If you frequently visit KarKomaOnline, Geeklog based, you probably have noticed a lot of unwanted spam and porn related comments.
As I want to mantain this site clean I am forced to disable anonymous comments for now. If you find this site somehow useful, please take a couple of minutes and fill the form to become a member of KarKomaOnline.
Regards.
Karkoma.
According to Gentoo…
The Gentoo Linux Release Engineering team is proud to announce the release of Gentoo Linux 2004.1. Gentoo Linux 2004.1 highlights many bugfixes that enhance the usability and quality of all the release components. Much work has been done to improve the overall quality of the release, such as providing GPG signatures for security and online listings of what files are included in the installation stages, PackageCDs, and LiveCDs for each architecture. Additionally, Catalyst v1.0.7 [7], the Gentoo Linux release meta-tool, has undergone numerous improvements that have solidified its codebase.
For more information read the press release note.
The NetBSD team has announced the availability of NetBSD 1.6.2.
From NetBSD site…
NetBSD 1.6.2 is a maintenance release for users of NetBSD 1.6.1 and earlier releases, and it provides the following updates relative to 1.6.1:
* A number of security issues have been fixed.
* Some performance fixes have been incorporated.
* Improved device support in some existing drivers.
* Some new device drivers have been added.
* Some minor userland fixes have been applied.
* The stability of the sparc64 port has been greatly enhanced.
More information here.
Gentoo Linux is proud to announce the release of Gentoo Linux 2004.0 for the x86, AMD64, PowerPC, Sun SPARC, and SGI MIPS architectures. more details can be found from the official site, slashdot.
FreeBSD announces the availability of FreeBSD 5.2.1-RELEASE. From the official website…
This is a ‘point release’ and is intended to address several bugs and vulnerabilities discovered in the FreeBSD 5.2 release. These include.
* Significantly improved ATA/IDE and SATA handling. Problems with timeouts, error recovery, and certain master/slave configurations have been largely addressed.
* The kdeadmin3 package has been updated to fix the password database corruption found with the KUser tool.
* Third-party NSS modules can now support groups with many users.
* Multicast and promiscuous modes have been fixed in the 'sk' Ethernet driver, allowing it to operate in a DHCP environment.
* Latest updates to the XFree86 4.3 server to protect against several published security vulnerabilities.
.....
More information at FreeBSD site.
From Gentoo Linux Security Announcement 200312-01…
On December 2nd at approximately 03:45 UTC, one of the servers that makes up the rsync.gentoo.org rotation was compromised via a remote exploit. At this point, we are still performing forensic analysis. However, the compromised system had both an IDS and a file integrity checker installed and we have a very detailed forensic trail of what happened once the box was breached, so weare reasonably confident that the portage tree stored on that box was unaffected.
From GnuPG site…
A severe problem with ElGamal sign+encrypt keys has been found. This leads to a full compromise of the private key. Fortunately those keys are not in wide use and only creatable using special options.
Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing. This is a significant security failure which can lead to a compromise of almost all ElGamal keys used for signing. Note that this is a real world vulnerability which will reveal your private key within a few seconds.
Please take immediate action and revoke your ElGamal signing keys. Furthermore you should take whatever measures necessary to limit the damage done for signed or encrypted documents using that key
More information here.
Let me leave the habitual topics of this site to announce that my nephew has born today! A 3,7 kilograms little boy, healthy as an oak. My beloved little boy Samuel.
Congratulations to my brother and family !!
Apple announces the availability of the Mac OS X 10.3, a new release of its BSD based Unix, known as Panther.
References:
As noticed several days ago, on 15 September 2003, VeriSign unilaterally decided to make changes to the .com and .net Top Level Domain zones.
Well, now the ICANN have sent an ultimatum to VeriSign to stop this irresponsable behaviour.
References:
SecurityFocus: Vulnerabilities SecurityFocus: News Slashdot