Home Blog Page 8613

Embedded Planet chooses TimeSys Corporation as its exclusive provider of embedded Real-Time Linux

Author: JT Smith

PR Newswire: “Embedded Planet has
chosen TimeSys Corporation as its exclusive provider of embedded Linux
operating systems for its PowerPC-based single board computers. Embedded
Planet is a provider of integrated platforms and services for rapid
development and cost-effective production of embedded and networking devices.
TimeSys offers system architects a full set of Linux-based solutions for
developing robust, cost-effective embedded systems.” Read more here.

Mandrake: ‘cups’ Remote buffer overflow vulnerability

Author: JT Smith

Mandrake: “There is a potential buffer overflow vulnerability in CUPS when reading
the names of attributes. This bug affects all versions of CUPS and is
fixed upstream in version 1.1.14.”


________________________________________________________________________

                Mandrake Linux Security Update Advisory
________________________________________________________________________

Package name:           cups
Advisory ID:            MDKSA-2002:015
Date:                   February 15th, 2002
Affected versions:      7.2, 8.0, 8.1
________________________________________________________________________

Problem Description:

 There is a potential buffer overflow vulnerability in CUPS when reading
 the names of attributes.  This bug affects all versions of CUPS and is
 fixed upstream in version 1.1.14.
________________________________________________________________________

References:

________________________________________________________________________

Updated Packages:

 Linux-Mandrake 7.2:
 4680260ce9475120da8cc18e7c36f3f2  7.2/RPMS/cups-1.1.7-2.2mdk.i586.rpm
 fc8a541afa98bfade31410a15bee3aa0  7.2/RPMS/cups-devel-1.1.7-2.2mdk.i586.rpm
 00a532828dfbfe68aa912d339c9cc58d  7.2/SRPMS/cups-1.1.7-2.2mdk.src.rpm

 Mandrake Linux 8.0:
 82bb3a1d3d1fa86b7af6673dbc2d6081  8.0/RPMS/cups-1.1.7-2.1mdk.i586.rpm
 d5a247a2ed891a35a52571c312bf5450  8.0/RPMS/cups-common-1.1.7-2.1mdk.i586.rpm
 9dc31332b483249b8c27aea8b722d851  8.0/RPMS/libcups1-1.1.7-2.1mdk.i586.rpm
 31e0c8032abb89ddbef0cfe0abd1bf36  8.0/RPMS/libcups1-devel-1.1.7-2.1mdk.i586.rpm
 629205474ed6a84263f2e2276f603eea  8.0/SRPMS/cups-1.1.7-2.1mdk.src.rpm

 Mandrake Linux 8.0/ppc:
 93b88316f4c05f3180ba59adb2fcaa38  ppc/8.0/RPMS/cups-1.1.7-2.1mdk.ppc.rpm
 9aedf20ba887af6a325ffeb6740a52a9  ppc/8.0/RPMS/cups-common-1.1.7-2.1mdk.ppc.rpm
 c55ed843b578956e629b75f0cc4985a5  ppc/8.0/RPMS/libcups1-1.1.7-2.1mdk.ppc.rpm
 57d9db0a9d057b87ce36a95568a02911  ppc/8.0/RPMS/libcups1-devel-1.1.7-2.1mdk.ppc.rpm
 629205474ed6a84263f2e2276f603eea  ppc/8.0/SRPMS/cups-1.1.7-2.1mdk.src.rpm

 Mandrake Linux 8.1:
 25b44ff88d1cc95387827526b576dfcd  8.1/RPMS/cups-1.1.10-9.1mdk.i586.rpm
 27718fa74c9d1af3a282295546c88444  8.1/RPMS/cups-common-1.1.10-9.1mdk.i586.rpm
 8f2f1fcf331dfdd38e8222c1c1b5159f  8.1/RPMS/cups-serial-1.1.10-9.1mdk.i586.rpm
 a9ee9e6c95cfe25ef465247717d49429  8.1/RPMS/libcups1-1.1.10-9.1mdk.i586.rpm
 43c5a9bd5e6b1fb40958986201bd00a7  8.1/RPMS/libcups1-devel-1.1.10-9.1mdk.i586.rpm
 1d725be3012e1510d04f9d62cbcd7ff1  8.1/SRPMS/cups-1.1.10-9.1mdk.src.rpm

 Mandrake Linux 8.1/ia64:
 73c67ab84a01026cefd3538b521caa3c  ia64/8.1/RPMS/cups-1.1.10-9.1mdk.ia64.rpm
 d7e1e99eca0fab95cb5f2263d988a8a8  ia64/8.1/RPMS/cups-common-1.1.10-9.1mdk.ia64.rpm
 b86c3aaf5833bd4364a885c7f2e9bd19  ia64/8.1/RPMS/cups-serial-1.1.10-9.1mdk.ia64.rpm
 d35d11c59751df68d4cbfff0856cd5c6  ia64/8.1/RPMS/libcups1-1.1.10-9.1mdk.ia64.rpm
 84171f57a5a06e560c4647c9935d646a  ia64/8.1/RPMS/libcups1-devel-1.1.10-9.1mdk.ia64.rpm
 1d725be3012e1510d04f9d62cbcd7ff1  ia64/8.1/SRPMS/cups-1.1.10-9.1mdk.src.rpm
________________________________________________________________________

Bug IDs fixed (see https://qa.mandrakesoft.com for more information):

________________________________________________________________________

To upgrade automatically, use MandrakeUpdate.  The verification of md5
checksums and GPG signatures is performed automatically for you.

If you want to upgrade manually, download the updated package from one
of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".  A list of
FTP mirrors can be obtained from:

   http://www.mandrakesecure.net/en/ftp.php

Please verify the update prior to upgrading to ensure the integrity of
the downloaded package.  You can do this with the command:

  rpm --checksig 

All packages are signed by MandrakeSoft for security.  You can obtain
the GPG public key of the Mandrake Linux Security Team from:

  https://www.mandrakesecure.net/RPM-GPG-KEYS

Please be aware that sometimes it takes the mirrors a few hours to
update.

You can view other update advisories for Mandrake Linux at:

   http://www.mandrakesecure.net/en/advisories/

MandrakeSoft has several security-related mailing list services that
anyone can subscribe to.  Information on these lists can be obtained by
visiting:

   http://www.mandrakesecure.net/en/mlist.php

If you want to report vulnerabilities, please contact

  security@linux-mandrake.com
________________________________________________________________________

Type Bits/KeyID     Date       User ID
pub  1024D/22458A98 2000-07-10 Linux Mandrake Security Team
  security@linux-mandrake.com>


-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.5 (GNU/Linux)
Comment: For info see  http://www.gnupg.org
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=0ahQ
-----END PGP PUBLIC KEY BLOCK-----



Category:

  • Linux

Zope creator Jim Fulton on company’s beginnings, future

Author: JT Smith

Zopera.org interviews Zope creator Jim Fulton. On reasons for Open-Sourcing Zope: “Our consulting business is built around Zope, not the other way around. Zope is a platform that provides real benefits for our customers and that allows us to build customer solutions in a fraction of the time needed by other approaches. Open-sourcing Zope was the best way to strengthen the platform, which, in turn, strengthens our consulting business.”

Category:

  • Open Source

PostNuke wins ‘CMS Survey’ at linuxlookup.com

Author: JT Smith

Harry Zink writes: “Not only did www.PostNuke.com’s community driven CMS pull ahead of the pack of the other CMS systems on the survey, but PostNuke was also the only of the ‘competitors’ that did not link back to the survey.”

The original article from linuxlookup.com can be found here:

http://www.linuxlookup.com/html/articles/cms.html

The results in all categories can be found here:

http://www.linuxlookup.com/html/articles/cms_resul ts.html

The page at www.PostNuke.com that announced the results and discussion, can be found here:

http://www.postnuke.com/modules.php?op=modload&nam e=News&file=article&sid=1604

Who’s really in the penguin suit at Sun? Company’s long on promises, short on details

Author: JT Smith

By Steven J. Vaughan-Nichols

Does Sun Microsystems’ CEO Scott McNealy dressing up like Tux and
proclaiming that “We love Linux” to financial analysts at Sun’s
annual meeting on February 7 really signal a change in heart
by the Solaris giant?

If it does, it will signal an amazing turn-around. Back in the
May 12, 1999, issue of Computer Reseller News, McNealy
said, Linux is “a great way to get the wrong answer,” even as he
announced that Solaris would run Linux programs.

Now, Sun is seeking the right Linux answer with a four fold
plan: 1. Create and ship its own line of Sun house brand Linux
servers; 2. Expand the Sun Cobalt Linux application server line;
3. Open-Source some Solaris’ key components and release Solaris/Linux compatibility development tools and 4. Bring Sun’s Open Net Environment (ONE) and the rest of its
Web Services initiatives to Linux. Indeed, with this move,
iPlanet Directory and Web servers, Java/XML, Forte for Java
development tools, Project JXTA, StarOffice, Chili!Soft, ASP
and Sun Grid Engine should all be moving to Linux.

That sounds great, but as Alan Gillen, IDC’s research director
for systems software, comments, “It was a peculiar
announcement for Sun since it didn’t have a lot of specifics and
it wasn’t accompanied by hardware announcements.”

Even without details, some companies that use Sun technologies
in their work rejoiced to see Sun moving into Linux. William D.
Vasu, president of CyberAccess, an information portal
company, wasn’t “surprised at Sun’s recent Linux moves. They
are a hardware company with a software heart and this move
arguably gives the customer a choice of hearts that will play
across their entire product line. Furthermore, it supports Java
and the open-systems services environment to the detriment of
the .NET onslaught from Redmond.”

Why did Sun make this about a face? After all, as Gillen points
out, Sun has long dismissed IBM and HP with their multiple
hardware platforms and operating systems as serving only to
confuse customers.

One reason is simply that customers want and demand Linux
now on the low-end. Even current Solaris users are finding at least “seven reasons” to consider Linux.

Stacey Quandt, Giga Information Group’s Open Source analyst
thinks that Sun’s making the move because in the short term, “it
will plug a hole in its product line by making Linux available on
two-way x86-based general-purpose systems.” Specifically, it
will give Sun an alternative to Dell, HP, Compaq and IBM’s
Intel-based general-purpose servers. For the telecommunications
and embedded business, the move will enable Sun to “offer a
Linux on SPARC alternative to Linux on Intel.”

In the long run, Quandt goes on, “What is significant about
Sun’s broadened support for Linux is that it targets x86-based
general-purpose servers and SPARC systems and ends Sun’s
‘last man standing’ status in regard to only following a
proprietary Unix RISC road map strategy. Sun’s decision to
augment its Linux strategy through organic growth with Linux
for low-end single-purpose appliances and low-end general-
purpose servers and Solaris on SPARC for high-value, general-
purpose servers, allows it to provide users with multiple Linux
solutions while maintaining the distinct brand value of Solaris
on SPARC for high-end servers.”

HP’s Linux business strategist, Mike Balma, thinks that this
might blow up on Sun. “It’s nice to see them acknowledging
Linux can solve real problems, but doesn’t this move put Solaris
on SPARC into question?”

Scott Handy, IBM’s director of Linux software solutions, thinks
that Sun’s Linux move has come too late. “We’ve been in Linux
for a long time. We’d know others would follow since Linux
has kept growing. Customers demand Linux and need it.”

Balma adds: “Sun will be welcome to the Linux environment, they’re coming
in very late. We’ve been supporting Linux for
three years, maybe in three years Sun will catch up.”

Quandt, though, believes “Sun will do very well at Linux. Sun
doesn’t want to create confusion for customers while it has been
a challenge for IBM to explain to customers when to deploy
Linux and when to deploy a higher end operating system like
AIX or OS/400.” Still, Sun “could have done it sooner.” Indeed,
everyone we spoke to was agreed on one point: Sun had to
move to Linux on the low-end. Business customers demand
Linux for file/server and edge servers such as Web and email
servers.

Sun specifics

Officially, Sun has given out almost no specifics on its Linux
plans. Nevertheless, Sun insiders and analysts believe that some
of the foundation has already been laid. Here’s what they predict:

First, Sun will go into the low-end server hardware business
with Intel-based boxes. It will not turn into a high-end imitative.
For example, Sun won’t be producing four-way symmetric
multi-processing (SMP) or above servers on Intel. If you need
enterprise level computers, Sun will still be selling you Solaris
on SPARC.

As further proof of this, Sun will not be delivering Linux virtual
machines (VM) the way IBM has with its iSeries, pSeries and
zSeries. Even as other Linux and hardware companies are betting that Linux VM will prove popular with business
customers, Sun continues to bet on Solaris on SPARC for this
market.

The new low-end servers will be more than just Cobalt style
appliances. These will be turnkey systems running Sun Linux
and be sold through Sun’s current partners. Sun Linux will be
very tightly coupled to these boxes’ hardware.

While it’s possible these will be white-boxes — unbranded
systems built by other vendors — it’s expected that the Cobalt
Server Appliance business unit, under the direction of Vivek
Mehra, v.p. and general manager, will be expanded to meet the
expected demand for these boxes and a new series of Cobalt
appliances. We will not, however, see Linux workstations out of
Sun. Sun’s Linux move is a server move, not a desktop one.

This move to Linux hardware boxes is may remind you of VA Linux
and Penguin Computing’s hardware initiatives. Unlike these
smaller companies, though, Sun has large financial resources, a
world-recognized brand and a strong hardware reseller channel.
While this bodes well for Sun’s Linux plans, if Sun is successful
it may put even more on pressure on Penguin and the other
remaining Linux hardware OEMs.

It’s also expected that Sun “go-it-alone” Linux distribution path
may lead other companies to question their reliance on
partnerships with Linux distributors like Red Hat, SuSE and
Turbolinux.

That said, Sun isn’t going it alone on Linux on SPARC. For
native Linux on SPARC look for new partnerships with Lineo
and SuSE. On the embedded side, look to Lineo and TimeSys, a
leader in embedded Java, for partnership announcements.

We also know for a fact that Sun will be producing a Linux Standard Base 1.1-compliant system as LSB continues to mature. Sun also plans to Open-Source some of Solaris’ features and make them available for Linux. There is no word,
however, on what features might be Open-Sourced. It appears
however that Solstice DiskSuite, Solaris’ volume manager, is
under consideration. In any case, no one knows yet under what
license Sun will release any currently Solaris-specific features.

Finally, despite any thing Sun might say about it possibly having
life, Solaris on Intel is dead. Solaris on Intel, which was often described by analysts and resellers alike as an operating system that only
existed as a bait and switch product for Solaris on SPARC, will
never see another major revision. You can expect to see current
Solaris on Intel users encouraged to move to Sun Linux on Intel.

Whatever the fate of Sun’s Linux move; there can be no doubt
of one point. The move is of vital importance to Sun. As Quandt
says, “The absence of a low-end, general-purpose Linux strategy,
coupled with the erosion of Solaris on SPARC for edge
services, means Sun was faced with the prospect of defining
itself as a high-end performance company that specializes in big
iron. Sun’s decision to confront market realities and discontinue
its focus on a single chip, single operating system environment
means that it stands a chance of reinventing itself.”

Now the
question is, can Sun succeed in this reinvention?

Category:

  • Linux

Lindows CEO delivers broadside in Microsoft trademake dispute

Author: JT Smith

The Register publishes a statement from Lindows CEO Michael Robertson: ”
Another critical fact that clearly illuminates Microsoft’s true motivations is that over the last 10 years Microsoft has never filed a lawsuit similar to the one they filed against Lindows.com in spite of the fact that there are hundreds of products which use the term “windows”. Our users helped us identify hundreds of products which use or incorporate the term ‘windows,’ These products run on a variety of operating systems (including Linux and Macintosh). Some are actually operating systems themselves. There are commercial products, shareware, freeware, open source, and even hardware products.”

Open Sourcers spice up security testing

Author: JT Smith

the story’s from vnunet.com. “A group of open source developers dedicated to introducing an industry standard on security testing will be releasing the fruits of their labours later this month.

Ideahamster.org started working on the Open Source Security Testing Methodology Manual (OSSTMM ) last year after becoming ‘sick of reading bland testing methodology descriptions.’

The group, which includes security experts and developers, claimed that the introduction of an industry standard on security testing would make it easier for users to judge security products.”

Category:

  • Linux

Four years on, digital copyright law revs up

Author: JT Smith

IDG News Service (on CNN.com) reviews the DMCA and it’s new found teeth. “Sklyarov’s arrest and the wave or protests that followed underscore concern over the groundbreaking legislation, which is just beginning to show its teeth in a spate of recent court cases.

Opponents of the law say that its ironclad protections against copyright infringement threaten to douse the fires of innovation and artistic expression heralded by the Internet age, and replace them with expanded and unprecedented corporate control. They paint a world in which consumers have little choice over how they use the intellectual property that they own, one in which movies, music and eBooks can only be played on one device, a world where it is forbidden to copy and share works, making libraries obsolete.”

Hands-on Debian GNU guide

Author: JT Smith

DebianPlanet: “A new guide has been written aimed at those who have got over the first hurdle of
installing Debian GNU and now need help with some of the more general Linux/Unix
commands and methodology as well as some specialist Debian material. The author
is looking for feedback on his work.”

Category:

  • Linux

New update for Mozilla development roadmap

Author: JT Smith

On Sunday, Slashdot posted that Mozilla has updated its development roadmap. Timothy says, “This is worth reading even if you skim toward the bottom and jump to the
Intertwingle link. The Mozilla project isn’t slapped together — this kind of forethought and
explanation is proof.” Mozillaquest also has a story about the update.

Category:

  • Open Source