Unix News Tutorials Events and Stuff

Monday, June 29, 2015

FESCO Elections - June 2015 - Results

Greetings, all!

The elections for FESCo - June 2015 have concluded, and the results
are shown below.

FESCo is electing 4 seats this time.
A total of 90 ballots were cast, meaning a candidate
could accumulate up to 540 votes (90 * 6).

The results for the elections are as follows:

Congratulations to the winning candidates, and thank you all
candidates for running this elections!

--
Jan Kuřík
_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce

Saturday, June 27, 2015

[CentOS-announce] CEBA-2015:1191 CentOS 5 irqbalance BugFix Update

CentOS Errata and Bugfix Advisory 2015:1191

Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1191.html

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

i386:
0ec224e1af235b81234eea49486b3cf28562457ce4c67ae3da06cdc7e5f4ba37 irqbalance-0.55-16.el5_11.i386.rpm

x86_64:
818235db375a8409016a5bf4a3c27765adbf4a44dfea7b9a0bbbc6c7c6a959ab irqbalance-0.55-16.el5_11.x86_64.rpm

Source:
b233e7b4dfe9720ddad886936804055e2c92ae57a5ee83ff3324eff85de0c719 irqbalance-0.55-16.el5_11.src.rpm

--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net

_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce

Friday, June 26, 2015

[announce] NYC*BUG Wed July 1: Precision Time Protocol with Steve K

July 1, Wednesday
Staying in sync with the Precision Time Protocol, Steven Kreuzer
18:45, Stone Creek Bar & Lounge: 140 E 27th St

Abstract

Getting clocks to agree on the time is tricky. Getting them to agree on
the time better than 100 nanoseconds is even trickier.

In this talk I will provide an introduction to the basic principles of
the Precision Time Protocol (PTP) and how it can be used to precisely
synchronize computers over a LAN.

Speaker Bio

Battling to keep unreliable clocks in sync, Steven is a system
administrator who has gained an appreciation for the art and science of
timekeeping. He lives in Queens, NY with his wife and dog.

_______________________________________________
announce mailing list
announce@lists.nycbug.org
http://lists.nycbug.org/mailman/listinfo/announce

F23 Self Contained Change: Astronomy Spin

= Proposed Self Contained Change: Astronomy Spin =
https://fedoraproject.org/wiki/Changes/Astronomy_Spin

Change owner(s): Christian Dersch <lupinix at mailbox dot org >

A Fedora Spin providing a complete toolchain for both amateur and professional astronomers.

== Detailed Description ==
In both amateur and professional astronomy and astrophysics Linux is a very popular operating system. More and more data analysis is performed using Python, especially the astropy project is a quite new effort providing a professional toolchain. The Astronomy Spin provides a complete scientific Python environment (2 and 3) as well as the AstrOmatic software. For observational astronomy, KStars provides a complete solution for astrophotography using the INDI library. In addition to an astronomical collection of packages the spin also adds a menu for astronomy to make work more comfortable.

== Scope ==
* Other developers: N/A (not a System Wide Change)
* Release engineering: Add spin to spin-kickstarts, ensure spin has been tested, and release with rest of spins
* Policies and guidelines: N/A (not a System Wide Change)
* Trademark approval: Requested
--
Jan Kuřík
_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce

[CentOS-announce] CESA-2015:1189 Important CentOS 5 kvm Security Update

CentOS Errata and Security Advisory 2015:1189 Important

Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1189.html

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

x86_64:
492ee4251b86edf043521fb03757643de2f25776eb6eab5745b53d1d2337be63 kmod-kvm-83-273.el5.centos.x86_64.rpm
4e43433ec3b141ff6d3eae3d2d4c2407ece9ce948439a4cdc87e651b26dd1e0c kmod-kvm-debug-83-273.el5.centos.x86_64.rpm
62f07523683d3bc7dd295bb39f079d9a08d4d4f4136d920a0b6baf026ca8d2ae kvm-83-273.el5.centos.x86_64.rpm
6a61830f8c07eaa0ce456660fd5bbe1f0d8a1ff791db0507b199e3cf70f3951f kvm-qemu-img-83-273.el5.centos.x86_64.rpm
83104ad3a7483c91c8cb0c09700c08bb5d3463fe20c455e367f17c2c49ce80d1 kvm-tools-83-273.el5.centos.x86_64.rpm

Source:
b83cedf1824e79195e22e88c431c8f87be9189e61d0dc67dc77eaff507a0a44c kvm-83-273.el5.centos.src.rpm

--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net

_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce

[opensuse-announce] Work begins on totally new openSUSE release

Hi all,
Please help us get the news about about the next openSUSE regular
release - http://bit.ly/1HjnkkB

Work begins on totally new openSUSE release

Roadmap questions answered

Deep thought and some additional core SUSE Linux Enterprise source code
have given The openSUSE Project a path forward for future releases.

The change is so phenomenal that the project is building a whole new
release.

Some people might be perplexed over the next regular release, but rather
than bikeshedding the name over the next few months, for the moment, we
will call it openSUSE: 42 after its project name in the Open Build
Service. And we are going to explain the roadmap for this regular release.

openSUSE 42 is scheduled to be released around SUSECon, which is in
Amsterdam this year from Nov. 2 – 6.

Unlike old releases, future releases of "42" are expected to align with
the releases of SLE service packs and major releases.

There are about 2,000 packages in openSUSE 42 right now, said Stephan
"Coolo" Kulow, release manager. Of course, many more are expected.

openSUSE 42 will be a long-term type release with enduring updates and
maintenance commitments by the community and SUSE.

Kulow said a milestone will be released soon.

"We have to come up with solutions as problems arise," Kulow said.

There is currently no plans for live CDs, but he said expect other media
formats to be added later.

--
Respectfully,
Douglas DeMaio
douglas.demaio@suse.com

"In any moment of decision, the best thing you can do is the right
thing, the next best thing is the wrong thing, and the worst thing you
can do is nothing."
- Theodore Roosevelt
--
To unsubscribe, e-mail: opensuse-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-announce+help@opensuse.org

Thursday, June 25, 2015

Koschei - new Fedora infrastructure service

I'm glad to announce that as of yesterday Koschei production instance
has been moved Fedora infrastructure and now it can be considered as
officially-supported Fedora service.

Koschei is a continuous integration service for Fedora packages.
Koschei is aimed at helping Fedora developers by detecting problems as
soon as they appear in rawhide - it tries to detect package FTBFS in
rawhide by scratch-building them in Koji. More information can be
found at Fedora Wiki [1].

Interested parties can be automatically notified when Koschei detects
change in package FTBFS status. In order to subscribe to email or IRC
notifications you can follow instructions at [2].

At the time of writing, Koschei monitors about 20 % of all Fedora
packages, but anyone with FAS account can add packages they are
interested in. See [3] for details how to add packages to Koschei.

I would like to thank everybody who helped to make Koschei at Fedora
infrastructure possible, especially Kevin Fenzi, who sponsored Koschei
request for resources and assisted us with the migration.

[1] https://fedoraproject.org/wiki/Koschei
[2] https://fedoraproject.org/wiki/Koschei#Notifications
[3] https://fedoraproject.org/wiki/Koschei#Adding_packages

--
Mikolaj Izdebski

_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce

[USN-2655-1] Tomcat vulnerabilities

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=zFjm
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2655-1
June 25, 2015

tomcat6 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

Several security issues were fixed in Tomcat.

Software Description:
- tomcat6: Servlet and JSP engine

Details:

It was discovered that Tomcat incorrectly handled data with malformed
chunked transfer coding. A remote attacker could possibly use this issue to
conduct HTTP request smuggling attacks, or cause Tomcat to consume
resources, resulting in a denial of service. (CVE-2014-0227)

It was discovered that Tomcat incorrectly handled HTTP responses occurring
before the entire request body was finished being read. A remote attacker
could possibly use this issue to cause memory consumption, resulting in a
denial of service. (CVE-2014-0230)

It was discovered that the Tomcat Expression Language (EL) implementation
incorrectly handled accessible interfaces implemented by inaccessible
classes. An attacker could possibly use this issue to bypass a
SecurityManager protection mechanism. (CVE-2014-7810)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
libtomcat6-java 6.0.35-1ubuntu3.6

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2655-1
CVE-2014-0227, CVE-2014-0230, CVE-2014-7810

Package Information:
https://launchpad.net/ubuntu/+source/tomcat6/6.0.35-1ubuntu3.6

[USN-2654-1] Tomcat vulnerabilities

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJVi/USAAoJEGVp2FWnRL6TuW8P/ikEBCzhtKnFHmLnS+FgDc6s
ljp+1zHkoTdsPlIf8T5UHTDPfaTx1ZTQ05PvRA2ofylTgKYfj9L6CEELfITR+et9
inZFK6+ueLrbVPsQBD3GJSSJhCFuq16Fjm6bypcEUPNHygsPIWBxM7iv3TfXmMwa
Jysgq1GTZ+dUN7W8pkD2Ao0ojRqP36BTW4fwojRyvITd7kosx0F/O5yGpCGbLWVv
7D9UO2zsO0c69iFWVnERIH0YIDhKJumhWTnOz2kNWg68bD3GdtO5NAw5F/37KiS+
x9yjWFUNHo14+OFSQrEQGlaItlvahpO3FmOgUG53D/NnevODywHZij355kQPd61E
hFh1EMWgzznRu52HhR93RsxoKHly1RapJ1J/TyADY8IU941VxDCQLSNNaIfv39xZ
ihq5Mh5GJiZjfFkrBlCqC+c8lrfR9QneRglneBQzMViuAYhVZBCGYCzZRppVreLE
pkx8Jv3w0m/W+yekH919zUiSWKikyp8/oBGm7S/QwZMIItCOZwp1vd2IoVoYtenc
k3elkpc9wuEWHW5j7NwlW2RFlMK066G+pGsaH+guotDH0qytiYOAE/GNRyYSkoag
K11Gxpc7zWcaAJx0QbNOG2t7jtyv89yf8wgfzBrSwyGsb8t0SRL8vRbj+AQMlgrh
KV58HUeRFi0ZpTpzD6sT
=31aZ
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2654-1
June 25, 2015

tomcat7 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 15.04
- Ubuntu 14.10
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in Tomcat.

Software Description:
- tomcat7: Servlet and JSP engine

Details:

It was discovered that the Tomcat XML parser incorrectly handled XML
External Entities (XXE). A remote attacker could possibly use this issue to
read arbitrary files. This issue only affected Ubuntu 14.04 LTS.
(CVE-2014-0119)

It was discovered that Tomcat incorrectly handled data with malformed
chunked transfer coding. A remote attacker could possibly use this issue to
conduct HTTP request smuggling attacks, or cause Tomcat to consume
resources, resulting in a denial of service. This issue only affected
Ubuntu 14.04 LTS. (CVE-2014-0227)

It was discovered that Tomcat incorrectly handled HTTP responses occurring
before the entire request body was finished being read. A remote attacker
could possibly use this issue to cause memory consumption, resulting in a
denial of service. This issue only affected Ubuntu 14.04 LTS.
(CVE-2014-0230)

It was discovered that the Tomcat Expression Language (EL) implementation
incorrectly handled accessible interfaces implemented by inaccessible
classes. An attacker could possibly use this issue to bypass a
SecurityManager protection mechanism. (CVE-2014-7810)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
libtomcat7-java 7.0.56-2ubuntu0.1

Ubuntu 14.10:
libtomcat7-java 7.0.55-1ubuntu0.2

Ubuntu 14.04 LTS:
libtomcat7-java 7.0.52-1ubuntu0.3

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2654-1
CVE-2014-0119, CVE-2014-0227, CVE-2014-0230, CVE-2014-7810

Package Information:
https://launchpad.net/ubuntu/+source/tomcat7/7.0.56-2ubuntu0.1
https://launchpad.net/ubuntu/+source/tomcat7/7.0.55-1ubuntu0.2
https://launchpad.net/ubuntu/+source/tomcat7/7.0.52-1ubuntu0.3

[USN-2653-1] Python vulnerabilities

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=fS+y
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2653-1
June 25, 2015

python2.7, python3.2, python3.4 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.10
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS

Summary:

Several security issues were fixed in Python.

Software Description:
- python2.7: An interactive high-level object-oriented language
- python3.4: An interactive high-level object-oriented language
- python3.2: An interactive high-level object-oriented language

Details:

It was discovered that multiple Python protocol libraries incorrectly
limited certain data when connecting to servers. A malicious ftp, http,
imap, nntp, pop or smtp server could use this issue to cause a denial of
service. (CVE-2013-1752)

It was discovered that the Python xmlrpc library did not limit unpacking
gzip-compressed HTTP bodies. A malicious server could use this issue to
cause a denial of service. (CVE-2013-1753)

It was discovered that the Python json module incorrectly handled a certain
argument. An attacker could possibly use this issue to read arbitrary
memory and expose sensitive information. This issue only affected Ubuntu
12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4616)

It was discovered that the Python CGIHTTPServer incorrectly handled
URL-encoded path separators in URLs. A remote attacker could use this issue
to expose sensitive information, or possibly execute arbitrary code. This
issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4650)

It was discovered that Python incorrectly handled sizes and offsets in
buffer functions. An attacker could possibly use this issue to read
arbitrary memory and obtain sensitive information. This issue only affected
Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-7185)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
python2.7 2.7.8-10ubuntu1.1
python2.7-minimal 2.7.8-10ubuntu1.1
python3.4 3.4.2-1ubuntu0.1
python3.4-minimal 3.4.2-1ubuntu0.1

Ubuntu 14.04 LTS:
python2.7 2.7.6-8ubuntu0.2
python2.7-minimal 2.7.6-8ubuntu0.2
python3.4 3.4.0-2ubuntu1.1
python3.4-minimal 3.4.0-2ubuntu1.1

Ubuntu 12.04 LTS:
python2.7 2.7.3-0ubuntu3.8
python2.7-minimal 2.7.3-0ubuntu3.8
python3.2 3.2.3-0ubuntu3.7
python3.2-minimal 3.2.3-0ubuntu3.7

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2653-1
CVE-2013-1752, CVE-2013-1753, CVE-2014-4616, CVE-2014-4650,
CVE-2014-7185

Package Information:
https://launchpad.net/ubuntu/+source/python2.7/2.7.8-10ubuntu1.1
https://launchpad.net/ubuntu/+source/python3.4/3.4.2-1ubuntu0.1
https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.2
https://launchpad.net/ubuntu/+source/python3.4/3.4.0-2ubuntu1.1
https://launchpad.net/ubuntu/+source/python2.7/2.7.3-0ubuntu3.8
https://launchpad.net/ubuntu/+source/python3.2/3.2.3-0ubuntu3.7

[CentOS-announce] CESA-2015:1185 Moderate CentOS 7 nss-util Security Update

CentOS Errata and Security Advisory 2015:1185 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1185.html

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

x86_64:
2ef5f1ea879e3bb34c930bdcb7ebea42bb1f3a3440e4f8f61b34a9bf042a42eb nss-util-3.19.1-1.el7_1.i686.rpm
c379f6530da7996ea4d52370038ff0dde6f69395b4b38bd184f9ea3ff93cd066 nss-util-3.19.1-1.el7_1.x86_64.rpm
420eda8ab708d8b616e19288813a47f6a82f013c58ca474d91d544d4b4fe7951 nss-util-devel-3.19.1-1.el7_1.i686.rpm
f4609893801a577d38f7a447775120bcef017207fabab038152ed248d8b262f2 nss-util-devel-3.19.1-1.el7_1.x86_64.rpm

Source:
25631048669b631db267364a4adff132c337756e91b3880db2ca5f6cc0e05219 nss-util-3.19.1-1.el7_1.src.rpm

--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net

_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce

[CentOS-announce] CESA-2015:1185 Moderate CentOS 7 nss Security Update

CentOS Errata and Security Advisory 2015:1185 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1185.html

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

x86_64:
c36669d51214d57b5a82f9b079c12ff025b33dfdc417376f01ad3538ba44ede2 nss-3.19.1-3.el7_1.i686.rpm
67217f72404c892ec99f3620176a88815865c9e0760cfcde205ccb438c27c936 nss-3.19.1-3.el7_1.x86_64.rpm
796fd60bf87cc31757a284190ef1471ecf6d677c48efc1867b5ca70ed07254bf nss-devel-3.19.1-3.el7_1.i686.rpm
24105b14d55d7fe635d2a61b428f14e6f60f97592ee973e9627cf4a67acfc963 nss-devel-3.19.1-3.el7_1.x86_64.rpm
94d8574d74fdf11669e69adc0c8a9c05ee261feb186bb742cfe6ca76d651454f nss-pkcs11-devel-3.19.1-3.el7_1.i686.rpm
6b020d9acf4a76177c3bba65766a32f486e669da53464ea4b5a33dbc6a119eed nss-pkcs11-devel-3.19.1-3.el7_1.x86_64.rpm
43911fd7e9c230d4ed1f92cf709e150d2a671228256a6abaa99bd2ee541287a8 nss-sysinit-3.19.1-3.el7_1.x86_64.rpm
f724e35a7efafae8f3babbb7274adb518c642a098fd087cdc09fab867b7b4a43 nss-tools-3.19.1-3.el7_1.x86_64.rpm

Source:
3560838cde182f07528ad9cde1afbd899b3274c50328c21c1ccb521ffa327e29 nss-3.19.1-3.el7_1.src.rpm

--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net

_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce