Q&A: Fathi explains draft API release for PatchGuard
76554
Ben Fathi, Microsoft's vice president for the Windows core operating system, talked today about the draft APIs for PatchGuard that were announced today as well as the company's reasons for releasing them.
304159
Antony Dovgal has pointed out the updated packages that have been released to the snaps.php.net website by Derick Rethans.   He also includes a list of things that will be included in this upcoming release like:   Namespaces Late static binding Accessing static members through $foo::myFunc() Improved OpenSSL extension PCRE 7.4   Grab your copy of these latest snapshots from the snaps website and get to testing them on your system to see what happens before the release.
122246
As mentioned by the Zend Developer Zone, Ed Finkler has posted the latest version of his Inspekt security tool.   Although downloads have been on the Google Code site for a bit, I recently put up a new build of Inspekt. This could probably be described as a late alpha release, with most proposed features implemented.   Also included in this new edition are full API documentation for the application, some documentation on its basic usage and, of course, the source of this latest release.
458563
Security-minded users can find out faster if their applications need to be patched with a free tool.
225263
Microsoft is taking the guesswork out of Patch Tuesday by detailing the type and severity of patches in its new Advance Notification bulletins. The first of these is being used for July's Patch Tuesday.
294192
Demian Turner has posted about the latest version of the Seagull framework (0.6.3) and an update to correct a remote file disclosure issue (up to version 0.6.4).   Well it took a bit of time but after quite a few months a new release of Seagull is finally out, 0.6.3 (0.6.4). Things have been keeping pretty busy with the startup I'm working on, but it's been a great opportunity to refine some features of the framework and optimize the performance.  The early indications are good, after less than 10 weeks of going live Kindo users are creating up to 20k profiles/day and the server load is staying comfortably below 0.5.   The update is a different download that helps correct an issue with the framework allowing user-inputted values from the GET string. Be sure and update your version to keep this security issue under wraps.
704271
Greg Beaver talks about a big push that he's making towards PEAR2 by working hard on an integral piece of the puzzle - the Pyrus installer.   I'm churning out code to turn its installer, Pyrus, from vaporware into actual code. Along these lines, there has been significant progress.  The code has been developed on PHP 5.2, but will most likely target PHP 5.3 with the introduction of namespaces.  Pyrus completely revamps the way things are done.   Greg mentions some of the functionality the installer will use including XMLReader/XMLWriter, namespaces and bits of functionality from the Standard PHP Library (SPL). He's released what he's developed so far via a PEAR channel with no other dependencies.
166875
I was reading LWN where there were reports of security holes in a dozen different packages based off Mozilla's Gecko. Someone complained about the lack of a universal library that they should all use so that users would only need to update the library and not each program separately. Apparently such a library exists as libxul, but its use is uncommon enough that the bugs were reported as being for the several separate programs and not for "libxul".
568578
According to this new post on Pierre-Alain Joye's blog today, a new version of the GD graphics library has been release - version 2.0.34.   It took a lot of work to get this version released. Version 2.0.34 is a bug-fix-only release (all known security issues have been fixed), and upgrade is strongly recommended. It is also my very first GD release (hopefully, the first of many to come), and marks the official freeze of the 2.0.x tree, only security-related fixes will be made on this tree from now on. Please find the release announcement here.   He also invlites any language binders to contact him about hosting for a project if it's not available.
230472
InfoWorld - SANTA CLARA, CALIF. -- Accommodating large patch sets in Linux is expected to mean forking off of the 2.7 version of the platform to accommodate these changes, according to Andrew Morton, lead maintainer of the Linux kernel for Open Source Development Labs (OSDL).
665590
Conky is an advanced, highly configurable system monitor for X based on torsmo   This is the next maintenance release for Conky, prompted by bugs introduced in 1.4.6.  Also notable is changes/clarifications made to licensing.  If you have any problems with the licensing changes (ie. someone got left out of AUTHORS) please let us know.  Summary of changes is as follows:      * Check for pkg-config >=0.19     * Use timed_thread for mpd     * Fixed issue with SIGPIPE and mpd     * Updated COPYING (with more clarifications)     * Updated vim/nano syntax files.     * Added $hwmon var, similar to $i2c and $platform.     * Added var $platform which is similar to $i2c and accommodates the conversion       of many devices from /sys/bus/i2c/devices to /sys/bus/platform/devices.     * Removed config item post_21_kernel since it forced all i2c device lookups       to go to /sys/bus/platform/devices and some people may need a mix of both         i2c and platform devices.     * Clarifying licensing     * RSS support     * Wireless support for Linux  Regards,  Brenden
767738
Greg Beaver points out the numerous releases that were made in the PEAR community today - including an update to the PEAR website itself.   OK, today's release party wins.  I've just uploaded the 8th package for release, and it's a very significant day of releases.   The three updates made today are:  An update to the PEAR website that allows for patch tracking in the bug tracker The latest version of PHP_ParserGenerator - version 0.1.5 and the release of the first, full-featured parser for PHP - PHP_Parser along with a "companion", PHP_Parser_DocblockParser
38422
Relax NG Compact Syntax validator   This release brings the patches from RNV 1.7.9's Debian package upstream. Besides the addition of a man page this includes build related fixes only. If RNV 1.7.9 worked for you there is no need to update.   Download: http://sourceforge.net/project/showfiles.php?group_id=194726  Changelog: http://sourceforge.net/project/shownotes.php?release_id=574334&group_id=194726
364472
Asa Dotzler writes &quot;We took one more important change into the builds last night, moving from a blacklist to a whitelist for external protocol handlers, so today&#39;s builds are the new candidate 1.0PR builds.
692223
Jim Plush has posted an offifical release announcement about his latest contribution to the PHP community - a debugging tool combining PHP (through the myBIC framework) and the Firefox FireBug extension.   I put together a couple pieces of technology to give the PHP community a debugger/profiler that should make life easier in the "web2.0" world. Are you tired of echo'ing print statements in your ajax calls? Writing to log files? Firing up big ol debuggers just to see what the value of some array is? Well look no further than the new MyBic PHP Debugger.   The tool is a smaller part of his larger MyBIC framework and can do things like writing log files, echo information back out to the screen, and communicate information back out to the Firefox user. There is a standalone version of FireBug that will be posted for those that don't want to have to install an entire framework to use it.   Keep an eye out (here and on his blog) for the links to the release when it's posted. In the meantime, you can check out a screencast [mov] of the package in action or just the screenshots in the blog entry.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
275619
Travis Swicegood is teasing us with some output from a script in his latest blog post:   So my free time of late (what there is of it) has been spent on a project that's getting really close to v0.1 release. In other words, its first functional release. If you've ever run a test using the PEAR installer or know what a .phpt file looks like, you might be able to guess what I've been up.   Keep an eye on his blog for more information on his "secret project".