Kontron announced a PC/104-Plus board designed for headless devices, featuring a 1.0GHz AMD T24L processor. The Microspace MSM-eO-N accepts up to 4GB of DDR3 memory, has two onboard SATA ports, includes gigabit Ethernet, has a bootable microSD slot, and offers both PCI and ISA expansion, the company says.

In its statement announcing the Microspace MSM-eO-N, Kontron noted that modern, highly integrated x86 processors combine a CPU and graphics processing unit (GPU) on a single chip. While this is great for customers who actually want graphics, it increases cost and lowers thermal efficiency for headless applications, the company added.

Accordingly, Kontron says, it has designed its latest PC/104-Plus board without a GPU. The device is said to be "ideal for fanless small form factor (SFF) designs that run purely as number crunchers," with applications including industrial automation and smart grids

Kontron introduced a related PC-104-Plus SBC (single board computer) back in May, the Microspace MSM-e0 . That device used the AMD G-Series T44R, a single-core CPU with a 1.2 clock speed, Radeon HD6250 graphics, and a nine-Watt TDP.

Kontron's Microspace MSM-e0-N
(Click to enlarge)

The new Microspace MSM-e0-N employs AMD's A55E I/O controller, as did the earlier SBC, but it switches to one of the chipmaker's "headless" G-Series variants . Specifically, the SBC employs the 1.0GHz T24L, which has no GPU but offers a TDP of just five Watts.

Apart from the deleted graphics circuitry, the Microspace MSM-e0-N is basically the same as the earlier Microspace MSM-e0, though Kontron cites one Ethernet port for the newer model instead of the earlier two. Again, there's PCI (4 slots, 33MHz) and ISA expansion via the PCI/104-Plus connector, according to the company.

Kontron says the Microspace MSM-eO-N accepts up to 4GB of DDR3 memory via a single DIMM slot. The device includes a bootable microSD slot and has two onboard SATA ports, with support for RAID levels 0 and 1, the company adds.

Headers provide access to four serial ports (two RS232, two TTL), four USB 2.0 ports, and eight configurable GPIOs, according to Kontron. The audio capabilities (line out, line out, S/PDIF out) of the earlier MSM-e0 have been dropped, however.

Specifications listed by Kontron for the Microspace MSM-eO-N:

Processor -- 1.0GHz, single-core AMD T24L Chipset -- AMD A55E Memory -- up to 4GB DDR3 via single SODIMM Storage -- bootable microSD slot; 2 x SATA Expansion -- PC/104-Plus (ISA and PCI) Networking -- 1 x gigabit Ethernet Other I/O: 2 x RS232 2 x TTL 4 x USB 2.0 8 x GPIO Power requirements -- n/s Operating range -- 32 to 140 deg. F Dimensions -- 4 x 3.54 inches Operating system support -- Linux, Windows, and VxWorks Further information

According to Kontron, the Microspace MSM-eO-N is available now. More information may be found on the Microspace MSM-eO-N product page .

Jonathan Angel can be followed at www.twitter.com/gadgetsense .

The OpenSUSE project released version 12.1 of its enterprise-focused Linux distribution, featuring Linux 3.1, GNOME 3.2 and support for KDE's "OwnCloud" cloud platform. OpenSUSE 12.1 introduces the SystemD configuration utility and Google's Go programming language, and further integrates the Btrfs file-system with a "Snapper" tool for rolling back system updates and configuration changes.

A bare-bones beta of OpenSUSE 12.1 was released in early October, with the primary purpose of giving OpenSUSE developers a chance to get better acquainted with GNOME 3.2. According to the community project -- which is closely backed by Attachmate and its new SUSE (formerly Novell) business unit as an upstream contributor to SUSE Linux -- GNOME 3.2 is a major improvement over the controversial GNOME 3.0. (The latter shipped as a preview version in the previous OpenSUSE 11.4 release in March.)

OpenSUSE 12.1 showing video player in GNOME 3.2
(Click to enlarge)

With GNOME 3.2n OpenSUSE offers "deeper integration of collaboration tools such as calendar notifications, chat and a centralized online accounts configuration," says the OpenSUSE project. "The UI elements and workflows are touch-screen friendly, equipped to handle smaller screens, multi-screen setups and automatic rotation for touch screen devices." Other touted GNOME 3.2 features are said to include a new document manager, as well as quick preview in the Nautilus file manager.

OpenSUSE 12.1 with GNOME 3.2
(Click to enlarge)

Other recent Linux distros, including Fedora 16 and Linux Mint 12 , have also adopted GNOME 3.2. However, due to continuing discomfort with the radical new interface, Mint 12 is offered with extensions that let users customize the environment to look and act more like the familiar GNOME 2.3.2.

KDE also supplied

OpenSUSE 12.1 also supplies the long-time GNOME desktop rival KDE 4.7, and the distro is touted for being the "first major Linux distribution" to ship both GNOME and KDE with color management tools. In the case of KDE, these are the new KolorManager + Oyranos color tools, says the project.

Other new features in KDE 4.7 are said to include the introduction of the Apper software manager, as well as a new Plasma Active tablet interface. OpenSUSE 12.1 also provides lightweight desktop alternatives in Xfce and LXDE, although neither has seen a major feature update since OpenSUSE 11.4, says the project.

KDE 4.7 activities menu in OpenSUSE 12.1
(Click to enlarge)

OpenSUSE 12.1 debuts a Snapper tool that builds on the snapshot functionality in the now fully supported Btrfs file-system to let users view older versions of files and revert changes. Snapper is integrated into OpenSUSE's Zypper package manager to let users roll back system updates and configuration changes, says the project.

Like Fedora 16, OpenSUSE 12.1 fully implements Systemd as the new init configuration tool, controlling and speeding up the boot process, according to the project. Noted features of Systemd are said to include a "powerful" socket- and bus- activated service system, as well as tight integration with the Cgroups kernel feature, providing better security and control over processes.

Interestingly, SystemD was said to have been "developed in close cooperation with fellow Linux Distribution Fedora," showing that community rivals can still get along despite the more fierce competition among their backers: SUSE and Red Hat, respectively.

All systems Go with new Google language

The new release is also the first major distribution to ship Google's open source Go programming language , says the project. Touted for being fast and easy-to-use, Go is said to be optimized for working with multicore, networked machines, and providing easier development of garbage collection and run-time reflection code.

OpenSUSE 12.1 also adds Google's Chromium 16 to the standard repositories as an alternative web browser to the default Firefox 7. The latest version of the LibreOffice productivity suite and Thunderbird email client are also said to be available among other apps. In addition, with OpenSUSE 12.1, the Tumbleweed rolling-update version of the distro now contains the latest stable versions of all OpenSUSE software, says the project.

OwnCloud support leads cloud enhancements

Designed for both desktop and server use, OpenSUSE 12.1 is built on the latest Linux 3.1 kernel. This makes the distro "even more versatile and extensible for supporting mixed IT environments including public and private clouds," says the OpenSUSE project.

The project also puts in a plug for SUSE's SUSE Studio web-based appliance-building service. SUSE Studio can be used to develop different versions of OpenSUSE 12.1 with custom package selections, artwork, and scripts, for deployment to Amazon EC2 and other cloud platforms, says the project.

OpenSUSE 12.1 is said to be the first Linux distribution to support the KDE-backed OwnCloud cloud platform. In fact, the project has developed its own Mirall desktop integration application designed expressly for the open source OwnCloud. The cloud platform is said to offer an easy web interface suitable for home users, while posing minimal server requirements.

OpenSUSE also supports the latest versions of the Eucalyptus, OpenNebula, and OpenStack cloud platforms, says the project. Virtualization updates are said to include new virt-manager and open-vm-tools that support Xen 4.1, KVM, and VirtualBox.

Stated Bryen Yunahsko, member of the OpenSUSE Board and SUSE marketing lead, "We're standing on the shoulders of the gigantic open source community. I would not be surprised if openSUSE's latest update has over 300,000 improvements that resulted from efforts in the open source community."

Availability

OpenSUSE 12.1 is available now for free download in its final stable version at the OpenSUSE 12.1 download page . More information on OpenSUSE 12.1 may be found in this SUSE announcement , as well as this very similar OpenSUSE announcement on LWN.net , and even more can be found in this OpenSUSE 12.1 feature overview .

O'Reilly Media has published a book on embedded system development. Elicia White's 328-page "Making Embedded Systems" ranges from embedded controllers and sensors to more advanced systems, provides the basics of good development practices, and a encourages a disciplined approach to programming in an environment where "inefficiency isn't tolerated," says the publisher.

"Making Embedded Systems" offers fundamentals and tips on developing software for embedded systems. The guidelines are based on "classic software design patterns and new patterns unique to embedded programming," says O'Reilly.

The book covers everything from developing digital watches and door locks to smartphones and nuclear power systems, says the publisher. Highlights are said to include:

optimizing systems to reduce cost and increase performance developing a robust architecture for resource-constrained environments exploring sensors, motors, and other I/O devices reducing RAM consumption, code space, processor cycles, and power consumption updating embedded code directly in the processor implementing complex mathematics on small processors preparing for an embedded systems job interview Other selected highlights from the table of contents (see link farther below for full list) include: creating system diagrams your processor is a language having a debugging toolbox (and a fire extinguisher) separating the hardware from the action the input in I/O scheduling and operating system basics how not to use interrupts onboard bootloader designing and modifying algorithms understanding power consumption putting the processor to sleep

Author Elicia White (pictured) is the founder of Logical Elegance, an embedded systems consulting company based in San Jose. White has created a wide variety of embedded systems ranging from urban surveillance and DNA scanners to children's toys, and is familiar with FAA and FDA certification processes, says O'Reilly.

Stated White, "Embedded systems are where the software meets the physical world. Writing software for these things is more difficult than computer software because the systems have so few resources. Instead of building better software, the trend has been to allow a cowboy mentality of just getting it done. We can do better than that. We must do better than that."

Availability

O'Reilly Media's 328-page"Making Embedded Systems," by Elicia White, is available now. Pricing is $40, or $32 for the ebook version. More information may be found on O'Reilly's Making Embedded Systems web page .

The following two security updates has been released for Gentoo Linux: [ GLSA 201111-03 ] OpenTTD: Multiple vulnerabilities and [ GLSA 201111-04 ] phpDocumentor: Function call injection [ GLSA 201111-03 ] OpenTTD: Multiple vulnerabilities - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201111-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: OpenTTD: Multiple vulnerabilities Date: November 11, 2011 Bugs: #381799 ID: 201111-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities were found in OpenTTD which could lead to execution of arbitrary code, a Denial of Service, or privilege escalation. Background ========== OpenTTD is a clone of Transport Tycoon Deluxe. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 games-simulation/openttd < 1.1.3 > = 1.1.3 Description =========== Multiple vulnerabilities have been discovered in OpenTTD. Please review the CVE identifiers referenced below for details. Impact ====== A remote attacker could execute arbitrary code with the privileges of the OpenTTD process or cause a Denial of Service. Local users could cause a Denial of Service. Workaround ========== There is no known workaround at this time. Resolution ========== All OpenTTD users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =games-simulation/openttd-1.1.3" NOTE: This is a legacy GLSA. Updates for all affected architectures are available since September 27, 2011. It is likely that your system is already no longer affected by this issue. References ========== [ 1 ] CVE-2010-4168 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4168 [ 2 ] CVE-2011-3341 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3341 [ 3 ] CVE-2011-3342 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3342 [ 4 ] CVE-2011-3343 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3343 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-201111-03.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2011 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

36 updates has been released for CentOS
[CentOS-announce] CEBA-2011:1443 CentOS 5 x86_64 mktemp FASTTRACK Update CentOS Errata and Bugfix Advisory 2011:1443 Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-1443.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 61443c59583339251051fa3e6c214fe9 mktemp-1.5-24.el5.x86_64.rpm Source: 405b59bf4b089a534dc478a415397290 mktemp-1.5-24.el5.src.rpm

Adobe has released patches for a string of critical vulnerabilities in Flash on all of the major supported platforms
From Threatpost: The update to Flash fixes 12 vulnerabilities, including a number of memory corruption vulnerabilities, stack overflows and heap corruption bugs. All but one of the flaws could lead to remote code execution, and the remaining one which only affects Flash on Internet Explorer, could result in a cross-domain policy bypass. "Critical vulnerabilities have been identified in Adobe Flash Player 11.0.1.152 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 11.0.1.153 and earlier versions for Android. These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system," the company said in its advisory.

Win Enterprises announced a fanless, 9.4 x 6.0 x 1.6-inch networking security appliance based on Freescale QorIQ P1015E or dual-core P1024E processors clocked from 400 to667MHz. The PL-80380 offers up to 1GB of DDR3 RAM, up to 4GB flash, a CompactFlash socket, dual gigabit Ethernet ports and four gigabit switch ports, plus optional SATA storage and Wi-Fi.

The PL-80380 is the latest in a series of PL-branded networking appliances from Win Enterprises. Recent entries have included the Atom-based, 1U rackmount PL-80300 and rugged, Atom-based PL-80190 .

Designed primarily for the SOHO (small office, home office) market, the PL-80380 lacks PL-80300 features such as multiple PCI and PCI Express options, multiple USB ports, or an LCD display. However, it measures just 9.4 x 6.0 x 1.6 inches, about half the size of its Atom-based sibling.

Win Enterprises PL-80380

The PL-80380 incorporates Freescale's PowerPC based, single-core QorIQ P1015E or dual-core QorIQ P1024E processor. These new variants of the lower-end QorIQ P1010 and P1020 line of QorIQs are paired on a single Freescale product page and data sheet .

Freescale touts the processors for their power management, DDR3 support, and integrated security engine. The latter is said to support cryptographic algorithms commonly used in IPsec, SSL, 3GPP, and other networking and wireless security protocols.

Block diagram for single-core QorIQ P1015E and dual-core QorIQ P1024E
(Click to enlarge)

The two QorIQ system on chips (SoCs) appear to be identical except for the number of cores. Both can be clocked between 400MHz and 667MHz, and ship with 256KB of L2 cache with ECC, says Freescale. The SoCs feature three gigabit Ethernet controllers, four SerDes controllers, and dual USB controllers, among other I/O.

The PL-80380 offers a base level of 512MB of DDR3 memory, upgradable to 1GB, and provides 1GB of NAND flash, expandable to 4GB, says Win Enterprises. A CompactFlash socket is standard, and an internal SATA port is optional along with a hard disk drive (HDD) for the available 2.5-inch bay, says the company.

PL-80380, back panel

A Mini PCI Express slot is optional, as is the Wi-Fi module that plugs into it, says Win Enterprises. The Wi-Fi option comes with dual antennas.

The PL-80380 ships with dual gigabit Ethernet LAN ports with bypass function, as well as four Ethernet gigabit Ethernet switch ports, says the company. Each Ethernet interface is paired with an LED indicator for monitoring activity and data transfer rate. Other back-panel I/O includes a USB 2.0 port and serial console port.

PL-80380 detail
(Click to enlarge)

No operating system support is listed for the PL-80380, but Freescale's QorIQ processors all offer Linux support.

Features and specifications listed for the PL-80380 include:

Processor -- Freescale QorIQ P1015E or P1024E Memory: 512MB of DDR3 677MHz RAM, expandable to 1GB 1MB SPI flash, expandable to 8MB 32MB NOR flash 1GB NAND flash, expandable to 4GB Storage -- CompactFlash socket; optional SATA port and 2.5-inch HDD bay Expansion -- optional internal mini-PCI Express slot Networking -- 2 x gigabit Ethernet ports (one pair bypass between LAN1 and LAN2) ; 4 x gigabit Ethernet switch ports Wireless -- optional Wi-Fi with 2 x antennas Other I/O -- serial RJ45 port (COM1); USB 2.0 port Other features -- LEDs (power, HDD, bypass, WLAN, 6 x LAN) Dimensions -- 9.4 x 6.0 x 1.6 inches (240 x 152 x 40mm) Power -- 25W power adaptor (+5V/5A); optional +12V DC in Operating temperature -- 32 to 104 deg. F (0 to 40 deg. C) Availability

No pricing or availability information was available for the PL-80380. More information may be found at Win Enterprises' PL-80380 product page .

Republic Wireless announced a contract-free cellular plan that offers unlimited text, data, and voice for $19/month. The service requires a customized LG Optimus Android 2.3 phone ($199 with one free month of service) that switches automatically to Wi-Fi connectivity whenever it's available, according to the company.

VoIP backbone provider Bandwidth.com's Republic Wireless venture has gone live in beta mode, adopting a limited number of new customers until the service matures. TechCrunch, which broke the news on the stealth venture last week, has a follow-up story that offers further details.

Republic Wireless' LG Optimus phone with pointer indicating a green arc icon that shows Wi-Fi usage

The hybrid calling service uses a version of Unlicensed Mobile Access (UMA) technology. This is bundled in some T-Mobile BlackBerry and Android phones, including the T-Mobile MyTouch and Motorola Defy, but with much higher fees, according to a story in GigaOM .

Republic Wireless' UMA-based hybrid calling service automatically switches users to Wi-Fi whenever available. It then supports voice calls with VoIP technology, and IM with IP texting over Wi-Fi. Otherwise, the phone switches automatically to Sprint's 3G network.

Theoretically, the Voice over Wi-Fi service could provide better voice quality, depending on one's Sprint 3G coverage. The key benefit, though, is that Wi-Fi is generally free or cheap, and Republic Wireless pushes those cost savings on to the user. The $19 a month plan includes unlimited voice, text, and data in the U.S. with no overages, roaming, or termination fees, let alone contracts, says Republic Wireless.

According to Republic Wireless, its first phone is a modified version of an LG Optimus running Android 2.3. This would appear to be the original 3.8-inch, 1GHz Optimus One (pictured) as opposed to Sprint's 3.2-inch LG Optimus S .

The Optimus costs $199 without contract and includes one month of free service, after which the service costs $19 per month. A discounted price of $99 for the first month is available through Nov. 27.

The catch for both the regular or discounted plan is that Republic Wireless reserves the right to kick off any user who rarely uses Wi-Fi, says the company. Users must prove that a Wi-Fi connection is available to their phones, but they won't be disqualified unless they exceed at least 550 talk minutes, 150 texts, and 300MB of downloads per month over cellular, according to the company.

Users will be warned and given a chance to correct their usage patterns before they are booted off the network, says the company. Users can monitor usage with the help of a green icon in the shape of an arc that flips on when using Wi-Fi. This is much the same as the "eco" icons on hybrid cars.

One other catch for some is that there's no support for international networks as of now, but the company suggests this may change in the future. Also in the future, says TechCrunch, is a version of the Samsung Galaxy S II .

Availability

The Republic Wireless service with hybrid calling using the LG Optimus phone is available now in beta. Users are encouraged to sign up now for the service, which costs $199 the first month, including the phone, and then $19 a month after that. Within the first month, users can get a money-back guarantee, says the company.

A discounted price of $99 for the first month is available through Nov. 27 for users entering the "welcome19" promo code. More information may be found at the Republic Wireless site .

Advantech announced a 4.5 x 3.7-inch ETX module that comes with Intel's single-core Atom N455 or dual-core Atom D525, plus up to 4GB of DDR3 memory. The "SOM-4463 B1" includes two SATA ports, support for VGA and LVDS displays, four USB 2.0 ports, plus PCI and ISA expansion potential, the company says.

Advantech's SOM-4463 B1 (pictured) is an ETX 3.0 module that's designed to snap onto separately available baseboards. It's an upgrade to the company's original SOM-4463 , released in January 2010 as part of a bevy of devices with Intel's then-new "Pineview" Atoms, the single-core N450 and dual-core D510 .

The changes here frankly aren't major, but Advantech has switched to the later Atom N455 (1.66GHz, single core, 5.5-Watt TDP) or D525 (1.88GHz, dual core, 13-Watt TDP), still with Intel's ICH8M I/O controller. This means the module can now employ DDR3 memory -- 2GB of it on the N455 model and 4GB on the D525 version.

A block diagram of Advantech's SOM-4463 B1
(Click to enlarge)

As before, the module includes two SATA ports, but all other interfaces travel through the usual ETX board-to-board pins. Expansion potential includes four PCI masters as well as ISA, and there are two IDE interfaces, according to Advantech.

Advantech says the SOM-4463 B1 can support dual displays: It offers 18/24-bit single-channel LVDS, plus VGA (up to 1400 x 1050 pixels with the N455, 2048 x 1536 pixels with the D525). Also on board are gigabit Ethernet, four USB 2.0 ports, 1-bit GPIO, two serial ports, HD audio, and a floppy/LPT interface, the company adds.

According to Advantech, the SOM-4463 B1 supports Linux, Windows CE 6.0, Windows XP Embedded, and QNX operating systems. Operating range is from 32 to 140 deg. F, says the company.

Specifications listed by Advantech for the SOM-4463 B1 include:

Intel Atom N455 or D525 Chipset -- ICH8M Memory -- up to 2GB of DDR3 RAM on N455 model, 4GB on D525 model Storage -- 2 x SATA ports; 2 x IDE interfaces Networking -- gigabit Ethernet Other I/O: 4 x USB 2.0 ports 1-bit GPIO 2 x COM ports 1 x FDD/LPT Power -- ATX, AT; 5VDC Operating range -- 32 to 140 deg. F Dimensions -- 4.5 x 3.74 inches A note about ETX

ETX was originally developed by Kontron, which later switched to the 4.92 x 3.75-inch ETXexpress format, the basis of the PCI Industrial Computer Manufacturers Group (PICMG) COM Express standard. Congatec, meanwhile, moved forward with its 2005 XTX (eXpress Technology for ETX) standard: This maintains the same four baseboard connector types and locations as ETX, but replaces the ISA bus on the "X2" connector with four PCI Express lanes, four Serial ATA ports, two additional USB ports, and the Low Pin Count (LPC) bus.

Congatec gained adherents such as Ampro, but it's fair to say things have been pretty quiet lately in both the ETX and XTX front. The last ETX module we covered was Congatech's AMD G-Series powered Conga-EAF , released last March.

Further information

Advantech's SOM-4463 B1 appears to be available now. More information on the module and compatible baseboards may be found on the SOM-4463 B1 product page .

Jonathan Angel can be reached at jonathan.angel@ziffdavisenterprise.com and followed at www.twitter.com/gadgetsense .

Ubuntu Geek shows you how to remove autohide option in unity on Ubuntu 11.10
By defauly unity does autohide and sometimes this is ver annoying you can disable using the following procedure First you need to install CompizConfig Settings Manager package using the following command from your terminal

The following CentOS 5 updates has been released: CEBA-2011:1425 CentOS 5 x86_64 libhbaapi FASTTRACK Update, CEBA-2011:1428 CentOS 5 i386 openais Update, CEBA-2011:1428 CentOS 5 x86_64 openais Update, CEBA-2011:1429 CentOS 5 i386 rsh Update, CEBA-2011:1429 CentOS 5 x86_64 rsh Update, and CEBA-2011:1425 CentOS 5 i386 libhbaapi FASTTRACK Update CentOS Errata and Bugfix Advisory 2011:1425 Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-1425.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 4a541edfb038fe2c08876cfed15c842a libhbaapi-2.2-6.el5.i386.rpm 96058c049788fd6b699ae2b7eef005a9 libhbaapi-2.2-6.el5.x86_64.rpm dbe1434f6a1ef4e57a2455c135088047 libhbaapi-devel-2.2-6.el5.i386.rpm c0e1219ebaa6f2016cbb22a93dafa872 libhbaapi-devel-2.2-6.el5.x86_64.rpm Source: 6896e6f69cc6046e25f76ea208138431 libhbaapi-2.2-6.el5.src.rpm

Updated Oracle JRE/JDK packages has been released for Gentoo Linux
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201111-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Oracle JRE/JDK: Multiple vulnerabilities Date: November 05, 2011 Bugs: #340421, #354213, #370559, #387851 ID: 201111-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in the Oracle JRE/JDK, allowing attackers to cause unspecified impact. Background ========== The Oracle Java Development Kit (JDK) (formerly known as Sun JDK) and the Oracle Java Runtime Environment (JRE) (formerly known as Sun JRE) provide the Oracle Java platform (formerly known as Sun Java Platform). Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-java/sun-jre-bin < 1.6.0.29 > = 1.6.0.29 * 2 app-emulation/emul-linux-x86-java < 1.6.0.29 > = 1.6.0.29 * 3 dev-java/sun-jdk < 1.6.0.29 > = 1.6.0.29 * ------------------------------------------------------------------- NOTE: Packages marked with asterisks require manual intervention! ------------------------------------------------------------------- 3 affected packages ------------------------------------------------------------------- Description =========== Multiple vulnerabilities have been reported in the Oracle Java implementation. Please review the CVE identifiers referenced below and the associated Oracle Critical Patch Update Advisory for details. Impact ====== A remote attacker could exploit these vulnerabilities to cause unspecified impact, possibly including remote execution of arbitrary code. Workaround ========== There is no known workaround at this time. Resolution ========== All Oracle JDK 1.6 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-java/sun-jdk-1.6.0.29" All Oracle JRE 1.6 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-java/sun-jre-bin-1.6.0.29" All users of the precompiled 32-bit Oracle JRE 1.6 should upgrade to the latest version: # emerge --sync # emerge -a -1 -v "> =app-emulation/emul-linux-x86-java-1.6.0.29" NOTE: As Oracle has revoked the DLJ license for its Java implementation, the packages can no longer be updated automatically. This limitation is not present on a non-fetch restricted implementation such as dev-java/icedtea-bin. References ========== [ 1 ] CVE-2010-3541 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3541 [ 2 ] CVE-2010-3548 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3548 [ 3 ] CVE-2010-3549 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3549 [ 4 ] CVE-2010-3550 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3550 [ 5 ] CVE-2010-3551 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3551 [ 6 ] CVE-2010-3552 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3552 [ 7 ] CVE-2010-3553 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3553 [ 8 ] CVE-2010-3554 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3554 [ 9 ] CVE-2010-3555 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3555 [ 10 ] CVE-2010-3556 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3556 [ 11 ] CVE-2010-3557 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3557 [ 12 ] CVE-2010-3558 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3558 [ 13 ] CVE-2010-3559 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3559 [ 14 ] CVE-2010-3560 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3560 [ 15 ] CVE-2010-3561 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3561 [ 16 ] CVE-2010-3562 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3562 [ 17 ] CVE-2010-3563 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3563 [ 18 ] CVE-2010-3565 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3565 [ 19 ] CVE-2010-3566 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3566 [ 20 ] CVE-2010-3567 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3567 [ 21 ] CVE-2010-3568 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3568 [ 22 ] CVE-2010-3569 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3569 [ 23 ] CVE-2010-3570 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3570 [ 24 ] CVE-2010-3571 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3571 [ 25 ] CVE-2010-3572 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3572 [ 26 ] CVE-2010-3573 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3573 [ 27 ] CVE-2010-3574 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-3574 [ 28 ] CVE-2010-4422 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4422 [ 29 ] CVE-2010-4447 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4447 [ 30 ] CVE-2010-4448 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4448 [ 31 ] CVE-2010-4450 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4450 [ 32 ] CVE-2010-4451 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4451 [ 33 ] CVE-2010-4452 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4452 [ 34 ] CVE-2010-4454 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4454 [ 35 ] CVE-2010-4462 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4462 [ 36 ] CVE-2010-4463 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4463 [ 37 ] CVE-2010-4465 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4465 [ 38 ] CVE-2010-4466 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4466 [ 39 ] CVE-2010-4467 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4467 [ 40 ] CVE-2010-4468 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4468 [ 41 ] CVE-2010-4469 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4469 [ 42 ] CVE-2010-4470 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4470 [ 43 ] CVE-2010-4471 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4471 [ 44 ] CVE-2010-4472 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4472 [ 45 ] CVE-2010-4473 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4473 [ 46 ] CVE-2010-4474 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4474 [ 47 ] CVE-2010-4475 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4475 [ 48 ] CVE-2010-4476 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4476 [ 49 ] CVE-2011-0802 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0802 [ 50 ] CVE-2011-0814 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0814 [ 51 ] CVE-2011-0815 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0815 [ 52 ] CVE-2011-0862 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0862 [ 53 ] CVE-2011-0863 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0863 [ 54 ] CVE-2011-0864 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0864 [ 55 ] CVE-2011-0865 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0865 [ 56 ] CVE-2011-0867 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0867 [ 57 ] CVE-2011-0868 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0868 [ 58 ] CVE-2011-0869 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0869 [ 59 ] CVE-2011-0871 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0871 [ 60 ] CVE-2011-0872 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0872 [ 61 ] CVE-2011-0873 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0873 [ 62 ] CVE-2011-3389 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3389 [ 63 ] CVE-2011-3516 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3516 [ 64 ] CVE-2011-3521 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3521 [ 65 ] CVE-2011-3544 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3544 [ 66 ] CVE-2011-3545 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3545 [ 67 ] CVE-2011-3546 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3546 [ 68 ] CVE-2011-3547 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3547 [ 69 ] CVE-2011-3548 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3548 [ 70 ] CVE-2011-3549 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3549 [ 71 ] CVE-2011-3550 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3550 [ 72 ] CVE-2011-3551 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3551 [ 73 ] CVE-2011-3552 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3552 [ 74 ] CVE-2011-3553 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3553 [ 75 ] CVE-2011-3554 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3554 [ 76 ] CVE-2011-3555 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3555 [ 77 ] CVE-2011-3556 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3556 [ 78 ] CVE-2011-3557 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3557 [ 79 ] CVE-2011-3558 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3558 [ 80 ] CVE-2011-3560 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3560 [ 81 ] CVE-2011-3561 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3561 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-201111-02.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2011 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.

The best of Zeth published a review on Ubuntu 11.10
Once upon a time, I used to be a Gentoo user and made it a hobby to tweak my computer's operating system to be as minimalist and high performance as possible. It was great fun and I learned a lot about what was going on with my computer. I knew what each file on my system did because I had directly or indirectly chosen for it to be there. At one point I had five Gentoo machines compiling away. In 2006, I found I didn't have time for this any more, especially since I wanted to spent time honing my programming skills, so I reluctantly decided to limit myself to one Gentoo machine, and for the others I would use Ubuntu in the most default configuration possible. The idea being that I can take any new (or old) computer, and within 20 minutes be completely productive, having installed Ubuntu and the extra packages I need within that time.

The following CentOS updates has been released: CEBA-2011:1420 CentOS 5 x86_64 xorg-x11-drv-sis Update, CEBA-2011:1420 CentOS 5 i386 xorg-x11-drv-sis Update, CEBA-2011:1416 CentOS 5 x86_64 libxml2 Update, CEBA-2011:1416 CentOS 5 i386 libxml2 Update, CEEA-2011:1410 CentOS 5 x86_64 tzdata Update, and CEEA-2011:1410 CentOS 5 i386 tzdata Update CEBA-2011:1420 CentOS 5 x86_64 xorg-x11-drv-sis Update CentOS Errata and Bugfix Advisory 2011:1420 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-1420.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: eec28ede0b25766232f8b900726bbcbe xorg-x11-drv-sis-0.9.1-7.3.el5_7.1.x86_64.rpm Source: ec2105a440b5ce22abe152e98653fcf0 xorg-x11-drv-sis-0.9.1-7.3.el5_7.1.src.rpm

Dotdeb has released Nginx 1.0.9 packages for Debian 5.0 and 6.0
Nginx 1.0.9 has just been released, bringing 12 bug fixes. The packages are now available on Dotdeb : for both Debian 6.0 “Squeeze” and 5.0 “Lenny”, for both amd64 and i386 architectures. Take a look at the full list of changes before upgrading.

Howtoforge posted a tutorial about installing Nginx on Ubuntu 11.10
Nginx (pronounced "engine x") is a free, open-source, high-performance HTTP server. Nginx is known for its stability, rich feature set, simple configuration, and low resource consumption. This tutorial shows how you can install Nginx on an Ubuntu 11.10 server with PHP5 support (through PHP-FPM) and MySQL support.

Partner announced a POS (point of sale) system that incorporates a 15-inch resistive touchscreen and an Intel Atom D525 processor. The SP-800 offers an aluminum body, 4GB of RAM and a 2.5-inch drive bay, a bevy of ports, plus optional peripherals that include an MSR (magnetic stripe reader), 2 x 20 customer display, smart card reader, and more.

Taiwan-based Partner says its all-in-one SP-800 includes an Intel Atom D525 processor (1.8GHz, dual-core, 10-Watt TDP), ICH8M I/O controller, and up to 4GB of DDR3 memory. The device is said to run most x86 operating systems, including Ubuntu and Fedora plus all the usual Windows flavors ( Windows Embedded POSReady 7 , Windows Embedded POSReady 2009 , and Windows Embedded for Point of Service ).

Partner's SP-800

The SP-800's aluminum housing is wall- or stand-mountable, according to Partner, and houses the device's main board, a 2.5-inch bay for SATA drives, and a 15-inch screen. The display offers restive touch capabilities and a resolution of 1024 x 768 pixels, according to Partner.

Like other POS-targeted PCs, the SP-800 offers a multitude of ports, though the company's data sheet didn't tip us off as to just where on the device they reside. Partner says there are four serial ports, two of which provide available 5/12VDC power, as well as an RJ11 port that provides 24VDC power to single or dual cash drawers.

Other more general-purpose ports include a VGA port, for a secondary monitor, a DB25 parallel port, an RJ45 Ethernet port (gigabit, we presume), a PS/2 port, and four USB 2.0 ports. Partner also listed the following optional peripherals, without saying how they interface to the SP-800:

a three-track magnetic stripe reader a 2 x 20 customer-facing character display a fingerprint scanner a smart card reader and an RFID reader According to Partner, the SP-800 accepts AC power ranging from 100 to 240 Volts via a 90-Watt adapter. Operating range is from 32 to 104 deg. F, the company adds.

Specifications listed by Partner for the SP-800 include:

Processor -- Intel Atom D525 clocked at 1.8GHz Chipset -- Intel ICH8M Memory -- up to 4GB of RAM via dual DIMM sockets Display -- 15-inch screen with resistive touch; 1024 x 768 pixel resolution Storage -- 2.5-inch bay for SATA drives Expansion -- Mini PCI Express slot Networking -- Ethernet port Other I/O: VGA port 4 x serial (2 offer optional 5/12VDC power) 1 x RJ11 cash drawer port (24VDC) 1 x PS/2 4 x USB 2.0 Power -- 120~240VAC via 90-Watt adapter Operating range -- 32 to 104 deg. F Dimensions -- 14.1 x 12.7 x 9.2 inches Weight -- n/s
A promotional video featuring Partner's SP-800
(click to play)

Further information

Partner did not cite pricing for the SP-800, but the device appears to be be available now. More information may be found on the SP-800 product page .

Jonathan Angel can be reached at jonathan.angel@ziffdavisenterprise.com and followed at www.twitter.com/gadgetsense .