| 25-Sep-2014: | Beta 3 of OpenSSL 1.0.2 is now available, please test it now | https://www.openssl.org/ |
OIOS Unix drop in replacement for Opensolaris with illumos kernel. An Open enterprise system for Data Centres,Cloud Services and development.Distribution available as Server, Desktop and live USB distribution suitable for a cloud desktop Aimed at experienced an user or professional currently been developed in Beta form.Based in London and USA. Worldwide community at openindiana.org.
Friday, 10 October 2014
OiOS Openindiana SSL Heartbleed bug security comment
OiOS Openindiana Open SSL has released a beta release of patched SSL
OiOS Openindiana Bash Security Comment
'The Register' recently announced A bug discovered in the widely used Bash command interpreter poses a
critical security risk to OS X MACs,Unix and Linux systems – and, thanks to their
ubiquity, the internet at large.
It lands countless websites, servers, PCs, OS X Macs, various home routers, and more, in danger of hijacking by hackers.It puts Apache web servers, in particular, at risk of compromise: CGI scripts that use or invoke Bash in any way – including any child processes spawned by the scripts – are vulnerable to remote-code injection. OpenSSH and some DHCP clients are also affected on machines that use Bash.
The National Vulnerability Database detailed the following issues
It lands countless websites, servers, PCs, OS X Macs, various home routers, and more, in danger of hijacking by hackers.It puts Apache web servers, in particular, at risk of compromise: CGI scripts that use or invoke Bash in any way – including any child processes spawned by the scripts – are vulnerable to remote-code injection. OpenSSH and some DHCP clients are also affected on machines that use Bash.
The National Vulnerability Database detailed the following issues
- CVE-2014-6278
- Summary: GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277.Published: 9/30/2014 6:55:04 AMCVSS Severity: 10.0 HIGH
Referenceshttp://www.opencsw.org/packages/CSWbash/http://tiswww.case.edu/php/chet/bash/bashtop.htmlhttp://www.theregister.co.uk/2014/09/24/bash_shell_vuln/http://web.nvd.nist.gov/view/vuln/search-results?query=bash&search_type=all&cves=on
http://www.openssh.com/
http://www.isc.org/downloads/software-support-policy/security-advisory/
Consensus opinion on new media at this time: where the system is exposed to such risk (you are using bash shell) update bash to the latest version,download the patched updates when they become available.Mitigate risk with internal,external operational audit and risk assessment.http://ftp.gnu.org/gnu/bash/bash-4.3-patches/
Using Apache servers
http://security.stackexchange.com/questions/68146/how-do-i-secure-apache-against-the-bash-shellshock-vulnerability
Blogs and websiteshttp://www.symantec.com/connect/blogs/shellshock-all-you-need-know-about-bash-bug-vulnerabilityhttp://tools.cisco.com/security/center/viewAlert.x?alertId=35845
Sunday, 28 September 2014
OiOS Hipster development project review for developers
OiOS Hipster development project review for developers
http://pt.slideshare.net/alexanderpyhalov/sito-oi2014-33612278
Latest News
2014-10-08 - Hipster Oct 2014 development ISO released
Congratulations are in order - hipster 20141008 is now available! Please see the hipster development pages for details.Friday, 12 September 2014
Ultra wide screen monitors on oios
Saturday, 2 August 2014
Oios (openindiana) system features for the Enterprise Server and Desktop
Friday, 1 August 2014
OiOS openindiana development releases of Apache OpenOffice 4.0.1
OiOS (openindiana) is pleased to announce a development release of Apache OpenOffice 4.0.1 (desktop/office/openoffice) package which will be available in OpenIndiana /hipster repository.
A special thanks to Apostolos Syropoulos and Alstersdair Lumsden for their work on this project.
A special thanks to Apostolos Syropoulos and Alstersdair Lumsden for their work on this project.
Friday, 20 June 2014
OiOS Openindiana and Syncthing
Syncthing is currently been developed by the open source community as an alternative to dropbox. It claims to respect your data integrity and privacy by inbuild architecture.Developers might like to visit the project at http://syncthing.net/.
latest update news to openindiana OIOS
2014-06-18 - Hipster 2014.1 development update released
Congratulations are in order - hipster 2014.1 is now available! Please see the hipster development pages for details. Enjoy!2014-02-14 - Hipster Feb 2014 development ISO released
Congratulations are in order - hipster 2014.02 is now available! Please see the hipster development pages for details. Enjoy!2014-01-18 - oi_151a9 (prestable9) released
Congratulations are in order - oi_151a9 is now available! Please see the oi_151a_prestable9 Release Notes for details. Enjoy!Monday, 12 May 2014
Wednesday, 7 May 2014
Picture Archiving and Communications Systems (PACS) opensolaris based Opensource
May 2014
A Reliable, Low-Cost Picture Archiving and Communications System for Small and Medium Veterinary Practices Built Using Open-Source Technology Bryan Iotti,Alberto Valazza
According to the Journal of Digital Imaging 'a Picture Archiving and
Communications Systems (PACS) are the most needed system in a modern
hospital. As an integral part of the Digital Imaging and Communications
in Medicine (DICOM) standard, they are charged with the responsibility
for secure storage and accessibility of the diagnostic imaging data.
These machines need to offer high performance, stability, and security
while proving reliable and ergonomic in the day-to-day and long-term
storage and retrieval of the data they safeguard. This paper reports the
experience of the authors in developing and installing a compact and
low-cost solution based on open-source technologies in the Veterinary
Teaching Hospital for the University of Torino, Italy, during the course
of the summer of 2012. The PACS server was built on low-cost x86-based
hardware and uses an open source operating system derived from Oracle
OpenSolaris (Oracle Corporation, Redwood City, CA, USA) to host the
DCM4CHEE PACS DICOM server (DCM4CHEE, http://www.dcm4che.org).
This solution features very high data security and an ergonomic
interface to provide easy access to a large amount of imaging data. The
system has been in active use for almost 2 years now and has proven to
be a scalable, cost-effective solution for practices ranging from small
to very large, where the use of different hardware combinations allows
scaling to the different deployments, while the use of
paravirtualization allows increased security and easy migrations and
upgrades'.
Friday, 11 April 2014
List of latest Unix drivers for Nividia
List of latest Unix drivers for Nividia
http://www.nvidia.co.uk/object/unix-uk.html
http://www.nvidia.co.uk/object/unix-uk.html
Edward Snowden: Here's how we take back the Internet
Edward Snowden is interviewed on TED talks and adds support to opensource for the future
https://www.youtube.com/watch?v=yVwAodrjZMY
https://www.youtube.com/watch?v=yVwAodrjZMY
UKOUG Solaris SIG Meeting events
Upcoming and past events from Oracle, UKOUG and our partners.
ukoug.org
http://www.ukoug.org/events/
NASA Open Source Software Development
NASA renews its commitment to open source initiatives as the way forward
http://blogs.scientificamerican.com/observations/2014/04/10/beat-jet-lag-with-this-scientist-developed-app/
http://blogs.scientificamerican.com/observations/2014/04/10/beat-jet-lag-with-this-scientist-developed-app/
Thursday, 6 February 2014
Oios (openindiana) launches 151a9 prestable release for Developers
Changes and updates include
Release Notes from OiOS Date: January 18th, 2014
OiOSi_151a_prestable9 AKA oios_151a9 is a bug and security fix release with another JDS rebuild. This is not an ISO release.
The python package issue for a8 should be fixed in the repo now. This means if you got a pkg error trying to upgrade to a8, you should try updating and should have more success now.
If you have updated from oi_151a8, the package gvfs will be missing. Check this with ``pkg info gvfs''. This package was inadvertently deleted in oi_151a8. Without this package, desktop mounting and unmounting CD and DVD disks and USB drives will be incorrect. Install this package with ``pkg install gvfs''.
The list of major changes is listed below...
- Bump illumos to hg:14187:68927c785889 git:52e13e00ba
- SFW fixes and bumps
- Bump Apache2 to 2.2.26
- Bump APR to 1.5.0
- Bump APR-util to 1.5.3
- Bump BIND to 9.6-ESV-R10-P1
- Bump mutt to 1.5.22
- Bump ntpd to 4.2.7p411
- Bump OpenLDAP to 2.4.38
- Bump Samba to 3.5.22
- Bump Wireshark to 1.8.12
- Fix Apache 64bit binaries
- Fixes for PHP - https://hg.openindiana.org/upstream/oracle/userland-gate/rev/f225f89a0538
- Fix unrar password function - http://cvsweb.netbsd.org/bsdweb.cgi/~checkout~/pkgsrc/archivers/unrar/patches/Attic/patch-consio.cpp?rev=1.1
- Fix weird subversion build issue
- pkg fixes
- #1204 zoneadm cannot create clone of zone from snapshot
- oi-build changes
- Bump illumos-kvm to a8ea37e
- Bump NVIDIA driver to 304.117
- Bump pkgbuild to 1.3.105 plus patches
- Bump QEMU to 1c6181b
- Fix python-26 conditional dependency
- Fix python-26 pyconfig.h
- Add automake-1.11
- Add jq
- Add tmux
- oi-build build system cleanups
- Lots of release engineering fixes for pkg planning, version bumps and obsoletions
- jds changes can be found here: http://hg.opensolaris.cz/oi-jds/shortlog
http://wiki.openindiana.org/oi/oi_151a_prestable9+Release+Notes
Everycity lauches new illumos blog
Alasdair Lumsden of Everycity lauches a blog aimed primary at developers for illuminos
http://everycity.co.uk/blog/2014/02/illumos-watch-january-2014/
http://everycity.co.uk/blog/2014/02/illumos-watch-january-2014/
Subscribe to:
Posts (Atom)







