Sponsored By:

• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• New FOSS Fund to Support Free and Open Source Projects — To help maintain and sustain this ecosystem, companies and nonprofits alike have experimented with a framework called a FOSS (Free and Open Source Software) Contributor Fund.
• Bloomberg Launches Open-Source Funding Initiative
• Encrypted Fedora — Owen Taylor of Red Hat laid out a mailing list post and Discourse thread today around the future of encryption with Fedora.
• Google’s VM Turbo Charger — With this series, a workload running in a VM gets the same task placement and DVFS treatment as it would when running in the host.
• Linux Plumbers Conference 2022 CPUfreq/sched and VM guest workload problems
• Google Posts KVM-CPUFreq Driver To Dramatically Boost VM Performance, Power Efficiency
• KDE Discuss — KDE Discuss is a place for questions, requests, suggestions, banter, and in general interacting closely with the people actively involved in KDE, as well as with fellow users.
• KDE Discuss is a new discussion service from KDE for everybody who makes and uses KDE software
• New MSI Laptop Driver — Functions handled by the embedded controller on recent MSI laptops.
• new msi-ec driver patch
• Ubuntu 23.04 Beta Hands On
• Jupiter Broadcasting Meetup — Two meetups in the month of April, join us!

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• A new privilege escalation vulnerability in the Linux kernel — The vulnerability consists of a stack buffer overflow due to an integer underflow vulnerability inside the nft_payload_copy_vlan function, which is invoked with nft_payload expressions as long as a VLAN tag is present in the current skb.
• netfilter: nft_payload: add C-VLAN support · torvalds/linux@f6ae9f1
• CVE-2023-0179
• CVE-2023-0179- Red Hat Customer Portal
• [net,3/3] netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits - Patchwork
• oss-sec: Re: CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup
• libvirt 9.0 Released For Latest Linux Virtualization API — Libvirt 9.0 adds support for external snapshot deletion with QEMU using its existing API, libvirt 9.0 with QEMU now supports PASST as "Plug A Simple Socket Transport" for connecting an emulated network device to the host's network, QEMU external back-end support for SWTPM as a software Trusted Platform Module (TPM), support for passing file descriptors rather than passing files for the QEMU disk, and other additions.
• JFS Filesystem’s Days are Numbered — IBM developed the JFS file-system originally in the 90's for AIX and the second-generation implementation then ported to Linux after it was made open-source.
• Firefox 109.0 Ships Manifest Version 3 — Manifest Version 3 (MV3) extension support is now enabled by default (MV2 remains enabled/supported). This major update also ushers an exciting user interface change in the form of the new extensions button.
• Here’s what’s going on in the world of extensions
• Manage your extensions using the extensions button in the toolbar
• Manifest v3 signing available November 21 on Firefox Nightly
• Google delays start of Manifest V2 Chrome extension deprecation — The original plan called for Chrome Beta, Dev, and Canary builds to start experiments that turned off Manifest V2 extension support. Additionally, Manifest V3 would be required to get the “Featured” badge in the Chrome Web Store. 
• Firefox 109 Adds New Extensions Button, Manifest V3 Support — The biggest new feature is the new Unified Extensions button in the toolbar.
• Chrome’s “Manifest V3” plan to limit ad-blocking extensions is delayed
• Chrome Users Beware: Manifest V3 is Deceitful and Threatening — Manifest V3, or Mv3 for short, is outright harmful to privacy efforts. It will restrict the capabilities of web extensions

Sponsored By:

• Jupiter Network Membership: Support the entire network, and get access to every member's special feed for every show on the network. Promo Code: thesignal
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• K9 mail to become Thunderbird on Android — Ultimately, K-9 Mail will transform into Thunderbird on Android.
• K-9 Mail – Open Source Email App for Android
• K-9 Mail joins the Thunderbird family
• Frequently Asked Questions: Thunderbird Mobile and K-9 Mail
• Ubuntu Working To Provide Good Support For The VisionFive Low-Cost RISC-V Board — The Starfive VisionFive is a currently $179 USD RISC-V board that is intended to run full-blown RISC-V Linux distributions.
• Fedora 37 Looks To Boost Its Cloud Posture As An Official Edition — Approved by the Fedora Engineering and Steering Committee this week is returning Fedora Cloud base to be listed as an official Fedora edition.
• Plasma 5.25 - Released — Plasma 5.25 brings new features and concepts to the desktop environment.
• 5 Neat New Features in KDE Plasma 5.25, Released Today
• Ventoy 1.0.76 — Ventoy is an open source tool to create bootable USB drive for ISO/WIM/IMG/VHD(x)/EFI files.
• Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot
• Adobe Plans To Make Photoshop on the Web Free To Everyone — The company is now testing the free version in Canada, where users are able to access Photoshop on the web through a free Adobe account. Adobe describes the service as “freemium” and eventually plans to gate off some features that will be exclusive to paying subscribers. Enough tools will be freely available to perform what Adobe considers to be Photoshop’s core functions.
• Photopea | Online Photo Editor

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.

Support Linux Action News

Links:

• Docker rebounds with $105m Series C funding and $2.1b value — Troubled container company may escape confines of its doldrums
• LXD 5.0 LTS has been released — This is our 4th LTS release and quite an exciting one for anyone coming from LXD 4.0 as it significantly steps up LXD’s abilities, especially when operating in clustered environments.
• Anaconda is getting a new suit and a wizard — Before starting the redesign work for the Anaconda installer, the team reviewed user feedback and usability study data that we’ve gathered over the years.
• Fedora Workstation Brainstorming A Possible GUI-Based Linux Recovery Environment — This currently hypothetical GUI-driven recovery environment sounds like it could almost be like Apple's macOS recovery mode in that there may be the possibility of even downloading a new system image from this environment.
• Fwupd 1.7.7 Released For Firmware Updating More Logitech Devices On Linux - Phoronix
• Lutris 0.5.10 Released With Steam Deck Support — Lutris 0.5.10 brings proper Steam Deck support thanks to their collaboration with Valve and receiving a Steam Deck developer kit. Lutris' Flatpak version is still being improved upon as the next step in enhancing the Steam Deck support for this game manager.
• Mathieu Comandon on Twitter — We gotta stop this culture of "only install Flatpaks / using root is dangerous" before it extends beyond the Steam Deck. Last thing I want is for desktop Linux to become like Android or ChromeOS.
• meetup.com/jupiterbroadcasting

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Linux has been bitten by its most high-severity vulnerability in years — Dirty Pipe has the potential to smudge people using Linux and Linux derivitives.
• Catalin Cimpanu on Twitter — “DirtyPipe (CVE-2022-0847) is a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation. It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit.
• Ron Amadeo on Twitter — “By my count, Dirty Pipe affects only brand-new Android 12 devices like the Pixel 6 and S22. Linux 5.8 and above has only been an Android option for five months."
• Canonical Patches “Dirty Pipe” Vulnerability in Ubuntu 21.10 and 20.04 LTS
• BLASTY on Twitter: “Hacked up a quick Dirty Pipe PoC that spawns a shell by hijacking (and restoring) the contents of a setuid binary.”
• The Dirty Pipe Vulnerability — The Dirty Pipe Vulnerability documentation
• AMD Posts Some New Linux Job Openings From Client CPU To Server — AMD would need a lot more Linux engineers to achieve the same level of timely Linux support and low-level kernel enhancements that Intel has been focused on for years, especially when it comes to Intel's open-source work beyond just the actual hardware device enablement.
• Introducing Native Matrix VoIP with Element Call! — What’s more, Element Call is built entirely on Matrix: it doesn’t need any additional servers to get going. You can run it against your existing Matrix homeserver to provide complete self-sovereignty… while still being able to talk to anyone else anywhere on the wider Matrix network! We will also be able to automatically use Matrix’s end-to-end encryption to secure all Element Call conferences
• call.element.io
• https://github.com/vector-im/element-call/issues
• Extending Matrix’s E2EE calls to multiparty
• Danielle Foré on Twitter — Okay it’s been a full month and this situation still isn’t resolved, and it sucks for you to just be completely in the dark and it’s pretty obvious something is up and people are asking what’s going on, so here is my side of the story 🧵
• Danielle gives an update on elementary Reddit Thread
• Jupiter Broadcasting East Coast Meetup

Plus Google adds its weight behind Rust in the Linux Kernel, and the new security features landing in WSL2.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Dell to spin out remaining VMware stake, cements Friends With Benefits status for at least five years — The proposed transaction has been pitched as delivering value for shareholders, both in the short term and once the two corporations have less complicated structures that will let them compete more aggressively.
• Dell Technologies Announces Planned VMware Spin-Off — Under terms of the planned spin-off, VMware will distribute a special cash dividend of $11.5 - $12 billion to all VMware shareholders, including Dell Technologies.
• Dell Buys EMC For $67B In Largest Deal In Tech History
• COSMIC to Arrive in June Release of Pop!_OS 21.04 — We’re providing a honed desktop user experience in Pop!_OS through our GNOME-based desktop environment: COSMIC. It’s a refined solution that makes the desktop easier to use, yet more powerful and efficient for our users through customization.
• There’s no place like GNOME: System 76 introduces COSMIC desktop GUI for its Pop!_OS Linux — System76 said that it studied user behaviour and sought to refine key elements of the desktop accordingly.
• pop-os/cosmic: — Computer Operating System Main Interface Components
• Carl Richell on Twitter — Yes, indeed. Pop!_Shell will remain a separate extension.
• Carl Richell on Twitter — Yes, tiling will remain a separate extension and can be used on other distros. COMIC can as well.
• Carl Richell on Twitter — The is an extension that creates a unique GNOME UX while maintaining compatibility with GNOME and the GNOME app ecosystem and HIG.
• Carl Richell on Twitter — Pop with the COSMIC desktop.
• Carl Richell on Twitter — We’re currently developing and testing on X and Pop 21.04 will default to X as well. However, we may be able to shift over to Wayland for future releases with the recent nvidia news about Wayland driver support.
• Google backs effort to bring Rust to the Linux kernel — "We feel that Rust is now ready to join C as a practical language for implementing the kernel."
• Google Supports Getting Rust Into The Linux Kernel
• HN: Linus Torvalds on Rust support in kernel
• Linux 5.12 Diverted From Release To Allow An Extra Week Of Testing — Due to still a number of fixes landing this week, .Linus Torvalds decided to be safe and go for the extra round of testing.
• The 12 Most Interesting Changes Of Linux 5.12
• A bumpy 5.12 is due for release
• Element Matrix Services launches bridging for Microsoft Teams — A single Microsoft Teams Bridge supports unlimited users across unlimited channels. Pricing is based on the number of active users using the bridge from MS Teams, at a cost of $0.50 per user per month. Traffic from Element (or any other Matrix-based client) is free.
• HN: Will this bridge be be open source?
• Servicing the Windows Subsystem for Linux (WSL) 2 Linux kernel — We’ve just shipped the 5.10.16.3 WSL 2 Linux kernel version to Windows Insiders which brings exciting new changes: Support for the LUKS disk encryption, and some long-awaited bug fixes.
• Microsoft Docs: Release Notes for WSL kernel
• microsoft/WSL: Issues found on WSL
• Hangover 0.6.5 Released For Running Windows Software On ARM64, POWER — Wednesday's release of Hangover 0.6.5 now allows for starting QEMU automatically if needed.

Plus the imminent problem KDE solved this week, and more.

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Initial Apple M1 SoC Support Aims For Linux 5.13 Kernel — This initial Apple M1 Linux port gets the UART, interrupts, SMP, and DeviceTree bits in place for offering basic functionality.
• “Challenge accepted”
• Ars: Apple M1 hardware support merged into Linux 5.13
• Official support for Linux on the M1 Macs could come as soon as June
• [GIT PULL] Apple M1 SoC platform bring-up for 5.13
• Asahi Linux on Twitter — Initial M1 support has been merged into the Linux SoC tree and will be coming to Linux 5.13!
• SiFive FU740 PCIe Support Queued Ahead Of Linux 5.13 — The HiFive Unmatched has a FU740 RISC-V SoC that features four U74-MC cores and one S7 embedded core, 16GB of RAM, USB 3.2 Gen 1, one PCI Express x16 slot (operating at x8 speeds), an NVMe slot, and Gigabit Ethernet.
• How to Secure phpMyAdmin
• Firefox Is Making WebRender The Default Rendering Engine On Linux This Month And There Is A Facelift Coming In May — The Firefox web browser is finally making the long-anticipated WebRender rendering engine the default on GNU/Linux when Firefox 88 is released later this month.
• uBlock Origin works best on Firefox — The Firefox version of uBO makes use of WebAssembly code for core filtering code paths. This is not the case with Chromium-based browsers because this would require an extra permission in the extension manifest which could cause friction when publishing the extension in the Chrome Web Store.
• Wayland Is Driving Fragmentation Around EDID Parsing - A Call To Fix That — Currently there is no de facto EDID parsing library for Linux but many different choices and most Wayland compositors rolling their own. Rather than exposing all of the parsed information from the kernel, there is now a call to have a more unified Linux EDID parsing library.
• vgpu_unlock — Unlock vGPU functionality for consumer-grade GPUs.
• Hacker figures how to unlock vGPU functionality intentionally hidden from certain NVIDIA cards for marketing purposes
• Announcing KDE’s Qt 5 Patch Collection — As Qt 5 support is drawing to a close, and we shift to Qt 6, we need to ensure that KDE products are as reliable as ever. To this end, KDE will be maintaining a set of patches with security and functional fixes so that we can enjoy good KDE Software still based on Qt5 until our software is reliably based on Qt 6.
• Mars Helicopter Flight Delayed to No Earlier than April 14 — During a high-speed spin test of the rotors on Friday, the command sequence controlling the test ended early due to a “watchdog” timer expiration.
• LUP 400 Beer Stein

Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• Canonical: Flutter Is The Default Choice For Future Ubuntu Apps — Along with the new installer, Ken Vandine, Engineering Manager, Ubuntu Desktop, Canonical revealed that the out-of-the-box experience for devices preloaded with Ubuntu will also be powered by Flutter.
• Ubuntu on Twitter — Flutter is the default choice for future Ubuntu apps. @kenvandine, Engineering Manager, is here to tell you about some of Canonical’s contributions to Flutter at #FlutterEngage.
• Getting started with Flutter on Ubuntu
• Version 2 of Google’s Flutter toolkit adds support for desktop and web apps
• The Linode network model — As we worked on expanding our global network, three things were non-negotiable: maintaining vendor diversity, balancing flexibility and control, and incorporating Linux starting at the network level as much as possible.
• Chrome (Chromium) release cycle shortened to 4 weeks, Chrome(ium) gets “Extended Stable” release every 8 weeks — We are excited to announce that Chrome is planning to move to releasing a new milestone every 4 weeks, starting with Chrome 94 in Q3 of 2021.
• Chrome Moving To A 4-Week Release Cycle
• (2019) Mozilla Shifting Firefox To A Four-Week Release Cycle
• Linux Mint may start pushing high-priority patches to users — Besides looking for available updates, the Manager will also track cases where updates are overlooked. This will include metrics on when updates were last applied; when were packages last upgraded; and how many days have passed since a particular update was made available.
• Linux Mint Finds Many Of Its Users Are Running Behind On Security Updates
• Linux Mint emits fix for memory-gobbling Cinnamon
• Update your computer! – The Linux Mint Blog
• A warning about 5.12-rc1 — This merge window, we had a very innocuous code cleanup and simplification that raised no red flags at all, but had a subtle and very nasty bug in it: swap files stopped working right. And they stopped working in a particularly bad way: the offset of the start of the swap file was lost. Swapping still happened, but it happened to the wrong part of the filesystem, with the obvious catastrophic end results.
• That Linux 5.12 Severe Data Corruption Bug Hits Intel CI Systems - Issue Caused By Swap File
• Watch Out For Possible Data Loss On Early Linux 5.12 Kernels
• Save the Date! | Container Plumbing Days — The Container Plumbing Days will be a 2-day event to investigate, discuss, hack, learn, and celebrate the “lower-level” open source container technologies, everything from the container runtime on down to the Linux kernel.

Plus a major new feature coming to a Linux distro near you.

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!
• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• The Coder: Look and feel comfortable, while kicking ass. Life is better in a robe.

Support Linux Action News

Links:

• How NASA Designed a Helicopter That Could Fly Autonomously on Mars — This the first time we’ll be flying Linux on Mars. We’re actually running on a Linux operating system. The software framework that we’re using is one that we developed at JPL for cubesats and instruments, and we open-sourced it a few years ago.
• The Perseverance Mars rover just took Linux to another planet
• Ingenuity (Mars helicopter) on Wikipedia
• Mars Helicopter on YouTube
• Ingenuity helicopter phones home from Mars
• SparkFun Electronics
• Linaro Projects
• Linaro on Wikipedia
• Ivan Čukić on Twitter — Another @kdecommunity #KDE Mars landing a success!
• Linux 5.12 Git Seeing New Code Land Following Winter Storm — While the first week of a new merge window is often one of the busiest times for Linus Torvalds in overseeing the Linux kernel, until last night there was no actual Linux 5.12 code being pushed into the Linux Git repository. Linus was offline most of the week due to winter storms preventing him from pushing to the Git repository and interacting much with the mailing list.
• There Are Big Changes On The Horizon With Linux 5.12
• Btrfs With Linux 5.12 Gets More Performance Improvements, Working Zoned Mode
• XFS File-System With Linux 5.12 Has “A Lot Going On This Time”
• IDMAPPED Mounts Aim For Linux 5.12 - Many New Use-Cases From Containers To Systemd-Homed - Phoronix — This patch series introduces idmapped mounts which has been in the making for some time. Simply put, different mounts can expose the same file or directory with different ownership.
• NVIDIA continues tweaking their work for hardware accelerated Xwayland support — Performance should be fine in full-screen games, as long as the compositor supports the required zwp_linux_dmabuf_v1 interface.
• Experimental Wayland Support For Wine Now Sees More Functionality Working — With the new "request for comment" patches, there is now working support for copy/paste, drag-and-drop, and the ability to change the display mode.
• Apple M1 teaser — So OpenBSD boots multi-user on the new Apple M1 hardware. This still has some hacks in it that need to be fixed, so don't expect support for this in the tree right now. But a big thank you to those that contributed to the pool for getting us some hardware.

Plus Mozilla and KaiOS team up to bring the modern web to feature phones, and the surprising way Microsoft is shipping a Linux kernel.

Support Linux Action News

Links:

• Firefox 74 arrives with stricter add-on rules, TLS 1.0 and TLS 1.1 disabled — Starting with Firefox 74, users will need to take explicit action to install the extensions they want, and will be able to remove previously sideloaded extensions when they want to.
• Introducing GNOME 3.36: “Gresik” — GNOME 3.36 is the latest version of GNOME 3, and is the result of 6 months’ hard work by the GNOME community. It contains major new features, such as new login and unlock experience, and a dedicated app for managing extensions.
• GNOME 3.36 Released with New Lock Screen, Better Performance — Six months of development later and the official GNOME 3.36 release is finally here, with source code available to download from the usual places.
• Announcing Bottlerocket — Bottlerocket comes with a single-step update mechanism and includes only the essential software to run containers. These properties enable customers to use container orchestrators to manage OS updates with minimal disruptions, enabling better uptime for containerized applications and lower operational cost.
• Docker: Helping You and Your Development Team Build and Ship Faster — How are we going to do this? By focusing on developer experience through Docker Desktop, partnering with the ecosystem, and making Docker Hub the nexus for all the integrations, configuration, and management of the application components which constitute your apps and microservices.
• VMware Announces Expanded Portfolio of Products and Services to Help Customers Modernize Applications and Infrastructure — Tanzu, first introduced at the VMworld event in August 2019, is a portfolio of products centered on K8s. Also announced was vSphere 7, newly rearchitected using Kubernetes, and optimized to run both modern container-based and traditional virtual machine-based workloads.
• KaiOS Technologies and Mozilla partner to enable a healthy mobile internet for everyone — This partnership bolsters the security and performance of KaiOS-enabled smart feature phones, as well as the platform’s developer tools, security, and available functions, including better Progressive Web App and WebAssembly support.
• Magisk may no longer be able to hide bootloader unlocking from apps — Users have noticed that their bootloader-unlocked devices are failing SafetyNet’s Basic Integrity check even though they used Magisk to patch the boot image. According to Magisk creator John Wu, this is because Google may have implemented hardware-level key attestation to verify that the boot image has not been tampered with.
• Kernels for WSL2 will come from Windows Update — WSL2 will soon be officially available as part of Windows 10, version 2004! As we get ready for general availability, we want to share one additional change: updating how the Linux kernel inside of WSL2 is installed and serviced on your machine.