Josh's Blog

So while I know there aren't many nmh users around, I figure I'll make some noise about it anyway. nmh-1.3-RC1 is out. I've updated the packages in Fedora 8 and 9, they should go live with the next package update.

I dare say the biggest change from nmh 1.2 (which was in 2005) is the inclusion of proper unicode character support. Now you can read all that unicode spam the way it was meant to be seen! There were also of course numerous bugs fixed as well.

There was a flurry of updates last week. It kept things quite busy and crazy. There wasn't much else going on (at least not much else I noticed).

Firefox
There was another Firefox update on the heels of the last one. This was to fix a quite serious flaw discovered in the way Javascript is handled. Firedrill updates are never much fun, but as usual all the pieces eventually fit together and updates made it out. Be sure you're running the latest browser, as it's easily the easiest entry point into a system.

OpenOffice.org
The OpenOffice.org upstream made the unfortunate decision to release a new version (2.4), but not mention that it fixed a number of security flaws until almost a month later.
The news page makes reference of this.

Practices such as this can be quite dangerous, as people will read the release notes, think there are no security updates, then possibly not upgrade. In reality there isn't a huge threat here, it's more just bad practice. Silent security fixes are never a good idea, and have gotten numerous other organizations in hot water.