[$] A GPL-enforcement suit against VMware
When Karen Sandler, the executive director of the Software
Freedom Conservancy, spoke recently at the Linux Foundation's Collaboration
Summit, she spent some time on the Linux Compliance Project, an effort to
improve compliance with the Linux kernel's licensing rules. This project,
launched with some fanfare in 2012, has been relatively quiet ever since. Karen
neglected to mention that this situation was about to change; that had to wait
for the announcement on March 5 of the filing of a lawsuit against VMware
alleging copyright infringement for its use of kernel code.
Subscribers can
click below for the full story.
Thursday's security updates
Fedora has updated bind (F21; F20: denial of service), lftp
(F21: automatically accepting ssh keys), and rubygem-actionpack (F20: two
information leaks).
openSUSE has updated vsftpd (13.2, 13.1: access
restriction bypass).
Ubuntu has updated icu (14.10, 14.04, 12.04: multiple
vulnerabilities, some from 2013).
[$] LWN.net Weekly Edition for March 5, 2015
The LWN.net Weekly Edition for March 5, 2015 is
available.
[$] A look at EasyNAS
Thus far, this series on network-attached storage (NAS)
distributions has looked at three different approaches to the problem.
OpenMediaVault provides a NAS server using traditional Linux filesystems,
Rockstor bases everything on the Btrfs filesystem, and FreeNAS is a FreeBSD-
based system using ZFS. This fourth (and probably final) installment in this
series goes back to Btrfs with a look at EasyNAS, which is another attempt to
make the unique features of Btrfs available in a dedicated NAS
distribution.
Security advisories for Wednesday
Debian has updated icedove (multiple vulnerabilities).
Debian-LTS has updated unace (code execution).
Fedora has updated arc (F21;
F20: directory traversal), e2fsprogs (F21; F20: code execution), glibc (F21;
F20: multiple vulnerabilities), php (F20: multiple vulnerabilities), and qt
(F21: denial of service).
Mageia has updated php (multiple
vulnerabilities).
Mandriva has updated bind (denial of service) and
freetype2 (many vulnerabilities).
openSUSE has updated apache2 (13.2: denial
of service), postgresql93 (13.2: multiple vulnerabilities), and python-rope
(13.2, 13.1: unauthorized pickle.load).
Red Hat has updated foreman-proxy
(RHEL OSP Foreman; RHEL OSP4.0: restriction bypass).
SUSE has
updated php5 (SLE12: two vulnerabilities).
Ubuntu has updated kernel (14.04:
regression in previous update) and linux-lts-trusty (12.04: regression in
previous update).
