Comment Correction (Score 4, Informative) 379
This is an Associated Press story published on the New York Times site. The NY Times did not report this.
Comment Read the GPL FAQ (Score 2, Insightful) 174
"If distributing GPL'ed software by means that completely preclude it from being used without Windows is not a violation of the GPL, should it not be?"
The GPL FAQ says no.
I would like to bundle GPLed software with some sort of installation software. Does that installer need to have a GPL-compatible license?
No. The installer and the files it installs are separate works. As a result, the terms of the GPL do not apply to the installation software.
Submission + - SquirrelMail Repository Poisoned (beskerming.com)
SkiifGeek writes: "Late last week the SquirrelMail team posted information on their site about a compromise to the main download repository for SquirrelMail that resulted in a critical flaw being introduced into two versions of the webmail application (1.4.11 and 1.4.12).
After gaining access to the repository through a release maintainer's compromised account (it is believed), the attackers made a slight modification to the release packages, modifying how a PHP global variable was handled. As a result, it introduced a remote file inclusion bug — leading to an arbitrary code execution risk on systems running the vulnerable versions of SquirrelMail.
The poisoning was identified after it was reported to the SquirrelMail team that there was a difference in MD5 signatures for version 1.4.12.
Version 1.4.13 is now available."
After gaining access to the repository through a release maintainer's compromised account (it is believed), the attackers made a slight modification to the release packages, modifying how a PHP global variable was handled. As a result, it introduced a remote file inclusion bug — leading to an arbitrary code execution risk on systems running the vulnerable versions of SquirrelMail.
The poisoning was identified after it was reported to the SquirrelMail team that there was a difference in MD5 signatures for version 1.4.12.
Version 1.4.13 is now available."
Slashdot Top Deals
Money cannot buy love, nor even friendship.
