Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• GNOME 44 Released — GNOME 44 is code-named “Kuala Lumpur”, in recognition of the work done by the organizers of GNOME.Asia 2022.
• GNOME 44 Released With Many Desktop Enhancements
• GNOME 44 Getting New Background Apps UI
• Ubuntu Touch OTA-1 Focal Release — This is the first OTA for Ubuntu 20.04 (Focal) with major features, this is an Opt-In and not mandatory update.
• First Ubuntu Touch OTA Release Based on Ubuntu 20.04 LTS Is Out Now
• Ubuntu Cinnamon Flavor Status Announcement — Ubuntu Cinnamon started as a small idea in my head, in 2019. I was ELEVEN.
• ItzSwirlz (Joshua Peisach)
• Ubuntu Cinnamon Remix Becomes Official Ubuntu Flavor
• Microsoft’s CBL-Mariner Linux Distribution Continues Cultivating More Packages — With today's CBL-Mariner 2.0.20230321 they have continued cultivating more packages for the distribution.
• CBL-Mariner GitHub
• We’re no longer sunsetting the Free Team plan — After listening to feedback and consulting our community, it’s clear that we made the wrong decision in sunsetting our Free Team plan.
• Google discloses CentOS Linux kernel vulnerabilities following failure to issue timely fixes — Google Project Zero's security researcher Jann Horn learned that kernel fixes made to stable trees are not backported to many enterprise versions of Linux.
• Google Security Researchers Accuse CentOS of Failing to Backport Kernel Fixes
• Project Zero Mailing List Thread on CentOS Kernel Patches
• CVE-2023-0590
• kernel-5.14.0-277.el9
• CVE-2023-1249
• CVE-2023-1252
• Berlin Meet Up #2 - Nextcloud Hackfest & Dev Community Introduction, Fri, Mar 31, 2023 — NOTE: the time detailed on Meetup.com is strictly set to PST, so don't be confused by the interface!

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Steam Deck one Year Later — The Steam Deck has been about a year on the market now (it started shipping at the end of February 2022). This first anniversary is a good chance to review what has happened since then.
• FFmpeg 6.0 Released — 6.0 was released on 2023-02-27. It is the latest stable FFmpeg release from the 6.0 release branch, which was cut from master on 2023-02-19.
• FFmpeg 6.0 Released With NVIDIA NVENC AV1, VA-API Improvements
• FOSDEM 2023 - Dual presentation: FFmpeg 6 and VLC.js
• Plasma Switches to Qt6 — The master branch for Plasma repos will be made Qt6-only tomorrow.
• Hardware Noise “hwnoise” Tool for Linux 6.3 — hwnoise collects the periodic summary from the osnoise tracer running with *interrupts disabled*. By disabling interrupts, and the scheduling of threads as a consequence, only non-maskable interrupts and hardware-related noise is allowed.
• More Rust Code Readied For Linux 6.3 — In the pull request Miguel Ojeda commented, "more core additions, getting closer to a point where the first Rust modules can be upstreamed."
• EXT4 Getting Direct I/O Performance Improvements With 6.3 — Improved performance for ext4
• Btrfs Enjoys More Performance With Linux 6.3 - Including Some 3~10x Speedups — Some of the performance work is quite juicy, as outlined in today's pull request.
• Btrfs updates for 6.3 - David Sterba
• Linux 6.3 Scheduler Updates Bring Fixes & Minor Optimizations
• RISC-V With Linux 6.3 Lands Optimized String Functions Via Zbb Extension — RISC-V with Linux 6.3 has improved its extension detection and alternative patching infrastructure for dealing with non spec compliant extensions.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• The Coder Robe — Celebrate Coder 500! The Robe, the Tumbler, and the Sticker are available for a limited time.
• Git Vulnerabilities — Today, the Git project released new versions to address a pair of security vulnerabilities, (CVE-2023-22490 and CVE-2023-23946) that affect versions 2.39.1 and older.
• 10 Years of Steam — Feb 14, 2013–Valve, creators of best-selling game franchises (such as Counter-Strike and Team Fortress) and leading technologies (such as Steam and Source), today announced the release of its Steam for Linux client. In celebration of the release, over 50 Linux titles are now 50-75% off until Thursday, February 21st at 10 AM PST.
• Sabayon 9 Review | LAS | s22e08 - YouTube
• Opening the Valve | LAS | s22e09 - YouTube
• Ubuntu Gets Real — Canonical today announced the general availability of real-time Ubuntu 22.04 LTS.
• Canonical Promotes Ubuntu’s Real-Time “RT” Kernel To General Availability
• Here Comes GTK5 — Discussions around the GTK5 tool-kit also happened with some developers eager to begin work on that next major release in order to begin facilitating API breaks and removing deprecated code.
• Plasma 5.27 — Plasma 5.27 is out and brings massive improvements to the desktop and all its tools. Another work of love from the KDE devs and contributors.
• KDE Plasma 5.27 Released — Better Wayland Support, KWin Tiling, Multi-Monitor Overhaul
• Final Version of KDE Plasma 5 Released – This is What’s New — Notably, this is expected to be the final release in the KDE Plasma 5.x series, with the following stable release set to be KDE Plasma 6.0, due for release towards the end of the year.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Announcing Fedora Linux 37 — Fedora Editions are flagship offerings targeted at a particular “market”. With Fedora Linux 37, we’re adding two new Editions.
• Fedora 37 Now Available With GNOME 43 Desktop, Official Raspberry Pi 4 Support
• Meta OSS’ Sapling — A new source control system with Git-compatible client.
• Get ready for Google Summer of Code 2023! — We are thrilled to announce the 2023 Google Summer of Code (GSoC) program and share the timeline with you to get involved! 2023 will be our 19th consecutive year of hosting GSoC.
• Google Summer of Code
• Rust in the Kernel Update — This patch series is the first batch of changes to upstream the rest of the Rust support.
• Rust Developers Preparing To Upstream More Code Into The Linux Kernel
• WSL 1.0 Released — Microsoft announces it is removing the Preview label and making WSL in the Microsoft Store "generally available".
• Release Notes for WSL kernel

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Shikitega - AT&T Alien Labs — New stealthy malware targeting Linux
• LINUX Unplugged 474: Linux’s Malware Inevitability
• New Linux malware combines unusual stealth with a full suite of capabilities — "Threat actors continue to search for ways to deliver malware in new ways to stay under the radar and avoid detection," AT&T Alien Labs researcher Ofer Caspi wrote.
• New Linux malware evades detection using multi-stage deployment
• Shape-shifting cryptominer savaging Linux endpoints and IoT — The malware was dubbed "Shikitega" for its extensive use of the popular Shikata Ga Nai polymorphic encoder, which allows the malware to "mutate" its code to avoid detection. Shikitega alters its code each time it runs through one of several decoding loops that AT&T said each deliver multiple attacks, beginning with an ELF file that's just 370 bytes.
• Next-Gen Linux Malware Takes Over Devices With Unique Tool Set
• OpenWrt 22.03 Released With Updated Firewall, Support For 180+ New Devices - Phoronix
• [OpenWrt Wiki] OpenWrt 22.03.0 - First Stable Release - 6 September 2022
• Linux Foundation Announces Open Wallet Foundation — The Linux Foundation, a global nonprofit organization enabling innovation through open source, today announced the intention to form the OpenWallet Foundation (OWF), a new collaborative effort to develop open source software to support interoperability for a wide range of wallet use cases.
• Linux Foundation announces the OpenWallet Foundation to develop interoperable digital wallets
• Welcoming PyTorch to the Linux Foundation
• Facebook Transfers PyTorch AI Framework to Linux Foundation for Governance — Today we are more than thrilled to welcome PyTorch to the Linux Foundation. Honestly, it’s hard to capture how big a deal this is for us in a single post but I’ll try.
• PyTorch strengthens its governance by joining the Linux Foundation
• Google Pixelbook is no more, proving the world wasn’t ready for premium Chromebooks | TechRadar
• Linux Plumbers Conference - YouTube
• LPC 2022: Rust Linux Drivers Capable Of Achieving Performance Comparable To C Code - Phoronix
• IO_uring Continues To Prove Very Exciting: Promising io_uring_spawn Announced — It also continues to be relentlessly optimized by Jens Axboe and others for maximum performance potential. The latest innovation around IO_uring that was announced this week at Linux Plumbers Conference 2022 in Dublin is io_uring_spawn.
• An io_uring-based user-space block driver
• A pair of Rust kernel modules
• Compiling Rust with GCC: an update
• Mesa’s Rust OpenCL Implementation Merged
• Adding rusticl (!15439) · Merge requests · Mesa / mesa · GitLab
• LPC 2022 - Kernel Summit - Lansdowne - YouTube

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Microsoft Continues Improving Its Internal Linux Distro With Another Update — Microsoft has kept up with issuing one or more CBL-Mariner updates per month. This summer they rolled out CBL-Mariner 2.0 with many changes over its former 1.0 state, which continues to be maintained too. CBL-Mariner relies upon RPM SPEC files and other assets from Fedora, Photon OS, Openmamba, and Linux From Scratch. This week marked the release of CBL-Mariner 2.0 July 2022 Update 2.
• CBL-Mariner GitHub
• GitHub Moves to Guard Open Source Against Supply Chain Attacks — The popular Microsoft-owned code repository plans to roll out code signing, which will help beef up the security of open source projects.
• GitHub courts controversy by suspending Tornado Cash — GitHub over the past week has tested the trust of its users by enacting policies that call into question its commitment to free speech and privacy.
• ‘It Doesn’t Change Anything’ Says Tornado Cash After Code Disappears From GitHub
• Projects impacted by Tornando cash ban — TIL the creator address of the Eth2.0 Deposit contract was funded with Tornado cash, created the contract and donated the rest to Wikileaks
• Samuel JJ Gosling on Twitter — “@TornadoCash For those looking to host the frontend locally, I’ve uploaded the source code to @IPFS as I suspected this happening. Disclaimer: I’m a contributor to tornado but you should still verify the source code.
• Lucas Garron on Twitter
• Privacy Statement Updates September 2022 by olholder
• IPFS Supported In FFmpeg 5.1, IPFS Devs Envision Support In More Open-Source Projects — July's release of FFmpeg 5.1 introduced native IPFS support for this distributed peer-to-peer protocol.
• IPFS.io
• Ubuntu 22.04.1 LTS Delayed Due To An OEM Install Issue Leading To Broken Snaps — Ubuntu 22.04.1 LTS had been due for release today but has now been pushed back by one week after discovering an installer issue that led to Snaps like the default Mozilla Firefox browser failing to launch once installed.
• Linux 5.20 Likely To Be Called Linux 6.0 — With Linus Torvalds' modern versioning after 19~20 point releases has been when he bumps to the next major version number... Linux 4.0 succeeded Linux 3.19 while Linux 5.0 came after Linux 4.20.
• An io_uring-based user-space block driver [LWN.net] — The ublk driver starts by creating a special device called /dev/ublk-control. The user-space server (or servers, there can be more than one) starts by opening that device and setting up an io_uring ring to communicate with it.
• Linus' kernel source tree

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Red Hat’s next steps, according to its new CEO — "We expect to see an 800% increase in edge applications built by 2024. We want those applications to be part of the open hybrid cloud. We think we have a unique position to connect end devices back to the assets that you have in your data centers and cloud that you use to run your company today."
• PREEMPT_RT Might Be Ready To Finally Land In Linux 5.20 — The Linux real-time patch series has been getting smaller with time and quite close to crossing the finish line with just around 50 patches to be merged.
• Google Engineers Go Big on Carbon - A Hopeful Successor To C++ — The Carbon programming language hopes to be the gradual successor to C++ and makes for an easy transition path moving forward.
• ByteDance Working To Make Kernel Booting Faster — This patch series touching around 100 lines of Linux kernel code is what they are now hoping to upstreamed.
• Happy Birthday This Week in GNOME — I am pleased to announce that TWIG is having its first anniversary!
• This Week in GNOME
• This Week in KDE
• #53 GUADEC 2022 · This Week in GNOME
• Btrfs Native Encryption Being Worked On — My goal in sending out this RFC is to get feedback on whether these are going in a reasonable direction; while there are a couple of additional parts, they're fundamentally minor compared to this.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• Microsoft changes its mind about open source monetization — Microsoft was trying to do the right thing, but it turns out doing nothing is better.
• Giorgio Sardo on Twitter — To clarify our intent, we removed the previous mention to open source pricing. We're committed to building an open Store and enabling dev choice and flexibility. If there are intellectual property concerns about an app, please report it.
• An Ubuntu 22.04 LTS Fix Is Coming For A Very Annoying & Serious APT Problem — "installing the package libudev1 results in a large number of critical packages being removed and rendering the system essentially unusable."
• Bug #1974196 “Installing libudev1 on a new Jammy installation"
• Draft: Mark broken reverse depends for upgrade (!248) · Merge requests
• Drop-in, drop-out chats with Video Rooms in Element — This has been a long time coming and, frankly, we’re really excited to be introducing Video Rooms to you. It’s a major step towards richer video (and soon voice) rooms!
• SCALE 19x — SCaLE 19x is coming up July 28th - the 31st at the LAX Hilton. Promo code LAS50
• M2 is here! July 2022 Release & Progress Report — Welcome to another long overdue progress report! As usual, things have been busier than expected… and we have some big news! We’ve just released a new Asahi Linux update with Mac Studio, Bluetooth, and M2 support!
• Asahi Linux Update Brings Experimental Apple M2 Support

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Datadog: Datadog - the unified monitoring and analytics platform for comprehensive visibility into cloud, hybrid, and multi-cloud environments.

Support Linux Action News

Links:

• New Year, new Red Hat Enterprise Linux programs: Easier ways to access RHEL — When we announced our intent to transition to CentOS Stream, we did so with a plan to create new programs to address use cases traditionally served by CentOS Linux.
• Staying on GTK3 and GNOME 3.38 this cycle - Desktop - Ubuntu Community Hub — The topic of what to do about the new GNOME started being discussed and after some consideration, we decided to stick to GTK3 and GNOME 3.38 this cycle.
• Welp, Ubuntu 21.04 Won’t Ship with GNOME 40 or GTK4 - OMG! Ubuntu!
• Stepping up for a truly open source Elasticsearch | AWS Open Source Blog — In order to ensure open source versions of Elasticsearch and Kibana remain available and well supported, including in our own offerings, we are announcing today that AWS will step up to create and maintain a ALv2-licensed fork of open source Elasticsearch and Kibana.
• AWS, as predicted, is forking Elasticsearch | ZDNet
• The Next Gen Database Servers Powering Let’s Encrypt - Let’s Encrypt - Free SSL/TLS Certificates — By going with AMD EPYC, we were able to get 64 physical CPU cores while keeping clock speeds high: 2.9GHz base with 3.4GHz boost. More importantly, EPYC provides 128 PCIe v4.0 lanes, which allows us to put 24 NVMe drives in a single machine.
• Ubuntu Can Run on Apple Silicon, Devs Say It’s ‘Completely Usable’ - OMG! Ubuntu! — Developers at ARM virtualisation company Corellium have managed to get Ubuntu 20.04 up and running on the new Apple Silicon Mac Mini.
• How We Ported Linux to the M1
• [RFC PATCH 0/7] Linux on Apple Silicon [LWN.net]
• Raspberry Pi Foundation launches $4 microcontroller with custom chip | TechCrunch — It has a dual-core Arm processor (running at 133MHz), 264KB of RAM, 26 GPIO pins including three analog inputs, a micro-USB port, and a temperature sensor.
• Raspberry Pi Foundation Release Their Own Silicon, the Raspberry Pi Pico - 9to5Linux
• Security Bulletin 1 - Home Assistant — It has come to our attention that certain custom integrations have security issues and could potentially leak sensitive information. Home Assistant is not responsible for custom integrations and you use custom integrations at your own risk.

Plus Google Cardboard goes open source, and a neat machine-learning tool to pull songs apart.

Special Guest: Wes Payne.

Support Linux Action News

Links:

• Google gives most Chromebooks an extra year of software support — Seven Chromebooks from Lenovo recently had their support lifespan extended, and now Google has updated the EOL date for 135 more models from several manufacturers. Most models received another year of support, others only got another six months, and some now have two more years.
• What’s new in Chrome OS: Virtual Desks, simpler printing and more — Think of Virtual Desks as separate workspaces within your Chromebook. Use this feature to create helpful boundaries between projects or activities. If you’re working on multiple projects, you can dedicate a desk to each one. Open Overview and tap New Desk in the top right-hand corner of your screen to try out Virtual Desks.
• Google Enlists Outside Help to Clean Up Android's Malware Mess — Today Google is announcing a partnership with three antivirus firms—ESET, Lookout, and Zimperium—to create an App Defense Alliance.
• Open sourcing Google Cardboard — Today, we’re releasing the Cardboard open source project to let the developer community continue to build Cardboard experiences and add support to their apps for an ever increasing diversity of smartphone screen resolutions and configurations.
• Access ESM, now free to the community, via the updated Ubuntu Advantage client — Canonical is happy to announce that all community users are entitled to a free Ubuntu Advantage for Infrastructure account for access to Extended Security Maintenance (ESM) and Kernel Livepatch* for Ubuntu 14.04 LTS (Trusty Tahr) for up to three machines, and up to 50 machines for all official Ubuntu Members.
• Releasing Spleeter: Deezer Research source separation engine — We are releasing Spleeter to help the research community in Music Information Retrieval (MIR) leverage the power of a state-of-the-art source separation algorithm. It comes in the form of a Python Library based on Tensorflow, with pretrained models for 2, 4 and 5 stems separation.
• Microsoft Will Release Their Edge Web Browser For Linux — Microsoft announced at their Ignite conference in Seattle that their Edge web-browser will see a Linux release

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• ChromeOS now on tablets — The new Acer Chromebook Tab 10 is a 9.7 inch tablet that runs Google’s Chrome operating system, supports Android apps, and has no keyboard
• The final nail in the Firefox OS coffin — the Firefox Marketplace is shutting down on March 30th, 2018, which means the handful of folks who actually have devices running Firefox OS won’t be able to download apps from the official app store after that.
• Google removes Kodi from autocomplete — C: 30NEWS Google has banned the term "Kodi" from the autocomplete feature of its search engine. This means that the popular software and related suggestions won't appear unless users type out the full term. Google has previously taken similar measures against "pirate" related terms and confirms that Kodi is targeted because it's "closely associated with copyright infringement."
• Facebook Container for Firefox — Prevent Facebook from tracking you around the web. The Facebook Container extension for Firefox helps you take control and isolate your web activity from Facebook.
• Firefox Multi-Account Containers
• Oracle vs Google case not dead — The Federal Circuit has ruled for a second time in Oracle v. Google, the software copyright lawsuit over Google’s Android platform. The new decision reverses the district court yet again and sends the case back for a third trial to determine damages for Oracle. In the last trial, Oracle sought almost $9 billion in damages.
• Microsoft facilitating yet more distros on WSL — This sample allows distro maintainers to build WSL distro packages for the Microsoft Store and developers to create custom Linux distro packages for sideloading.  You can find the distro launcher repo on GitHub.

Support Linux Action News

Links:

• LG releases webOS Open Source Edition, looks to expand webOS usage — LG wants to expand the adoption of webOS and the company is working with the South Korean government to solicit business proposals from other companies interested in using webOS.
• The Linux Foundation Announces an Open Source Reference Hypervisor Project Designed for IoT Device Development — ACRN is comprised of two main components: the hypervisor and its device model
• Linux Foundation backs new ‘ACRN’ hypervisor for embedded and IoT
• GNOME Shell memory leak — A number of Ubuntu users have reported that GNOME Shell 3.26.2, the version used in Ubuntu 17.10, has a “sneaky leak” that causes GNOME Shell’s memory usage to increase every minute following a Shell animation
• A GNOME performance bug fixed — So, how can something as simple as updating the displayed time cause such a large increase in the time required to draw a frame?
• Firefox Master Password System Has Been Poorly Secured for the Past 9 Years — For at past nine years, Mozilla has been using an insufficiently strong encryption mechanism for the "master password" feature.
• Questionable changes coming to Firefox DNS queries — Nightly build fans' hostname lookups piped to Cloudflare in limited security feature trial
• Firefox plan to start blocking ads — Mozilla intends to add basic ad filtering capabilities to its Firefox browser later this year, according to its recently updated roadmap.
• Bitcoin blockchain contains more than transaction data — Boffins warn of legal risks from arbitrary data distribution
• CryptoGraffiti - Bitcoin Blockchain Messages as Text

Support Linux Action News

Links:

• Ubuntu Rally in NYC — The Ubuntu Rally, taking place in New York City September 25th-29th, is a forward-thinking five day software hackathon attended by major software vendors, Ubuntu developers working at every level of the stack, and community contributors.
• 17.10 Beta 1 of Ubuntu flavours released — The first beta is available today for the Ubuntu 17.10 "Artful Aardvark" release for the flavors opting in to participate in this development milestone ahead of the official launch in October.
• Reddit closes its source — Open-source makes it hard for us to develop some features "in the clear" (like our recent video launch) without leaking our plans too far in advance. As Reddit is now a larger player on the web, it is hard for us to be strategic in our planning when everyone can see what code we are committing.
• Phoenix OS urged to open source their kernel — So a dedicated fan of the platform, Karol Putra, has created a Change.org petition in hopes that it will change their minds.
• Petition update · Victory! — It's most likely really the Phoenix OS kernel as it carries slight unique modifications in comparison to Android-x86 and it's forks
• Google mandates 4.4+ kernel for Oreo — Starting this year with smartphones which ship with Android Oreo, Google is requiring that all SoCs productized in 2017 must launch with kernel 4.4 or newer.
• Essential underdelivers — Essential – a device, marketing team, and CEO that seem to blur the lines between fact and fiction and possible and impossible
• Then Essential royally screws up — Dozens of customers replied with their personal information, but those emails didn’t just go to Essential. Instead, they went out to everybody who had received the original email.
• Blockchain is big in big business — Hundreds of projects have collectively raised more than a billion dollars through “initial coin offerings” (ICOs). There are now tokens funding every conceivable endeavor
• Linux creeps above 3% browser marketshare — According to Net Applications' Netmarketshare, the Linux market share on the desktop as judged by browser interactions may now be above 3%.

• GrSecurity Kernel Patches Will No Longer Be Free To The Public - Phoronix
• Secure Boot booted from Debian 9 'Stretch'
• Devuan GNU/Linux 1.0 "Jessie" to Support Raspberry Pi 3, Acer Chromebook Devices
• Get a free AIY Projects Voice Kit with The MagPi 57! - The MagPi MagazineThe MagPi Magazine
• What is this bullsh*t, Google? Nexus phones starved of security fixes after just three years • The Register
• Full MP3 Support Being Added To Fedora Linux - Phoronix

Support Linux Action News