cyrus-SASL contains an unspecified vulnerability in the DIGEST-MD5 process that could lead to a Denial of Service. An attacker could possibly exploit this vulnerability by sending specially crafted data stream to the Cyrus-SASL server, resulting in a Denial of Service even if the attacker is not able to authenticate.
Alerts:	Red Hat RHSA-2007:0878-01 2007-09-04 Red Hat RHSA-2007:0795-01 2007-09-04 SuSE SUSE-SA:2006:025 2006-05-05 Fedora FEDORA-2006-515 2006-05-04 Debian DSA-1042-1 2006-04-25 Mandriva MDKSA-2006:073 2006-04-24 Ubuntu USN-272-1 2006-04-24 Gentoo 200604-09 2006-04-21

Comments (none posted)

dbus: denial of service

Package(s):	dbus	CVE #(s):	CVE-2006-6107
Created:	December 15, 2006	Updated:	February 12, 2007
Description:	Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service (lost process messages).
Alerts:	rPath rPSA-2006-0233-1 2007-02-09 Red Hat RHSA-2007:0008-01 2007-02-08 Ubuntu USN-401-1 2007-01-04 OpenPKG OpenPKG-SA-2006.041 2006-12-21 Fedora FEDORA-2006-1475 2006-12-19 Mandriva MDKSA-2006:233 2006-12-18 Fedora FEDORA-2006-1464 2006-12-14

Comments (none posted)

dovecot: index cache file handling error

Package(s):	dovecot	CVE #(s):	CVE-2006-5973
Created:	November 29, 2006	Updated:	May 8, 2007
Description:	The dovecot IMAP server has an error in its index cache file handling code which could be exploited by an authenticated user to execute arbitrary code. Only servers with the (non-default) mmap_disable=yes option setting are vulnerable.
Alerts:	Fedora FEDORA-2006-1504 2006-12-27 Fedora FEDORA-2006-1396 2006-12-18 rPath rPSA-2006-0220-1 2006-11-30 Ubuntu USN-387-1 2006-11-28

Comments (none posted)

drupal: code injection

Package(s):	drupal	CVE #(s):
Created:	January 10, 2007	Updated:	January 10, 2007
Description:	A failure to properly sanitize arguments allows an attacker to inject code into a Drupal system (advisory). There is also a denial of service vulnerability exploitable by users with the ability to post content on the site (advisory).
Alerts:	OpenPKG OpenPKG-SA-2007.003 2007-01-08

Comments (none posted)

elinks: arbitrary file access

Package(s):	elinks	CVE #(s):	CVE-2006-5925
Created:	November 16, 2006	Updated:	October 22, 2009
Description:	The elinks text-mode browser has an arbitrary file access vulnerability in the Elinks SMB protocol handler. If a user can be tricked into visiting a specially crafted web page, arbitrary files may be read or written with the user's permissions.
Alerts:	Ubuntu USN-851-1 2009-10-21 Gentoo 200701-27 2007-01-30 OpenPKG OpenPKG-SA-2006.043 2006-12-26 Debian DSA-1240-1 2006-12-21 Gentoo 200612-16 2006-12-14 Debian DSA-1228-1 2006-12-05 Debian DSA-1226-1 2006-12-03 Fedora FEDORA-2006-1278 2006-11-21 Fedora FEDORA-2006-1277 2006-11-21 Mandriva MDKSA-2006:216 2006-11-20 Red Hat RHSA-2006:0742-01 2006-11-15

Comments (none posted)

fetchmail: password disclosure and DOS

Package(s):	fetchmail	CVE #(s):	CVE-2006-5867 CVE-2006-5974
Created:	January 10, 2007	Updated:	March 16, 2007
Description:	Fetchmail suffers from a password disclosure vulnerability due to a failure to use secure protocols (advisory) and a denial of service vulnerability (advisory).
Alerts:	SuSE SUSE-SR:2007:004 2007-03-16 Debian DSA-1259-1 2007-02-14 Red Hat RHSA-2007:0018-01 2007-01-31 Slackware SSA:2007-024-01 2007-01-25 Gentoo 200701-13 2007-01-22 Fedora FEDORA-2007-042 2007-01-16 Fedora FEDORA-2007-041 2007-01-16 Mandriva MDKSA-2007:016 2006-01-15 Ubuntu USN-405-1 2007-01-11 rPath rPSA-2007-0003-1 2007-01-09 OpenPKG OpenPKG-SA-2007.004 2007-01-08

Comments (none posted)

ffmpeg: buffer overflows

Package(s):	ffmpeg	CVE #(s):	CVE-2006-4799 CVE-2006-4800
Created:	September 14, 2006	Updated:	May 28, 2007
Description:	the AVI processing code in FFmpeg has a number of buffer overflow vulnerabilities. If an attacker can trick a user into loading a specially crafted crafted AVI, arbitrary code can be executed with the user's privileges.
Alerts:	Gentoo 200609-09 2006-09-13

Comments (2 posted)

Mozilla stuff: multiple vulnerabilities

Package(s):	firefox thunderbird seamonkey	CVE #(s):	CVE-2006-6497 CVE-2006-6498 CVE-2006-6501 CVE-2006-6502 CVE-2006-6503 CVE-2006-6504 CVE-2006-6505
Created:	December 20, 2006	Updated:	March 12, 2007
Description:	The Mozilla Project has released new versions of firefox, thunderbird, and seamonkey to address the usual pile of security issues; see this announcement or this CERT advisory for details.
Alerts:	Debian DSA-1265-1 2007-03-10 Debian DSA-1258-1 2007-02-07 Debian DSA-1253-1 2006-01-27 Ubuntu USN-398-4 2007-01-27 SuSE SUSE-SA:2007:006 2007-01-12 Mandriva MDKSA-2007:011 2007-01-11 Mandriva MDKSA-2007:010 2007-01-11 Gentoo 200701-04 2007-01-10 Ubuntu USN-400-1 2007-01-04 Gentoo 200701-03 2007-01-04 Gentoo 200701-02 2007-01-04 Ubuntu USN-398-2 2007-01-03 Ubuntu USN-398-3 2007-01-04 Ubuntu USN-398-1 2007-01-02 Fedora FEDORA-2006-004 2007-01-02 rPath rPSA-2006-0234-2 2006-12-22 SuSE SUSE-SA:2006:080 2006-12-29 Slackware SSA:2006-357-03 2006-12-25 Slackware SSA:2006-357-01 2006-12-25 Slackware SSA:2006-357-02 2006-12-25 rPath rPSA-2006-0234-1 2006-12-22 Fedora FEDORA-2006-1499 2006-12-21 Fedora FEDORA-2006-1491 2006-12-20 Fedora FEDORA-2006-1492 2006-12-20 Red Hat RHSA-2006:0759-01 2006-12-19 Red Hat RHSA-2006:0760-01 2006-12-19 Red Hat RHSA-2006:0758-01 2006-12-19

Comments (none posted)

freeradius: several vulnerabilities

Package(s):	freeradius	CVE #(s):	CVE-2005-4745 CVE-2005-4746
Created:	August 8, 2006	Updated:	April 24, 2007
Description:	Several remote vulnerabilities have been discovered in freeradius, a high-performance RADIUS server, which may lead to SQL injection or denial of service.
Alerts:	Mandriva MDKSA-2007:092 2007-04-23 Debian DSA-1145-1 2006-08-08

Comments (none posted)

freetype: integer overflows

Package(s):	freetype	CVE #(s):	CVE-2006-0747 CVE-2006-1861 CVE-2006-2493 CVE-2006-2661 CVE-2006-3467
Created:	June 8, 2006	Updated:	June 1, 2010
Description:	The FreeType library has several integer overflow vulnerabilities. If a user can be tricked into installing a specially crafted font file, arbitrary code can be executed with the privilege of the user.
Alerts:	Gentoo 201006-01 2010-06-01 Fedora FEDORA-2009-5644 2009-05-28 Fedora FEDORA-2009-5558 2009-05-28 CentOS CESA-2009:0329 2009-05-22 Red Hat RHSA-2009:1062-01 2009-05-22 Red Hat RHSA-2009:0329-02 2009-05-22 Gentoo 200710-09 2007-10-09 Debian DSA-1178-1 2006-09-16 Ubuntu USN-341-1 2006-09-06 Gentoo 200609-04 2006-09-06 rPath rPSA-2006-0157-1 2006-08-25 Mandriva MDKSA-2006:148 2006-08-24 Red Hat RHSA-2006:0635-01 2006-08-21 Red Hat RHSA-2006:0634-01 2006-08-21 Fedora FEDORA-2006-912 2006-08-14 SuSE SUSE-SA:2006:045 2006-08-01 OpenPKG OpenPKG-SA-2006.017 2006-07-28 Ubuntu USN-324-1 2006-07-27 Slackware SSA:2006-207-02 2006-07-27 Mandriva MDKSA-2006:129 2006-07-20 Gentoo 200607-02 2006-07-09 SuSE SUSE-SA:2006:037 2006-06-27 Mandriva MDKSA-2006:099-1 2006-06-13 Mandriva MDKSA-2006:099 2006-06-12 rPath rPSA-2006-0100-1 2006-06-12 Debian DSA-1095-1 2006-06-10 Ubuntu USN-291-1 2006-06-08

Comments (none posted)

ftpd: privilege escalation

Package(s):	ftpd	CVE #(s):	CVE-2006-5778
Created:	November 10, 2006	Updated:	February 14, 2007
Description:	Ftpd is vulnerable to a privilege escalation attack, an incorrect seteuid() call can be used by an FTP user to gain unauthorized access to files or directories.
Alerts:	Gentoo 200611-05:02 2006-11-10 Debian DSA-1217-1 2006-11-20 Gentoo 200611-05 2006-11-10

Comments (none posted)

gcc: file overwrite vulnerability

Package(s):	gcc	CVE #(s):	CVE-2006-3619
Created:	September 6, 2006	Updated:	March 14, 2008
Description:	The fastjar utility found in the GNU compiler collection does not perform adequate file path checking, allowing the creation or overwriting of files outside of the current directory tree.
Alerts:	Mandriva MDVSA-2008:066 2007-03-13 Red Hat RHSA-2007:0473-01 2007-06-11 Red Hat RHSA-2007:0220-02 2007-05-01 Debian DSA-1170-1 2006-09-06

Comments (none posted)

gdb: buffer overflow

Package(s):	gdb	CVE #(s):	CVE-2006-4146
Created:	September 15, 2006	Updated:	June 12, 2007
Description:	A buffer overflow in dwarfread.c and dwarf2read.c debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
Alerts:	Red Hat RHSA-2007:0469-01 2007-06-11 Red Hat RHSA-2007:0229-02 2007-05-01 Ubuntu USN-356-1 2006-10-02 Fedora FEDORA-2006-975 2006-09-14

Comments (none posted)

gdm: improper file permissions

Package(s):	gdm	CVE #(s):	CVE-2006-1057
Created:	April 19, 2006	Updated:	May 2, 2007
Description:	The .ICEauthority file may be created with the wrong ownership and permissions; gdm 2.14.2 fixes the problem.
Alerts:	Red Hat RHSA-2007:0286-02 2007-05-01 Mandriva MDKSA-2006:083 2006-05-09 Ubuntu USN-278-1 2006-05-03 Debian DSA-1040-1 2006-04-24 Fedora FEDORA-2006-338 2006-04-19

Comments (none posted)

gedit: format string vulnerability

Package(s):	gedit	CVE #(s):	CAN-2005-1686
Created:	June 9, 2005	Updated:	February 5, 2009
Description:	A format string vulnerability has been discovered in gedit. Calling the program with specially crafted file names caused a buffer overflow, which could be exploited to execute arbitrary code with the privileges of the gedit user.
Alerts:	Fedora FEDORA-2009-1189 2009-01-29 Fedora FEDORA-2009-1187 2009-01-29 Debian DSA-753-1 2005-07-12 Mandriva MDKSA-2005:102 2005-06-15 Red Hat RHSA-2005:499-01 2005-06-13 Gentoo 200506-09 2005-06-11 Ubuntu USN-138-1 2005-06-09

Comments (1 posted)

geoip: path traversal

Package(s):	geoip	CVE #(s):	CVE-2007-0159
Created:	January 10, 2007	Updated:	January 24, 2007
Description:	Geoip fails to do sanity checking on returned filenames, opening up a path traversal vulnerability.
Alerts:	Ubuntu USN-412-1 2007-01-23 Mandriva MDKSA-2007:004 2007-01-08

Comments (none posted)

gnupg: stack overwrite

Package(s):	gnupg	CVE #(s):	CVE-2006-6235
Created:	December 12, 2006	Updated:	March 13, 2007
Description:	A "stack overwrite" vulnerability in GnuPG (gpg) allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.
Alerts:	Fedora FEDORA-2007-316 2007-03-12 Fedora FEDORA-2007-315 2007-03-12 SuSE SUSE-SA:2006:075 2006-12-13 Mandriva MDKSA-2006:228 2006-12-11

Comments (3 posted)

grip: buffer overflow

Package(s):	grip	CVE #(s):	CAN-2005-0706
Created:	March 10, 2005	Updated:	November 19, 2008
Description:	Grip, a CD ripper, has a buffer overflow vulnerability that can occur when the CDDB server returns more than 16 matches.
Alerts:	Fedora FEDORA-2008-9604 2008-11-19 Fedora FEDORA-2008-9521 2008-11-19 Fedora-Legacy FLSA:152919 2005-09-15 Mandriva MDKSA-2005:074 2005-04-20 Mandriva MDKSA-2005:075 2005-04-20 Gentoo 200504-07 2005-04-08 Mandrake MDKSA-2005:066 2005-04-01 Red Hat RHSA-2005:304-01 2005-03-28 Gentoo 200503-21 2005-03-17 Fedora FEDORA-2005-203 2005-03-09 Fedora FEDORA-2005-202 2005-03-09

Comments (none posted)

gv: stack-based buffer overflow

Package(s):	gv	CVE #(s):	CVE-2006-5864
Created:	November 20, 2006	Updated:	April 9, 2007
Description:	Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the DocumentMedia header.
Alerts:	Gentoo 200704-06 2007-04-06 Gentoo 200703-24 2007-03-26 Debian DSA-1243-1 2006-12-28 Debian DSA-1214-2 2006-12-27 Mandriva MDKSA-2006:229 2006-12-13 rPath rPSA-2006-0230-1 2006-12-12 Fedora FEDORA-2006-1438 2006-12-11 Fedora FEDORA-2006-1437 2006-12-11 Ubuntu USN-390-3 2006-12-06 Ubuntu USN-390-2 2006-12-06 Mandriva MDKSA-2006:214-1 2006-12-04 Ubuntu USN-390-1 2006-11-30 Gentoo 200611-20 2006-11-24 Debian DSA-1214-1 2006-11-20 Mandriva MDKSA-2006:214 2006-11-17

Comments (none posted)

gzip: multiple vulnerabilities

Package(s):	gzip	CVE #(s):	CVE-2006-4334 CVE-2006-4335 CVE-2006-4336 CVE-2006-4337 CVE-2006-4338
Created:	September 19, 2006	Updated:	January 20, 2010
Description:	Tavis Ormandy of the Google Security Team discovered two denial of service flaws in the way gzip expanded archive files. If a victim expanded a specially crafted archive, it could cause the gzip executable to hang or crash. Tavis Ormandy of the Google Security Team discovered several code execution flaws in the way gzip expanded archive files. If a victim expanded a specially crafted archive, it could cause the gzip executable to crash or execute arbitrary code.
Alerts:	Debian DSA-1974-1 2010-01-20 Fedora FEDORA-2007-557 2007-05-31 Gentoo 200611-24 2006-11-28 Fedora-Legacy FLSA:211760 2006-11-13 Fedora FEDORA-2006-989 2006-10-10 SuSE SUSE-SA:2006:056 2006-09-26 Gentoo 200609-13 2006-09-23 Trustix TSLSA-2006-0052 2006-09-22 Mandriva MDKSA-2006:167 2006-09-20 Slackware SSA:2006-262-01 2006-09-20 OpenPKG OpenPKG-SA-2006.020 2006-09-20 Debian DSA-1181-1 2006-09-19 rPath rPSA-2006-0170-1 2006-09-19 Ubuntu USN-349-1 2006-09-19 Red Hat RHSA-2006:0667-01 2006-09-19

Comments (1 posted)

gzip: arbitrary command execution

Package(s):	gzip	CVE #(s):	CAN-2005-0758
Created:	August 1, 2005	Updated:	January 10, 2007
Description:	zgrep in gzip before 1.3.5 does not handle shell metacharacters like '|' and '&' properly when they occurred in input file names. This could be exploited to execute arbitrary commands with user privileges if zgrep is run in an untrusted directory with specially crafted file names.
Alerts:	OpenPKG OpenPKG-SA-2007.002 2007-01-08 Mandriva MDKSA-2006:027 2006-01-30 Mandriva MDKSA-2006:026 2006-01-30 Fedora-Legacy FLSA:158801 2005-11-14 Fedora-Legacy FLSA:157696 2005-08-10 Ubuntu USN-161-1 2005-08-04 Ubuntu USN-158-1 2005-08-01

Comments (2 posted)

imagemagick: buffer overflows

Package(s):	imagemagick	CVE #(s):	CVE-2006-5868
Created:	November 28, 2006	Updated:	February 16, 2007
Description:	Daniel Kobras discovered multiple buffer overflows in ImageMagick's SGI file format decoder. By tricking a user or an automated system into processing a specially crafted SGI image, this could be exploited to execute arbitrary code with the user's privileges.
Alerts:	Red Hat RHSA-2007:0015-01 2007-02-15 Mandriva MDKSA-2006:223 2006-12-01 Ubuntu USN-386-1 2006-11-28

Comments (1 posted)

ImageMagick: buffer overflows

Package(s):	ImageMagick	CVE #(s):	CVE-2006-5456
Created:	October 31, 2006	Updated:	March 8, 2007
Description:	Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
Alerts:	Slackware SSA:2007-066-06 2007-03-08 rPath rPSA-2007-0029-1 2007-02-08 rPath rPSA-2006-0218-1 2006-11-27 Gentoo 200611-19 2006-11-24 Fedora FEDORA-2006-1285 2006-11-22 Fedora FEDORA-2006-1286 2006-11-22 Debian DSA-1213-1 2006-11-19 SuSE SUSE-SA:2006:066 2006-11-14 Gentoo 200611-07 2006-11-13 Ubuntu USN-372-1 2006-11-01 Mandriva MDKSA-2006:193 2006-10-30

Comments (2 posted)

imlib2: arbitrary code execution

Package(s):	imlib2	CVE #(s):	CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809
Created:	November 6, 2006	Updated:	August 13, 2007
Description:	M. Joonas Pihlaja discovered that imlib2 did not sufficiently verify the validity of ARGB, JPG, LBM, PNG, PNM, TGA, and TIFF images. If a user were tricked into viewing or processing a specially crafted image with an application that uses imlib2, the flaws could be exploited to execute arbitrary code with the user's privileges.
Alerts:	Mandriva MDKSA-2007:156 2007-08-10 Gentoo 200612-20 2006-12-20 Fedora FEDORA-EXTRAS-2006-004 2006-11-09 Mandriva MDKSA-2006:198-1 2006-11-06 Mandriva MDKSA-2006:198 2006-11-06 Ubuntu USN-376-2 2006-11-06 Ubuntu USN-376-1 2006-11-03

Comments (none posted)

kdegraphics: stack overflow

Package(s):	kdegraphics	CVE #(s):	CVE-2006-6297
Created:	December 12, 2006	Updated:	January 13, 2007
Description:	A stack overflow in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service (stack consumption) via a crafted EXIF section in a JPEG file, which results in an infinite recursion.
Alerts:	Gentoo 200701-05 2007-01-12 Mandriva MDKSA-2006:227 2006-12-11

Comments (none posted)

kdelibs: integer overflow

Package(s):	kdelibs	CVE #(s):	CVE-2006-4811
Created:	October 18, 2006	Updated:	March 5, 2007
Description:	The KDE khtml library can pass untrusted parameters into Qt, allowing a hostile user to trigger an integer overflow there and execute arbitrary code.
Alerts:	Gentoo 200703-06 2007-03-04 Gentoo 200611-02 2006-11-06 Red Hat RHSA-2006:0725-01 2006-11-01 Debian DSA-1200-1 2006-10-30 Slackware SSA:2006-298-01 2006-10-26 rPath rPSA-2006-0195-2 2006-10-18 Mandriva MDKSA-2006:186 2006-10-19 rPath rPSA-2006-0195-1 2006-10-18 Red Hat RHSA-2006:0720-01 2006-10-18

Comments (none posted)

kdelibs: kate backup file permission leak

Package(s):	kdelibs kate kwrite	CVE #(s):	CAN-2005-1920
Created:	July 19, 2005	Updated:	September 21, 2010
Description:	Kate / Kwrite, as shipped with KDE 3.2.x up to including 3.4.0, creates a file backup before saving a modified file. These backup files are created with default permissions, even if the original file had more strict permissions set. See this advisory for more information.
Alerts:	Gentoo 200611-21 2006-11-27 Debian DSA-804-2 2005-11-10 Debian DSA-804-1 2005-09-08 Red Hat RHSA-2005:612-01 2005-07-27 Ubuntu USN-150-1 2005-07-21 Mandriva MDKSA-2005:122 2005-07-20 Fedora FEDORA-2005-594 2005-07-19

Comments (1 posted)

kernel: denial of service

Package(s):	kernel	CVE #(s):	CVE-2006-4623
Created:	October 18, 2006	Updated:	November 14, 2007
Description:	The kernel DVB layer can be caused to crash with maliciously-formatted unidirectional lightweight encapsulation (ULE) data.
Alerts:	Ubuntu USN-489-1 2007-07-19 rPath rPSA-2006-0194-1 2006-10-17

Comments (none posted)

kernel: denial of service

Package(s):	kernel	CVE #(s):	CVE-2006-4535 CVE-2006-4538
Created:	September 18, 2006	Updated:	January 5, 2009
Description:	Sridhar Samudrala discovered a local denial of service vulnerability in the handling of SCTP sockets. By opening such a socket with a special SO_LINGER value, a local attacker could exploit this to crash the kernel. (CVE-2006-4535) Kirill Korotaev discovered that the ELF loader on the ia64 and sparc platforms did not sufficiently verify the memory layout. By attempting to execute a specially crafted executable, a local user could exploit this to crash the kernel. (CVE-2006-4538)
Alerts:	Red Hat RHSA-2008:0787-01 2009-01-05 Red Hat RHSA-2007:1049-01 2007-12-03 Mandriva MDKSA-2006:182 2006-10-11 Red Hat RHSA-2006:0689-01 2006-10-05 Debian DSA-1184-2 2006-09-26 Debian DSA-1184-1 2006-09-25 Debian DSA-1183-1 2006-09-25 Ubuntu USN-347-1 2006-09-18

Comments (none posted)

kernel: denial of service

Package(s):	kernel	CVE #(s):	CVE-2006-4572 CVE-2006-4997
Created:	November 6, 2006	Updated:	January 17, 2007
Description:	Some vulnerabilities were discovered in the Linux 2.6 kernel: There are possibly exploitable bugs in the netfilter for IPv6 code. (CVE-2006-4572) The ATM subsystem of the Linux kernel could allow a remote attacker to cause a Denial of Service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed. (CVE-2006-4997)
Alerts:	Red Hat RHSA-2007:0013-01 2007-01-17 Red Hat RHSA-2007:0012-01 2007-01-17 Debian DSA-1237-1 2006-12-17 rPath rPSA-2006-0204-1 2006-11-09 Mandriva MDKSA-2006:197 2006-11-03

Comments (none posted)

kernel: denial of service by memory consumption

Package(s):	kernel	CVE #(s):	CVE-2006-2936
Created:	July 17, 2006	Updated:	November 14, 2007
Description:	The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the driver can handle, which causes the data to be queued.
Alerts:	SuSE SUSE-SA:2007:035 2007-06-14 Mandriva MDKSA-2006:151 2006-08-25 Mandriva MDKSA-2006:150 2006-08-25 Ubuntu USN-331-1 2006-08-03 rPath rPSA-2006-0130-1 2006-07-17

Comments (none posted)

kernel: denial of service

Package(s):	kernel	CVE #(s):	CVE-2006-5757
Created:	November 13, 2006	Updated:	November 14, 2007
Description:	From the MOKB-05-11-2006 advisory: "The ISO9660 filesystem handling code of the Linux 2.6.x kernel fails to properly handle corrupted data structures, leading to an exploitable denial of service condition. This particular vulnerability seems to be caused by a race condition and a signedness issue. When performing a read operation on a corrupted ISO9660 fs stream, the isofs_get_blocks() function will enter an infinite loop when __find_get_block_slow() callback from sb_getblk() fails ("due to various races between file io on the block device and getblk")."
Alerts:	Fedora FEDORA-2007-599 2007-06-21 Fedora FEDORA-2006-1223 2006-11-12 Fedora FEDORA-2006-1221 2006-11-10

Comments (none posted)

kernel: denial of service

Package(s):	kernel	CVE #(s):	CVE-2006-2935 CVE-2006-4145 CVE-2006-3745
Created:	September 1, 2006	Updated:	July 30, 2008
Description:	Previous versions of the kernel package are subject to several vulnerabilities. Certain malformed UDF filesystems can cause the system to crash (denial of service). Malformed CDROM firmware or USB storage devices (such as USB keys) could cause system crash (denial of service), and if they were intentionally malformed, can cause arbitrary code to run with elevated privileges. In addition, the SCTP protocol is subject to a remote system crash (denial of service) attack.
Alerts:	Red Hat RHSA-2008:0665-01 2008-07-24 SuSE SUSE-SA:2007:053 2007-10-12 SuSE SUSE-SA:2006:064 2006-11-10 Red Hat RHSA-2006:0710-01 2006-10-19 SuSE SUSE-SA:2006:057 2006-09-28 Trustix TSLSA-2006-0051 2006-09-15 Ubuntu USN-346-2 2006-09-14 Ubuntu USN-346-1 2006-09-14 rPath rPSA-2006-0162-1 2006-08-31

Comments (none posted)

kernel: multiple vulnerabilities

Package(s):	kernel	CVE #(s):	CVE-2006-5749 CVE-2006-4814 CVE-2006-6106
Created:	January 5, 2007	Updated:	January 8, 2009
Description:	A security issue has been reported in Linux kernel due to an error in drivers/isdn/i4l/isdn_ppp.c as the "isdn_ppp_ccp_reset_alloc_state()" function never initializes an event timer before scheduling it with the "add_timer()" function. The mincore function in the kernel does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock. Another vulnerability has been reported in Linux kernel caused by a boundary error within the handling of incoming CAPI messages in net/bluetooth/cmtp/capi.c. This can be exploited to overwrite certain Kernel data structures.
Alerts:	Red Hat RHSA-2008:0787-01 2009-01-05 Red Hat RHSA-2009:0001-01 2009-01-08 CentOS CESA-2008:0211 2008-05-07 Red Hat RHSA-2008:0211-01 2008-05-07 Debian DSA-1503 2008-02-22 Debian DSA-1503-2 2008-03-06 SuSE SUSE-SA:2007:035 2007-06-14 SuSE SUSE-SA:2007:053 2007-10-12 Ubuntu USN-416-2 2007-03-01 Ubuntu USN-416-1 2007-02-01 rPath rPSA-2007-0031-1 2007-02-09 Mandriva MDKSA-2007:040 2007-02-07 Red Hat RHSA-2007:0014-01 2007-01-30 Mandriva MDKSA-2007:025 2007-01-23 Fedora FEDORA-2007-058 2007-01-18 Mandriva MDKSA-2007:012 2006-01-12 Trustix TSLSA-2007-0002 2007-01-05

Comments (none posted)

koffice: integer overflow

Package(s):	koffice	CVE #(s):	CVE-2006-6120
Created:	November 30, 2006	Updated:	February 20, 2007
Description:	The KOffice office suite has an integer overflow vulnerability. If an attacker can trick a user into opening a specially crafted PowerPoint (PPT) file, KOffice can be caused to crash or possibly execute arbitrary code with the user's privileges.
Alerts:	Red Hat RHSA-2007:0010-01 2007-02-20 Slackware SSA:2006-357-04 2006-12-25 Gentoo 200612-05 2006-12-10 Mandriva MDKSA-2006:222 2006-12-01 Ubuntu USN-388-1 2006-11-29

Comments (none posted)

krb5: uninitialized pointers

Package(s):	krb5	CVE #(s):	CVE-2006-6143 CVE-2006-3084
Created:	January 10, 2007	Updated:	July 7, 2010
Description:	The kdamind daemon can, in some situations, perform operations on uninitialized pointers. This bug could conceivably open up the system to a code execution attack by an unauthenticated remote attacker, but it appears to be difficult to exploit. See this advisory for details.
Alerts:	Mandriva MDVSA-2010:129 2010-07-07 Gentoo 200701-21 2007-01-24 Ubuntu USN-408-1 2007-01-15 rPath rPSA-2007-0006-1 2007-01-11 Mandriva MDKSA-2007:008 2006-01-10 SuSE SUSE-SA:2007:004 2007-01-10 OpenPKG OpenPKG-SA-2007.006 2007-01-10 Fedora FEDORA-2007-033 2007-01-09 Fedora FEDORA-2007-034 2007-01-09

Comments (1 posted)

krb5: local privilege escalation

Package(s):	krb5	CVE #(s):	CVE-2006-3083
Created:	August 9, 2006	Updated:	July 7, 2010
Description:	Some kerberos applications fail to check the results of setuid() calls, with the result that, if that call fails, they could continue to execute as root after thinking they had switched to a nonprivileged user. A local attacker who can cause these calls to fail (through resource exhaustion, presumably) could exploit this bug to gain root privileges.
Alerts:	Mandriva MDVSA-2010:129 2010-07-07 SuSE SUSE-SR:2006:022 2006-09-08 Gentoo 200608-21 2006-08-23 Ubuntu USN-334-1 2006-08-16 Fedora FEDORA-2006-905 2006-08-09 Mandriva MDKSA-2006:139 2006-09-09 Gentoo 200608-15 2006-08-10 rPath rPSA-2006-0150-1 2006-08-09 Red Hat RHSA-2006:0612-01 2006-08-08 Debian DSA-1146-1 2006-08-09

Comments (none posted)

libgadu: memory alignment bug

Package(s):	libgadu	CVE #(s):	CAN-2005-2370
Created:	July 29, 2005	Updated:	June 25, 2007
Description:	Szymon Zygmunt and Michal Bartoszkiewicz discovered a memory alignment error in libgadu (from ekg, console Gadu Gadu client, an instant messaging program) which is included in gaim, a multi-protocol instant messaging client, as well. This can not be exploited on the x86 architecture but on others, e.g. on Sparc and lead to a bus error, in other words a denial of service.
Alerts:	Debian DSA-813-1 2005-09-15 Red Hat RHSA-2005:627-01 2005-08-09 Debian DSA-769-1 2005-07-29

Comments (none posted)

libgd2: denial of service

Package(s):	libgd2	CVE #(s):	CVE-2006-2906
Created:	June 14, 2006	Updated:	January 16, 2007
Description:	Certain GIF images can cause libgd2 to go into an infinite loop, adversely affecting the performance of image processing applications.
Alerts:	rPath rPSA-2007-0008-1 2007-01-15 Debian DSA-1117-1 2006-07-21 Mandriva MDKSA-2006:113 2006-06-27 Mandriva MDKSA-2006:112 2006-06-27 Ubuntu USN-298-1 2006-06-13

Comments (none posted)

libgsf: heap buffer overflow

Package(s):	libgsf	CVE #(s):	CVE-2006-4514
Created:	November 30, 2006	Updated:	January 11, 2007
Description:	The GNOME library libgsf, which is used for writing structured file formats, has a heap buffer overflow that can be exploited for the purpose of executing arbitrary code.
Alerts:	Red Hat RHSA-2007:0011-01 2007-01-11 SuSE SUSE-SA:2006:076 2006-12-14 rPath rPSA-2006-0232-1 2006-12-14 Gentoo 200612-13 2006-12-12 Fedora FEDORA-2006-1417 2006-12-07 Fedora FEDORA-2006-1399 2006-12-05 Ubuntu USN-391-1 2006-12-04 Mandriva MDKSA-2006:220 2006-11-30 Debian DSA-1221-1 2006-11-30

Comments (none posted)

libmodplug: boundary errors

Package(s):	libmodplug	CVE #(s):	CVE-2006-4192
Created:	December 11, 2006	Updated:	May 4, 2011
Description:	Luigi Auriemma has reported various boundary errors in load_it.cpp and a boundary error in the "CSoundFile::ReadSample()" function in sndfile.cpp. A remote attacker can entice a user to read crafted modules or ITP files, which may trigger a buffer overflow resulting in the execution of arbitrary code with the privileges of the user running the application.
Alerts:	CentOS CESA-2011:0477 2011-05-04 Red Hat RHSA-2011:0477-01 2011-05-02 Ubuntu USN-521-1 2007-09-27 Mandriva MDKSA-2007:001 2007-01-02 Gentoo 200612-04 2006-12-10

Comments (none posted)

libpng: buffer overflow

Package(s):	libpng	CVE #(s):	CVE-2006-3334
Created:	July 19, 2006	Updated:	December 15, 2008
Description:	In pngrutil.c, the function png_decompress_chunk() allocates insufficient space for an error message, potentially overwriting stack data, leading to a buffer overflow.
Alerts:	Gentoo 200812-15 2008-12-14 Mandriva MDKSA-2006:213 2006-11-16 rPath rPSA-2006-0133-1 2006-07-19 Gentoo 200607-06 2006-07-19

Comments (none posted)

libpng: heap based buffer overflow

Package(s):	libpng	CVE #(s):	CVE-2006-0481
Created:	February 13, 2006	Updated:	December 15, 2008
Description:	A heap based buffer overflow bug was found in the way libpng strips alpha channels from a PNG image. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash or execute arbitrary code when the file is opened by a victim.
Alerts:	Gentoo 200812-15 2008-12-14 Red Hat RHSA-2006:0205-01 2006-02-13

Comments (1 posted)

libtiff: buffer overflow

Package(s):	libtiff	CVE #(s):	CVE-2006-2193
Created:	June 15, 2006	Updated:	September 1, 2008
Description:	The t2p_write_pdf_string function in libtiff 3.8.2 and earlier is vulnerable to a buffer overflow. Attackers can use a TIFF file with UTF-8 characters in the DocumentName tag to overflow a buffer, causing a denial of service, and possibly the execution of arbitrary code.
Alerts:	CentOS CESA-2008:0848 2008-08-30 Red Hat RHSA-2008:0848-01 2008-08-28 Fedora FEDORA-2006-952 2006-09-05 SuSE SUSE-SA:2006:044 2006-08-01 Gentoo 200607-03 2006-07-09 SuSE SUSE-SR:2006:014 2006-06-20 Trustix TSLSA-2006-0036 2006-06-16 Mandriva MDKSA-2006:102 2006-06-14

Comments (none posted)

libvncserver: authentication bypass

Package(s):	libvncserver	CVE #(s):	CVE-2006-2450
Created:	August 4, 2006	Updated:	March 19, 2007
Description:	LibVNCServer fails to properly validate protocol types effectively letting users decide what protocol to use, such as "Type 1 - None". LibVNCServer will accept this security type, even if it is not offered by the server.
Alerts:	Gentoo 200703-19 2007-03-18 Gentoo 200608-12 2006-08-07 Gentoo 200608-05 2006-08-04

Comments (none posted)

libxml2 - arbitrary code execution

Package(s):	libxml2	CVE #(s):	CAN-2004-0110
Created:	February 26, 2004	Updated:	August 19, 2009
Description:	Yuuichi Teranishi discovered a flaw in libxml2 versions prior to 2.6.6. When fetching a remote resource via FTP or HTTP, libxml2 uses special parsing routines. These routines can overflow a buffer if passed a very long URL. If an attacker is able to find an application using libxml2 that parses remote resources and allows them to influence the URL, then this flaw could be used to execute arbitrary code.
Alerts:	Fedora FEDORA-2009-8594 2009-08-15 Fedora FEDORA-2009-8582 2009-08-15 Fedora-Legacy FLSA:1324 2004-07-19 Conectiva CLA-2004:836 2004-03-31 Gentoo 200403-01 2004-03-06 Trustix TSLSA-2004-0010 2004-03-05 OpenPKG OpenPKG-SA-2004.003 2004-03-05 Netwosix NW-2004-0004 2004-03-04 Debian DSA-455-1 2004-03-03 Mandrake MDKSA-2004:018 2004-03-03 Red Hat RHSA-2004:091-02 2004-03-03 Whitebox WBSA-2004:090-01 2004-03-01 Red Hat RHSA-2004:090-01 2004-02-26 Fedora FEDORA-2004-087 2004-02-25 Red Hat RHSA-2004:091-01 2004-02-26

Comments (none posted)

libxml2: multiple buffer overflows

Package(s):	libxml2	CVE #(s):	CAN-2004-0989
Created:	October 28, 2004	Updated:	August 19, 2009
Description:	libxml2 prior to version 2.6.14 has multiple buffer overflow vulnerabilities, if a local user passes a specially crafted FTP URL, arbitrary code may be executed.
Alerts:	Fedora FEDORA-2009-8594 2009-08-15 Fedora FEDORA-2009-8582 2009-08-15 Ubuntu USN-89-1 2005-02-28 Red Hat RHSA-2004:650-01 2004-12-16 Conectiva CLA-2004:890 2004-11-18 Red Hat RHSA-2004:615-01 2004-11-12 Mandrake MDKSA-2004:127 2004-11-04 Debian DSA-582-1 2004-11-02 Gentoo 200411-05 2004-11-02 Trustix TSLSA-2004-0055 2004-10-29 OpenPKG OpenPKG-SA-2004.050 2004-10-31 Ubuntu USN-10-1 2004-10-28 Fedora FEDORA-2004-353 2004-10-28

Comments (none posted)

linux-restricted-modules: nVidia driver vulnerability

Package(s):	linux-restricted-modules	CVE #(s):	CVE-2006-5379
Created:	November 6, 2006	Updated:	January 11, 2007
Description:	Derek Abdine discovered that the NVIDIA Xorg driver did not correctly verify the size of buffers used to render text glyphs. When displaying very long strings of text, the Xorg server would crash. If a user were tricked into viewing a specially crafted series of glyphs, this flaw could be exploited to run arbitrary code with root privileges.
Alerts:	Mandriva MDKSA-2007:007 2007-01-10 Gentoo 200611-03 2006-11-07 Ubuntu USN-377-1 2006-11-03

Comments (none posted)

lynx: arbitrary command execution

Package(s):	lynx	CVE #(s):	CVE-2005-2929
Created:	November 14, 2005	Updated:	September 14, 2009
Description:	An arbitrary command execute bug was found in the lynx "lynxcgi:" URI handler. An attacker could create a web page redirecting to a malicious URL which could execute arbitrary code as the user running lynx.
Alerts:	Gentoo 200909-15 2009-09-12 Fedora-Legacy FLSA:152832 2005-12-17 OpenPKG OpenPKG-SA-2005.026 2005-12-03 Fedora FEDORA-2005-1079 2005-11-14 Fedora FEDORA-2005-1078 2005-11-14 Gentoo 200511-09 2005-11-13 Mandriva MDKSA-2005:211 2005-11-12 Red Hat RHSA-2005:839-01 2005-11-11

Comments (none posted)

mono: source disclosure attack

Package(s):	mono	CVE #(s):	CVE-2006-6104
Created:	December 21, 2006	Updated:	January 17, 2007
Description:	The Mono ASP.NET server XSP has a source disclosure attack vulnerability. A malicious user can use this to acquire the source code of a server-side application.
Alerts:	Gentoo 200701-12 2007-01-16 Fedora FEDORA-2007-067 2007-01-12 Fedora FEDORA-2007-068 2007-01-12 SuSE SUSE-SA:2007:002 2007-01-04 Ubuntu USN-397-1 2006-12-20 Mandriva MDKSA-2006:234 2006-12-20

Comments (none posted)

mysql: format string bug

Package(s):	mysql	CVE #(s):	CVE-2006-3469
Created:	July 21, 2006	Updated:	July 30, 2008
Description:	Jean-David Maillefer discovered a format string bug in the date_format() function's error reporting. By calling the function with invalid arguments, an authenticated user could exploit this to crash the server.
Alerts:	Red Hat RHSA-2008:0768-01 2008-07-24 Slackware SSA:2006-211-01 2006-07-31 Ubuntu USN-321-1 2006-07-21

Comments (none posted)

MySQL: privilege violations

Package(s):	mysql	CVE #(s):	CVE-2006-4031 CVE-2006-4226
Created:	August 25, 2006	Updated:	July 30, 2008
Description:	MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy (CVE-2006-4031). MySQL 4.1 before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions (CVE-2006-4226).
Alerts:	Red Hat RHSA-2008:0768-01 2008-07-24 Red Hat RHSA-2008:0364-01 2008-05-21 Red Hat RHSA-2007:0152-01 2007-04-03 Red Hat RHSA-2007:0083-01 2007-02-19 Fedora FEDORA-2006-1298 2006-11-27 Fedora FEDORA-2006-1297 2006-11-27 Ubuntu USN-338-1 2006-09-05 Mandriva MDKSA-2006:149 2006-08-24

Comments (none posted)

MySQL: logging bypass

Package(s):	mysql	CVE #(s):	CVE-2006-0903
Created:	April 4, 2006	Updated:	May 21, 2008
Description:	MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.
Alerts:	Red Hat RHSA-2008:0364-01 2008-05-21 Ubuntu USN-274-2 2006-05-15 Ubuntu USN-274-1 2006-04-27 Mandriva MDKSA-2006:064 2006-04-03

Comments (2 posted)

nbd: arbitrary code execution

Package(s):	nbd	CVE #(s):	CVE-2005-3534
Created:	January 6, 2006	Updated:	March 7, 2011
Description:	Kurt Fitzner discovered that the NBD (network block device) server did not correctly verify the maximum size of request packets. By sending specially crafted large request packets, a remote attacker who is allowed to access the server could exploit this to execute arbitrary code with root privileges.
Alerts:	SuSE SUSE-SR:2006:001 2006-01-13 Ubuntu USN-237-1 2006-01-06

Comments (none posted)

ncompress: buffer underflow

Package(s):	ncompress	CVE #(s):	CVE-2006-1168
Created:	August 10, 2006	Updated:	February 21, 2012
Description:	The ncompress compression utility has a missing boundary check. A local user can use a maliciously created file to cause a a .bss buffer underflow.
Alerts:	Gentoo 200610-03 2006-10-06 Red Hat RHSA-2006:0663-01 2006-09-12 Mandriva MDKSA-2006:140 2006-08-09 Debian DSA-1149-1 2006-08-10 Red Hat RHSA-2012:0308-03 2012-02-21 Scientific Linux SL-busy-20120321 2012-03-21

Comments (none posted)

openldap: security bypass

Package(s):	openldap	CVE #(s):	CVE-2006-4600
Created:	September 29, 2006	Updated:	June 12, 2007
Description:	slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).
Alerts:	Red Hat RHSA-2007:0430-01 2007-06-11 Red Hat RHSA-2007:0310-02 2007-05-01 Trustix TSLSA-2006-0055 2006-10-06 rPath rPSA-2006-0176-1 2006-09-29 Mandriva MDKSA-2006:171 2006-09-28

Comments (none posted)

openoffice.org: integer overflows

Package(s):	openoffice.org	CVE #(s):	CVE-2006-5870
Created:	January 4, 2007	Updated:	January 13, 2007
Description:	The OpenOffice.org WMF file processor has several integer overflow bugs. Maliciously crafted WMF files can be used to cause OpenOffice.org to execute arbitrary code when the files are opened by a user.
Alerts:	Gentoo 200701-07 2007-01-12 Ubuntu USN-406-1 2007-01-12 Mandriva MDKSA-2007:006 2007-01-10 rPath rPSA-2007-0001-1 2007-01-08 Debian DSA-1246-1 2007-01-08 SuSE SUSE-SA:2007:001 2007-01-04 Red Hat RHSA-2007:0001-01 2007-01-03

Comments (none posted)

OpenSSH: denial of service

Package(s):	openssh	CVE #(s):	CVE-2006-4925 CVE-2006-5052
Created:	October 6, 2006	Updated:	November 15, 2007
Description:	packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL. An unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
Alerts:	Red Hat RHSA-2007:0703-02 2007-11-15 Red Hat RHSA-2007:0540-04 2007-11-07 Fedora FEDORA-2007-394 2007-04-03 Gentoo 200611-06 2006-11-13 SuSE SUSE-SA:2006:062 2006-10-20 rPath rPSA-2006-0185-1 2006-10-05

Comments (none posted)

openssh: privilege separation issue

Package(s):	openssh	CVE #(s):	CVE-2006-5794
Created:	November 8, 2006	Updated:	April 5, 2007
Description:	From the OpenSSH 4.5 announcement: "Fix a bug in the sshd privilege separation monitor that weakened its verification of successful authentication. This bug is not known to be exploitable in the absence of additional vulnerabilities."
Alerts:	Fedora FEDORA-2007-395 2007-04-03 Fedora FEDORA-2006-1215 2006-11-20 Fedora FEDORA-2006-1214 2006-11-20 SuSE SUSE-SR:2006:026 2006-11-17 Trustix TSLSA-2006-0063 2006-11-15 Red Hat RHSA-2006:0738-01 2006-11-15 rPath rPSA-2006-0207-1 2006-11-09 Mandriva MDKSA-2006:204 2006-11-08 OpenPKG OpenPKG-SA-2006.032 2006-11-08

Comments (none posted)

openssh: remote denial of service

Package(s):	openssh	CVE #(s):	CVE-2006-4924 CVE-2006-5051
Created:	September 27, 2006	Updated:	September 17, 2008
Description:	Openssh 4.4 fixes some security issues, including a pre-authentication denial of service, an unsafe signal hander and on portable OpenSSH a GSSAPI authentication abort could be used to determine the validity of usernames on some platforms.
Alerts:	Debian DSA-1638-1 2008-09-16 Debian DSA-1212-1 2006-11-15 Fedora FEDORA-2006-1011 2006-10-03 Debian DSA-1189-1 2006-10-04 Mandriva MDKSA-2006:179 2006-10-03 Ubuntu USN-355-1 2006-10-02 OpenPKG OpenPKG-SA-2006.022 2006-10-01 Slackware SSA:2006-272-02 2006-09-29 Red Hat RHSA-2006:0698-01 2006-09-28 Red Hat RHSA-2006:0697-01 2006-09-28 Gentoo 200609-17:02 2006-09-27 rPath rPSA-2006-0174-1 2006-09-27 Gentoo 200609-17 2006-09-27

Comments (none posted)

php: several vulnerabilities

Package(s):	php	CVE #(s):	CVE-2006-4481 CVE-2006-4484 CVE-2006-4485
Created:	September 8, 2006	Updated:	June 13, 2008
Description:	The file_exists and imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings (CVE-2006-4481). A buffer overflow in the LWZReadByte function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array (CVE-2006-4484). The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read (CVE-2006-4485).
Alerts:	SuSE SUSE-SR:2008:013 2008-06-13 Mandriva MDVSA-2008:077 2007-03-26 SuSE SUSE-SR:2008:005 2008-03-06 Red Hat RHSA-2008:0146-01 2008-02-28 Fedora FEDORA-2008-1643 2008-02-13 Foresight FLEA-2008-0007-1 2008-02-11 Fedora FEDORA-2008-1122 2008-02-05 Fedora FEDORA-2008-1131 2008-02-05 SuSE SUSE-SR:2008:003 2008-02-07 Mandriva MDVSA-2008:038 2007-02-07 rPath rPSA-2008-0046-1 2008-02-06 Gentoo 200802-01 2008-02-06 rPath rPSA-2006-0182-1 2006-10-05 SuSE SUSE-SA:2006:052 2006-09-21 Red Hat RHSA-2006:0669-01 2006-09-21 Mandriva MDKSA-2006:162 2006-09-07

Comments (1 posted)

php: buffer overflows

Package(s):	php	CVE #(s):	CVE-2006-5465
Created:	November 3, 2006	Updated:	January 18, 2010
Description:	The Hardened-PHP Project discovered buffer overflows in htmlentities/htmlspecialchars internal routines to the PHP Project. Of course the whole purpose of these functions is to be filled with user input. (The overflow can only be when UTF-8 is used)
Alerts:	Mandriva MDVSA-2010:007 2010-01-15 SuSE SUSE-SA:2006:067 2006-11-15 rPath rPSA-2006-0205-1 2006-11-09 Red Hat RHSA-2006:0731-01 2006-11-10 Red Hat RHSA-2006:0730-01 2006-11-06 Debian DSA-1206-1 2006-11-06 Fedora FEDORA-2006-1169 2006-11-06 Fedora FEDORA-2006-1168 2006-11-06 Slackware SSA:2006-307-01 2006-11-06 OpenPKG OpenPKG-SA-2006.028 2006-11-06 Ubuntu USN-375-1 2006-11-02 Mandriva MDKSA-2006:196 2006-11-02

Comments (none posted)

phpbb2: missing input sanitizing

Package(s):	phpbb2	CVE #(s):	CVE-2006-1896
Created:	May 22, 2006	Updated:	February 11, 2008
Description:	It was discovered that phpbb2, a web based bulletin board, insufficiently sanitizes values passed to the "Font Color 3" setting, which might lead to the execution of injected code by admin users.
Alerts:	Debian DSA-1066-1 2006-05-20

Comments (none posted)

phpbb2: multiple vulnerabilities

Package(s):	phpbb2	CVE #(s):	CVE-2005-3310 CVE-2005-3415 CVE-2005-3416 CVE-2005-3417 CVE-2005-3418 CVE-2005-3419 CVE-2005-3420 CVE-2005-3536 CVE-2005-3537
Created:	December 22, 2005	Updated:	February 11, 2008
Description:	The phpbb2 web forum has a number of vulnerabilities including: a web script injection problem, a protection mechanism bypass, a security check bypass, a remote global variable bypass, cross site scripting vulnerabilities, an SQL injection vulnerability, a remote regular expression modification problem, missing input sanitizing, and a missing request validation problem.
Alerts:	Debian DSA-925-1 2005-12-22

Comments (none posted)

postgresql: SQL injection

Package(s):	postgresql	CVE #(s):	CVE-2006-2313 CVE-2006-2314
Created:	May 24, 2006	Updated:	June 6, 2007
Description:	The PostgreSQL team has put out a set of "urgent updates" (in the form of the 7.3.15, 7.4.13, 8.0.8, and 8.1.4 releases) closing a newly-discovered set of SQL injection issues. Details about the problem can be found on the technical information page; in short: multi-byte encodings can be used to defeat normal string sanitizing techniques. The update fixes one problem related to invalid multi-byte characters, but punts on another by simply disallowing the old, unsafe technique of escaping single quotes with a backslash.
Alerts:	Fedora FEDORA-2007-0249 2007-06-06 Trustix TSLSA-2006-0059 2006-10-27 Gentoo 200607-04 2006-07-09 SuSE SUSE-SA:2006:030 2006-06-09 Ubuntu USN-288-3 2006-06-09 Ubuntu USN-288-2 2006-06-09 Mandriva MDKSA-2006:098 2006-06-07 Debian DSA-1087-1 2006-06-03 Ubuntu USN-288-1 2006-05-29 rPath rPSA-2006-0080-1 2006-05-24 Red Hat RHSA-2006:0526-02 2006-05-23 Fedora FEDORA-2006-578 2006-05-23 Fedora FEDORA-2006-579 2006-05-23

Comments (1 posted)

proftpd: denial of service

Package(s):	proftpd	CVE #(s):	CVE-2006-5815
Created:	November 17, 2006	Updated:	January 24, 2007
Description:	A denial of service (DoS) vulnerability exists in the FTP server ProFTPD, up to and including version 1.3.0. The flaw is due to both a potential bus error and a definitive buffer overflow in the code which determines the FTP command buffer size limit. The vulnerability can be exploited only if the "CommandBufferSize" directive is explicitly used in the server configuration.
Alerts:	Mandriva MDKSA-2006:217-2 2007-01-23 Trustix TSLSA-2006-0070 2006-12-08 Slackware SSA:2006-335-02 2006-12-04 Debian DSA-1222-2 2006-12-01 Gentoo 200611-26 2006-11-30 Mandriva MDKSA-2006:217-1 2006-11-30 Debian DSA-1222-1 2006-11-30 Trustix TSLSA-2006-0066 2006-11-28 Debian DSA-1218-1 2006-11-21 Mandriva MDKSA-2006:217 2006-11-20 OpenPKG OpenPKG-SA-2006.035 2006-11-17

Comments (none posted)

proftpd: denial of service

Package(s):	proftpd	CVE #(s):	CVE-2005-4816
Created:	January 10, 2007	Updated:	January 10, 2007
Description:	The proftpd FTP server is vulnerable to a denial of service attack when Radius authentication is in use.
Alerts:	Debian DSA-1245-1 2006-01-07

Comments (none posted)

proftpd: stack-based buffer overflow

Package(s):	proftpd	CVE #(s):	CVE-2006-6563
Created:	December 18, 2006	Updated:	February 14, 2007
Description:	A vulnerability exists in the FTP server ProFTPD, versions up to and including 1.3.0a. The vulnerability is caused by a stack-based buffer overflow in the "pr_ctrls_recv_request" function of the "Controls" feature. This is an optional feature of ProFTPD server which is by default disabled in OpenPKG and probably other distributions.
Alerts:	Gentoo 200702-02 2007-02-13 Trustix TSLSA-2006-0074 2006-12-22 Mandriva MDKSA-2006:232 2006-12-18 OpenPKG OpenPKG-SA-2006.039 2006-12-18

Comments (1 posted)

quake: buffer overflow

Package(s):	quake3-bin	CVE #(s):	CVE-2006-2236
Created:	May 10, 2006	Updated:	January 12, 2009
Description:	Games based on the Quake 3 engine are vulnerable to a buffer overflow exploitable by a hostile game server.
Alerts:	Gentoo 200901-06 2009-01-11 Gentoo 200605-12 2006-05-10

Comments (none posted)

rpm: arbitrary code execution

Package(s):	rpm	CVE #(s):	CVE-2006-5466
Created:	November 6, 2006	Updated:	August 28, 2007
Description:	An error was found in the RPM library's handling of query reports. In some locales, certain RPM packages would cause the library to crash. If a user was tricked into querying a specially crafted RPM package, the flaw could be exploited to execute arbitrary code with the user's privileges.
Alerts:	Fedora FEDORA-2007-668 2007-08-27 Gentoo 200611-08 2006-11-13 Mandriva MDKSA-2006:200 2006-11-07 Ubuntu USN-378-1 2006-11-04

Comments (none posted)

shadow-utils: mailbox creation vulnerability

Package(s):	shadow-utils	CVE #(s):	CVE-2006-1174
Created:	May 25, 2006	Updated:	June 12, 2007
Description:	The useradd tool from the shadow-utils package has a potential security problem. When a new user's mailbox is created, the permissions are set to random garbage from the stack, potentially allowing the file to be read or written during the time before fchmod() is called.
Alerts:	Red Hat RHSA-2007:0431-01 2007-06-11 rPath rPSA-2007-0096-1 2007-05-11 Red Hat RHSA-2007:0276-02 2007-05-01 Gentoo 200606-02 2006-06-07 Mandriva MDKSA-2006:090 2006-05-24

Comments (none posted)

squirrelmail: multiple cross-site scripting vulnerabilities

Package(s):	squirrelmail	CVE #(s):	CVE-2006-6142
Created:	December 11, 2006	Updated:	January 31, 2007
Description:	Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the mailto parameter in webmail.php, the session and delete_draft parameters in compose.php, and unspecified vectors involving "a shortcoming in the magicHTML filter."
Alerts:	Red Hat RHSA-2007:0022-01 2007-01-31 Fedora FEDORA-2007-089 2007-01-17 Fedora FEDORA-2007-088 2007-01-17 Debian DSA-1241-1 2006-12-25 rPath rPSA-2006-0231-1 2006-12-12 Mandriva MDKSA-2006:226 2006-12-11

Comments (none posted)

unzip: long file name buffer overflow

Package(s):	unzip	CVE #(s):	CVE-2005-4667
Created:	February 6, 2006	Updated:	May 2, 2007
Description:	A buffer overflow in UnZip 5.50 and earlier allows local users to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.
Alerts:	Red Hat RHSA-2007:0203-02 2007-05-01 Fedora-Legacy FLSA:180159 2006-04-04 Debian DSA-1012-1 2006-03-21 Mandriva MDKSA-2006:050 2006-02-27 Ubuntu USN-248-2 2006-02-15 Ubuntu USN-248-1 2006-02-13 Fedora FEDORA-2006-098 2006-02-06

Comments (1 posted)

w3c-libwww: possible stack overflow

Package(s):	w3c-libwww	CVE #(s):	CVE-2005-3183
Created:	October 14, 2005	Updated:	May 2, 2007
Description:	xtensive testing of libwww's handling of multipart/byteranges content from HTTP/1.1 servers revealed multiple logical flaws and bugs in Library/src/HTBound.c
Alerts:	Red Hat RHSA-2007:0208-02 2007-05-01 Ubuntu USN-220-1 2005-12-01 Mandriva MDKSA-2005:210 2005-11-09 Fedora FEDORA-2005-953 2005-10-07 Fedora FEDORA-2005-952 2005-10-07

Comments (1 posted)

w3m: denial of service

Package(s):	w3m	CVE #(s):
Created:	December 28, 2006	Updated:	January 15, 2007
Description:	The W3M textual web browser has a format string vulnerability. If the run-time options -dump or -backend are used, W3M can be made to crash if certain escape sequences occur in the Common Name of a web site X.509 certificate.
Alerts:	Fedora FEDORA-2007-077 2007-01-15 Fedora FEDORA-2007-078 2007-01-15 Gentoo 200701-06 2007-01-12 SuSE SUSE-SA:2007:005 2007-01-10 Ubuntu USN-399-1 2007-01-03 OpenPKG OpenPKG-SA-2006.044 2006-12-28

Comments (none posted)

wordpress: SQL injection

Package(s):	wordpress	CVE #(s):
Created:	January 10, 2007	Updated:	January 10, 2007
Description:	Stefan Esser discovered an SQL injection vulnerability in wordpress exploitable through the use of different character sets.
Alerts:	OpenPKG OpenPKG-SA-2007.005 2007-01-08

Comments (none posted)

xine-lib: buffer overflow

Package(s):	xine-lib	CVE #(s):	CVE-2006-6172
Created:	December 5, 2006	Updated:	June 5, 2007
Description:	A buffer overflow was discovered in the Real Media input plugin in xine-lib. If a user were tricked into loading a specially crafted stream from a malicious server, the attacker could execute arbitrary code with the user's privileges.
Alerts:	Mandriva MDKSA-2007:112 2007-06-04 Gentoo 200702-11 2007-02-27 Debian DSA-1244-1 2006-12-28 Gentoo 200612-02 2006-12-09 SuSE SUSE-SR:2006:028 2006-12-08 Mandriva MDKSA-2006:224 2006-12-05 Ubuntu USN-392-1 2006-12-04

Comments (none posted)

xine-lib: buffer overflow

Package(s):	xine-lib	CVE #(s):	CVE-2006-1664
Created:	April 27, 2006	Updated:	February 27, 2008
Description:	xine-lib does an improper input data boundary check on MPEG streams. A specially crafted MPEG file can be created that can cause arbitrary code execution when the file is accessed.
Alerts:	Gentoo 200802-12 2008-02-26 Gentoo 200604-16 2006-04-26

Comments (none posted)

xine-ui: format string vulnerabilities

Package(s):	xine-ui	CVE #(s):	CVE-2006-2230
Created:	June 9, 2006	Updated:	January 24, 2007
Description:	Several format string vulnerabilities have been discovered in xine-ui, the user interface of the xine video player, which may cause a denial of service.
Alerts:	Gentoo 200701-18 2007-01-23 Debian DSA-1093-1 2006-06-08

Comments (none posted)

xinit: race condition

Package(s):	xinit	CVE #(s):	CVE-2006-5214
Created:	October 17, 2006	Updated:	August 9, 2007
Description:	A race condition allows local users to see error messages generated during another user's X session. This could allow potentially sensitive information to be leaked.
Alerts:	Fedora FEDORA-2007-659 2007-08-08 Fedora FEDORA-2007-1409 2007-08-02 Ubuntu USN-364-1 2006-10-16

Comments (1 posted)

X.org: local privilege escalations

Package(s):	xorg-x11	CVE #(s):	CVE-2006-4447
Created:	August 28, 2006	Updated:	April 30, 2007
Description:	Several X.org libraries and X.org itself contain system calls to set*uid() functions, without checking their result. Local users could deliberately exceed their assigned resource limits and elevate their privileges after an unsuccessful set*uid() system call. This requires resource limits to be enabled on the machine.
Alerts:	Gentoo 200704-22 2007-04-27 Mandriva MDKSA-2006:160 2006-08-31 Gentoo 200608-25 2006-08-28

Comments (none posted)

X.Org: buffer overflow

Package(s):	xorg-x11-server xorg-x11	CVE #(s):	CVE-2006-1526
Created:	May 3, 2006	Updated:	January 10, 2007
Description:	There is a buffer overflow in the Xrender extension of the X.Org server; any process which is able to connect to the server may be able to exploit this overflow to run arbitrary code. Since the X server runs as root on most systems, this vulnerability could be exploited to gain root access. See the X.Org advisory for more information.
Alerts:	Fedora-Legacy FLSA:190777 2006-06-06 Trustix TSLSA-2006-0024 2006-05-05 Mandriva MDKSA-2006:081-1 2006-05-04 Ubuntu USN-280-1 2006-05-04 Slackware SSA:2006-123-01 2006-05-04 Red Hat RHSA-2006:0451-01 2006-05-04 SuSE SUSE-SA:2006:023 2006-05-03 Mandriva MDKSA-2006:081 2006-05-02 Gentoo 200605-02 2006-05-02

Comments (none posted)

X.org: integer overflows

Package(s):	xorg, xorg-server	CVE #(s):	CVE-2006-6101 CVE-2006-6102 CVE-2006-6103
Created:	January 10, 2007	Updated:	March 8, 2007
Description:	A number of integer overflows have turned up in the X.org server. Some of these overflows involve calls to alloca(), and thus make corruption of the stack relatively easy. This vulnerability is exploitable by anybody who can make a connection to the server, meaning that it is a local root exploit in most settings. See this advisory for details.
Alerts:	Slackware SSA:2007-066-02 2007-03-08 Gentoo 200701-25 2007-01-27 Debian DSA-1249-1 2007-01-15 SuSE SUSE-SA:2007:008 2007-01-12 rPath rPSA-2007-0005-1 2007-01-09 Red Hat RHSA-2007:0002-01 2007-01-10 Red Hat RHSA-2007:0003-01 2007-01-10 Mandriva MDKSA-2007-005 2007-01-09 Fedora FEDORA-2007-035 2007-01-09 Fedora FEDORA-2007-036 2007-01-09 Ubuntu USN-403-1 2007-01-09

Comments (none posted)

xpdf: buffer overflow

Package(s):	xpdf	CVE #(s):	CAN-2005-0064
Created:	January 19, 2005	Updated:	March 15, 2007
Description:	iDEFENSE has found yet another xpdf buffer overflow; see this advisory for details.
Alerts:	Fedora FEDORA-2007-1219 2007-03-14 Gentoo 200506-06 2005-06-09 Red Hat RHSA-2005:026-01 2005-03-16 Red Hat RHSA-2005:066-01 2005-02-15 Red Hat RHSA-2005:057-01 2005-02-15 Red Hat RHSA-2005:053-01 2005-02-15 Red Hat RHSA-2005:034-01 2005-02-15 Fedora-Legacy FLSA:2353 2005-02-10 Fedora-Legacy FLSA:2352 2005-02-10 Gentoo 200502-10 2005-02-09 Red Hat RHSA-2005:049-01 2005-02-01 SuSE SUSE-SR:2005:002 2005-01-26 Red Hat RHSA-2005:059-01 2005-01-26 Mandrake MDKSA-2005:020 2005-01-25 Mandrake MDKSA-2005:019 2005-01-25 Mandrake MDKSA-2005:016 2005-01-25 Mandrake MDKSA-2005:021 2005-01-25 Mandrake MDKSA-2005:018 2005-01-25 Mandrake MDKSA-2005:017 2005-01-25 Fedora FEDORA-2005-061 2005-01-25 Fedora FEDORA-2005-062 2005-01-25 Fedora FEDORA-2005-059 2005-01-25 Fedora FEDORA-2005-060 2005-01-25 Conectiva CLA-2005:921 2005-01-25 Fedora FEDORA-2004-049 2005-01-24 Fedora FEDORA-2004-048 2005-01-24 Gentoo 200501-32 2005-01-23 Gentoo 200501-31 2005-01-23 Gentoo 200501-30 2005-01-22 Gentoo 200501-28 2005-01-21 Fedora FEDORA-2005-052 2005-01-20 Fedora FEDORA-2005-051 2005-01-20 Ubuntu USN-64-1 2005-01-19 Debian DSA-645-1 2005-01-19 Debian DSA-648-1 2005-01-19

Comments (1 posted)

Page editor: Rebecca Sobol

Kernel development

Brief items

Kernel release status

The current 2.6 prepatch is 2.6.20-rc5, released by Linus on January 12. It contains a number of fixes, and might be the last -rc release before 2.6.20. No patches have hit the mainline git repository since -rc5; this situation will probably not change until after Linus returns from linux.conf.au.

The current -mm tree is 2.6.20-rc4-mm1. Recent changes to -mm include the e1000 development tree, the HID development tree, unionfs, and the asynchronous filesystem I/O patches.

Comments (none posted)

Kernel development news

LCA: The state of the Nouveau project

In any conference, there comes a time when one has to wonder what the people who do the talk scheduling were thinking. For lca2007, that moment came when your editor realized that the talks on OLPC (Jim Gettys), real time (Ted Ts'o), and Nouveau were all scheduled together. Nouveau won out, but it was not an easy decision.

The Nouveau project is an effort to develop a set of free 3D drivers for NVidia chipsets. NVidia has long annoyed the free software community with its refusal to release free drivers or programming information for its video chipsets. The Nouveau folks have had enough of that, and they are doing something about it. Dave Airlie used his slot at linux.conf.au to talk about the project and its current status.

Nouveau got its start in February 2005, though serious work did not begin until June of that year. The project was announced at FOSDEM 2006, at which point others started to help. There are currently about six developers doing serious work on Nouveau.

The project is relying on reverse engineering for the information needed to write free drivers. To that end, the developers have put together a set of tools. At the top of the list is renouveau, which is designed to reveal the commands sent to the card in response to specific operations. Using the existing binary drivers, renouveau sets up a context, then scans the process's mappings until it finds the command FIFO. It then requests an operation and sees how the FIFO changes. With enough operations, a pretty good idea of how the adapter is programmed to specific ends can be had. This was not a trivial tool, and the better part of a year was put into its development.

Renouveau is useful for examining the FIFO, but it doesn't help with reads and writes to I/O registers. For that, there's another set of tools, starting with valgrind-mmt - a version of valgrind designed to trap I/O memory operations. Libsegfault is a modified version of mmap() which doesn't actually do the mappings as the caller would like; it traps the subsequent segmentation faults and dumps out the operations. There is another tool, called kmmio, which performs a similar task for register operations done in kernel space. Finally, the project uses a BIOS tracer which runs BIOS code in x86emu and traps I/O register accesses.

All of the information obtained from these tools is supplemented with hints from the old, free nv driver. There is also, says Dave, information "which shouldn't be there" to be found on some Russian web sites.

Where has all of this information led the project? Basic tasks, like the allocation of instance RAM and FIFO initialization, are working. Hardware context switching works - on little-endian machines. There is 2D support derived from the nv driver; it offers basic EXA and RandR 1.2 support. On the 3D front, the Mesa TCL (transform, clipping, and lighting) driver mostly works. Textures and objects do not, however. It is possible to run glxgears on nv4x chips. It has taken some time to get to this point, but Dave thinks that things will start to move a lot faster from here.

The next milestone would be to run Quake 3. That is, says Dave, an obligatory step on the roadmap. Getting there will involve texture support, a better memory manager, and better locking in the kernel DRM code. The developers (Dave in particular) are aiming for RandR 1.2 multi-head support. Once all of this is in place, the nouveau driver will have reached a reasonably capable state.

There are a lot of people asking when this will be; Dave says that the project's IRC channel is often overwhelmed by spectators looking for news. There is no wish to push the code out ahead of its time; among other things, that would nail down the API between the kernel and the X server, making things harder to change. The current hope is to have some sort alpha release toward the end of 2007.

For people wanting to help, Dave had a simple message: they need developers. There's not much for people who can't work on driver code to do at this point. Graphics drivers, he says, are not as hard as people think. Finally, he addressed the issue of the $10K pledge for the project. It rather took the developers by surprise; they had not endorsed this drive, and had held some doubts as to whether it would be successful. How the pledge money will be handled is still being worked out; it looks like it will mostly be used for hardware purchases.

Lack of support for 3D video adapters has stalled the community for years; there has been a long wait in the hope that the vendors would come to their senses. That wait is just about over. The Nouveau project (along with various others) shows that we have the resources to figure out how our hardware works, even in the face of complex devices and uncooperative vendors. It would be better if we did not have to take things into our own hands this way, but it is nice to see how well we can do it when the need arises.

Comments (42 posted)

KHB: Recovering Device Drivers: From Sandboxing to Surviving

Drivers are the dominant source of crashes and bugs in operating systems. This is especially disturbing given the proportion of operating system code that is driver code. In Linux, approximately two thirds of the source lines of code are in drivers (depending on the version). Full-time kernel developers often bemoan the quality of code in drivers; one study [PDF] found that the bug rate in drivers was actually three to seven times higher than in core kernel code. Binary drivers (hopefully being phased out) are an especially nasty source of bugs. Unfortunately, the companies and programmers writing these driver have neither the expertise nor the incentive to write beautiful, clean, well-behaved drivers.

Efforts to limit the effects of driver bugs on the core operating system have been going on for decades, with limited success. One of the motivations behind microkernels was the desire to isolate parts of the kernel so that they could not, for example, stomp on the memory of other parts of the kernel. Safe behind the message passing interface between microkernel modules, each module only had to validate the input from other modules in order to ensure that external bugs would not interfere with its proper working. In reality, completely validating messages is harder than it looks, and the performance overhead of message passing, MMU tricks, and the code to work around them turned out to be prohibitive. A variety of more limited sandboxing techniques, isolating only likely troublemakers such as device drivers, reduced operating system crashes significantly, but left the system with a non-functioning, possibly crucial device (such as the network card). While the OS was still up and running, the system reliability, viewed from an application standpoint, was not particularly improved. From the point of view of a web server, a crashed system and a system with no network access due to a safely sandboxed but crashed network driver are practically identical.

The Solution

What we really need is a lightweight, unintrusive system to not only catch device driver errors, but to recover and restart the device driver while simultaneously covering for the device while it is re-initializing. Michael Swift, Muthukaruppan Annamalai, Brian Bershad, and Henry Levy implemented such a system for Linux 2.4.18, as described in their 2004 OSDI paper, Recovering Device Drivers [PDF]. The key idea in this paper is shadow drivers, a driver that wraps around the original hardware driver and records requests sent to it, monitors the health of the driver, and restarts the driver if it crashes, replaying any missed requests collected while the driver was restarting. You can think of a shadow driver as a substitute teacher temporarily filling in while the real driver is out sick. Each class of device drivers (sound, network, disk, etc.) requires the writing of only one shadow driver.

Shadow drivers are built on the Nooks driver isolation system, outlined in a paper in the 19th SOSP, Improving the Reliability of Commodity Operating Systems [PDF]. Nooks provides most of the benefits of the microkernel architecture for a relatively low cost. The four main services are (1) memory isolation - drivers run with most of the kernel memory read-only, (2) wrappers around data transfer between the kernel and drivers, (3) tracking of kernel objects used by the driver, and (4) a recovery manager. The Nooks architecture is simplified by the (perfectly reasonable) assumption that kernel modules are not malicious, but merely buggy, and so doesn't need to take special steps to, for example, prevent a device driver from deliberately altering memory permissions.

When a shadow driver detects that a device driver has failed, it begins to actively proxy for the device driver (queuing up requests, etc.) and begins recovery of the driver. First it safely shuts down the driver, which may require some delicate work given that the driver has crashed. For example, it may need to explicitly disable interrupts on the device since a crashed driver can no longer acknowledge them. Then it reloads the driver and reconfigures it. The shadow driver will have recorded any prior configuration requests (such as "set full-duplex mode") and replays them if necessary. Then it replays any queued up requests that accumulated during the recover phase. Depending on the device and type of request, it may make more sense to drop the requests; for example, a shadow driver for sound will just drop any requests to play sound, since they are real-time and aren't useful to save up to play when the driver recovers. (With the Audigy sound card and driver evaluated in the paper, this resulted in a gap in the audio of about one-tenth of a second.)

The authors compared vanilla Linux, Nooks, and shadow drivers by adding bugs by hand to three drivers, a network driver (e1000), a sound card driver (audigy), and a disk driver (ide-disk). The bugs were based on real bugs reported on mailing lists in order to be as realistic as possible. They then tested the reliability of the system from the application point of view on each system. The results are summarized in the table below; shadow drivers were able to transparently recover from all tested driver bugs which normally crash the entire machine, without interrupting the application.

Application Behavior
Device Driver	Application Activity	Linux-Native	Linux-Nooks	Linux-SD
Sound	mp3 player	CRASH	MALFUNCTION	SUCCESS
(audigy driver)	audio recorder	CRASH	MALFUNCTION	SUCCESS
	speech synthesizer	CRASH	SUCCESS	SUCCESS
	strategy game	CRASH	MALFUNCTION	SUCCESS
Network	network file transfer	CRASH	SUCCESS	SUCCESS
(e1000 driver)	remote window manager	CRASH	SUCCESS	SUCCESS
	network analyzer	CRASH	MALFUNCTION	SUCCESS
IDE	compiler	CRASH	CRASH	SUCCESS
(ide-disk driver)	encoder	CRASH	CRASH	SUCCESS
	database	CRASH	CRASH	SUCCESS

What does this mean for Linux?

Linux developers have a number of ways to reduce the impact of buggy drivers. Given that the limiting factor is usually human eyeball time, we should choose methods that rely on automation as much as possible. Some of these methods are automatic bug checking, compiler-level checks, and code-level asserts. Adding an automatic driver sandbox and recovery system would be an excellent investment in kernel developer time in return for overall system stability, particularly for distribution vendors. Even implementing a subset of the features in the shadow driver system would be helpful. More than likely, Linux 2.6 has frameworks which would easily lend themselves to implementing some of these features.

Comments (8 posted)

RCU and Unloadable Modules

RCU (read-copy update) is a synchronization mechanism that can be thought of as a replacement for read-writer locking (among other things), but with very low-overhead readers that are immune to deadlock, priority inversion, and unbounded latency. RCU read-side critical sections are delimited by rcu_read_lock() and rcu_read_unlock(), which, in non-CONFIG_PREEMPT kernels, generate no code whatsoever.

This means that RCU writers are unaware of the presence of concurrent readers, so that RCU updates to shared data must be undertaken quite carefully, leaving an old version of the data structure in place until all pre-existing readers have finished. These old versions are needed because such readers might hold a reference to them. RCU updates can therefore be rather expensive, and RCU is thus best suited for read-mostly situations.

How can an RCU writer possibly determine when all readers are finished, given that readers might well leave absolutely no trace of their presence? There is a synchronize_rcu() primitive that blocks until all pre-existing readers have completed. An updater wishing to delete an element p from a linked list might do the following, while holding an appropriate lock, of course:

list_del_rcu(p); synchronize_rcu(); kfree(p); But the above code cannot be used in IRQ context -- the call_rcu() primitive must be used instead. This primitive takes a pointer to an rcu_head struct placed within the RCU-protected data structure and another pointer to a function that may be invoked later to free that structure. Code to delete an element p from the linked list from IRQ context might then be as follows: list_del_rcu(p); call_rcu(&p->rcu, p_callback); Since call_rcu() never blocks, this code can safely be used from within IRQ context. The function p_callback() might be defined as follows: static void p_callback(struct rcu_head *rp) { struct pstruct *p = container_of(rp, struct pstruct, rcu); kfree(p); }

Unloading Modules That Use call_rcu()

But what if p_callback is defined in an unloadable module?

If we unload the module while some RCU callbacks are pending, the CPUs executing these callbacks are going to be severely disappointed when they are later invoked, as fancifully depicted on the right.

We could try placing a synchronize_rcu() in the module-exit code path, but this is not sufficient. Although synchronize_rcu() does wait for a grace period to elapse, it does not wait for the callbacks to complete.

One might be tempted to try several back-to-back synchronize_rcu() calls, but this is still not guaranteed to work. If there is a very heavy RCU-callback load, then some of the callbacks might be deferred in order to allow other processing to proceed. Such deferral is required in realtime kernels in order to avoid excessive scheduling latencies.

rcu_barrier()

We instead need the rcu_barrier() primitive. This primitive is similar to synchronize_rcu(), but instead of waiting solely for a grace period to elapse, it also waits for all outstanding RCU callbacks to complete. Pseudo-code using rcu_barrier() is as follows:

1. Prevent any new RCU callbacks from being posted.
2. Execute rcu_barrier().
3. Allow the module to be unloaded.

Quick Quiz #1: Why is there no srcu_barrier()?

Quick Quiz #2: Why is there no rcu_barrier_bh()?

The rcutorture module makes use of rcu_barrier in its exit function as follows:

1 static void 2 rcu_torture_cleanup(void) 3 { 4 int i; 5 6 fullstop = 1; 7 if (shuffler_task != NULL) { 8 VERBOSE_PRINTK_STRING("Stopping rcu_torture_shuffle task"); 9 kthread_stop(shuffler_task); 10 } 11 shuffler_task = NULL; 12 13 if (writer_task != NULL) { 14 VERBOSE_PRINTK_STRING("Stopping rcu_torture_writer task"); 15 kthread_stop(writer_task); 16 } 17 writer_task = NULL; 18 19 if (reader_tasks != NULL) { 20 for (i = 0; i < nrealreaders; i++) { 21 if (reader_tasks[i] != NULL) { 22 VERBOSE_PRINTK_STRING( 23 "Stopping rcu_torture_reader task"); 24 kthread_stop(reader_tasks[i]); 25 } 26 reader_tasks[i] = NULL; 27 } 28 kfree(reader_tasks); 29 reader_tasks = NULL; 30 } 31 rcu_torture_current = NULL; 32 33 if (fakewriter_tasks != NULL) { 34 for (i = 0; i < nfakewriters; i++) { 35 if (fakewriter_tasks[i] != NULL) { 36 VERBOSE_PRINTK_STRING( 37 "Stopping rcu_torture_fakewriter task"); 38 kthread_stop(fakewriter_tasks[i]); 39 } 40 fakewriter_tasks[i] = NULL; 41 } 42 kfree(fakewriter_tasks); 43 fakewriter_tasks = NULL; 44 } 45 46 if (stats_task != NULL) { 47 VERBOSE_PRINTK_STRING("Stopping rcu_torture_stats task"); 48 kthread_stop(stats_task); 49 } 50 stats_task = NULL; 51 52 /* Wait for all RCU callbacks to fire. */ 53 rcu_barrier(); 54 55 rcu_torture_stats_print(); /* -After- the stats thread is stopped! */ 56 57 if (cur_ops->cleanup != NULL) 58 cur_ops->cleanup(); 59 if (atomic_read(&n_rcu_torture_error)) 60 rcu_torture_print_module_parms("End of test: FAILURE"); 61 else 62 rcu_torture_print_module_parms("End of test: SUCCESS"); 63 } Line 6 sets a global variable that prevents any RCU callbacks from re-posting themselves. This will not be necessary in most cases, since RCU callbacks rarely include calls to call_rcu(). However, the rcutorture module is an exception to this rule, and therefore needs to set this global variable.

Lines 7-50 stop all the kernel tasks associated with the rcutorture module. Therefore, once execution reaches line 53, no more rcutorture RCU callbacks will be posted. The rcu_barrier() call on line 53 waits for any pre-existing callbacks to complete.

Then lines 55-62 print status and do operation-specific cleanup, and then return, permitting the module-unload operation to be completed.

Quick Quiz #3: Is there any other situation where rcu_barrier() might be required?

Your module might have additional complications. For example, if your module invokes call_rcu() from timers, you will need to first cancel all the timers, and only then invoke rcu_barrier() to wait for any remaining RCU callbacks to complete.

Implementing rcu_barrier()

Dipankar Sarma's implementation of rcu_barrier() makes use of the fact that RCU callbacks are never reordered once queued on one of the per-CPU queues. His implementation queues an RCU callback on each of the per-CPU callback queues, and then waits until they have all started executing, at which point, all earlier RCU callbacks are guaranteed to have completed.

The code for rcu_barrier() is as follows:

1 void rcu_barrier(void) 2 { 3 BUG_ON(in_interrupt()); 4 /* Take cpucontrol mutex to protect against CPU hotplug */ 5 mutex_lock(&rcu_barrier_mutex); 6 init_completion(&rcu_barrier_completion); 7 atomic_set(&rcu_barrier_cpu_count, 0); 8 on_each_cpu(rcu_barrier_func, NULL, 0, 1); 9 wait_for_completion(&rcu_barrier_completion); 10 mutex_unlock(&rcu_barrier_mutex); 11 } Line 3 verifies that the caller is in process context, and lines 5 and 10 use rcu_barrier_mutex to ensure that only one rcu_barrier() is using the global completion and counters at a time, which are initialized on lines 6 and 7. Line 8 causes each CPU to invoke rcu_barrier_func(), which is shown below. Note that the final "1" in on_each_cpu()'s argument list ensures that all the calls to rcu_barrier_func() will have completed before on_each_cpu() returns. Line 9 then waits for the completion.

The rcu_barrier_func() runs on each CPU, where it invokes call_rcu() to post an RCU callback, as follows:

1 static void rcu_barrier_func(void *notused) 2 { 3 int cpu = smp_processor_id(); 4 struct rcu_data *rdp = &per_cpu(rcu_data, cpu); 5 struct rcu_head *head; 6 7 head = &rdp->barrier; 8 atomic_inc(&rcu_barrier_cpu_count); 9 call_rcu(head, rcu_barrier_callback); 10 } Lines 3 and 4 locate RCU's internal per-CPU rcu_data structure, which contains the struct rcu_head that needed for the later call to call_rcu(). Line 7 picks up a pointer to this struct rcu_head, and line 8 increments a global counter. This counter will later be decremented by the callback. Line 9 then registers the rcu_barrier_callback() on the current CPU's queue.

The rcu_barrier_callback() function simply atomically decrements the rcu_barrier_cpu_count variable and finalizes the completion when it reaches zero, as follows:

1 static void rcu_barrier_callback(struct rcu_head *notused) 2 { 3 if (atomic_dec_and_test(&rcu_barrier_cpu_count)) 4 complete(&rcu_barrier_completion); 5 }

Quick Quiz #4: What happens if CPU 0's rcu_barrier_func() executes immediately (thus incrementing rcu_barrier_cpu_count to the value one), but the other CPU's rcu_barrier_func() invocations are delayed for a full grace period? Couldn't this result in rcu_barrier() returning prematurely?

rcu_barrier() Summary

The rcu_barrier() primitive has seen relatively little use, since most code using RCU is in the core kernel rather than in modules. However, if you are using RCU from an unloadable module, you need to use rcu_barrier() so that your module may be safely unloaded.

Answers to Quick Quizzes

Quick Quiz #1: Why is there no srcu_barrier()?

Since there is no call_srcu(), there can be no outstanding SRCU callbacks. Therefore, there is no need to wait for them.

Quick Quiz #2: Why is there no rcu_barrier_bh()?

Because no one has needed it yet. As soon as someone needs to use call_rcu_bh() from within an unloadable module, they will need an rcu_barrier_bh().

Quick Quiz #3: Is there any other situation where rcu_barrier() might be required?

Interestingly enough, rcu_barrier() was not originally implemented for module unloading. Nikita Danilov was using RCU in a filesystem, which resulted in a similar situation at filesystem-unmount time. Dipankar Sarma coded up rcu_barrier() in response, so that Nikita could invoke it during the filesystem-unmount process.

Much later, yours truly hit the RCU module-unload problem when implementing rcutorture, and found that rcu_barrier() solves this problem as well.

Quick Quiz #4: What happens if CPU 0's rcu_barrier_func() executes immediately (thus incrementing rcu_barrier_cpu_count to the value one), but the other CPU's rcu_barrier_func() invocations are delayed for a full grace period? Couldn't this result in rcu_barrier() returning prematurely?

This cannot happen. The reason is that on_each_cpu() has its last argument, the wait flag, set to "1". This flag is passed through to smp_call_function() and further to smp_call_function_on_cpu(), causing this latter to spin until the cross-CPU invocation of rcu_barrier_func() has completed. This by itself would prevent a grace period from completing on non-CONFIG_PREEMPT kernels, since each CPU must undergo a context switch (or other quiescent state) before the grace period can complete. However, this is of no use in CONFIG_PREEMPT kernels.

Therefore, on_each_cpu() disables preemption across its call to smp_call_function() and also across the local call to rcu_barrier_func(). This prevents the local CPU from context switching, again preventing grace periods from completing. This means that all CPUs have executed rcu_barrier_func() before the first rcu_barrier_callback() can possibly execute, in turn preventing rcu_barrier_cpu_count from prematurely reaching zero.

Currently, -rt implementations of RCU keep but a single global queue for RCU callbacks, and thus do not suffer from this problem. However, when the -rt RCU eventually does have per-CPU callback queues, things will have to change. One simple change is to add an rcu_read_lock() before line 8 of rcu_barrier() and an rcu_read_unlock() after line 8 of this same function. If you can think of a better change, please let me know!

Comments (5 posted)

Patches and updates

Kernel trees

• Linus Torvalds: Linux v2.6.20-rc5. (January 12, 2007)

• Andrew Morton: 2.6.20-rc4-mm1. (January 12, 2007)

Core kernel code

• Paul E. McKenney: RCU priority boosting that survives moderate testing. (January 16, 2007)

• Dipankar Sarma: RCU: various patches. (January 17, 2007)

• Evgeniy Polyakov: Kevent, network AIO system calls implementation.. (January 17, 2007)

• Nate Diller: aio: make struct kiocb private. (January 17, 2007)

• Nadia.Derbey@bull.net: Automatice kernel tunables (AKT). (January 17, 2007)

Development tools

• Josef Sipek: Guilt v0.18. (January 15, 2007)

• Samo Pogacnik: LTT for 2.6.19. (January 15, 2007)

• Alan Stern: Kwatch: kernel watchpoints using CPU debug registers. (January 17, 2007)

Device drivers

• Bartlomiej Zolnierkiewicz: new IDE quilt tree. (January 12, 2007)

• jayakumar.acpi@gmail.com: input: Atlas button driver. (January 15, 2007)

• Jaya Kumar: [PATCH/RFC 2.6.20-rc4 1/1] fbdev, mm: hecuba/E-Ink fbdev driver. (January 15, 2007)

Filesystems and block I/O

• Peter Zijlstra: nfs: fix congestion control. (January 17, 2007)

• sho@tnes.nec.co.jp: ext4 online defrag (ver 0.2). (January 17, 2007)

Janitorial

• Arjan van de Ven: Patch series to mark struct file_operations and struct inode_operations const. (January 15, 2007)

• Thomas Gleixner: Scheduled removal of SA_xxx interrupt flags. (January 15, 2007)

• Eric W. Biederman: Cleanup sysctl. (January 17, 2007)

Memory management

• yunfeng zhang: MM: enhance Linux swap subsystem. (January 15, 2007)

• Roy Huang: Provide an interface to limit total page cache.. (January 16, 2007)

• Christoph Lameter: Cpuset aware writeback. (January 17, 2007)

• Peter Zijlstra: VM deadlock avoidance -v10. (January 17, 2007)

Networking

• David S. Miller: SKB tutorial, Blog, and NET TODO. (January 17, 2007)

Virtualization and containers

• Jeremy Fitzhardinge: [patch 00/20] XEN-paravirt: Xen guest implementation for paravirt_ops interface. (January 15, 2007)

Miscellaneous

• Kay Sievers: udev 104 release. (January 17, 2007)

• Pablo Neira Ayuso: [ANNOUNCE] Release of libnfnetlink, libnfnetlink_conntrack and libnetfilter_queue. (January 17, 2007)

Page editor: Forrest Cook

Distributions

News and Editorials

LCA: How to improve Debian security

Russell Coker is a long-time figure in the Linux security world, having done much of the heavy lifting involved in making SELinux work with both the Debian and Fedora distributions. At the Debian miniconf at linux.conf.au, Russell ran a session on what Debian should do to improve its security. With a relatively small number of changes, Debian could be made significantly harder to break into.

The first suggested change is not Debian-specific in any way: Russell makes the claim that Linux needs to support more capabilities. The Linux capability system attempts to break down the "can do anything" superuser privileges into less powerful capabilities, with the idea that programs can be restricted to the privileges they actually need to get their jobs done. Unfortunately, this splitting of privileges is incomplete, in that two of them are still too powerful. They are:

• CAP_NET_ADMIN controls the management of IP tunnels, type of service settings, routes, interface parameters, raw packet access, and much more. There are many unrelated powers which are granted by CAP_NET_ADMIN; splitting them up would make the system more secure in dealing with potentially buggy network processes.

• CAP_SYS_ADMIN is even worse, being the grab-bag capability used whenever somebody can't find something more specific. This capability controls access to disk quotas, the mounting of filesystems, NVRAM access, serial port parameters, memory management policies, and dozens of other actions. Getting CAP_SYS_ADMIN is not far removed from simply having superuser powers.

Russell talked about the benefits of splitting up these capabilities, but didn't get much into the practical difficulties. Those include the fact that the 32-bit capability mask is just about full already, the need to educate developers and administrators about the new capabilities, and the task of changing the current capability tests and dealing with the things that break. It's an obviously good idea, but carrying it through will require some work.

Next on Russell's list is polyinstantiated directories. In words of fewer syllables, this means directories where each user gets his or her own, private copy. When applied to shared directories like /tmp, polyinstantiated directories can help defend the system against symbolic link and temporary file attacks. The necessary support is already there - the kernel has filesystem namespaces, shared subtrees, and the PAM modules to control these features. It's just a matter of hooking it all together in a way that works.

The ExecShield patch set is the next suggestion. In particular, Russell would like to see protection against executable stack and writable memory-mapped segments. As he pointed out, Fedora and Red Hat Enterprise Linux have shipped this feature for some time with little in the way of ill effects. It's mostly a matter of getting some of the remaining patches into the kernel mainline - or maintaining them separately in the Debian kernel.

The TIOCSTI ioctl() command allows a process to stuff characters into a terminal device, from which they will later be read. If a hostile user can get an administrator to switch over to his account (with su, say), he can use this ioctl() to take over the administrator's shell. Ways of avoiding this attack include not using su in a number of situations - for example, by using ssh to log in as another user. The setsid() system call can also be used to create a barrier to defend against character-stuffing attacks.

Next is better support for Xen, especially at install time. Russell would like to be able to install a Debian server system where the only thing found in the host domain is an SSH server and the tools needed to get the guest domain running. All of the real server tasks would run in the guest. Then, if that guest is compromised, the core server's integrity remains, and it can be used to examine the guest closely. Among other things, rootkits running in the guest will have a much harder time hiding from an administrator running on the host.

Finally, Russell suggested that the Debian release following etch should install and run SELinux by default - just like Fedora does. Just running SELinux improves security, but things get better when the developers use it as well. SELinux can block attacks, but, when used by developers, it can reveal security-related bugs before anybody gets a chance to exploit them. In essence, SELinux is a language which is used to describe the expected behavior of an application; when the application deviates from the expectations, SELinux sounds the alarm and allows the situation to be investigated.

Comments (14 posted)

New Releases

BLAG 60000 (flout) Released

The Fedora Core 6-based BLAG 60000 is available from BLAG Linux and GNU. "BLAG 60000 (flout) is a new series with a new base (FC6) and many new applications. Featuring all of the applications below on JUST ONE CD. Burn copies and hand them out! It's got it all. Did I mention it's all on just one CD?"

Full Story (comments: none)

FreeBSD 6.2 released

The FreeBSD Release Engineering Team has announced the availability of FreeBSD 6.2-RELEASE. "This release continues the development of the 6-STABLE branch providing performance and stability improvements, many bug fixes and new features."

Comments (none posted)

FreeSBIE-2.0 released

The FreeSBIE team has announced the release of FreeSBIE 2.0, a live CD based on FreeBSD. "Development cycle started on August 2006 and, after many months and a series of four ISO images, an official stable FreeSBIE image is available. It went under many changes, many experiments, many bugfixes, many features' additions, but it was worth the work and the time we spent on it. We must express our thanks to everyone involved in the release process. FreeSBIE 2.0-RELEASE (codename Clint Eastwood) is based on the fresh FreeBSD 6.2-RELEASE, both in terms of sources and of packages. It contains more than 450 pieces and 1,3 gigabytes of software, all in a single CD-ROM of 668 megabytes."

Comments (none posted)

IPCop Firewall 1.4.13 released (SourceForge)

Version 1.4.13 of IPCop Firewall has been announced. "IPCop is a friendly firewall solution running on linux to protect networks. It will be geared towards home and SOHO users. Interface is task based. Hardware requirements could be very minimal and grow with services used. IPCop v1.4.13 is released unchanged from 1.4.13rc1. This release update a few tools due to security issues, fix bugs and update some drivers. As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO or usb bootable images for a fresh install."

Comments (none posted)

Ubuntu Herd 2 released

Ubuntu has released the second Feisty Fawn Herd CD on the road to Ubuntu 7.04. "The primary focus during the time from Herd 1 have been the re-merging of changes from Debian and inclusion of new versions of applications. Notably, we have upgraded the kernel to 2.6.20." The Herd 2 CD is available for Ubuntu, Kubuntu, Edubuntu and Xubuntu.

Full Story (comments: none)

Distribution News

Mandriva at the Solutions Linux 2007 summit.

Mandriva will be participating in the Solutions Linux summit, Jan.30th to Feb. 1st 2007. "Mandriva will take advantage of this event to share with the guests its vision of Linux and its passion for the open source sector. Besides the Mandriva philosophy, marrying both advance technology and respect for the open source community, you will be able to discover all the products developed by the company."

Full Story (comments: none)

BLAG 60000: Shipped to you for free

BLAG and The Linux Store have an arrangement where they will ship you the BLAG 60000 CD for free. Click below for information on how to order.

Full Story (comments: none)

Distribution Newsletters

Fedora Weekly News Issue 73

This week's Fedora Weekly News covers the New Fedora Infrastructure Leader, GPG Keysigning at FUDcon, Preparation continues for SCALE 5X, Fedora Core 6 LiveCD Review, Red Hat's Fedora to Get Longer Support, and several other topics.

Comments (none posted)

Gentoo Weekly Newsletter

The Gentoo Weekly Newsletter for January 8, 2007 looks at new Bugzilla servers, Gentoo on the HP iPAQ hx4700, SCALE to host Women in Open Source mini conference, interview with Derek Wise of GNi, and much more.

Comments (none posted)

Gentoo Weekly Newsletter

The Gentoo Weekly Newsletter for January 15, 2007 is also available. Topics include Maintainer needed for gentoo-sources-2.4, Simplified Chinese translation team seeking help, Gentoo classes at MIT, and more.

Comments (none posted)

DistroWatch Weekly, Issue 185

The DistroWatch Weekly for January 15, 2007 is out. "A somewhat slow week was concluded with a long-awaited new release of FreeBSD 6.2; we'll take a quick look at the new version and add a few more interesting bits and pieces from the BSD world. Besides covering the most popular BSD operating system, we also continue reviewing some of the promising new releases of 2006; this week it's the turn of Pardus Linux - an independently developed distribution with a superb package management infrastructure. In the news section, gNewSense starts work on a new release, a developer announces a Debian-based live CD for the Sony PlayStation 3, and Sun Microsystems offers a free DVD with Solaris 10 to all who are interested in checking out the venerable UNIX operating system."

Comments (none posted)

Package updates

Fedora updates

Updates for Fedora Core 6: xterm (update to 223), autofs (bug fixes), glibc (bug fix), gcc (update from gcc-4_1-branch), cpuspeed (numerous bug fixes), postgresql (update to PostgreSQL 8.1.6), shadow-utils (bug fix), gimp-print (bug fix), lm_sensors (update lm_sensors to 2.10.1), linuxdoc-tools (bug fixes), util-linux (bug fix), m4 (bug fix), selinux-policy (bug fixes), cpuspeed (bug fixes), jpackage-utils (bug fixes), tar (bug fixes), gawk (bug fix), evolution-data-server (bug fix), gawk (bug fixes), udev (merge RHEL bugfixes), gnucash (update to 2.0.4), squid (update to the latest upstream), shadow-utils (bug fix), gettext (bug fix), python-numeric (update to 24.2), sysklogd (fix IPv6 patch), libselinux (bug fix), yum (update to 3.0.3), yum-metadata-parser (update to 1.0.3), udev (merge RHEL bugfixes), avahi (bug fix), nspr (upstream patch to fix ipv6 support), xen (bug fixes), system-config-printer (bug fix update), autofs (bug fix), foomatic (database update), strace (bug fixes), libselinux (man page fix).

Updates for Fedora Core 5: postgresql (update to PostgreSQL 8.1.6), gawk (bug fixes), logwatch (fix several logwatch services), xen (bug fixes), nspr (upstream patch to fix ipv6 support), strace (bug fixes).

Comments (none posted)

Mandriva updates

Updates for Mandriva Linux 2007.0: nmap (bug fixes), desktop-common-data (add a menu item), lirc (fix for SMP-enabled kernels), bluez-utils (bug fix), perl-SOAP-Lite (bug fix), wvstreams (built with openssl 0.9.8), tripwire (bug fix).

Comments (none posted)

rPath updates

Updates for rPath Linux 1: conary, conary-build, conary-repository (Conary 1.1.15 maintenance release), spamassassin, perl-IO-Socket-SSL, perl-IO-Zlib, perl-Archive-Tar, perl-IP-Country, perl-Net-CIDR-Lite, perl-Net-Ident, perl-Sys-Hostname-Long, perl-Mail-SPF-Query, perl-Algorithm-Diff, perl-Text-Diff (add spamassassin dependencies).

Comments (none posted)

Ubuntu updates

Updates for Ubuntu 6.10: gnome-system-tools (bug fixes), gnome-vfs2 (bug fixes), gnome-vfs2 (another bug fix), pouetchess (bug fixes), mousepad (bug fix), vino (upload to edgy-updates), gtetrinet (bug fixes), tzdata (upload of the -proposed version to -updates).

Updates for Ubuntu 6.06 LTS: langpack-locales (bug fixes).

Comments (none posted)

Distribution reviews

DeLi Linux: A light Linux distribution, done right (Linux.com)

Linux.com reviews DeLi Linux. "Perhaps one of the best Linux distributions tailored for older hardware is DeLi Linux. It's simple, and performs well enough to run on hardware as old as a 486. In fact, DeLi Linux runs on anything better than a 386 with at least 4MB of memory, though if you have only 4MB, don't expect stellar performance. Things get decent at 8MB, 16MB is smooth, and 32MB or more is perfect. I tested DeLi Linux on several machines, ranging from a 66MHz 486 DX2 with 8MB of RAM up to a a Dell Pentium III system with 256MB of RAM. The 486 system struggled to open anything, taking several minutes if things got too complex, such as when I was running a window manager, the X server, and AbiWord. However, DeLi Linux surprised me by turning the old 486 into an usable system, provided I had patience to spare. What's more, the Pentium III was extremely responsive, being even faster than my main AMD64 system running Fedora Core 6."

Comments (none posted)

Fedora releases a live CD (Linux.com)

Mayank Sharma reviews the first Fedora live CD on Linux.com. "The Fedora community got its first official live CD last month. Based on Fedora Core 6, it shows off the best of what Fedora has to offer. Furthermore, the tools used to put together the CD make creating and maintaining custom Red Hat or Fedora-based live CDs simple. The live CD comes as a 684MB ISO that supports only the i386 architecture. The compressed filesystem holds about 2.3GB of applications -- a fraction of applications and utilities in the five-CD set that makes up Fedora Core 6. It runs Linux kernel 2.6.18 and the latest stable GNOME (2.16) and X.org (7.1). There's no cosmetic difference between the live CD and FC6 apart from wallpaper that reflects its time of release."

Comments (2 posted)

Ubuntu 6.10, OpenSUSE 10.2 Rise to (and in Some Ways Above) Microsoft's Vista Challenge (eWeek)

eWeek reviews Ubuntu 6.10 and OpenSUSE 10.2. "Ubuntu 6.10, also known as Edgy Eft, is the latest release in the popular line of Linux operating systems from Canonical. Ubuntu is a fairly young distribution, but its roots in Debian give it a solid foundation—both in terms of its code and in its community of users. This strong foundation is most evident in Ubuntu's excellent software management tools and wide catalog of prepackaged software. Ubuntu's catalog surpasses those of all other Linux distributions we've tested, and its software management tools outclass not only Linux rivals' but also Microsoft Windows' and Apple OS X's."

Comments (23 posted)

Page editor: Rebecca Sobol

Development

Twisted reaches the 2.5.0 milestone

Twisted is an event-driven networking framework written in the Python language that is being developed by Twisted Matrix Labs. Twisted has been released under the MIT license.

See the list of Twisted Projects to get an idea of what Twisted has been used for. The Twisted FAQ explains some of the advantages of using Twisted, these include good security, stable code, rapid development time and more. The project documentation helps new users get started with tutorials, an API reference, howtos, examples and a developer guide.

Version 2.5 of Twisted was recently announced. "Twisted 2.5.0 is a major feature release, with several interesting new developments and a great number of bug fixes."

New features in version 2.5 include:

• The Asynchronous Messaging Protocol, a simple request/response system for persistent connections.
• An Epoll-based reactor for improving performance in high network traffic situations.
• The ability to process sub-commands from the command line.
• Support for version 2.5 of the Python language.
• Support for inlineCallbacks has been added, this takes advantage of the Python 2.5 yield expression.
• Improvements to the Jabber capabilities in the twisted.words chat project.

For more information on the changes and bug fixes, see the version 2.5 release notes.

If you would like to give Twisted 2.5 a spin, the code is available for download here.

Comments (none posted)

System Applications

Clusters and Grids

Release 2.0.8 of Linux-HA is available

Version 2.0.8 of Linux-HA, aka heartbeat and OpenHA, a cluster management system, is out. "There are many significant features and numerous mostly-minor bug fixes in this release." New features include support for split-site geographic configurations, improvements to the CRM placement algorithms, support for IBM xSeries STONITH devices and several new resource agents.

Full Story (comments: none)

Database Software

PostgreSQL Weekly News

The January 14, 2007 edition of the PostgreSQL Weekly News is online with the latest PostgreSQL DBMS articles and resources.

Full Story (comments: none)

SQLite 3.3.10 released

Version 3.3.10 of SQLite, a light weight DBMS, is out. "Version 3.3.10 fixes several bugs that were introduced by the previous release. Upgrading is recommended."

Comments (none posted)

wxSQLite3 1.7.0 released (SourceForge)

Version 1.7.0 of wxSQLite3 has been announced. "The new version 1.7.0 of wxSQLite3 - a thin wrapper for the SQLite database for wxWidgets applications - now supports the current version 3.3.10 of SQLite. Support for BLOBs as wxMemoryBuffer objects and for loadable extensions has been added. Optional support for key based database encryption is also included."

Comments (none posted)

Libraries

Release of libnfnetlink, libnfnetlink_conntrack and libnetfilter_queue

The netfilter project has announced the release of libnfnetlink 0.0.25, libnfnetlink_conntrack 0.0.50 and libnetfilter_queue 0.0.13. "libnfnetlink is the low-level userspace library for nfnetlink based communication between the kernel-side netfilter and the userspace world. libnfnetlink_conntrack is the library for userspace access to the in-kernel connection tracking table. libnetfilter_queue is the library to filter and mangle packets from userspace".

Full Story (comments: none)

Mail Software

bogofilter 1.1.5 released

Version 1.1.5 of bogofilter, a spam filter, is out. "This release fixes a problem in the block-on-subnets option and fixes a Makefile problem for MAC-OSX."

Full Story (comments: none)

Networking Tools

conntrackd 0.9.2 released

Version 0.9.2 of conntrackd is out, changes include support for a new NACK based protocol and removal of a dependency on the unofficial libraries. "Conntrackd is the userspace daemon for the Connection Tracking System. This daemon maintains a copy of the Connection Tracking System in userspace. It is entirely written in C and is highly configurable and easily extensible. Currently it covers the specific aspects of Stateful Linux firewalls to enable High Availability (HA) solutions and can be used as statistics collector of the firewall use."

Full Story (comments: none)

Virtualization Software

VirtualBox OSE released under the GPL

InnoTek InnoTek has announced the release of VirtualBox Open Source Edition under the GNU General Public License. "VirtualBox OSE is the first professional PC virtualization solution released as open source under the GNU General Public License (GPL). With VirtualBox, customers get the most versatile virtualization product on the market, both for enterprise and individual use. VirtualBox' open source license allows everyone to contribute to the development of the product and customize it to suit individual needs." (Thanks to Daniel de Kok.)

Comments (2 posted)

Web Site Development

Apache HTTP server 2.2.4 released

Version 2.2.4 of the Apache web server has been released. "The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.2.4 of the Apache HTTP Server ("Apache"). This version of Apache is principally a bugfix release. We consider this release to be the best version of Apache available, and encourage users of all prior versions to upgrade."

Full Story (comments: none)

Plume CMS 1.2.2 Released (SourceForge)

Version 1.2.2 of Plume CMS has been released, it features bug fixes. "Plume CMS is a fully functional Content Management System in PHP on top of MySQL. Including articles, news, file management and all of the general functionalities of a CMS. It is completely accessible and very easy to use on a daily basis."

Comments (none posted)

Desktop Applications

BitTorrent Applications

Azureus 2.5.0.2 released (SourceForge)

Version 2.5.0.2 of Azureus has been released. "Azureus is a powerful, full-featured, cross-platform Java BitTorrent client. This release contains new features, improvements and fixes, such as reduced memory footprint and faster startup times."

Comments (none posted)

Desktop Environments

GNOME 2.17.5 released

Version 2.17.5 of the GNOME desktop environment has been announced. "Oh, I believe it's important to mention this is also the release which marks the start of the API/ABI freeze for the platform and the start of the feature freeze. If you break the freezes, we'll send some crazy people make you understand what a freeze is. Crazy people as in French people. Or even crazier ones like persons who're going to Australia for GNOME.conf.au (starting next Monday)."

Full Story (comments: none)

GARNOME 2.17.5 released

Version 2.17.5 of GARNOME, the bleeding-edge GNOME distribution, is out. "We are pleased to announce the release of GARNOME 2.17.5 Desktop and Developer Platform. This release includes all of GNOME 2.17.5 plus a whole bunch of updates that were released after the GNOME freeze date. This is the fifth release in the unstable cycle, with more features, more fixes and yet more madness added. It is for anyone who wants to get his hands dirty on the development branch, or who'd like to get a peek at future features."

Full Story (comments: none)

GNOME Software Announcements

The following new GNOME software has been announced this week:

• Alacarte 0.11.1.1 (bug fixes, ui change)
• Anjuta DevStudio 2.1.0 (new features, bug fixes and translation work)
• gdl 0.7.0 (new features and bug fixes)
• gedit-plugins 2.17.1 (new features, bug fixes and translation work)
• GLib 2.12.8 (bug fixes and translation work)
• GLib 2.12.9 (bug fix)
• gnome-build 0.1.4 (new features, build and bug fixes)
• Gossip 0.22 (new features, bug fixes and translation work)
• GShare 0.93 (bug fixes, documentation and translation work)
• GTK+ 2.10.8 (bug fixes and translation work)
• Hardware Monitor applet 1.4 (new features, bug fixes and translation work)
• metacity 2.17.5 (new features, bug fixes and translation work)
• Revelation 0.4.9 (bug fixes and translation work)
• Revelation 0.4.10 (bug fix)
• Revelation 0.4.11 (bug fix and translation work)
• Spam Trainer 0.1.5 (new feature and installation improvements)

You can find more new GNOME software releases at gnomefiles.org.

Comments (none posted)

KDE Software Announcements

The following new KDE software has been announced this week:

• ASDF 0.4 (unspecified)
• BasKet Note Pads 0.6.0 (new features and bug fixes)
• FALF Player 1.0rc3/rc4dev (new features, bug fixes and translation work)
• iksml 0.1 (initial release)
• ISO - DAX - CSO Converter 1.06 (bug fixes)
• ISO - DAX - CSO Converter 1.07 (new feature)
• Kayali 0.3.2 (unspecified)
• KBoincMgr 0.2.2 (bug fix)
• KDE DVDAuthor Wizard 1.4.3 (new features and bug fixes)
• Konqueror Userscript 0.1 (initial release)
• KPlayer 0.6 (new features, bug fixes, documentation and translation work)
• KWA Canadian Fire Fighters 0.2 (unspecified)
• pokertimer 0.1 (initial release)
• PSX2PSP 2.55 (new features)
• SIR 1.4 (new features, bug fixes and translation work)
• soundKonverter 0.3 (new features and bug fixes)
• TaskJuggler 2.3.1_beta1 (bug fixes and performance improvements)
• trix 0.9 (unspecified)
• WebIssues Client 0.8.3 (new features and bug fixes)

You can find more new KDE software releases at kde-apps.org.

Comments (none posted)

KDE Commit-Digest (KDE.News)

The January 14, 2007 edition of the KDE Commit-Digest has been announced. The content summary says: "In this week's KDE Commit-Digest: NEPOMUK integration, and a new "browser" interface added to Akonadi. Refactoring work in Kate and KPilot. Experiments with a new Kate-alike session list in Konsole. Expose-like window management effects in KWin. Support for styling the background of forms in KHTML. A Strigi-based metadata indexer for KIO. Signature support in Mailody. Improved support for metadata internal storage and display, and a new Flake shape for video in KOffice. Large code update in Umbrello, part of the Student Mentoring program. New tileset selector for kdegames, to be shared between KMahjongg and KShisen. Support for the FictionBook format in okular. Import of an initial version of the Oxygen sound theme for KDE 4. Import of user documentation for Kompare. kaction-cleanup-branch merged back into the main kdelibs/. Security fixes in KPDF and KSirc."

Comments (none posted)

Xfce 4.2.4 released

Version 4.2.4 of Xfce, a light weight desktop environment, is out. "A new bug fix release of Xfce 4.2 is available. This release is supposed to be the last release for the 4.2 branch. It includes several fixes ported from the current developpment branch. This release should not be confused with the upcoming Xfce 4.4 release, it's a bug fix release of the previous stable branch."

Comments (none posted)

Xorg Software Announcements

The following new Xorg software has been announced this week:

• damageproto 1.1.0 (new feature)
• libXdamage-1.1 (new feature)

More information can be found on the X.Org Foundation wiki.

Comments (none posted)

Electronics

eispice 0.10 released

Version 0.10 of eispice, a clone of the Berkley Spice 3 Simulation Engine optimized for High Speed Digital Design with a Python based front-end, has been announced. "The performance of the PyB model was greatly improved for this release. PyB error messages have been improved, along with a handful of other minor bug-fixes. This release also coincides with the release of a new eispice IDE (eide) which includes a PyQt based test editor, a Python Interpreter, and eispice rolled into a single application using pyinstaller, it is primarily intended for Windows Users."

Comments (none posted)

Fonts and Images

Linux Libertine 2.3.2 released

Version 2.3.2 of the Linux Libertine font set has been announced. "We just released LinuxLibertine in version 2.3.2. Please test and give us feedback."

Full Story (comments: none)

Games

Varconf 0.6.5 released

Version 0.6.5 of Varconf has been announced on the WorldForge game site. "Varconf is configuration handling library required by many WorldForge components. It supports the loading and saving of config files, handling of complex command line arguments, and signals to notify the application of configuration changes. Major changes in this version: Special characters can now be escaped in config strings. The library now uses the current sigc++ native API, so is more efficient."

Comments (none posted)

Graphics

Release of Crystal Space 1.0 (SourceForge)

Version 1.0 of Crystal Space has been announced. "After nearly 10 years of development we are very proud to release version 1.0 of Crystal Space. Crystal Space is an Open Source and portable 3D engine framework which runs on GNU/Linux, Windows, and MacOS/X. It is fully featured with support for vertex and fragment shaders, dynamic lighting and lightmaps, skeletal animation, physics, 3D sound, terrain engine, python support and much more. Together with Crystal Space 1.0 we also release Crystal Entity Layer 1.0. This is a game layer on top of Crystal Space which makes it easier to develop games."

Comments (none posted)

Multimedia

swfdec 0.4.1 released

Version 0.4.1 of swfdec, a decoder/renderer for Macromedia Flash animations, is out. "Apart from the usual loads of bugfixing the big thing in this release is initial video support. Unfortunately this does not mean that all the video sites will play yet, but it's one step in that direction."

Full Story (comments: none)

Video Applications

Theorur 0.5.2 released

Version 0.5.2 of Theorur has been announced. "Theorur is a GUI for streaming Ogg/Theora to an icecast server. It supports A/V input from v4l or IEEE 1394 devices. Theorur needs dvgrab, ffmpeg2theora, and oggfwd_im."

Comments (none posted)

Word Processors

AbiWord 2.5.0 released (GnomeDesktop)

GnomeDesktop.org has an announcement for version 2.5.0 of the AbiWord word processor. "The AbiWord team is very proud to announce version AbiWord v2.5.0 of the popular cross platform word processor. This is the first snapshot of the development that will lead to AbiWord 2.6. This snapshot allows interested developers, testers and users a sneak preview into the future of AbiWord."

Comments (none posted)

Languages and Tools

Caml

Caml Weekly News

The January 16, 2007 edition of the Caml Weekly News is out with new Caml language articles.

Full Story (comments: none)

Perl

Weekly Perl 6 mailing list summary (O'Reilly)

The January 7-13, 2007 edition of the Weekly Perl 6 mailing list summary is out with coverage of the latest Perl 6 developments.

Comments (none posted)

Python

python-dev Summary

The python-dev Summary is out with coverage of the python-dev mailing list for the period of December 1-15, 2006.

Full Story (comments: none)

A Quickstart to building GUI based applications in Python (Builder AU)

Nick Gibson shows how to do GUI programming with Python and Tk. "When you're learning a new language, particularly a scripting language such as Python, you might be forced to stick to console based programs for some time before you've picked up enough to start writing graphical based programs. It's now been more than 25 years since the first commercial graphical user interface was released (for the curious, the Xerox STAR) and it seems a little archaic to still be using the console for applications. Thankfully Python's emphasis on simplicity means that you can include a graphical user interface in your programs without needing to be a Python guru. To prove this, I'll run through the creation of a simple note taking program, using the standard GUI toolkit for Python: Tk."

Comments (none posted)

Tcl/Tk

Tcl-URL!

The January 17, 2007 edition of the Tcl-URL! is online with new Tcl/Tk articles and resources.

Full Story (comments: none)

XML

Is XML 2.0 Under Development? (O'Reilly)

Micah Dubinko investigates the status of XML 2.0 on O'Reilly's XML.com. "In Micah Dubinko's return to the XML Annoyances banner, he speculates as to whether the W3C is already considering whether to start work on XML 2.0. Read this piece and decide for yourself."

Comments (none posted)

IDEs

Anjuta DevStudio 2.1.0 (beta) released (GnomeDesktop)

GnomeDesktop covers the release of Anjuta DevStudio 2.1.0 beta, an IDE for C and C++. " The long anticipated Anjuta DevStudio 2.1.0, The Wind, is now at your service. This proud announcement from Anjuta development team marks the beginning of beta stage for Anjuta 2.x series. This is the moment we all have so eagerly been waiting for and so wishfully been complaining about. Following the footsteps of last alpha release 2.0.2 'The Breeze', this release brings our promise of the much dreamed newgen GNOME IDE very close. 'The Wind' marks our way towards a truly powerful and simple-yet-subtle IDE, so far tentatively name 'The Storm'."

Comments (none posted)

Libraries

libgpod 0.4.2 released (SourceForge)

Version 0.4.2 of libgpod has been announced. "libgpod is a library that allows you to fill your iPod with content. Supported are all iPod models. On the Audio/Video content side, this release is a service update implementing support for new features like gapless replay or skip count. On the Photo content side, this release gives the first functional interface for the photo library. A test program demonstrates the ease-of use."

Comments (none posted)

Miscellaneous

BNF for Java: 'Visual' release (SourceForge)

A new release of BNF for Java is available. "BNF for Java is a BNF Compiler-Compiler, or Parser-Generator. It implements ISO Standard Backus-Naur Format, using Java. BNF allows you to create a syntax, or a complete language, to parse your data source. Your custom Java extensions generate output. This first release for 2007 adds a major improvement in the "Visual" user-interface for the BNF programmer. You can see your BNF and Java files, you can see the results from the compilers, you can track bugs with text reports. You can compile your compiler and run your parser/generator project from the GUI."

Comments (none posted)

Page editor: Forrest Cook

Linux in the news

Recommended Reading

Tivo Healthcare (Free Software Magazine)

Fred Trotter discusses the Tivoization of health care data in a Free Software Magazine article. "Well, consider what would happen if my software and the operating system underneath it were Tivoized. I help write an GPL Electronic Health Record (EHR). Under the current version of the GPL, someone could make an appliance from my software and GNU/Linux and prevent people from modifying and controlling healthcare data stored in the Electronic Health Record that ran on this device. What the Tivoization traps is the data, which for Tivo means movies and television shows recorded digitally. But what happens when the data that is trapped is infinitely more valuable? When we discuss DRM, we should be thinking of an EHR that has been Tivoized, (perhaps a health-Tivo) rather than a television recording device."

Comments (19 posted)

Vista launch will boost desktop Linux (ZDNet Australia)

ZDNet Australia suggests that Microsoft's launch of Windows Vista will give companies a new reason to switch to Linux. "The launch of Windows Vista has created a huge opportunity for Linux vendors to take a larger share of the corporate desktop market, according to the president of Linux Australia. New features combined with a slightly different look and feel mean that migrating to Vista from an older version of Windows will cause disruption in the workplace. On the first day of Linux.conf.au, the president of Linux Australia, Jonathon Oxer, told ZDNet Australia that instead of retraining staff on the new version of Windows, administrators could make the switch to Linux."

Comments (15 posted)

Trade Shows and Conferences

CES 2007 coverage (PC Magazine)

PC Magazine covers day 1 and day 2 of the Consumer Electronics Show (CES). "On Day Two of CES 2007, the news, announcements, and analysis kept rolling in, and our editors and analysts were on top of it all. Find out about the Blu-ray Consortium's plans for world domination, how you'll be getting TV on your PC and vice versa, a camera sensor that sees in the dark, and lots more, in this selective sample of today's stories."

Comments (none posted)

The silent victory of Linux-as-geology at CES 2007 (Linux Journal)

Linux Journal's Doc Searls covers the Linux side of the 2007 Consumer Electronics Show. "Three years ago, out of more than 2300 CES exhibitors, the word "Linux" appeared in text associated with just 11 of them, in the show's online guide. This year at CES 2007 has more than 2700 exhibitors; yet "Linux" appears in text associated with just 3 companies: Interact-TV, Neuros Technology and Pixel Magic Systems. Yet it is clearer than ever that Linux has become the bedrock on which more and more companies build their solutions."

Comments (none posted)

Fun and sun down under: Day one at Linux.conf.au (Linux.com)

Joe 'Zonker' Brockmeier joins LWN editor Jon Corbet and many others for fun and sun down under. "It took more than 17 hours in planes and a trip through customs, but I've made the trek from Denver, Colorado, to Sydney, Australia, for Linux.conf.au (LCA) 2007. Already it looks like the trip was worthwhile. Linux.conf.au (or "Linux.con f.au," as it says on our misprinted hats) is a roving conference held annually in different locations around Australia. This year, the conference returned to Sydney at the Kensington campus of the University of New South Wales, where the first Linux.conf.au was held." The LWN weekly edition for January 18th will feature more articles fresh from linux.conf.au.

Comments (none posted)

Companies

Sun's Fortran replacement goes open source (ZDNet)

ZDNet reports that Sun Microsystems is releasing Fortress, a replacement for the FORTRAN language with parallel programming capabilities, under the BSD license. "Sun Microsystems took a new open-source step this week, enlisting the outside world's help in an attempt to create a brand-new programming language called Fortress. On Tuesday, the company quietly released as open-source software a prototype Fortress "interpreter," a programming tool to execute Fortress programs line by line. "We're trying to engage academics and other third parties," said Eric Allen, a Sun Labs computer scientist and Fortress project leader, about the open-source move."

Comments (7 posted)

Sun to release OpenSolaris under GPL version 3 (Linux-Watch)

Linux-Watch reports that Sun is going to add the GNU General Public License version 3 to OpenSolaris in addition to its current CDDL. "This will enable programmers to share code among OpenSolaris and other GPLv3 open-source software projects. While it still looks very doubtful that Linux will go GPLv3, we can be certain that the Free Software Foundation Gnu Project's 5,000 plus programs will be available under the GPLv3. In addition, the Samba Team has announced that it will be making its popular Samba CIFS (Common Internet File System) software GPLv3."

Comments (40 posted)

Linux Adoption

EU Commission Study Finds You'll Save Money Switching to FOSS (Groklaw)

Groklaw looks into a recent study [PDF] by the European Union entitled "Study on the Economic impact of open source software on innovation and the competitiveness of the Information and Communication Technologies (ICT) sector in the EU". "I thought you'd be interested in the conclusion regarding total cost of ownership. Is it true that switching to Open Source will cost you more than staying with Windows, as Microsoft's "Get the Facts" page claims? No. The study found: "Our findings show that, in almost all the cases, a transition toward open source reports of savings on the long term – costs of ownership of the software products." But what about training costs? Doesn't that remove the benefits? No, the report found: "Costs to migrate to an open solution are relevant and an organization needs to consider an extra effort for this. However these costs are temporary and mainly are budgeted in less than one year." So there you are."

Comments (1 posted)

Large academic international interdisciplinary study on FLOSS gets the real facts (LXer)

Hans Kwint looks at a final draft of a study on the economic / innovative impacts of Free and Open Source Software. "The European Commission's enterprise and industry department just released the final draft of what could be the biggest academic interdisciplinary study on the economic / innovative impacts of FLOSS*. The study was done by an international consortium, led by the United Nations University / University of Maastricht's (NL,EU) department of innovation; UNU-MERIT for short. The study was prepared by senior researcher Rishab Aiyer Ghosh, who did a tremendous amount of FLOSS studies the last few years, amongst them on FLOSSpols and FLOSSWorld."

Comments (none posted)

Legal

BSD - The Dark Horse of Open Source, by Brendan Scott, OS Law (Groklaw)

Groklaw presents a paper by Brendan Scott on the BSD license. "Brendan Scott has been studying the BSD license, particularly in the context of Australian law, and he has come up with some startling questions. Is the BSD license as permissive as we've thought? The paper is principally for lawyers to consider, but it's certainly of interest to everyone, and note his disclaimer: Nothing in this paper is legal advice or a statement of the law. This paper is an exposition of an (untested) argument as to the effect of the BSD license."

Comments (10 posted)

Interviews

Talking virtualization with rPath (Linux.com)

Linux.com talks with Brett Adams, vice president of development at rPath. "Brett Adams, vice president of development at rPath, sees 2007 as a pivotal year for virtualization. When you are looking at the future of virtualization, few companies are as well positioned to make observations as rPath. Billing itself as the "software appliance company," rPath was one of the first companies to focus on virtual appliances and simplifying their production."

Comments (none posted)

UML maintainer Jeff Dike makes virtualization predictions (Linux.com)

Joe 'Zonker' Brockmeier talks with User Mode Linux maintainer Jeff Dike. "One of the great things about Linux.conf.au is the chance to mingle with some of the brightest lights in the open source community. For example, Jeff Dike, author and maintainer of User-Mode Linux is here this week to talk about UML and the Kernel-based Virtual Machine (KVM). During one of the breaks on Monday, I sat down with Dike to talk about UML's immediate future, and picked his brain about other virtualization technologies."

Comments (none posted)

Resources

How do I find out Linux CPU utilization? (nixCraft)

nixCraft presents a tutorial on monitoring CPU utilization under Linux. "Whenever a Linux system CPU is occupied by a process, it is unavailable for processing other requests. Rest of pending requests must wait till CPU is free. This becomes a bottleneck in the system. Following command will help you to identify CPU utilization, so that you can troubleshoot CPU related performance problems. Finding CPU utilization is one of the important tasks. Linux comes with various utilities to report CPU utilization."

Comments (none posted)

Handicapping New DNS Extensions and Applications (O'ReillyNet)

Cricket Liu discusses DNS extensions on O'Reilly. "The DNS system is not static; there are several proposed new extensions and applications under development and adoption. DNS expert Cricket Liu explores five for updates and their future: the Sender Policy Framework, IPv6 support, Internationalized Domain Names, ENUM, and the DNS Security Extensions."

Comments (4 posted)

Flash Player 9 For Linux (x86)

Nicola Soranzo sent in a link to this Adobe blog post: "This is it. This is the officially blessed version of the Adobe Flash Player 9 for Linux (x86). Not a beta version; the final version. It's released. Today." You can download a tar.gz or .rpm from here.

HowtoForge has an article on installing the new native Linux Flash Player 9 from Adobe on an Ubuntu Edgy Eft desktop.

Comments (16 posted)

Back Up/Restore Hard Drives And Partitions With Ghost4Linux (HowtoForge)

HowtoForge presents a tutorial on Ghost4Linux. "This tutorial shows how you can back up and restore hard drives and partitions with Ghost4Linux. Ghost4Linux is a Linux Live-CD that you insert into your computer; it contains hard disk and partition imaging and cloning tools similar to Norton Ghost. The created images are compressed and transferred to an FTP server instead of cloning locally."

Comments (none posted)

Whistle while you work to run commands on your computer (IBM developerWorks)

Nathan Harrington shows how to control a computer with whistling in an IBM developerWorks article. "Use Linux® or Microsoft® Windows®, the open source sndpeek program, and a simple Perl script to read specific sequences of tonal events -- literally whistling, humming, or singing at your computer -- and run commands based on those tones. Give your computer a short low whistle to check your e-mail or unlock your your screensaver with the opening bars of Beethoven's Fifth Symphony. Whistle while you work for higher efficiency."

Comments (3 posted)

Delete Qmail Server messages Queue (Debian Admin)

Debian Admin has published a tutorial on managing the Qmail MTA message queue. "Occasionally, viruses will get past scanners before the signatures get updated; if they exist in large numbers, it is often practical to stop the Qmail install briefly in order to clean out all messages containing a signature related to the virus. Whatever the reason to pull items from your mail queue, this program will delete them in such a manner that will let you restore them easily."

Comments (none posted)

How To Automatically Scan Uploaded Files For Viruses With php-clamavlib (HowtoForge)

HowtoForge presents a tutorial on scanning uploaded files for viruses with php-clamavlib. "This guide describes how you can automatically scan files uploaded by users through a web form on your server using PHP and ClamAV. That way you can make sure that your upload form will not be abused to distribute malware. To glue PHP and ClamAV, we install the package php5-clamavlib/php4-clamavlib which is rather undocumented at this time. That package is available for Debian Etch and Sid and also for Ubuntu Dapper Drake and Edgy Eft, so make sure you use one of these platforms."

Comments (none posted)

Reviews

Desktop Virtualization with VMware Player and Workstation (Linux.com)

Linux.com reviews VMware Player and Workstation. "More and more organizations are consolidating physical hardware using virtualization. But virtualization technology and tools aren't limited to big-dollar corporations. With the free-as-in-beer VMware Player, and the very cheap VMware Workstation, you too can use this fancy technology to utilize the processing horsepower of cheap multi-core hardware available off-the-shelf."

Comments (3 posted)

Tiny Linux computer aims at terminal/kiosk users (LinuxWorld)

LinuxWorld takes a look at the tiny Linutop computer. "The gadget, about the size of a portable CD player, is an embedded Linux PC without a hard disk. It has four USB2 ports, for connecting a mouse, PC, keyboard and other devices (such as a USB Wi-Fi adapter, storage stick, etc.), and an integrated 100Mbps Ethernet port and VGA video output. Microphone and headphone jacks are also built in. The box itself runs AMD’s embedded Geode processor, with 256MB of memory, and 512MB of ROM, for storing the operating system image and applications."

Comments (5 posted)

New Linux development tools for PS3 (PRO-G)

PRO-G covers the PS3 RapidMind Development Platform. "It has been announced that RapidMind and Terra Soft have teamed up to make application development for the PlayStation 3 easier than ever before. Last month Terra Soft announced the release of Yellow Dog Linux of the PlayStation 3, and now with the RapidMind Development Platform, developers can more easily create applications that run on PS3 and other hardware which utilizes the Cell Broadband Engine."

Comments (none posted)

Innotek makes virtualization software available as open source (Linux.com)

Linux.com looks at Innotek's VirtualBox Open Source Edition. "Germany's InnoTek Systemberatung GmbH started out by supporting enterprises and financial institutions that were running IBM infrastructure. "As many of these enterprises were running outdated solutions such as OS/2, but cannot simply replace such huge infrastructures with the snap of a finger, virtualization was a natural solution to them," says Achim Hasenmueller, general manager of InnoTek. Hasenmueller adds that his company has been in the virtualization business for a long time and has also contributed substantial parts to what is now Microsoft Virtual PC. "Today we staff the largest group of virtualization experts in Europe," he says."

Comments (5 posted)

Miscellaneous

Browser Based EMR's Threatens Software Freedom (LinuxMedNews)

LinuxMedNews reports on the loss of customer control over browser-based Electronic Medical Record systems. "The age of the all-browser based Electronic Medical Record/Electronic Health Record (EMR/EHR) is upon us. Local area network (LAN) based EMR's upon which older generation EMR's companies have built their products is dead. This paradigm shift is occurring now. This development threatens Free and Open Source medical software, practitioners and patients as they have never been threatened before."

Comments (5 posted)

Java IDEs make nice: Eclipse joins JCP (Linux-Watch)

Linux-Watch covers the joining of the Java Community Process by the Eclipse Foundation. "Maybe cats and dogs can live together, after all. Sources close to the matter revealed today that the Eclipse Foundation has joined the Java Community Process (JCP). A quick check of the JCP membership list reveals that the Foundation is listed as a member. The sources also said that Eclipse joined the JCP this week, and that the formal announcement is scheduled for next week. Historically, the two development groups have not worked or played well with each other. Both, however, have had a common goal: an open-source, inexpensive Java IDE (integrated development environment) that can be used on multiple platforms to produce programs for various computer architectures."

Comments (none posted)

Want To Buy a $100 Linux Laptop? (NewsFactor Network)

NewsFactor Network reports on a new funding scheme for the OLPC project. "The nonprofit group that hopes to bring inexpensive laptops to poor kids around the world is now considering the possibility of allowing the $100 machines to be purchased by the general public. The backers of the One Laptop Per Child (OLPC) project haven't suddenly been bitten by the capitalist bug, but rather have come up with a way to offer the computers to the general public while increasing their availability to school children in developing nations. According to one plan being considered, the computers would be offered to customers who would have to purchase a minimum of two laptops at a time -- with the second going to the developing world."

Comments (none posted)

ISP offers students cash for open source code (ZDNet)

ZDNet reports that the UK Free Software Network (UKFSN) is offering to pay students for open source code. "As an incentive to get students to push the code boundaries of open source software, a British software network is offering cash for fresh code, reports Welsh IT News Online. The UK Free Software Network (UKFSN), a small Hertfordshire-based Internet service provider, conceived the idea to encourage students to develop software that can be modified by its end users."

Comments (none posted)

Page editor: Forrest Cook

Announcements

Non-Commercial announcements

Ardour project needs new sponsors

The Ardour multi-track digital audio workstation project has lost its primary funding source. "Ardour is looking for new project sponsors after our major contributor, Solid State Logic informed us that a conflict of interest prevents them from continuing the financial support they gave to Ardour during 2006. Ardour is at an exciting point in its development: version 2.0 is about to released very shortly, and more and more developers have recently started contributing to the project. Once version 2.0 is released, we have a large list of substantial new features waiting to be added, including MIDI recording and playback (already implemented as part of our participation in Google's Summer of Code)."

Full Story (comments: none)

Commercial announcements

Autodesk Maya 8.5 3D animation software announced

Autodesk, Inc. has announced the release of Autodesk Maya 8.5, a 3D animation, modeling and rendering system. "Now shipping, Maya 8.5 gives artists enhanced creative control, enabling faster completion of complex animations and simulations. "Autodesk is committed to making Maya the foundation for modern production pipelines. Maya 8.5 supports industry-standard Python scripting, offering improved workflows and development productivity," said Marc Petit, Autodesk's Media & Entertainment vice president."

Comments (none posted)

Columbitech Wireless VPN Adds Linux Server Support

Mobile security solutions provider Columbitech has announced support for SUSE Linux Enterprise Server 9 and 10. This new offering combining Columbitech Wireless VPN with SUSE Linux Enterprise Server enables customers to automatically set up any computer to be a VPN server and firewall within minutes.

Full Story (comments: none)

Empower Technologies announces digital media tablet reference design platform

Empower Technologies has announced a new Digital Media Tablet (DMT) reference design platform. "This new DMT reference design is specifically targeted to developers, value added integrators and manufacturers innovating portable digital media devices for the automotive, RFID and consumer electronics industries. Each of these industries require high performance codec computation and control operation such as audio/video streaming/recording; high speed wireless communication such as WiFi, CDMA, and GPRS; and data processing such as data acquisition, analysis and control."

Comments (none posted)

Fluendo announces Windows Media and MPEG codec support for Linux

Fluendo has announced the availability of new CODECs for Linux and Solaris. "Users of GNU/Linux and Solaris operating systems have previously lacked solutions which enabled them to license and use popular media formats such as Windows Media, MPEG-2 and MPEG-4 in accordance with the laws of their country. Through Fluendo's agreements with Microsoft and MPEG LA such a solution is now available. By closely integrating with the GStreamer multimedia framework, Fluendo's new plugins enable support for these widely used codecs in popular GNU/Linux and Solaris applications such as Totem Video Player, Rhythmbox music player, Banshee Music player, Elisa Media Center and the Jokosher sound editor."

Full Story (comments: 21)

Fujitsu and Hopling Technologies to Ship Linux WiMAX Board Packages

Fujitsu Microelectronics America, Inc. and Hopling Technologies have announced the availability of their jointly-produced Linux-based WiMAX baseband system-on-chip (SoC) reference kits. ""Hopling Technologies is deeply committed to helping businesses across the world realize the benefit and full potential of WiMAX," said Ivo van Ling, Chief Technology Officer of Hopling Technologies. "This joint Linux project with Fujitsu is an extremely important project and it's a milestone in Hopling Technologies' Linux-based WiMAX product strategy that will allow companies to roll out seamless broadband wireless systems.""

Comments (none posted)

GoDaddy.com announces Metropolis hosting community

GoDaddy.com has announced the Metropolis hosting community. "The new hosting community allows anyone with a Go Daddy(R) Web hosting account to install, manage, rate and review third-party hosted applications, offering a personal touch in the big-city hosting world. At launch, Metropolis offers more than 30 free software titles for immediate installation to Linux(R) or Windows(R) based hosting accounts. From blogs and forums to galleries and wikis, users learn about software options from other community members and share their experience with reviews and ratings."

Comments (none posted)

TIBCO BusinessWorks 5.4 to add support for BPEL

TIBCO Software Inc. has announced that version 5.4 of its TIBCO BusinessWorks software will add support for version 1.1 of the OASIS Web Services Business Process Execution Language. "The increasing adoption of SOA by enterprises is creating a complex network of discrete services. As companies break down their monolithic applications and create new services, their end goal is to compose and reuse those services as processes or new applications. TIBCO BusinessWorks with support for BPEL will further help companies simplify the re-use of existing IT assets through a more manageable, adaptive and cost-effective infrastructure."

Comments (none posted)

Xilinx releases new ISE software for FPGA design

Xilinx, Inc. has announced version 9.1i of its Xilinx Integrated Software Environment. "ISE Foundation(TM) 9.1i suite is immediately available with prices starting at US $2,495. A full-featured 60-day evaluation version is available at no charge. All versions of ISE 9.1i software packages support Windows(R) 2000 and Windows XP Professional and Linux(R) Red Hat(R) Enterprise 3.0 and 4.0. ISE Foundation also supports Solaris(R) 2.8 and 2.9."

Comments (none posted)

New Books

Backup and Recovery - O'Reilly's Latest Release

O'Reilly has published the book Backup & Recovery by W. Curtis Preston.

Full Story (comments: none)

Dynamic HTML: The Definitive Reference, Third Ed. - New from O'Reilly

O'Reilly has published the book Dynamic HTML: The Definitive Reference, Third Edition by Danny Goodman.

Full Story (comments: none)

Resources

FSFE Newsletter

The January 12, 2007 edition of the Free Software Foundation Europe newsletter is online with the latest FSFE news. Topics include: Looking back and forward, Georg Greve at "Nexell informiert" and Get Active: Join the Fellowship!

Full Story (comments: none)

Linux Documentation Project Weekly News

The December 28, 2006 edition of the Linux Documentation Project Weekly News is online with the latest documentation updates.

Full Story (comments: none)

Calls for Presentations

Akademy 2007 Call for Participation (KDE.News)

KDE.News has announced the Akademy 2007 call for participation. "The KDE community is getting ready to set a major milestone for the free desktop with the upcoming release of KDE 4. This will mark a new level of user experience, technical excellence in the framework and opportunities for free software on the desktop. The KDE contributors conference, which is part of Akademy, the world summit of the KDE community, will be the place to present the newest developments, long-term strategies or interesting input from the surrounding communities, projects and societies. Be part of it, present your thoughts, ideas and work at Akademy 2007 in Glasgow, Scotland." The event takes place from June 30 - July 7, 2007, abstracts are due by February 14, 2007.

Comments (none posted)

LayerOne 2007 CFP Announced

A call for papers has gone out for LayerOne 2007. "What is LayerOne? Currently in its 4th year, LayerOne is computer security and technology conference held in the Los Angeles area. The purpose of LayerOne is to bring together the many different types of folks who make up the security community for a 2 day discussion of the technologies that impact our professional and personal lives." The event takes place on May 5-6, 2007, submissions are due by March 31.

Full Story (comments: none)

Calling All Innovators to the 2007 O'Reilly OSCON

A call for participation has gone out for the 2007 O'Reilly Open Source Convention. "This year, the program will focus on the progress and innovation that open source movers and shakers are contributing to the computing industry. Program chairs will be looking for proposals that convey real-world scenarios using open source, and the new tools and ideas that will help participants be more productive or write better code. OSCON will return to the Oregon Convention Center in Portland from July 23-27, 2007. The Call for Participation deadline is February 5, 2007."

Full Story (comments: none)

2007 Ottawa Linux Symposium announcements

A few announcements have gone out regarding the 2007 Ottawa Linux Symposium. The event will be happening earlier this year: June 27 to 30. The CFP is currently open, with submissions due by February 5. "As mentioned in the CFP, we are expanding the scope of the topics this year and strongly encourage you to submit papers on any and all leading edge user space development, and advanced system administration."

Full Story (comments: none)

Upcoming Events

Discover the Magic of Technology at O'Reilly ETech 2007

The O'Reilly ETech 2007 conference will take place in San Diego, CA on March 26-29. "Spanning the gamut of tech from the infrastructure supporting mass-market players, to the promise of alternative energy sources, ETech will examine what's current while keeping an eye firmly trained on what's coming."

Full Story (comments: none)

KDE-NL New Year's Meeting Coming Up (KDE.News)

KDE.News has announced The KDE-NL New Year's Meeting. "On Saturday, 20th January, the traditional KDE-NL New Year's Meeting will be held in Lent near Nijmegen in the eastern part of the country. KDE-NL invites contributors, interested users and other affiliated people for the day to get to know each other in person and discuss all kinds of KDE-related things."

Comments (none posted)

Nepomuk-KDE Workshop, Paris

The Nepomuk-KDE Workshop will take place at the Mandriva office in Paris, France on February 1-2, 2007. "It is time to present the Nepomuk-KDE project to the world in a more hands-on manner. A move to kdelibs of the core parts of Nepomuk-KDE is planned and even more so raises the need for information." See this KDE.News article for more information.

Full Story (comments: none)

SCALE preparation continues

The SCALE conference is coming soon, discount tickets are still available. "The final touches are being put on the Fifth Annual So Cal Linux Expo, to be held February 9th to 11th in Los Angeles. All speaker slots are full, and all exhibitor booths have been filled. The seven speaker slots in the Women In Open Source conference have been filled and its speaker panel is being finalized."

Full Story (comments: none)

Open Source Health Care Summit Schedule Announced (LinuxMedNews)

LinuxMedNews has announced the schedule for the Open Source Health Care Summit. "Speakers will include Fred Trotter (GPL Medicine), Scott Shreeve, Eishay Smith (IBM), and Gerald Bortis (Mirth Project). The Open Source Health Care Summit will be held on Feb 9, 2007 as part of SCALE 5x." The event takes place at the Los Angeles, CA airport Weston hotel.

Comments (none posted)

Events: January 25, 2007 to March 26, 2007

The following event listing is taken from the LWN.net Calendar.

Date(s)	Event	Location
January 20 January 26	Cell Hack-a-thon	Loveland, CO, USA
January 23 January 26	Open Source Meets Business	Nürnberg, Germany
January 30 February 1	Solutions Linux Expo	Paris, France
February 1 February 2	LinuxDays Luxembourg	Luxembourg, Luxembourg
February 2	FUDCon Boston 2007	Boston, MA, USA
February 7 February 9	Free Software World Conference 3.0	Badajoz, Spain
February 7 February 9	Xorg Developer's Conference	Santa Clara, CA, USA
February 9	Women In Open Source	Los Angeles, USA
February 9	Open Source Health Care Summit	Los Angeles, USA
February 10 February 11	2007 Southern California Linux Expo	Los Angeles, USA
February 12 February 13	Vancouver PHP Conference	Vancouver, BC, Canada
February 12 February 13	Linux Storage and Filesystem Workshop	San Jose, CA, USA
February 12 February 16	Ruby on Rails Bootcamp Training	Atlanta, USA
February 12 February 15	3GSM World Congress 2007	Barcelona, Spain
February 14 February 15	LinuxWorld OpenSolutions Summit	New York, NY, USA
February 15	TiE Open Source Summit	Pittsburgh, PA, USA
February 16	The Ubucon New York	New York, NY, USA
February 19 February 23	DebianEDU DevCamp	Soissons, France
February 22	PyCon Tutorial Day	Addison, Texas,
February 22	CELF Japan Linux Technical Jamboree #13	Tokyo, Japan
February 22 February 24	OpenMind 2007	San Giorgio a Cremano, Naples, Italy
February 23 February 25	PyCon 2007	Addison, Texas,
February 23	PHP Conference UK 2007	London, England
February 24 February 25	Free and Open Source Software Developers' European Meeting	Brussels, Belgium
February 24 February 25	Java/DevJam/2007/Fosdem	Brussels, Belgium
February 26 March 1	PyCon Sprints	Addison, Texas,
February 26 March 2	PHP5 Bootcamp Training at the Big Nerd Ranch	Atlanta, Georgia, USA
February 27 March 1	O'Reilly Emerging Telephony Conference	San Francisco, CA,
February 27 March 2	EUSecWest Applied Security Conference	London, UK
February 28 March 2	Network and Distributed System Security Symposium	San Diego, CA, USA
March 2 March 3	LinuxForum 2007	Copenhagen, Denmark
March 3 March 8	O'Reilly Emerging Technology Conference	San Diego, CA, USA
March 5 March 8	EclipseCon 2007	Santa Clara, CA, USA
March 5 March 6	Karlsruhe Workshop on Software Radios	Karlsruhe, Germany
March 8 March 10	2007 Open Source Think Tank	Napa, CA, USA
March 10 March 13	Camp 5 Advanced Zope3 Training	Charlotte, North Carolina, USA
March 12 March 16	QCon	London, England
March 12 March 16	Third Annual Security Enhanced Linux Symposium	Baltimore, US
March 12 March 14	BOSSA Conference	Porto de Galinhas, Brazil
March 13 March 14	The Linux Foundation Japan Symposium	Tokyo, Japan
March 14 March 16	PHP Quebec Conference	Montreal, Canada
March 14 March 17	Barbeque Sprint for Plone3	Charlotte, North Carolina, USA
March 15 March 21	CeBIT computer fair	Hannover, Germany
March 16 March 17	MountainWest RubyConf	Salt Lake City, USA
March 18 March 23	Novell BrainShare 2007	Salt Lake City, Utah, USA
March 19 March 21	UKUUG LISA/Spring Conference 2007	Manchester, UK
March 22 March 25	Linux Audio Conference	Berlin, Germany
March 23 March 25	ShmooCon	Washington DC, USA
March 23 March 25	Guademy	Coruña, Spain
March 24	FSF Associate Membership Meeting	Cambridge, MA, USA

If your event does not appear here, please tell us about it.

Web sites

Searchme Launches Wikiseek Search Engine for Wikipedia

Searchme, Inc. has announced the launch of Wikiseek, an improved search engine for the Wikipedia reference site. "Wikiseek is available as a destination web site as well as inside Wikipedia as a Firefox extension. Wikiseek is based on proprietary technology developed by Searchme, which utilizes the suggestions of tens of thousands of vertical search engines to deliver more highly relevant searches. The result is a faster, richer Wikipedia search experience."

Comments (none posted)

Audio and Video programs

Web 2.0 Podcast: A Debate on Net Neutrality (O'ReillyNet)

O'Reilly presents a podcast on network neutrality. "Web 2.0 Summit program chair John Battelle moderated a debate on net neutrality between Google VP and chief internet evangelist Vinton Cerf and Robert Pepper, who leads a team driving Cisco's global agenda for advanced technology policy. This episode is sponsored by the Intel Software Network."

Comments (none posted)

Page editor: Forrest Cook