Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• The Coder Robe — Celebrate Coder 500! The Robe, the Tumbler, and the Sticker are available for a limited time.
• Git Vulnerabilities — Today, the Git project released new versions to address a pair of security vulnerabilities, (CVE-2023-22490 and CVE-2023-23946) that affect versions 2.39.1 and older.
• 10 Years of Steam — Feb 14, 2013–Valve, creators of best-selling game franchises (such as Counter-Strike and Team Fortress) and leading technologies (such as Steam and Source), today announced the release of its Steam for Linux client. In celebration of the release, over 50 Linux titles are now 50-75% off until Thursday, February 21st at 10 AM PST.
• Sabayon 9 Review | LAS | s22e08 - YouTube
• Opening the Valve | LAS | s22e09 - YouTube
• Ubuntu Gets Real — Canonical today announced the general availability of real-time Ubuntu 22.04 LTS.
• Canonical Promotes Ubuntu’s Real-Time “RT” Kernel To General Availability
• Here Comes GTK5 — Discussions around the GTK5 tool-kit also happened with some developers eager to begin work on that next major release in order to begin facilitating API breaks and removing deprecated code.
• Plasma 5.27 — Plasma 5.27 is out and brings massive improvements to the desktop and all its tools. Another work of love from the KDE devs and contributors.
• KDE Plasma 5.27 Released — Better Wayland Support, KWin Tiling, Multi-Monitor Overhaul
• Final Version of KDE Plasma 5 Released – This is What’s New — Notably, this is expected to be the final release in the KDE Plasma 5.x series, with the following stable release set to be KDE Plasma 6.0, due for release towards the end of the year.

Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Raspberry Pi 5 Not Launching Until After 2023 — Don't expect a Pi 5 next year [2023]" Upton then expands and explains that 2023 is a "recovery year".
• Eben Upton Interview: Raspberry Pi Availability & More! - YouTube
• Raspberry Pi Adds 100,000 Units to Supply Chain, Back to Pre-pandemic Levels in 2023 | Tom’s Hardware — In the blog post, Upton acknowledged the patience of the community and offers the 100,000 units, made up of Raspberry Pi Zero W, 3A+ and Raspberry Pi 4 2GB and 4GB for single-unit sale. We don't know the breakdown of how many of each model there will be, but Upton does indicate that it is likely that Raspberry Pi Zero W will come back into stock first.
• KDE Frameworks 5.101 Released — Per the plans laid out earlier this year at the Akademy developer conference, KDE Frameworks 5 feature development stops following the v5.101 release. KDE Frameworks 5 will now just see maintenance updates moving forward.
• Xfce 4.18 Released — After almost two years of work, we are happy to announce the release of Xfce 4.18 !
• Xfce 4.18 by muscaln · Pull Request #206282 · NixOS/nixpkgs
• PipeWire Bluetooth Improvements — Most exciting with today's PipeWire 0.3.62 release is now supporting Bluetooth offloading.
• Releases · PipeWire / wireplumber · GitLab
• Feature Preview: Gitea Actions — Gitea Actions goes beyond just DevOps and lets you run workflows when other events happen in your repository.
• act_runner — A runner for Gitea based on act.
• act — Run your GitHub Actions locally 🚀

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Announcing Fedora Linux 37 — Fedora Editions are flagship offerings targeted at a particular “market”. With Fedora Linux 37, we’re adding two new Editions.
• Fedora 37 Now Available With GNOME 43 Desktop, Official Raspberry Pi 4 Support
• Meta OSS’ Sapling — A new source control system with Git-compatible client.
• Get ready for Google Summer of Code 2023! — We are thrilled to announce the 2023 Google Summer of Code (GSoC) program and share the timeline with you to get involved! 2023 will be our 19th consecutive year of hosting GSoC.
• Google Summer of Code
• Rust in the Kernel Update — This patch series is the first batch of changes to upstream the rest of the Rust support.
• Rust Developers Preparing To Upstream More Code Into The Linux Kernel
• WSL 1.0 Released — Microsoft announces it is removing the Preview label and making WSL in the Microsoft Store "generally available".
• Release Notes for WSL kernel

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• OpenSSL 3.0.7 Released Fixing Critical Flaw — Today we published an advisory about CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”).
• OpenSSL version 3.0.7 published
• /news/openssl-3.0-notes.html
• Fedora 37 Release Delayed To Mid-November Over Critical OpenSSL Vulnerability
• Linux 6.2 Power-Savings While Idle Or Lightly Loaded — The short story for Linux end-users is the Lazy RCU work can provide 5~10% power-savings for idle or lightly-loaded systems by this lazy/batching functionality.
• Linux 6.2 Picking Up Mainline Support For Apple M1 Pro/Max/Ultra Hardware — This gets the high-end Mac Studio systems with those premium SoCs now compatible with the mainline kernel.
• Hector's Deleted Tweet — I'm getting tired of arguing with kernel maintainers. The other day I spent 6 hours arguing on IRC about what should've been a 30 minute fix patch.
• Hector Martin on Twitter Follow Up Tweet — Like dude, if you aren't going to step into my world and actually understand what I'm trying to do here, just suck it up and ack my patch. It is not my job to drag you kicking and screaming until you either give up or have a lightbulb moment.
• Seems some Kernel Maintainers Noticed the Twitter Rant — Well they saw my tweets and apparently didn't like them 🤷‍♂️
• Bcachefs Rolling Out New Allocator, Performance Continues Improving — Bcachefs developer Kent Overstreet on Friday published a new status update on this original file-system born out of Linux's block cache (BCache) code.
• FreeBSD Re-Introduces WireGuard Support Into Its Kernel — As of Friday, a new WireGuard driver implementation has been re-introduced with many fixes/improvements over the code state from 2020.
• Open Letter to Gitea - Restoring Trust in the Gitea Project — This unfortunately concludes the Gitea Open Letter has failed and there is no alternative but forking the project under a new name, with a healthy democratic governance.

Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Massive GitHub Malware Attack? — It was revealed by Stephen Lacy in his tweet, he shared his findings of a large-scale campaign targeting random GitHub repositories with project clones containing credential stealing malware and remote shell execution on top of the original code.
• Stephen Lacy on Twitter — “I am uncovering what seems to be a massive widespread malware attack on @github. - Currently over 35k repositories are infected - So far found in projects including: crypto, golang, python, js, bash, docker, k8s - It is added to npm scripts, docker images and install docs”
• Checkmarx on Twitter — “A recent tweet uncovered a widespread malware attack on @github. This turned out to be a false alarm of sorts, as the infected repositories are simply forks and clones of the original ones - which were mostly deleted by Github by now. Stay safe!"
• No, Linus Torvalds is not Bitcoin’s legendary creator Satoshi Nakamoto
• Steam Deck Client Update and SteamOS 3.3 — We have just shipped SteamOS 3.3 and an updated Steam Client to the Stable channel. This update includes all the changes and improvements that have been undergoing testing in the Beta and Preview channels.
• SteamOS 3.3 Now Available With Many Improvements For The Steam Deck
• Steam For Linux In July Shows A 1.23% Marketshare — AMD CPUs Now More Common Than Intel On Linux
• DXVK 1.10.3 Released With Shared Fences
• Chris’ Steam Deck Review LINUX Unplugged 467
• Lenovo Expects 30+ Platforms With Linux Support This Year, Both AMD & Intel Systems — Lenovo's Mark Pearson provided an update on Linux for their laptops/PCs, including 30+ platforms for 2022 with Linux support.
• Lenovo Linux 2022 - DebConf 22
• Fedora Pi Support Gets Real — The work around Raspberry Pi 4 has been on going for a number of years, but we've never officially supported it due to lack of accelerated graphics and other key features. With Fedora 37, Raspberry Pi 4 is now officially supported, including accelerated graphics using the V3D GPU.
• Fedora 37 To Offer Official Support On Raspberry Pi 4 Devices
• Linux 5.19 Released
• Some 5.19 development statistics
• Linux Kernel 5.19 Released with Major Networking Tweaks
• Rust Code For The Linux Kernel Updated With More Features
• Asahi Linux Confirms M2 MBA on Twitter — Linus is using an M2 MacBook Air, running ARM64 Fedora. He does his own kernel builds, of course, with our Asahi kernel branch merged in, and he's been building and testing kernels on it.
• Asahi Alternative Distros docs

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Give Up GitHub: The Time Has Come! — Today, we take a stronger stance. We are ending all our own uses of GitHub, and announcing a long-term plan to assist FOSS projects to migrate away from GitHub.
• Roma, one of the first RISC-V laptops, may ship in September — As for the specs, the Roma laptop will, we're told, come with a quad-core RISC-V processor, an Arm security enclave core, a GPU/NPU accelerator for video and AI workloads, up to 16GB of LPDDR4 or LPDDR4X memory, and up to 256GB of storage.
• System76 Announces New Alder Lake Laptop With Coreboot Firmware — System76 has announced a new Lemur Pro laptop model that is now offering 12th Gen "Alder Lake" Intel processors while continuing to feature Coreboot firmware.
• System76.com
• Fedora May Finally Provide Official Support For The Raspberry Pi 4 — The hope with this change proposal is to provide more "official" support for Fedora Linux on the Raspberry Pi 4B / 400 / CM4 hardware.
• Changes/RaspberryPi4 - Fedora Project Wiki
• Fedora 37 Proposing To Allow Unrestricted Access To Flathub
• Fedora 37 Looks To Better Manage Its 175MB+ Of Linux Firmware Blobs
• Fedora 37 Gets A Batch Of New Features Approved
• New Ubuntu MATE Release — Improved compositor and video playback performance, zswap (lz4) by default & optimised image sizes
• Systemd Creator Lands At Microsoft — The prominent open-source developer responsible for several prominent projects joined Microsoft and is continuing his focus on systemd development.
• Lennart Poettering - systemd + PulseAudio Creator - Departed Red Hat
• Linode Now Supports Kali Linux
• Ubuntu 22.04 LTS Has A Change On The Way For Systemd-OOMD Being Kill-Happy With Apps
• ManagedOOMSwap docs
• Discussion: systemd-oomd issues on desktop
• 249.11-0ubuntu3.4 : systemd package : Ubuntu

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Akamai Warns Of “Panchan” Linux Botnet — The botnet introduces a unique (and possibly novel) approach to lateral movement by harvesting of SSH keys. Instead of just using brute force or dictionary attacks on randomized IP addresses like most botnets do, the malware also reads the id_rsa and known_hosts files to harvest existing credentials and use them to move laterally across the network.
• Canonical Continues Working On Ubuntu’s Firefox Snap Performance — On the Ubuntu blog is a new post by Canonical's Oliver Smith about their latest efforts to improve the Firefox Snap performance and other outstanding issues with this sandboxed version of the Mozilla web browser.
• Lars Knoll Announces His Successor For Qt Chief Maintainer — The voting period for the new Chief Maintainer has ended yesterday. This means Volker Hilsheimer will be our new Chief Maintainer. Congratulations!
• New Chief Maintainer for the Qt Project
• Talisman: Debut of X — I've spent the last couple weeks writing a window system for the VS100. I stole a fair amount of code from W, surrounded it with an asynchronous rather than a synchronous interface, and called it X. Overall performance appears to be about twice that of W.
• X Window System Turns 38 Years Old — It was on 19 June 1984 that Bob Scheifler announced the initial X window system release "X1" at MIT.
• X Windows System Design Principles, a lecture by James Gettys
• A Political History of X - Keith Packard (LCA 2020)
• Linus Torvalds: Rust For The Kernel Could Possibly Be Merged For Linux 5.20 — Torvalds commented that real soon they expect to have the Rust infrastructure merged within the kernel, possibly even for the next release -- meaning Linux 5.20.
• Open Source Summit North America 2022: Keynote: Linus Torvalds
• How are we improving Firefox Snap performance? Part 2

Plus, we try out Microsoft’s Linux distro, and some thoughts on our editorial style.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• 5.15 Merge window — 3,440 non-merge changesets have been pulled into the mainline repository for the 5.15 development cycle.
• Amazon’s DAMON Merged Into Linux 5.15
• Linux 5.15 Hit By Some Early Performance Regressions
• AMD Posts New “AMD-PSTATE” CPUFreq Driver — Leveraging CPPC For Better Perf-Per-Watt
• Linux 5.15 Readies More Code For Compile & Run-Time Detection Of Buffer Overflows
• AMD Finally Releases Overdue Linux CPPC Driver
• OverlayFS On Linux 5.15 Improves Performance
• Linux 5.15’s New “-Werror” Behavior Is Causing A Lot Of Pain — That compiler flag addition makes all warnings be treated as errors, which in turn stops the kernel build.
• Re: [GIT PULL] ntfs3: new NTFS driver for 5.15 - Linus Torvalds
• Red Hat will officially support EPEL in the future — The new team is being formed and is expected to start work in October.
• History and Philosophy of EPEL - Fedora Project Wiki
• Microsoft Releases Its August Update For The CBL-Mariner Linux Distribution — One of the big fundamental changes with CBL-Mariner August 2021 is Microsoft now provides a public ISO to download of this Linux distribution.
• CBL-Mariner: Linux OS for Azure 1P services and edge appliances

We'll share the history, the context, and where things stand now around the controversial research that led to the ban.

Plus Ubuntu 21.04 is out, and we try WSL's new GUI Linux app support.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Intentionally buggy commits for fame—and papers [LWN.net] — A buggy patch posted to the linux-kernel mailing list in early April was apparently the last straw for Greg Kroah-Hartman as it led to the planned reversion of a whole slew of commits with one thing in common: their origin at the University of Minnesota (UMN).
• An open letter to the Linux community [LWN.net] — We sincerely apologize for any harm our research group did to the Linux kernel community. Our goal was to identify issues with the patching process and ways to address them, and we are very sorry that the method used in the “hypocrite commits” paper was inappropriate.
• Re: [PATCH] SUNRPC: Add a check for gss_release_msg - Greg KH
• University duo thought it would be cool to sneak bad code into Linux as an experiment. Of course, it absolutely backfired • The Register
• Greg Kroah-Hartman bans University of Minnesota from Linux development for deliberately buggy patches | ZDNet
• Revertion of all of the umn.edu commits - Kees Cook
• Linus Torvalds Responds to Linux Banning University of Minnesota | Tom’s Hardware
• Statement from CS&E on Linux Kernel research - April 21, 2021 | Department of Computer Science and Engineering | College of Science and Engineering
• Security Research Ethics Review. What’s the subject, Kenneth? | by Dave Dittrich | Apr, 2021 | Medium
• Paper: Stealthily introducing vulnerabilities in open source software via hypocrite commits
• Ubuntu 21.04 Official Flavors Released, Here’s What’s New - 9to5Linux — Ubuntu 21.04 has been released and is available to download from the Ubuntu website.
• Ubuntu 21.04 is here | Ubuntu — Ubuntu 21.04 comes with native Microsoft Active Directory integration, Wayland graphics by default, and a Flutter application development SDK.
• LINUX Unplugged 402: Our Worst Idea Yet
• (Re)introducing the Community Team
• Fedora 34 To Release Next Week As A Very Exciting Update - Phoronix — After it was pushed back last week due to blocker bugs, on Friday it was determined that Fedora 34 is now in proper shape to officially ship next week.
• Red Hat Summit 2021 | About — Virtual again: April 27-28, 2021
• Microsoft enables Linux GUI apps on Windows 10 for developers - The Verge — Microsoft is starting to allow Windows 10 testers to access Linux GUI apps.
• Microsoft Posts WSLg Preview - GUI App Support With Windows Subsystem For Linux - Phoronix
• GitHub - microsoft/wslg: Enabling the Windows Subsystem for Linux to include support for Wayland and X server related scenarios
• GitHub - microsoft/CBL-Mariner: Linux OS for Azure 1P services and edge appliances
• Introducing Linux GUI apps running on Windows using the Windows Subsystem for Linux (WSL)
• Watch Mars Ingenuity's First Flight! (VIDEO AND IMAGES) — Mars​ Perseverance​ has been a historic mission, now its chopper, Ingenuity is flying on Mars. Watch a recap right here and see the very first video and images of it up in the air.
• Open source goes to Mars 🚀 - The GitHub Blog — Today, we want to make the invisible visible. So, we have worked with JPL to place a new Mars 2020 Helicopter Mission badge on the GitHub profile of every developer who contributed to the specific versions of any open source projects and libraries used by Ingenuity.
• Open Source on Mars: Community powers NASA’s Ingenuity Helicopter · The ReadME Project · GitHub — Today, nearly 12,000 developers will see a new badge on their GitHub profile celebrating their contributions to the specific versions of projects and libraries used by NASA to fly the Ingenuity Helicopter on Mars.
• Work Progresses Toward Ingenuity’s First Flight on Mars - NASA Mars
• We’re Getting Ready for Ingenuity’s Second Flight - NASA Mars
• We Are Prepping for Ingenuity’s Third Flight Test - NASA Mars
• Mars helicopter shares first aerial color photo and preps for Sunday flight - CNN
• NASA’s Mars helicopter completes second, higher flight – Spaceflight Now
• Ingenuity: Nasa's Mars helicopter makes it three from three — On Sunday, the little chopper rose to a height of 5m before speeding off laterally for 50m - half the length of a football field.