LibreSSL 4.0.0 released
Version 4.0.0 of the LibreSSL TLS/cryptography stack has
been released. Changes include a cleanup of the MD4 and MD5 implementations,
removal of unused DSA methods, changes in libtls protocol parsing to ignore
unsupported TLSv1.1 and TLSv1.0 protocols, and many more internal changes and
bug fixes.
Security updates for Tuesday
Security updates have been issued by AlmaLinux (container-
tools:rhel8, firefox, OpenIPMI, podman, and thunderbird), Debian (libapache-mod-
jk, php7.4, and webkit2gtk), Fedora (edk2, koji, libgsf, rust-hyper-rustls,
rust-reqwest, rust-rustls-native-certs, rust-rustls-native-certs0.7, rust-tonic,
rust-tonic-build, rust-tonic-types, rust-tower, rust-tower-http, rust-tower-
http0.5, and rust-tower0.4), Mageia (packages and thunderbird), Oracle (bind,
container-tools:ol8, kernel, kernel-container, OpenIPMI, podman, and
thunderbird), Red Hat (container-tools:rhel8, containernetworking-plugins,
podman, and skopeo), SUSE (argocd-cli, bsdtar, keepalived, kernel, kyverno,
libmozjs-115-0, libmozjs-128-0, libmozjs-78-0, OpenIPMI, opensc, php8,
thunderbird, and xen), and Ubuntu (configobj, haproxy, imagemagick, nginx, and
postgresql-10, postgresql-9.3).
[$] Zapping pointers out of thin air
Paul McKenney gave a presentation at Kangrejos this year
that wasn't (directly) related to Rust. Instead, he spoke about the work he has
been doing in concert with many other contributors on improving the handling of
subtle concurrency problems in C++.
Although he cautioned that his talk was
only an overview, and not a substitute for reading the relevant papers, he hoped
that the things the C++ community is working on would be of interest to the Rust
developers present as well, and potentially inform future work on the language.
McKenney's talk was, as is his style, full of subtle examples of weird
multithreaded behavior.
Interested readers may wish to refer to his slides in
an attempt to follow along.
Inkscape 1.4 released
Version 1.4 of the Inkscape open-source vector-graphics
editor has been released. Highlights of this release include a filter gallery,
import for Affinity Designer files, internal links in exported PDFs, and more.
See the release notes for all of the new features. LWN previewed the 1.4 release
in early October.
[$] WordPress retaliation impacts community
It is too early to say what the outcome will be in the
ongoing fight between Automattic and WP Engine, but the WordPress community
at large is already the loser. Automattic founder and CEO Matt Mullenweg has
been using his control of the project, and the WordPress.org infrastructure, to
punish WP Engine and remove some dissenting contributors from discussion
channels. Most recently, Mullenweg has instituted a hostile fork of a
WP Engine plugin and the forked plugin is replacing the original via
WordPress updates.