Aggiornamenti di sicurezza importanti per Ubuntu 12.04 Precise Pangolin: The Xorg X Server, Plasma Library KDE Platform, Java Script, Nepomuk Sync Interface, Gwibber ed altri.

Sappiamo tutti quanto sia importante mantenere aggiornato il proprio sistema operativo, ma è parimenti esperienza comune che spesso siano proprio gli aggiornamenti a introdurre nuovi bug.

Ubuntu segue delle linee guida ben precise per gestire questa situazione.

La chiave di volta dell’intero discorso è che, una volta rilasciata la release, gli aggiornamenti non si fanno affatto, a meno che non riguardino vulnerabilità di sicurezza o bug particolarmente significativi.

Addirittura, nell’ottica di stabilizzare la release, già durante le ultime fasi di sviluppo l’ingresso di nuovi pacchetti dei vari software è sottoposto ad un controllo particolarmente rigido (una fase nota agli sviluppatori come “Feature Freeze”, appunto).

Gli aggiornamenti proposti a continuazione fanno parte del bollettino di sicurezza settimanale rilasciato da Canonical e riguardano in particolare i primi aggiornamenti importanti sulla sicurezza riguardanti la neonata Ubuntu 12.04 Precise Pangolin:

• The Xorg X server.
• Java Script.Plasma Library for the KDE Platform.
• Nepomuk Sync Interface.Media Transfer Protocol.
• Ktext Editor Interfaces for the KDE Platform.
• Pseudo Terminal Library.
• Qwibber GTK Widgets.

The Xorg X server.

The Xorg X server is an X server for several architectures and operating systems, which is derived from the XFree86 4.x series of X servers.
The Xorg server supports most modern graphics hardware from most vendors, and supersedes all XFree86 X servers.
More information about X.Org can be found at: <URL:http://www.X.org>
This package is built from the X.org xserver module.

Modifiche per le versioni:
Versione installata: 2:1.11.4-0ubuntu10.2
Versione disponibile: 2:1.11.4-0ubuntu10.3

Versione 2:1.11.4-0ubuntu10.3:

  [ Maarten Lankhorst ]
  * Add upstream patches for proper device disabling (LP: #1009629)
    - 510-dix-return-early-from-DisableDevice-if-the-device-is.patch
    - 511-dix-move-freeing-the-sprite-into-a-function.patch
    - 512-dix-free-the-sprite-when-disabling-the-device.patch
    - 513-dix-disable-non-sprite-owners-first-when-disabling-p.patch
    - 514-Xi-drop-forced-unpairing-when-changing-the-hierarchy.patch
    - 515-dix-disable-all-devices-before-shutdown.patch

Java Script.

This package provides the JavaScript script engine for Plasma. You have to install it if you want to use Plasma widgets and data engines written in JavaScript.
This package is part of the KDE base runtime module.

Modifiche per le versioni:
Versione installata: 4:4.8.3-0ubuntu0.1
Versione disponibile: 4:4.8.4-0ubuntu0.1

Versione 4:4.8.4-0ubuntu0.1:

  * New upstream release (LP: #1007798)
    - add kcm_ssl docs to kde-runtime-data.install

Plasma Library for the KDE Platform.

This package contains the Plasma library. Plasma is one of the key technologies of KDE 4 (also known as the "Pillars of KDE"), and one of the most visible to users. It is the component that is "in charge" of the desktop interface; the desktop, panel (often referred simply as the task bar), and related elements. Plasma aims to change the traditional concepts of the "Desktop", incorporating semantic application elements, and bringing cooperating technologies to the user's fingertips in a way that is visually appealing while easing work flow.
It is part of the KDE Development Platform libraries module.

Modifiche per le versioni:
Versione installata: 4:4.8.3-0ubuntu0.1
Versione disponibile: 4:4.8.4a-0ubuntu0.1

Versione 4:4.8.4a-0ubuntu0.1:

  * New upstream release. (LP: #1007798)
  * Update symbol files.
  * Cherry-pick two commits from the upstream KDE/4.8.x branch so that
    kdelibs works with soprano 2.7.
    - Add Revert_Always_rec-connect_if_forced.diff
    - Add Revert_disconnect_before_re-connecting.diff

Nepomuk Sync Interface.

The Nepomuk sync interface provides a convenient way to store and look up Nepomuk resources.
This package is part of the KDE base runtime module.

Modifiche per le versioni:
Versione installata: 4:4.8.3-0ubuntu0.1
Versione disponibile: 4:4.8.4-0ubuntu0.1

Versione 4:4.8.4-0ubuntu0.1:

  * New upstream release (LP: #1007798)
    - add kcm_ssl docs to kde-runtime-data.install

Media Transfer Protocol.

libmtp is a library for communicating with MTP aware devices in POSIX compliant operating systems.
It implements MTP Basic, the subset proposed for standardization.
The Media Transfer Protocol (commonly referred to as MTP) is a devised set of custom extensions to support the transfer of music files on USB digital audio players and movie files on USB portable media players.

Modifiche per le versioni:
Versione installata: 1.1.3-1
Versione disponibile: 1.1.3-1ubuntu0.1

Versione 1.1.3-1ubuntu0.1:

  * Add new devices (LP: #1014029):
    - Archos 70it2
    - Nokia C7 (new, previously unknown, ID)
    - Cowon iAudio C2
    - SonyEricsson Xperia MK16i
    - SonyEricsson ST18i Xperia Ray
    - SONY Xperia P
    - Motorola Xoom 2 Media Edition (previously unknown ID)
    - Google Inc (for LG Electronics) P990/Optimus (Cyanogen)
    - Asus TF300 Transformer
    - Vizio VTAB1008
  * Fix flags for Android devices:
    - Motorola Milestone / Verizon Droid
    - Motorola DROID2
    - Motorola Xoom 2 Media Edition

Ktext Editor Interfaces for the KDE Platform.

This package provides the KTextEditor interfaces (also called KTE interfaces) that are a set of well-defined interfaces which an application or library can implement to provide advanced plain text editing services. Applications which utilise this interface can thus allow the user to choose which implementation of the editor component to use. The only implementation right now is the Kate Editor Component (Kate Part).
This package is part of the KDE Development Platform libraries module.

This package provides the KTextEditor interfaces (also called KTE interfaces) that are a set of well-defined interfaces which an application or library can implement to provide advanced plain text editing services. Applications which utilise this interface can thus allow the user to choose which implementation of the editor component to use. The only implementation right now is the Kate Editor Component (Kate Part).
This package is part of the KDE Development Platform libraries module.

Pseudo Terminal Library.

This package provides the KTextEditor interfaces (also called KTE interfaces) that are a set of well-defined interfaces which an application or library can implement to provide advanced plain text editing services. Applications which utilise this interface can thus allow the user to choose which implementation of the editor component to use. The only implementation right now is the Kate Editor Component (Kate Part).
This package is part of the KDE Development Platform libraries module.

Modifiche per le versioni:
Versione installata: 4:4.8.3-0ubuntu0.1
Versione disponibile: 4:4.8.4a-0ubuntu0.1

Versione 4:4.8.4a-0ubuntu0.1:

  * New upstream release. (LP: #1007798)
  * Update symbol files.
  * Cherry-pick two commits from the upstream KDE/4.8.x branch so that
    kdelibs works with soprano 2.7.
    - Add Revert_Always_rec-connect_if_forced.diff
    - Add Revert_disconnect_before_re-connecting.diff

Qwibber GTK Widgets.

libgwibber provides a library for accessing social networks via gwibber.
This package contains shared libraries to be used by applications.

Modifiche per le versioni:
Versione installata: 3.4.1-0ubuntu1
Versione disponibile: 3.4.2-0ubuntu1

Versione 3.4.2-0ubuntu1:

  * New upstream release.
    - facebook: Don't crash on unicode characters in a username (LP: #938667)
    - libgwibber-gtk: Fixed up the GwibberGtkEntry widget's alignment and
      icon search path (LP: #1011392)
  * debian/patches/lp_938667.patch
    - dropped, merged upstream

Versione 3.4.1-0ubuntu1.1:

  * debian/patches/lp_938667.patch
    - facebook: Don't crash on unicode characters in a username (LP: #938667)

Se ti è piaciuto l'articolo , iscriviti al feed cliccando sull'immagine sottostante per tenerti sempre aggiornato sui nuovi contenuti del blog: