Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• CVE - CVE-2023-28410 — Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
• INTEL-SA-00886
• Intel Security Center
• New NetFilter flaw gives attackers root privileges — A new Linux NetFilter kernel flaw has been discovered, allowing unprivileged local users to escalate their privileges to root level, allowing complete control over a system.
• NVD - CVE-2023-32233
• Goodbye to Roblox on Linux — I’m sorry to be such a downer about this, but it’s the reality. We have to spend our time porting to and supporting the platforms that will grow our community.
• Proper support for the Linux platform - Feature Requests
• Ubuntu 23.04 Now Works on StarFive’s VisionFive 2 RISC-V SBC — ”This partnership will provide users with a seamless development experience, allowing them to leverage the best of open source software and RISC-V through Ubuntu and VisionFive 2.”
• Canonical enables Ubuntu on StarFive’s VisionFive 2 RISC-V single board computer
• Open Source Summit North America — Open Source Summit is a conference umbrella, composed of a collection of events covering the most important technologies, topics, and issues affecting open source today.
• AWS open-sources snapshot fuzzing and policy authorization tools
• Schedule - Linux Foundation Events
• The Linux Foundation on Twitter

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Android 13 is in AOSP — Today we’re pushing the Android 13 source to the Android Open Source Project (AOSP) and officially releasing the newest version of Android.
• Android 13 Sources Released To AOSP
• Glibc 2.36 Dropping DT_HASH Has Been Breaking Easy Anti Cheat Games — The breakage stems from the DT_HASH section being dropped in GNU C Library but EAC being among the few software still expecting that section rather than DT_GNU_HASH.
• Pierre-Loup Griffais on Twitter — Unfortunate that upstream glibc discussion on DT_HASH isn't coming out strongly in favor of prioritizing compatibility with pre-existing applications. Every such instance contributes to damaging the idea of desktop Linux as a viable target for third-party developers.
• Carlos O’Donell on Twitter — How far should Linux ELF follow the generic ELF standard (gABI)? We recently let distributions drop DT_HASH from glibc builds (mandatory under the gABI). This broke EPIC's Easy Anti-Cheat. We *should* ask the gABI for DT_HASH to be optional.
• GLIBC update broke EAC for most games that use it — Issue #6051 · ValveSoftware/Proton
• Should we make DT_HASH dynamic section for glibc?
• gapi discussion: Making DT_HASH optional?
• Linux 6.0 debuts, missing some Rusty bits — Emperor Penguin Linus Torvalds has released the first release candidate for Linux 6.0, but doesn't mind what you call it.
• Linux 6.0 arrives with performance improvements and more Rust coming
• Linux 6.0-rc1 Released With Exciting Performance Optimizations
• Real-Time “PREEMPT_RT” Not in 6.0-rc1 — Of the 50 patches, it's not too bad either as there are five patches for example that are rather trivial for just enabling real-time (RT) support in the Kconfig files for ARM / ARM64 / POWER / x86 / x86_64. There are also a handful of patches each specific to POWER and the i915 graphics driver code.
• Debian turns 29! — Today is Debian's 29th anniversary. We recently wrote about some ideas to celebrate DebianDay, and several events have been planned in more than 14 locations.
• LocalGroups - Debian Wiki
• A New Jailbreak for John Deere Tractors Rides the Right-to-Repair Wave — An exploit that provides root access to two popular models of the company’s farm equipment.
• mu on Twitter — Sick Codes has jailbroken a John Deere, and this is just the beginning. Turns out our entire food system is built on outdated, unpatched Linux and Windows CE hardware with LTE modems.
• How a version of Doom running on a John Deere tractor champions the right-to-repair movement — Sick Codes achieved this by working with different tractor control touchscreen consoles, narrowing it down to a select few models, and finding a way to exploit these devices.
• Right to repair movement goes Deere hunting
• The debate over right to repair in 2022 | Successful Farming
• Deere Hit with Class Action Lawsuit Over Right to Repair
• Late Night Linux – Episode 190

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Valve expect to make ‘hundreds of thousands’ of Steam Decks next month — The good news is though, production is quickly ramping up. Yang mentioned how "in production terms it'll ramp very quickly, in the first month very quickly we'll be in the tens of thousands, by the second month we'll be in the hundreds of thousands and beyond that it'll grow even quicker".
• Steam Deck gets an OS update to help solve stick drift
• Bungie rejects Steam Deck’s Linux, threatens to ban Destiny 2 players there
• Collabora talk briefly about their work with Valve on SteamOS, Steam Deck — With its new “A/B” design, there are now two operating system partitions, with two different versions of SteamOS. When upgrading, a new operating system image is written to whichever partition is not currently in use, before rebooting the system. A specialized bootloader module then automatically selects the newer operating system and boots into it.
• Portable Linux gaming with the Steam Deck
• Linux kernel edges closer to dropping ReiserFS — The problem was that ReiserFS code in the kernel used some API calls that nothing else did, preventing them from being changed or enhanced. For now, one of the other ReiserFS developers has contributed a patch that removes the issue.
• CentOS New “AutoSD” Distribution Announced For In-Vehicle Linux Distro — CentOS Automotive Stream Distribution is their binary distribution that will serve as a public, in-development preview of Red Hat's upcoming in-vehicle operating system. CentOS formed their Automotive SIG last year with Red Hat working on a RHEL-based in-vehicle Linux platform that is yet to be publicly released.
• Future Intel Systems To Reportedly Be Even Less Friendly For Open-Source Firmware
• Zaolin on Twitter — For everyone wondering what’s @IntelSoftware planning for the Firmware Support Package 3.0 #fsp and USF is basically going fully closed-source on the firmware side. This means Intel’s #fsp decides to drop #OSF open-source firmware. It’s really a shame…
• Why RISC-V Is Succeeding
• Intel’s software-defined silicon set to debut in Linux 5.18 — The existence of software-defined silicon (SDSI) emerged in October 2021 when Intel staffers posted to the Linux Kernel mailing list with hints about new functionality that would allow users to purchase licenses that turned on capabilities physically present in processors, but which are not available to use out of the box.

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Nvidia is reportedly preparing to abandon its $40 billion takeover of Arm — The deal has faced close scrutiny from regulators around the world, who worry it would give Nvidia an unfair advantage in the semiconductor industry.
• SiFive Shifting Production Focus To Next-Gen HiFive Development Board — "With such great ecosystem adoption, demand has exceeded our already high expectations, and we’re close to selling out our production inventory. Given the challenge of supply chain issues that we overcame for the first run of these boards (issues that we continue to face), we’ve decided to focus on the next generation SiFive HiFive development systems rather than trying to put together another build of the HiFive Unmatched platform in 2022."
• Linux system service bug gives root on all major distros, exploit released — Qualys has uncovered a truly dangerous memory corruption vulnerability in polkit's pkexec, CVE-2021-4034. Polkit, formerly known as PolicyKit, is a systemd SUID-root program.
• Major Linux PolicyKit Security Vulnerability Uncovered: Pwnkit
• KDE-Powering Qt’s New Framework Lets Developers Bring Ads Into Their Apps — Qt, the framework that powers the KDE desktop, is announcing support for ads in client-side applications.
• Qt Digital Advertising Platform
• Steam Deck launches February 25, weekly purchase invites planned — Valve has today officially announced their Steam Deck handheld will launch officially on February 25.
• Steam Dynamic Cloud Sync — Dynamic Cloud Sync is now live on Steam, and it's a first for any gaming platform currently in operation. It appears to be inspired by a specific use case: playing your favorite PC game on the go via the Steam Deck, then resuming that same game later on your home PC.
• Valve sponsors more work to improve Linux graphics drivers

Plus how AlmaLinux just rounded out their offering.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Canonical extends support for 14.04 and 16.04 LTS • The Register — Users still running on 14.04 LTS (Trusty Tahr), released back in April 2014, now have until April 2024 (up from 2022) to make the move to something more recent. 16.04 LTS (Xenial Xerus), which dropped into Extended Security Maintenance (ESM) in April this year, has had this extended from April 2024 to April 2026.
• Google Finally Shifting To “Upstream First” Linux Kernel Approach For Android Features — Google's Todd Kjos talked today during Linux Plumbers Conference (LPC2021) around their Generic Kernel Image initiative.
• LPC 2021 - Android MC - YouTube
• Epic Games announce full Easy Anti-Cheat support for Linux including Wine & Proton — Easy Anti-Cheat from Epic Games / Epic Online Services has officially announced a full expansion for Linux including native builds and Wine + Proton. This is big for Linux Gaming and the Steam Deck.
• Epic Online Services launches Anti-Cheat support for Linux, Mac, and Steam Deck
• BattlEye on Twitter — “BattlEye has provided native Linux and Mac support for a long time and we can announce that we will also support the upcoming Steam Deck (Proton). This will be done on an opt-in basis with game developers choosing whether they want to allow it or not.”
• Valve Publishes New Steam Deck FAQ With A Few New Details Shared
• Steam Client Beta updated with PipeWire desktop capture for Remote Play
• AlmaLinux Container Images Update - Full RHEL UBI Compatibility — We are thrilled to announce that as of today, AlmaLinux now provides fully compatible alternatives for Red Hat Universal Base Images (UBI)!
• Linode on Twitter — “We’re rolling out ultra-fast, better-performing, and more reliable NVMe block storage across all 11 of our global data centers 🚀
• GNOME 41 Released With Wayland Improvements, More Performance Tuning — This morning's GNOME 41 release announcement sums up the new release as "Highlights in this release include improvements to the Software app, new multitasking settings and enhanced power management. Beyond that, there is a new Connections application, a refreshed Music application, performance improvements from the compositor to the toolkit, and much more."
• GNOME 41 Released: The Most Popular Linux Desktop Environment Gets Better
• GNOME 41 Released with New Settings, Power Savings, and More
• GNOME 41 Desktop Environment Officially Released, This Is What’s New
• Fedora Linux 35 Beta is GO
• Contact the Show

Plus, how Microsoft just gave a boost to the Linux Desktop and more.

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Valve has formally announced the Steam Deck — Valve has now formally revealed the Steam Deck, a portable handheld gaming console powered by a new version of their Linux-based SteamOS operating system.
• Valve Making Linux Anti-Cheat a Reality for Steam Deck Launch — Valve's newly-announced Steam Deck has a nice bonus for Linux gamers — it's helping to improve Linux anti-cheat by working with Easy Anti-Cheat and BattlEye to provide Proton support for their software.
• Steam Deck FAQ: 31 Big Questions Answered - YouTube
• First Hands-On With Valve’s Handheld Gaming PC - YouTube
• Steam Deck :: Tech Specs
• Valve has confirmed to me that we will have access to the Arch repository
• Gabe Newell expects Steam Deck to sell ‘millions of units’ — "Our view is, if we're doing this right, we're going to be selling these in millions of units, and it's clearly going to be establishing a product category that ourselves and other PC manufacturers are going to be able to participate in."
• Ubuntu Touch OTA-18 Officially Released — Ubuntu Touch OTA-18 is here as a maintenance update that plugs various annoyances and bugs to make the entire Ubuntu Touch mobile operating system more stable and reliable.
• Amazon’s Elasticsearch fork OpenSearch hits prime time — Amazon has launched the first production-ready version of its Elasticsearch fork OpenSearch. This comes six months after Amazon’s AWS first revealed plans to fork Elasticsearch
• Introducing OpenSearch
• OpenSearch reaches 1.0 milestone
• Windows 365 Cloud PC — Securely stream your Windows experience—including your personalized apps, content, and settings—from the Microsoft cloud to any device with your Windows 365 Cloud PC. Available August 2.
• Microsoft reveals $31 per user per month price tag — Microsoft isn't sharing pricing for its just-announced Windows 365/ Cloud PC service until early August. But the pricing of one of its lower-end SKUs seemingly has leaked already.
• Introducing a new era of hybrid personal computing — Windows 365 supports your business apps—Microsoft 365, Microsoft Dynamics 365, Microsoft Power Platform—line of business apps, and more. With Windows 365, we also stand by our promise of app compatibility with App Assure, a service that helps customers with 150 or more users fix any app issues they might run into at no additional cost.
• Microsoft is bringing Windows to a web browser, and it will work on iPad and the Mac — Microsoft unveiled a new service called Windows 365, and it makes it possible for users to run a full version of Windows in a web browser on any device.

Plus Google's surprise for Chromium users, and we go hands-on with Podman's docker-compose support.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Datadog: Datadog - the unified monitoring and analytics platform for comprehensive visibility into cloud, hybrid, and multi-cloud environments.

Support Linux Action News

Links:

• KDE Plasma 5.21 Brings Low-latency Compositing, New Kickoff Menu, and Wallpaper — A major addition is a complete redesign of the main KDE Plasma Application Launcher.
• This week in KDE: new KWin compositing, new Kickoff, new recording level visualization! — This week KWin’s compositing code was almost totally rewritten! It should broadly reduce latency throughout all compositing operations, and also adds a user-facing control in the System Settings Compositing page so people can choose for themselves whether they prefer lower latency or smoother animations.
• Check out our interview with Nate Graham in LUP 385
• Plasma Gitlab MR: Add fingerprint manager
• Fedora Proposed Change: Wayland By Default For Plasma
• Xfce 4.16 Released — Today, after 1 year and 4 months of work, we are happy to announce the release of the Xfce desktop 4.16, a new stable version that supersedes Xfce 4.14.
• XFCE Nation on Twitter — Reminder to @ChrisLAS and @wespayne that Xfce 4.16 has been out since December 22nd but hasn’t been mentioned on @LinuxActionNews or @LinuxUnplugged.
• Xfce 4.16 Changelog
• Intel Preparing New Driver Option To Disable GPU Security Mitigations
• Wine 6.0 released — This release is dedicated to the memory of Ken Thomases, who passed away just before Christmas at the age of 51. Ken was an incredibly brilliant developer, and the mastermind behind the macOS support in Wine. We all miss his skills, his patience, and his dark sense of humor.
• Grab a Glass, Wine 6.0 Has Been Released
• The Wine team is proud to announce that the stable release Wine 6.0 — The core DLLs, including NTDLL, KERNEL32, GDI32, USER32, etc. are built in PE format. This should help a number of copy protection schemes that check that the DLL files on disk match the in-memory contents.
• CloudLinux readies CentOS Linux replacement: AlmaLinux — AlmaLinux will be a free, open-source, community-driven, 1:1 binary compatible fork of RHEL 8 (and future releases). For CentOS users, the company promises Lenix will provide an uninterrupted way to convert existing CentOS servers with absolutely zero downtime or need to reinstall anything
• AlmaLinux is born!!
• AlmaLinux - Forever-Free Enterprise-Grade Operating System
• Using Podman and Docker Compose — Up to now, support for Docker Compose, the command-line utility that orchestrates multiple Docker containers for local development, was missing. With Podman 3.0 now in development upstream, we have begun to support Compose.
• Chromium Blog: Limiting Private API availability in Chromium — During a recent audit, we discovered that some third-party Chromium-based browsers were able to integrate Google features, such as Chrome sync and Click to Call, that are only intended for Google’s use. We are limiting access to our private Chrome APIs starting on March 15, 2021.
• PSA: Vanilla Chromium ending some of Google’s API access such as syncing and spelling check starting on March 15, 2021
• MacOS update enables third party OSes on M1 — It's happening... macOS Big Sur 11.2 beta 2 is out with full custom kernel support.
• iBoot - Wikipedia — iBoot is the stage 2 bootloader for all Apple products. It replaces the old bootloader, BootX.