Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Linux has been bitten by its most high-severity vulnerability in years — Dirty Pipe has the potential to smudge people using Linux and Linux derivitives.
• Catalin Cimpanu on Twitter — “DirtyPipe (CVE-2022-0847) is a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation. It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit.
• Ron Amadeo on Twitter — “By my count, Dirty Pipe affects only brand-new Android 12 devices like the Pixel 6 and S22. Linux 5.8 and above has only been an Android option for five months."
• Canonical Patches “Dirty Pipe” Vulnerability in Ubuntu 21.10 and 20.04 LTS
• BLASTY on Twitter: “Hacked up a quick Dirty Pipe PoC that spawns a shell by hijacking (and restoring) the contents of a setuid binary.”
• The Dirty Pipe Vulnerability — The Dirty Pipe Vulnerability documentation
• AMD Posts Some New Linux Job Openings From Client CPU To Server — AMD would need a lot more Linux engineers to achieve the same level of timely Linux support and low-level kernel enhancements that Intel has been focused on for years, especially when it comes to Intel's open-source work beyond just the actual hardware device enablement.
• Introducing Native Matrix VoIP with Element Call! — What’s more, Element Call is built entirely on Matrix: it doesn’t need any additional servers to get going. You can run it against your existing Matrix homeserver to provide complete self-sovereignty… while still being able to talk to anyone else anywhere on the wider Matrix network! We will also be able to automatically use Matrix’s end-to-end encryption to secure all Element Call conferences
• call.element.io
• https://github.com/vector-im/element-call/issues
• Extending Matrix’s E2EE calls to multiparty
• Danielle Foré on Twitter — Okay it’s been a full month and this situation still isn’t resolved, and it sucks for you to just be completely in the dark and it’s pretty obvious something is up and people are asking what’s going on, so here is my side of the story 🧵
• Danielle gives an update on elementary Reddit Thread
• Jupiter Broadcasting East Coast Meetup

Plus we go over the newly publish Ubuntu statistics, and Google's new Android licensing scheme in Europe.

Support Linux Action News

Links:

• Ubuntu 18.10 released — Ubuntu 18.10 introduces the GNOME 3.30 desktop and Yaru, the new community-developed default theme.
• More Ubuntu statistics published — This report is generated from basic, non-identifiable system data that was provided by users when installing Ubuntu 18.04 LTS.
• elementary OS 5.0 Juno released — Juno is such an incredible release, and it’s here thanks to all of our supporters.
• MongoDB makes change to license — The SSPL explicitly states that anybody who wants to offer MongoDB as a service — or really any other software that uses this license — needs to either get a commercial license or open source the service to give back the community.
• Google changes Android licensing policy in Europe — Ad giant to charge for key applications amid license shakeup and antitrust fine
• CoC Committee Added Plus Interpretation & Mediator — It turns out Greg KH was working in private with various kernel maintainers/developers on addressing their feedback and trying to come up with solutions to the contentious issues in private.

Plus OpenWrt is alive and well, and Samsung has a new trick.

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• New Samsung Dex tablet
• OpenWrt 18.06 released
• Wireguard submitted for inclusion in the kernel
• Linus is a fan
• elementary OS receives large donation
• GNOME Foundation receives $400,000 from Handshake.org
• Introducing the Dweb
• Evolving the Firefox Brand
• Out-of-process extensions coming to Firefox on Linux — out-of-process

Support Linux Action News

Links:

• Ubuntu MATE 18.10 - dropping i386 images — Less than 10% of Ubuntu MATE users are running the i386 (32-bit Intel) images.
• 18.10 and beyond - 64bit images only | Ubuntu Budgie — from the various reports and statistics we have observed from 16.04 budgie-remix all the way to you enthusiastic 18.04 trail-blazers, almost all of you are now using the 64bit ISO.
• Lubuntu finally ready to move to LXQt — Lubuntu 18.10 will be the first release to ship with LXQt as default desktop environment instead of LXDE, according to Simon Quigley.
• Korora takes a “break” — Korora for the forseeable future is not going to be able to march in cadence with the Fedora releases. In addition to that, for the immediate future there will be no updates to the Korora distribution.
• Void Linux struggling as leader goes missing — There still are multiple members to the Void Core Team and others working on this independent Linux distribution, but their project leader has "disappeared". There's been no contact since January but no "meaningful contact" in over one year.
• Fedora 28 released — The headline feature for Fedora 28 Server is the inclusion of the new Modular repository. This lets you select between different versions of software like NodeJS or Django

Plus fail0verflow gets Linux on the Nintendo Switch, and our favorite new features of VLC 3.0.

Support Linux Action News

Links:

• MATE 1.20 — The theme for this release has been stabilising the MATE Desktop by replacing deprecated code and modernising large sections of the code base. We’ve also improved our window manager (Marco) and added support for HiDPI. Along the way we’ve fixed hundreds of bugs. Squished ‘em dead!
• Plasma 5.12 — Speed and memory improvements are the focus of this long-term release. The new Plasma LTS uses less CPU and less memory than previous versions. The process of starting the Plasma desktop is now significantly faster.
• VLC 3.0 — Network browsing for distant filesystems (SMB, FTP, SFTP, NFS...)
• Nextcloud 13 — This release brings improvements to the core File Sync and Share like easier moving of files and a tech preview of our end-to-end encryption for the ultimate protection of your data. It also introduces collaboration and communication capabilities, like auto-complete of comments and integrated real-time chat and video communication.
• Android x86 7.1 — It’s a full port of Android, instead of being more of an application player like other solutions.
• Bliss-x86 Oreo 8.x
• Changes coming to elementary OS AppCenter — One of the primary goals of developing AppCenter Dashboard was to build a sustainable app ecosystem. I don’t think it’s a surprise to anyone that although the AppCenter ecosystem is growing, nobody can make a living on it yet. That’s what we mean when we say “sustainable”. Writing apps is a real, hard, full-time job. If we want to see more high-quality, Open Source apps then we need to prioritize getting third-party app developers paid.
• Elementary OS Juno will be version 5.0, not 0.5 — Among them a small yet appreciable bump to the version number. Yes elementary OS 0.5 Juno will actually be elementary OS 5.0.
• Announcing “Project Things” — We kicked off “Project Things”, with the goal of building a decentralized ‘Internet of Things’ that is focused on security, privacy, and interoperability.
• Nintendo Switch runs Linux — According to fail0verflow, there’s a flaw in the boot ROM in Nvidia’s Tegra X1 system-on-a-chip. when your console starts, it reads and executes a piece of code stored in a read-only memory (hence the name ROM). This code contains instructions about the booting process.

Plus the Tizen surprise, elementary OS' pay-what-you-want AppCenter, and what's new Android O.

Support Linux Action News

Links:

• Ubuntu Desktop Team Discuss Their Plans for GNOME in Ubuntu 17.10 — “may consider a few tweaks here and there to ease our users into the new experience
• The Ubuntu Desktop Team Wants YOUR Feedback — The results of this survey will help inform and shape the Ubuntu desktop team’s approach to GNOME in Ubuntu 17.10.
• OMG! UBUNTU! on Twitter: 16,000+ Ubuntu users have taken the survey — 16,000+ #Ubuntu users have taken the 17.10 GNOME desktop survey
• Windows Server will add the Linux subsystem, join the Insider program — Microsoft announced that WSL will be included in Server later this year.
• Will Linux distros run on Windows 10 S? — Just because an “app” comes from the Windows Store does NOT automatically mean that it’s safe & suitable for running in Windows 10 S. There are some apps that are not allowed to run on Windows 10 S, including all command-line apps, shells and Consoles.
• New Release: elementary OS Loki 0.4.1 — This release comes with a brand new version of AppCenter with support for apps submitted to the AppCenter Dashboard. Welcome to elementary OS, third-party developers!
• Loki's New AppCenter with Daniel Foré | Chris Interviews Daniel — Daniel Foré, elementary OS founder, joins Chris to chat about their new update to Loki, their pay what you want AppCenter, what the end of Unity means for them, and the future of the project.
• Shipping Advance Prototype - Mycroft — This first version of Mark 1 is an advance prototype, perfectly suitable for developers or enthusiasts, yet it is not ready for the consumer market.
• What’s New in Android: O Developer Preview 2 & More — New tools for developers to help create more performant apps, and an early preview of a project we call Android Go -- a new experience that we’re building for entry-level devices.
• Samsung to extend Tizen OS to nearly all home appliances by 2020 — A new report says, though, that Samsung is looking to further increase Tizen adoption by bringing Tizen (or, in this case, Tizen RT) to nearly all of its home appliances by 2020.
• Samsung to announce Tizen RT for smart home appliances — Samsung intends to announce a slimmed-down Tizen OS, called Tizen RT, for its washing machines and other smart home appliances at its Tizen Developer Conference (TDC) today, according to a new report.