Language Selection

English French German Italian Portuguese Spanish

Tumbleweed Gets New OpenSSH Major Version

Filed under
Security
SUSE

Snapshot 20191027, brought an update to KDE Plasma 5.17.1. The bugfix update fixed the Mouse KCM acceleration profile on X11 on the Plasma Desktop and had a fix for KWIN with visibility of the Context Help button. Part of the update to Plasma 5.17.1 came in the 20191022 snapshot on the day of the release from the KDE Project. The kcalendarcore package was update to KDE Frameworks 5.63.0, which landed in last week’s snapshots. Quite a few YaST packages arrived in the snapshot as well; some of the those YaST packages adapted to new Keyboard handling. The other two packages updated in the snapshot were to the AV1 decoder dav1d 0.5.1, which fixed a build issue in ARM64 assembly if debug info was enabled, and desktop calculator, qalculate 3.5.0, which had a fix for steradian conversion that is related to the surface area of a sphere. The Tumbleweed snapshot reviewer is being fixed and doesn’t have a rating for the snapshot.

Seven packages arrived in the 20191025 snapshot and the openssh 8.1 was a major upgrade. The new major version added some new features like an experimental lightweight signature and verification ability. According to the changelog, “signatures may be made using regular ssh keys held on disk or stored in a ssh-agent and verified against an authorized_keys-like list of allowed keys. Signatures embed a namespace that prevents confusion and attacks between different usage domains (e.g. files vs email).” The VirtualBox hypervisor for x86 virtualization had a minor update to version 6.0.14; the maintenance release fixed potential issue in the networking with interrupt signalling for network adapters in UEFI guests. The Network Time Protocol package chrony 3.5 added support for hardware timestamping on interfaces with read-only timestamping configuration and Persistent Memory programming package pmdk 1.7 introduced two new Application Program Interface (APIs) in librpmem and libpmemobj.

Read more

Also: SUSE Brings Enterprise Linux to Oracle Cloud to Meet Growing Demand for Cloud-Based Business Deployments

More in Tux Machines

How anyone can contribute to open source software in their job

Imagine a world where your software works perfectly for you. It meets your needs, does things your way, and is the ideal tool to achieve great things toward your goals. Open source software stems from these roots. Many projects are built by engineers that have a problem and build a solution to solve it. Then they openly share their solution with others to use and improve. Unfortunately, building software is hard. Not everyone has the expertise to build software that works perfectly for their needs. And if the software developers building applications don't fully understand users' needs and how they do their job, the solutions they build may not meet the users' needs and may accidentally create a lot of gaps. Read more

5 open source tools I can't live without

Some time ago, I engaged with a Twitter thread that went viral among techies. The challenge? Pick only five tools that you cannot live without. I started to think about this in relation to my everyday life, and picking just five tools was not easy. I use many tools that I consider essential, such as my IRC client to connect with my colleagues and friends (yes, I still use IRC), a good text editor to hack on things, a calendar app to keep organized, and a videoconferencing platform when more direct interaction is needed. So let me put a twist on this challenge: Pick just five open source tools that boost your productivity. Here's my list; please share yours in the comments. Read more

How to Install Microsoft Edge Browser in Ubuntu and Other Linux

This guide explains the steps required to install Microsoft Edge Browser in Ubuntu and Other Linux. We explain both graphical and UI methods. Read more

today's leftovers

  • A Quick Look At Ubuntu 20.04 LTS vs. 20.10 With The Core i9 10900K - Phoronix

    With Ubuntu 20.10 due for release this week I have begun testing near-final Ubuntu 20.10 builds on many more systems in the lab. Larger than our normal distribution/OS comparisons, here is the culmination of running hundreds of benchmarks (366 tests to be exact) under both Ubuntu 20.04 LTS with all available updates and then again on the Ubuntu 20.10 development state while testing on Intel Comet Lake. Aside from specific improvements for bleeding-edge hardware like Intel Tiger Lake performing better on Ubuntu 20.10 or when looking at cases like the Intel and Radeon graphics performance being better on Ubuntu 20.10 due to the newer Linux kernel and Mesa, for general CPU/system workloads the performance has largely been found to be similar to that of Ubuntu 20.04 LTS. The other caveat is for workloads being built from source, Ubuntu 20.10 now ships with GCC 10 rather than GCC 9. GCC 10 doesn't normally yield any night-and-day differences in performance but in some cases for newer CPU microarchitectures there has been some improvements there or with features like LTO.

  • TSDgeos' blog: Make sure KDE software is usable in your language, join KDE translations!

    Translations are a vital part of software. More technical people often overlook it because they understand English well enough to use the software untranslated, but only 15% of the World understands English, so it's clear we need good translations to make our software more useful to the rest of the world. Translations are a place that [almost] always needs help, so I would encourage you to me (aacid@kde.org) if you are interested in helping. Sadly, some of our teams are not very active, so you may find yourself alone, it can be a bit daunting at the beginning, but the rest of us in kde-i18n-doc will help you along the way :)

  • News – WordPress 5.6 Beta 1 – WordPress.org

    WordPress 5.6 Beta 1 is now available for testing! This software is still in development, so we recommend that you run this version on a test site. [...] The current target for final release is December 8, 2020. This is just seven weeks away, so your help is needed to ensure this release is tested properly.

  • Google Patches Bug Used in Active Attacks Against Chrome

    Google has discovered and patched a serious vulnerability in Chrome that attackers are actively exploiting at the moment. The bug is a high-severity heap buffer overflow in FreeType, a free font-rendering engine that Chrome, among many other projects, uses. A member of Google’s Project Zero vulnerability research team discovered the vulnerability and subsequently found that attackers were already exploiting it. Google patched the flaw in Chrome 86.0.4240.111 for desktop browsers and the maintainers of the FreeType Project pushed out an emergency release of the library to fix it, as well. “I've just fixed a heap buffer overflow that can happen for some malformed .ttf files with PNG sbit glyphs. It seems that this vulnerability gets already actively used in the wild, so I ask all users to apply the corresponding commit as soon as possible,” Werner Lemberg, one of the original authors of the FreeType, said in an email to the FreeType announcement mailing list.

  • FreeType 2.10.4 Rushed Out As Emergency Security Release

    The FreeType text rendering library is out with version 2.10.4 today as an important security update.

  • Intel: replace thermal compound “every few years”

    Thermal compound (sometimes called thermal paste or grease) is applied to fill minuscule gaps in the materials in the heat spreader (the metal covering on top of the processor) and the heatsink. Eliminating these gaps is essential to ensuring efficient heat transfer into the heatsink. The thermal compound that is used in your computer generally won’t go bad or degrade in its useful lifespan. It will get displaced over time, however. You’d need higher temperatures than what you’ll typically find in a computer for other failure modes to come into effect. The displacement is caused by thermal cycling that results in an effect known as “thermally induced pump-out.” As the components heat up and cool down, the processors’ heat spreader (its metal top) and the heatsink will expand and contract. This effect will, over time, pump the thermal compound out from in between the two metal plates. You can find illustrations and a more technical explanation in the source links below.