Sponsored By:

• Linode: Sign up using the link on this page and receive a $100 60-day credit towards your new account.
• Kolide: Kolide can help you nail third-party audits and internal compliance goals with endpoint security for your entire fleet.

Support Linux Action News

Links:

• OpenSSL 3.0.7 Released Fixing Critical Flaw — Today we published an advisory about CVE-2022-3786 (“X.509 Email Address Variable Length Buffer Overflow”) and CVE-2022-3602 (“X.509 Email Address 4-byte Buffer Overflow”).
• OpenSSL version 3.0.7 published
• /news/openssl-3.0-notes.html
• Fedora 37 Release Delayed To Mid-November Over Critical OpenSSL Vulnerability
• Linux 6.2 Power-Savings While Idle Or Lightly Loaded — The short story for Linux end-users is the Lazy RCU work can provide 5~10% power-savings for idle or lightly-loaded systems by this lazy/batching functionality.
• Linux 6.2 Picking Up Mainline Support For Apple M1 Pro/Max/Ultra Hardware — This gets the high-end Mac Studio systems with those premium SoCs now compatible with the mainline kernel.
• Hector's Deleted Tweet — I'm getting tired of arguing with kernel maintainers. The other day I spent 6 hours arguing on IRC about what should've been a 30 minute fix patch.
• Hector Martin on Twitter Follow Up Tweet — Like dude, if you aren't going to step into my world and actually understand what I'm trying to do here, just suck it up and ack my patch. It is not my job to drag you kicking and screaming until you either give up or have a lightbulb moment.
• Seems some Kernel Maintainers Noticed the Twitter Rant — Well they saw my tweets and apparently didn't like them 🤷‍♂️
• Bcachefs Rolling Out New Allocator, Performance Continues Improving — Bcachefs developer Kent Overstreet on Friday published a new status update on this original file-system born out of Linux's block cache (BCache) code.
• FreeBSD Re-Introduces WireGuard Support Into Its Kernel — As of Friday, a new WireGuard driver implementation has been re-introduced with many fixes/improvements over the code state from 2020.
• Open Letter to Gitea - Restoring Trust in the Gitea Project — This unfortunately concludes the Gitea Open Letter has failed and there is no alternative but forking the project under a new name, with a healthy democratic governance.

Plus the PinePhone UBports edition goes up for pre-order, and our reaction to Huawei joining the Open Invention Network.

Support Linux Action News

Links:

• Linux kernel 5.6 release announcement — This has a bit more changes than I'd like, but they are mostly from davem's networking fixes pulls, and David feels comfy with them. And I looked over the diff, and none of it looks scary. It's just slightly more than I'd have preferred at this stage - not doesn't really seem worth delaying a release over.
• The Best Features Of The Linux 5.6 Kernel
• WireGuard Christened As A Modern Secure VPN Alternative
• WireGuard VPN makes it to 1.0.0 — It's a good day for WireGuard users—DKMS builds will soon be behind us.
• WireGuard VPN review
• PinePhone UBports Community Edition Pre-orders — Today we're pleased to announce the first PinePhone 'Community Edition', which will ship with Ubuntu Touch pre-installed.
• PINEPHONE – “Community Edition: UBports” - PINE Store
• Ubuntu Touch Q&A 72 — We are very pleased to announce that we are now working together with German phone startup Volla. They are joining us as a sponsor and will have a place on our Advisory Board. We expect that UT will be available as a pre-installed option with the new Volla phone.
• Linux phones running postmarketOS can now run (some) Android apps — “Android in a Box” solution that basically installs Android in a container in a way that lets you run Android apps as if they were native apps.
• LineageOS 17.1 based on Android 10 is now officially available — The team has also decided to jump up on the subversion, going from 17.0 to 17.1
• Huawei signs non-aggression patent pact with membership of Open Invention Network — Chinese giant plays nice with open source
• Press Release Details - Open Invention Network
• Xbox co-creator Rob Wyatt sues Atari for failing to pay him for design of VCS console — Xbox co-creator Rob Wyatt has filed a lawsuit against Atari for failing to pay him for the design work he did in creating the Atari VCS console.
• Game over: Atari VCS architect quits project, claims he hasn’t been paid for six months
• Atari VCS: Managing the Unexpected — We believe it would be unfair to use the balance to fulfill only a small number of Indiegogo orders, so Atari’s plan is to ship to all backers at the same time when enough VCS units and peripherals are available.

Plus a new report about open source security, and more.

Support Linux Action News

Links:

• Microsoft: Linux Defender antivirus now in public preview — We're aiming to protect the modern workplace environment across everything that it is, being Microsoft or non-Microsoft.
• Microsoft Threat Protection stops attack sprawl and auto-heals enterprise
• Microsoft's Word, Excel and PowerPoint now live under one App
• Microsoft Works - Wikipedia
• Firefox releases an Android app for its VPN service — The Firefox Private Network VPN is powered by Mullvad VPN. Mullvad VPN claims that it won’t log and monitor user data, unlike many other VPN services.
• The Private Internet Access Android app is being open sourced
• IVPN applications are now open source
• Tom Scott video about VPNs
• Android 11 Developer Preview — All the changes we found from Android 10 so far.
• npm struggling to fund FOSS devs — Funding free software is 'still a very unsolved problem' says co-founder
• The Linux Foundation and Harvard’s Lab for Innovation Science Release Census for Open Source Software Security — New analysis identifies most widely used software and uncovers critical questions for the future of securing one of the world’s greatest shared resources
• The Linux Foundation identifies most important open-source software components and their problems — In its latest study, the Linux Foundation's Core Infrastructure Initiative discovered just how prevalent open-source components are in all software and their shared problems and vulnerabilities.
• Most-used libraries revealed
• The Linux Foundation and Harvard’s Lab for Innovation Science release census for open-source software security — Census II (run by Harvard) wanted to look at language-level packages. Their report discusses some of the challenges. One challenge of many is that the JavaScript environment strongly encourages tiny modules, with around 1/2 of all JavaScript packages having at most one function. As a result, when you start counting dependencies, there are *far* more dependencies in JavaScript (because each module does so little), and so JavaScript tends to dominate.

Plus our thoughts on IBM's CEO stepping down, and Google's new open-source security key project.

Support Linux Action News

Links:

• Qt offering changes 2020 — Moving forward, Qt Long-Term Support (LTS) releases will be restricted to commercial customers.
• Use our stuff for free and sell your application? That's Qt.
• Qt LTS Releases To Be Restricted To Commercial Customers
• About “Qt offering changes 2020” – Fading Memories
• Nikolai Marchenko's message about TheQtCompany's presumed business model
• Linux 5.5 Released — So this last week was pretty quiet, and while we had a late network update with some (mainly iwl wireless) network driver and netfilter module loading fixes, David didn't think that warranted another -rc. And outside of that, it's really been very quiet indeed - there's a panfrost driver update too, but again it didn't really seem to make sense to delay the final release by another week.
• 10 Best Features in Linux 5.5
• Some 5.5 kernel development statistics
• WireGuard + Multi-Path TCP Were Merged Tonight Into Linux 5.6
• Indie VPN WireGuard gets the Torvalds seal of approval with inclusion in Linux kernel 5.6
• Linus Torvalds pulled WireGuard VPN into the 5.6 kernel source tree
• Ubuntu 20.04 LTS Adds WireGuard Support
• The Time Namespace Support Has Been Added To The Linux 5.6 Kernel
• Linux 5.6 Is The First Kernel For 32-Bit Systems Ready To Run Past Year 2038
• USB4 Support Lands In The Linux 5.6 Kernel
• Staging Changes Lighten The Linux 5.6 Kernel By More Than Thirty Thousand Lines
• Thunderbird’s New Home — As of today, the Thunderbird project will be operating from a new wholly owned subsidiary of the Mozilla Foundation, MZLA Technologies Corporation.
• Mozilla's email client lands in a new nest
• Ginni Rometty is out as IBM CEO — Jim Whitehurst, the CEO of Red Hat — which IBM acquired last year in a $34 billion megadeal — will become IBM's president on the same day.
• IBM CEO Ginni Rometty to step down — Under her tenure, IBM experienced 22 consecutive quarters of sales declines that ended in 2018. In the company’s latest quarter, sales dropped 3.9% year-over-year to $18 billion.
• IBM Names Arvind Krishna CEO, Replacing Ginni Rometty
• OpenSK: a fully open-source security key implementation — OpenSK, an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

Plus a big boost for ARM on Linux, and our thoughts on recent Red Hat news.

Support Linux Action News

Links:

• Ubuntu 19.10 Released — Ubuntu 19.10 “Eoan Ermine” boasts an upgraded Linux kernel along with faster boot times, updated themes, and experimental ZFS file system support. Whether or not you upgrade, Ermine shows what to expect from Ubuntu’s next LTS release, due April 2020.
• Ubuntu 20.04 LTS Codenamed The Focal Fossa, Arriving On 23 April
• Canonical Pulled In $99M While Still Operating At A Loss
• Ubuntu 19.10 Flavours Released
• Ubuntu 19.10's Kernel Ships With A DoS / Arbitrary Code Execution Bug In The IPv6 Code
• TechSNAP 414: Rooting for ZFS
• IBM Misses Estimates as Red Hat Fails to Offset Declines — Red Hat included in results for first time since 2018 purchase.
• Samsung ends Linux on DeX beta with Android 10 — Samsung will no longer provide support on future OS and device releases. The company also notes that users will not be able to perform a version rollback to Android 9 Pie once they have upgraded to Android 10.
• Bare Metal Arm-Based EC2 Instances — Just like for existing bare metal instances (M5, M5d, R5, R5d, z1d, and so forth), your operating system runs directly on the underlying hardware with direct access to the processor.
• Graboid: First-Ever Cryptojacking Worm Found in Images on Docker Hub — Unit 42 researchers identified a new cryptojacking worm we’ve named Graboid that’s spread to more than 2,000 unsecured Docker hosts.
• Docker Containers Riddled with Graboid Crypto-Worm
• andOTP removed from Google Play Store — andOTP was recently removed from the Google Play Store for violating their payment terms. This is most likely due to the fact that we offer in-app donation links that DO NOT use Googles In-App billing, which is against their terms.
• andOTP - Android OTP Authenticator
• WireGuard removed from Google Play Store — They said it was because we're in violation of their "Payments Policy", presumably because we have a link inside the app that opens the user's web browser to wireguard.com/donations/.
• WireGuard commit reversed dev comments interesting
• WireGuard - Apps on Google Play
• WireGuard Restored In Android's Google Play Store

Plus OpenWrt is alive and well, and Samsung has a new trick.

Sponsored By:

• Ting: Save $25 off your first device, or $25 in service credit if you bring one!

Support Linux Action News

Links:

• New Samsung Dex tablet
• OpenWrt 18.06 released
• Wireguard submitted for inclusion in the kernel
• Linus is a fan
• elementary OS receives large donation
• GNOME Foundation receives $400,000 from Handshake.org
• Introducing the Dweb
• Evolving the Firefox Brand
• Out-of-process extensions coming to Firefox on Linux — out-of-process

And an LXQt confession.

Support Linux Action News

Links:

• Ubuntu 17.10 Begins Transition To GNOME Shell Desktop By Default — Those downloading the very latest Ubuntu desktop ISO of 17.10 "Artful Aardvark" for testing will find that it now boots to the GNOME Shell desktop and also provides an option for running GNOME on Wayland.
• Ubuntu Switching to GDM — We’ve made the decision to switch to using GNOME Display Manager (GDM) instead of LightDM.
• Ubuntu Works with GNOME to Improve HiDPI Support — Canonical is playing host to a ‘fractional scaling hackfest‘ in its’ Taipei offices this week. Both GNOME developers and Ubuntu developers are in attendance, ready to wrestle with
• Lubuntu 17.10 Will Likely Launch with LXQt & LXDE Spins — Lubuntu maintainer and LXQt developer Simon Quigley is reporting on some of the upcoming highlights of the Lubuntu 17.10 (Artful Aardvark) operating system, due for release later this year on October 19, 2017.
• Canonical Kernel Livepatch Service now available for Ubuntu 14.04 LTS! — Users of Ubuntu are welcome to enable the Canonical Kernel Livepatch Service on 3 systems running 64-bit Intel/AMD Ubuntu 16.04 LTS or now Ubuntu 14.04 LTS
• GPG fundraiser — To continue supporting and improving GnuPG, we, the main GnuPG developers, are soliciting donations from the general public. Our primary goal is to raise 15 000 euros per month to fully fund 3 developers; our stretch goal is twice that, 30 000 euros per month.
• Docker Aims to Improve Linux Kernel Security With LinuxKit — Within the LinuxKit effort there are a series of incubated projects that are focused on improving the security of Linux