A mantis security update has been released for Debian GNU/Linux
- ------------------------------------------------------------------------- Debian Security Advisory DSA-2308-1 security@debian.org http://www.debian.org/security/ Moritz Muehlenhoff September 12, 2011 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : mantis Vulnerability : several Problem type : remote Debian-specific: no CVE ID : CVE-2011-3357 CVE-2011-3358 Debian Bug : 640297 Several vulnerabilities were found in Mantis, a web-based bug tracking system: Insufficient input validation could result in local file inclusion and cross-site scripting. For the oldstable distribution (lenny), this problem has been fixed in version 1.1.6+dfsg-2lenny6. For the stable distribution (squeeze), this problem has been fixed in version 1.1.8+dfsg-10squeeze1. For the unstable distribution (sid), this problem has been fixed in version 1.2.7-1. We recommend that you upgrade your mantis packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/
NetLogic Microsystems announced a second-generation, 28-nanometer member of its Linux-ready XLP multicore processor family, claimed to be five to seven times faster. The XLP II integrates up to 80 NXCPUs (threads) via up to 20 2.5GHz MIPS64 cores, boasts 100Gbps network processing performance per processor,supports coherent clustering of up to eight processors, and achieves up to 800Gbps throughput, claims the company.
Like the the original eight-core XLP832 announced in 2009, the six-core XLP864 announced in April, and the quad-core XLP316 announced in May, the XLP II is aimed at various levels of LTE mobile infrastructure, data center, enterprise networking, storage, and security applications. The key difference here is the move from 40-nanometer (nm) fabrication to a 28nm TSMC process, which, among other benefits, enables a clock speed of up to 2.5GHz, compared to a 2GHz limit for the other processors.
The XLP II offers four-way multithreading, a four-issue superscalar engine, and out-of-order execution, using the same 64-bit MIPS EC4400 cores. NetLogic never talks about the number of cores, but rather speaks in terms of NXCPUs, which is its way of describing the SoCs' "highly independent" threads.
Since the XLP II offers up to 80 NXCPUs, we can deduce that it will be available in models that extend up to 20 cores. Whereas the 16-core, 64-NXCPU XLP864 delivers up to 80Gbps throughput, the XLP II will reach up to 100Gbps, says NetLogic.
Super clusters reach 160 cores, 640 threads
The processors are touted for their scalability, enabling the ganging together of XLP II SoCs in socket clusters of up to eight. This enables a "fully-coherent system" that can "achieve an unprecedented scalability of up to 640 NXCPUs," claims NetLogic. This eight-SoC, 160-core cluster offers up to 800Gbps combined throughput, claims the company.
The XLP-standard tri-level cache architecture has been expanded to over 32MB of fully coherent on-chip cache. The cache is said to integrate four channels of DDR3 memory controllers, delivering over 545Gbps of off-chip memory bandwidth, says NetLogic.
In a cluster of eight SoCs, this is said to represent over 260MB of on-chip cache. This clustered super-SoC offers a combined 32 DDR3 memory ports, yielding 4.4Tbps of DRAM access, claims the company.
A second-generation, high-speed Inter-chip Coherency Interface (ICI) enables full processor and memory coherency across all 640 NXCPUs, claims the company. Among other benefits, this is said to make it easier to adapt software to run in Symmetric Multi Processing (SMP) or Asymmetric Multi Processing (AMP) modes. As a result, customers can develop "highly scalable, highly differentiated equipment spanning entry-level multi-Gigabit to high-end Terabit systems," claims NetLogic.
The XLP II also features a third-generation high-speed Fast Messaging Network that can provide higher-bandwidth, lower-latency communications among the 640 NXCPUs. In addition, an advanced on-chip interconnect for the memory sub-system plus a wide range of high-speed physical-layer and logical-layer networking interfaces are said to be available. Other SoC features include "sophisticated power management technology," says the company.
Networking, security, and virtualization engines
The XLP II processor cores are said to include improvements in pre-fetch performance, branch mis-predict penalties, and cache access latencies. Meanwhile, fully-autonomous hardware processing and acceleration engines include:
CPU virtualization engines for full-virtualization and para-virtualization modes network acceleration engines for ingress/egress packet parsing and management packet ordering engines deep packet inspection engines for Layer 7 application processing, intrusion prevention, malware detection, and regular expression search acceleration security acceleration engines for encryption, decryption and authentication protocols compression/decompression engines TCP segmentation offload engines RAID-5/RAID-6 acceleration engines storage de-duplication acceleration engines IEEE 1588 hardware time stamping There was no word on operating system support for the XLP II. However, the XLP processors are supported with a new ELPB-NE Linux development platform from Enea that combines Enea's Eclipse-based Enea Linux PlatformBuilder framework and Timesys' LinuxLink configuration and build system.Stated Ron Jankov, president and CEO at NetLogic Microsystems, "We believe our highly differentiated XLP II processor is a true game-changer that will give us a significant competitive advantage in the communications infrastructure market."
Stated Linley Gwennap, principal analyst at The Linley Group and editor-in-chief of the Microprocessor Report, "NetLogic Microsystems is moving aggressively to 28nm technology ahead of the competition. The XLP II multi-core processor will deliver a sizeable leap in performance compared with today's popular XLP products."
Availability
The first members of the XLP II processor family will be available in the first quarter of 2012, with additional members expected to sample in the first half of 2012. NetLogic Microsystems will be disclosing additional technical details of its XLP II multi-core processor family at the upcoming Linley Tech Processor Conference in October. More information should eventually appear on the XLP II at NetLogic's XLP page .
Google is helping HTC attack Apple in court, by furnishing mobile technology patents that take aim at iPhone functionality. Meanwhile, Microsoft nabbed two more major patent agreements with Acer and ViewSonic, related to tablets and mobile phones running Android and (in the case of ViewSonic) Chrome OS.
Google has said it would come to the defense of its OEM partners as they battle Apple, Microsoft, and other litigants in court over Android. The search giant has now backed up this talk by selling nine patents to HTC to help it sue Apple for patent infringement, according to Bloomberg .
As a result, HTC is said to be amending its existing complaint with the International Trade Commission (ITC) and Delaware court against Apple over three patent infringements. The Taiwanese phone maker also filed an additional case in Delaware alleging patent infringement by Apple iOS devices and Mac computers.
"HTC will continue to protect its patented inventions against infringement from Apple until such infringement stops," Grace Lei, HTC's general counsel, said in a statement.
Bloomberg said Google picked up some of the patents less than a year ago from Motorola -- before it split off the Motorola Mobility mobile firm that Google is now attempting to acquire for additional patent protection. Other patents sold to HTC came from Openwave Systems, which last week sued Apple and RIM over mobile patents, and HP's Palm, whose remaining mobile patents may well be sold along with WebOS .
HTC said it paid Google for the patents , according to AllThingsD. The patents were said to include those for a "zoomed display of characters entered from a telephone keypad" from Openwave, a "technique allowing a status bar user response on a portable device graphic user interface" from Palm, as well as a Motorola technique for upgrading radio modem application software over the air.
Google declined to comment on the patent sale to its partner. Legal protection for all Android OEMs was one of the selling points around its $12.5 billion purchase bid for Motorola Mobility, which commands over 17,000 patents, with 7,500 more pending.
"Google knows that HTC is under tremendous legal pressure from Apple and clearly on the losing track," wrote FOSS Patents blogger and IP expert Florian Mueller on Google+ Sept. 7. "HTC is the first Android device maker sued by Apple, so that dispute is at the most advanced stage, and since HTC's own patent portfolio is weak, it has so far lacked the leverage to force Apple into a cross-license agreement. The possibility of HTC being defeated must have scared Google."
Mueller also said Google's intervention in this case increases the likelihood of direct litigation by Apple against Google. The search engine provider is currently battling Oracle in court for using Java technology in Android without procuring a license.
Microsoft wins patent deals with Acer, ViewSonic
Microsoft is continuing its campaign of tying Android device manufacturers into licensing agreements, this time nabbing two significant prizes: Acer and ViewSonic.
The agreement between Microsoft and ViewSonic stipulates the latter will pay royalties for its tablets and mobile phones running Google Android or Chrome OS. The one with Acer stipulates payments for tablets and smartphones running Android. No financial terms were disclosed by Microsoft.
The ViewSonic patent agreement is the second deal to include Google's Linux-based Chrome OS. It followed a July 5 deal with ODM (original device manufacturer) Wistron that was said to involve a patent-licensing agreement regarding tablets running both Android and Chrome OS . Together, the deals suggest that Google's rumored Chrome OS tablet plans are indeed on track.
ViewSonic ViewPad 7x
ViewSonic makes a number of Android phones and tablets, including the recently announced ViewPad 7x tablet (pictured above). Acer also sells a wide variety of smartphones, and last month launched its Iconia Tab A100 Android 3.2 tablet (pictured below). Both firms have long-running ties with Microsoft.
Acer's Iconia Tab A100
HTC agreed back in April 2010 to pay royalties to Microsoft in order to revolve potential lawsuits involving Android smartphones. In June of this year, furthermore, Microsoft corralled three other Android device manufacturers: General Dynamics Itronix , Onkyo , and Velocity Micro .
Both Motorola and Barnes & Noble, however, chose to fight out their respective battles in court rather than submit. Meanwhile, in July Microsoft was rumored to be in negotiation with Samsung on a possible patent agreement that could pay Microsoft as much as $15 for every Android handset it produces .
(A longer version of the Microsoft patent story is available on eWEEK .)
Clint Boulton is a writer for eWEEK.
The CentOS Project announced that updates for their CentOS 4 distribution will be discontinued on February 29th, 2012
This is the 6-month notification for the End of Life for the CentOS 4 distribution. The upstream provider will discontinue public updates of their EL4 product on February 29th, 2012. The CentOS Project will end support for CentOS 4 on the same date. CentOS 4, as well as all previously released versions of CentOS, will continue to be available in the Centos Vault: http://vault.centos.org/ This CESA includes a new centos-release file that reminds you of the February 29th, 2012 end of life date. Users still running production workloads on CentOS 4 are advised to begin planning the upgrade to CentOS 5 or CentOS 6 before the EOL date. For users who are unable to migrate off the EL 4 code base before its end-of-life date, the upstream provider intends to offer a limited, optional extension program. The CentOS Project recommends that you contact their sales team for a price quote for their extended service if you can not move to a newer code base before February 29th, 2012.
Ubuntu Geek shows you how to install MongoDB on ubuntu server
MongoDB wasn’t designed in a lab. We built MongoDB from our own experiences building large scale, high availability, robust systems. We didn’t start from scratch, we really tried to figure out what was broken, and tackle that. So the way I think about MongoDB is that if you take MySql, and change the data model from relational to document based, you get a lot of great features: embedded docs for speed, manageability, agile development with schema-less databases, easier horizontal scalability because joins aren’t as important. There are lots of things that work great in relational databases: indexes, dynamic queries and updates to name a few, and we haven’t changed much there. For example, the way you design your indexes in MongoDB should be exactly the way you do it in MySql or Oracle, you just have the option of indexing an embedded field.
A Mozilla Firefox update has been released for openSUSE 11.4
______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1031-1 Rating: important References: #714931 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: This update brings Mozilla Firefox to 6.0.2. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.ht ml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5119 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 6.0.2]: MozillaFirefox-6.0.2-0.2.1 MozillaFirefox-branding-upstream-6.0.2-0.2.1 MozillaFirefox-buildsymbols-6.0.2-0.2.1 MozillaFirefox-devel-6.0.2-0.2.1 MozillaFirefox-translations-common-6.0.2-0.2.1 MozillaFirefox-translations-other-6.0.2-0.2.1 References: https://bugzilla.novell.com/714931
Zotac announced its smallest ZBox mini-PC yet, featuring a 1.6GHz AMD "Brazos" E-350 processor and integrated home theater PC (HTPC) functionality, including dual IR receivers. The 5.0 x 5.0 x 1.7-inch Zbox Nano AD10 offers a gigabit Ethernet port and four USB ports including two 3.0 ports, and a "Plus" version comes with 2GB of DDR3 memory and 320GB of storage.
Zotac announced the Zbox Nano AD10 on Aug. 31, and the mini-PC has already received several reviews. A Sept. 2 review by Tbreak Technology called the AD10 "one of the most appealing HTPC or set-top boxes on the market," and India-based MoneyControl published a Sept. 6 review that concluded the device is a good fit for home theater applications.
Zbox Nano AD10
Like the Zbox AD03 announced in January, the Zbox Nano AD10 is equipped with AMD's 1.6GHz E-350 processor with integrated AMD Radeon HD 6310 graphics, says the company. The processor offers video decode acceleration for HD video formats including Blu-ray and Adobe Flash, says Zotac.
Zotac does not play favorites when it comes to processor choices. A Zbox released in June offered Via Technologies' dual-core Nano X2 processor, and back in 2009, the company launched a Zbox model called the ZD HD-ID11 , one of the first devices to combine Intel's Atom D510 processor with Nvidia's Ion 2 graphics.
Zbox Nano AD10 (front view)
The latest Zbox is the smallest yet, measuring 5.0 x 5.0 x 1.7 inches (127 x 127 x 45mm) compared to the AD03's 11.02 x 7.36 x 1.5-inch dimensions. The computer is available in a barebones version bereft of both memory and storage, as well as an AD10 Plus model that adds a 320GB hard disk drive (HDD) and 2GB of DDR3 RAM. Otherwise, the models appear to be identical.
The Nano AD10 is the first Zbox with an integrated infrared (IR) receiver, and the company throws in a USB-based IR receiver and remote control as well. This "dual IR receiver solution enables use of the remote control with all placements, including hidden and wall-mounted installations," says Zotac. A new VESA 75/100 mount for monitor or wall mounting installations is said to be bundled with the computer, enabling attachments in four different orientations.
Neither version is equipped with an operating system, but drivers are provided, and any x86 ready platform should do the trick. To use the IR receiver, one needs either Windows 7 with Windows Media Center, Windows 7 Starter with XBMC , or Ubuntu Linux variants with XBMC Live, Mythbuntu, or Boxee media software, according to Tbreak Technology.
Zbox Nano AD10, rear view
The Nano AD10 is equipped with a 6-in-1 memory card reader as well as a rear-facing eSATA port, in addition to the internal SATA connector, says Zotac. More storage and other peripherals are supported via two USB 3.0 ports and two USB 2.0 ports, according to the company.
The computer features a gigabit Ethernet port, as well as 802.11n Wi-Fi, complete with antenna. Bluetooth 3.0 is also part of the package, says the company.
The AD10 includes both a DisplayPort and an HDMI port, which also outputs the Dolby TrueHD audio. A 3.5mm headphone jack and a mic jack are also said to be available. As with earlier Zbox models, one can get to all the internals via two thumb screws, says the company (see image below).
Zbox Nano AD10 Plus, internal view
Source: Tbreak Technology
Features and specifications listed for the Zbox Nano AD10 and AD10 Plus include: Processor -- AMD E-350 (dual-core 1.6GHz) with AMD Radeon HD 6310 graphics Chipset -- AMD A50M Memory -- DDR3-1066 SO-DIMM slot; AD10 Plus model bundles 2GB of DDR3 Storage: 6-in-1 memory card reader (SD/SDHC/MS/MS Pro/xD/MMC) 2.5-inch internal SATA slot, supporting 6.0 Gb/s HDD/SSD; AD10 Plus adds 320GB 5400RPM HDD external eSATA Networking -- gigabit Ethernet Wireless: 802.11b/g/n with antenna Bluetooth 3.0 onboard IR receiver with remote USB IR receiver Other I/O: 2 x USB 3.0 2 x USB 2.0 HDMI DisplayPort 3.5 mm audio jack mic connector Audio -- Dolby TrueHD & DTS-HD 7.1-Channel LPCM (HDMI)/optical digital S/PDIF; Master Audio bitstream ready Other features -- fan; VESA mounting Dimensions -- 5.0 x 5.0 x 1.7 inches (127 x 127 x 45mm) Stated Carsten Berger, marketing director, Zotac International, "Despite the miniature size, the ZBOX nano AD10 series has nearly all the same features as our award-winning ZBOX and ZBOX Blu-ray series, and even introduces a couple of new features."
Availability
No pricing or availability information was provided on the Zbox Nano AD10, but it appears to be close to shipping. According to an Engadget story , the Plus version with the 2GB of RAM and 320GB HDD is available for $276. More information may be found at the Zotac Zbox Nano AD10 web page .