Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Announcing Fedora Linux 38 — The Fedora Linux 38 release is here! With this release, we’re starting a new on-time streak. In fact, we’re ready a week early!
• What’s new in Fedora Workstation 38
• Rust Foundation apologizes for trademark policy confusion — The Rust Foundation on Monday apologized for confusion caused by the organization's proposed trademark policy changes.
• A note on the Trademark Policy Draft
• Rust Foundation - Rust Trademark Policy Draft Revision
• Canonical Livepatch gets even better — Now supporting Hardware Enablement Kernels.
• Proton 8.0-1 Published With More Game Support — Proton 8.0-1 is the much awaited re-base of Proton against the Wine 8.0 state
• Pierre-Loup Griffais on Twitter — “Proton 8.0 is now available with many changes. Our biggest rebase to date! Note: it requires a GPU with Vulkan 1.3 support. Experimental-8.0 will follow sometime this week.
• LFNW Call for Papers — We invite you to submit your proposal to speak at LFNW2023! We're seeking both experienced technical presenters, as well as first-timers to present to a hybrid audience.
• LinuxFest Northwest 2023
• In letter to EU, open source bodies say Cyber Resilience Act could have ‘chilling effect’ on software development — Penalties for non-compliance may include fines of up to €15 million, or 2.5% of global turnover.
• Cyber Resilience Act

Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• GNOME 44 Released — GNOME 44 is code-named “Kuala Lumpur”, in recognition of the work done by the organizers of GNOME.Asia 2022.
• GNOME 44 Released With Many Desktop Enhancements
• GNOME 44 Getting New Background Apps UI
• Ubuntu Touch OTA-1 Focal Release — This is the first OTA for Ubuntu 20.04 (Focal) with major features, this is an Opt-In and not mandatory update.
• First Ubuntu Touch OTA Release Based on Ubuntu 20.04 LTS Is Out Now
• Ubuntu Cinnamon Flavor Status Announcement — Ubuntu Cinnamon started as a small idea in my head, in 2019. I was ELEVEN.
• ItzSwirlz (Joshua Peisach)
• Ubuntu Cinnamon Remix Becomes Official Ubuntu Flavor
• Microsoft’s CBL-Mariner Linux Distribution Continues Cultivating More Packages — With today's CBL-Mariner 2.0.20230321 they have continued cultivating more packages for the distribution.
• CBL-Mariner GitHub
• We’re no longer sunsetting the Free Team plan — After listening to feedback and consulting our community, it’s clear that we made the wrong decision in sunsetting our Free Team plan.
• Google discloses CentOS Linux kernel vulnerabilities following failure to issue timely fixes — Google Project Zero's security researcher Jann Horn learned that kernel fixes made to stable trees are not backported to many enterprise versions of Linux.
• Google Security Researchers Accuse CentOS of Failing to Backport Kernel Fixes
• Project Zero Mailing List Thread on CentOS Kernel Patches
• CVE-2023-0590
• kernel-5.14.0-277.el9
• CVE-2023-1249
• CVE-2023-1252
• Berlin Meet Up #2 - Nextcloud Hackfest & Dev Community Introduction, Fri, Mar 31, 2023 — NOTE: the time detailed on Meetup.com is strictly set to PST, so don't be confused by the interface!

Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Kali 2023.1 — Today we are releasing Kali 2023.1 (and on our 10th anniversary)!
• Get Kali | Kali Linux Download
• Kali Linux Introduces “Kali Purple” for Defensive Security Hardening
• Qubes OS 4.1.2 — We’re pleased to announce the stable release of Qubes 4.1.2!
• Wayland Crash Survivor — A change merged to Qt this week can allow for Wayland clients to survive compositor restarts, such as when the compositor crashes.
• OpenMoon Ray Code Goes Live — MoonRay is DreamWorks’ open-source, award-winning, state-of-the-art production MCRT renderer.
• OpenMoonRay.org
• ipmitool Repository Archived — Those navigating to ipmitool/ipmitool on GitHub as the official repository for this project will find that it's now in a "public archive" state.
• Docker is deleting Open Source organisations - what you need to know
• Justin Cormack on Twitter — when we remove accounts we do not free up the namespace so squatting is not possible.
• Some nuance for paid users
• GHCR was having some issues this morning it seems
• Red Hat’s Quay is maybe another option, they might offer free plans? public repos are free anyway
• José Valimon Twitter
• Deploy a registry server — This page contains information about hosting your own registry using the open source Docker Registry.

Plus Mozilla and KaiOS team up to bring the modern web to feature phones, and the surprising way Microsoft is shipping a Linux kernel.

Support Linux Action News

Links:

• Firefox 74 arrives with stricter add-on rules, TLS 1.0 and TLS 1.1 disabled — Starting with Firefox 74, users will need to take explicit action to install the extensions they want, and will be able to remove previously sideloaded extensions when they want to.
• Introducing GNOME 3.36: “Gresik” — GNOME 3.36 is the latest version of GNOME 3, and is the result of 6 months’ hard work by the GNOME community. It contains major new features, such as new login and unlock experience, and a dedicated app for managing extensions.
• GNOME 3.36 Released with New Lock Screen, Better Performance — Six months of development later and the official GNOME 3.36 release is finally here, with source code available to download from the usual places.
• Announcing Bottlerocket — Bottlerocket comes with a single-step update mechanism and includes only the essential software to run containers. These properties enable customers to use container orchestrators to manage OS updates with minimal disruptions, enabling better uptime for containerized applications and lower operational cost.
• Docker: Helping You and Your Development Team Build and Ship Faster — How are we going to do this? By focusing on developer experience through Docker Desktop, partnering with the ecosystem, and making Docker Hub the nexus for all the integrations, configuration, and management of the application components which constitute your apps and microservices.
• VMware Announces Expanded Portfolio of Products and Services to Help Customers Modernize Applications and Infrastructure — Tanzu, first introduced at the VMworld event in August 2019, is a portfolio of products centered on K8s. Also announced was vSphere 7, newly rearchitected using Kubernetes, and optimized to run both modern container-based and traditional virtual machine-based workloads.
• KaiOS Technologies and Mozilla partner to enable a healthy mobile internet for everyone — This partnership bolsters the security and performance of KaiOS-enabled smart feature phones, as well as the platform’s developer tools, security, and available functions, including better Progressive Web App and WebAssembly support.
• Magisk may no longer be able to hide bootloader unlocking from apps — Users have noticed that their bootloader-unlocked devices are failing SafetyNet’s Basic Integrity check even though they used Magisk to patch the boot image. According to Magisk creator John Wu, this is because Google may have implemented hardware-level key attestation to verify that the boot image has not been tampered with.
• Kernels for WSL2 will come from Windows Update — WSL2 will soon be officially available as part of Windows 10, version 2004! As we get ready for general availability, we want to share one additional change: updating how the Linux kernel inside of WSL2 is installed and serviced on your machine.

Plus a big boost for ARM on Linux, and our thoughts on recent Red Hat news.

Support Linux Action News

Links:

• Ubuntu 19.10 Released — Ubuntu 19.10 “Eoan Ermine” boasts an upgraded Linux kernel along with faster boot times, updated themes, and experimental ZFS file system support. Whether or not you upgrade, Ermine shows what to expect from Ubuntu’s next LTS release, due April 2020.
• Ubuntu 20.04 LTS Codenamed The Focal Fossa, Arriving On 23 April
• Canonical Pulled In $99M While Still Operating At A Loss
• Ubuntu 19.10 Flavours Released
• Ubuntu 19.10's Kernel Ships With A DoS / Arbitrary Code Execution Bug In The IPv6 Code
• TechSNAP 414: Rooting for ZFS
• IBM Misses Estimates as Red Hat Fails to Offset Declines — Red Hat included in results for first time since 2018 purchase.
• Samsung ends Linux on DeX beta with Android 10 — Samsung will no longer provide support on future OS and device releases. The company also notes that users will not be able to perform a version rollback to Android 9 Pie once they have upgraded to Android 10.
• Bare Metal Arm-Based EC2 Instances — Just like for existing bare metal instances (M5, M5d, R5, R5d, z1d, and so forth), your operating system runs directly on the underlying hardware with direct access to the processor.
• Graboid: First-Ever Cryptojacking Worm Found in Images on Docker Hub — Unit 42 researchers identified a new cryptojacking worm we’ve named Graboid that’s spread to more than 2,000 unsecured Docker hosts.
• Docker Containers Riddled with Graboid Crypto-Worm
• andOTP removed from Google Play Store — andOTP was recently removed from the Google Play Store for violating their payment terms. This is most likely due to the fact that we offer in-app donation links that DO NOT use Googles In-App billing, which is against their terms.
• andOTP - Android OTP Authenticator
• WireGuard removed from Google Play Store — They said it was because we're in violation of their "Payments Policy", presumably because we have a link inside the app that opens the user's web browser to wireguard.com/donations/.
• WireGuard commit reversed dev comments interesting
• WireGuard - Apps on Google Play
• WireGuard Restored In Android's Google Play Store