Related News
The proposed Fedora key-migration plan
For those who wonder how the Fedora project plans to migrate its users to anew set of package signing keys, a proposedplan has been posted. It involves an update to the fedora-releasepackage (signed with the old key) which swaps in a new key and repository location, and a slow movement of olderpackages to the new repository. It should work, as long as one is surethat the old key can be trusted for a little longer.
OLPC Releases Fedora 9-Based Linux Distro for the XO
OLPC (One Laptop Per Child) project originally based on Fedora 7 has done a revamp of its core system to Fedora 9 and added a number of new interesting features and many bug fixes. These include updates on applications on the XO laptop called activities such as home view and journal, new control panel for common system settings, a update system, better backup integration and many others.
Microsoft’s Mundie outlines the future of computing (CNET)
CNET - CAMBRIDGE, Mass.--Microsoft Chief Research and Strategy Officer Craig Mundie on Thursday offered a long-term view of where Microsoft and the world of computing are heading over the next few decades. Speaking at the MIT Emerging Technology Conference here, Mundie envisioned a 3D virtual world populated by virtual presences, using a combination of client and cloud services.
Thursday Security Updates
Fedora 8 has updatedphpMyAdmin (code execution vulnerability),phpMyAdmin (cross-site scripting vulnerability),rkhunter (insecure temp file)andviewvc (ignore user-provided MIME types).Fedora 9 has updatedinitscripts (local system file removal vulnerability),phpMyAdmin (code execution vulnerability),phpMyAdmin (cross-site scripting vulnerability),rkhunter (insecure temp file)andviewvc (ignore user-provided MIME types).Mandriva has updatedblender (multiple vulnerabilities).Red Hat Enterprise Linux has updatedkernel (multiple vulnerabilities).
Bitten by the Red Hat Perl bug (InfoWorld)
InfoWorld's Neil McAllisterinvestigates a bug with Perl's object instantiationon Red Hat Linux."To make a long story short, he got rid of the Perl executable that came with his CentOS installation, compiled a new one from stock source code, and the bug disappeared. Clearly, the Perl hackers are blameless in this case. The fault lies squarely with Red Hat for distributing a buggy version of the interpreter.What's more disturbing, however, is that it turns out that this Red Hat Perl performance issue is a known bug. It was documented and verified long before Prakash ever raised a stink about it. How long? Try 2006, according to Red Hat's own Bugzilla database."