Hírolvasó
Letartóztatták a Telegram vezérigazgatóját
Kernel prepatch 6.11-rc5
rpki-client 9.2 released
Sebastian Benoit (benno@) announced the release of version 9.2 of rpki-client, the essential component for routing security.
See the full announcement for further details.
Here are some key excerpts from the release announcement:
This release includes the following changes to the previous release: - Ensure synchronization jobs are stopped when the timeout is reached. - Fix a corner case in repository handling. If the last RRDP repository failed to load, rpki-client would fail to fall back to rsync due to an ordering bug in the event loop. - Improve detection of duplicate file paths. Only trigger a duplicate error if a valid path is revisited otherwise a bad CA could prevent legitimate files from being considered valid. - Normalize internal representation of the caRepository to have a trailing slash and ensure that the rpkiManifest is a file inside it.No unmodified files remain from original import of OpenBSD
All files from the original import of OpenBSD have now been modified (or deleted). Appropriately, Theo de Raadt (deraadt@) made the change:
CVSROOT: /cvs Module name: src Changes by: deraadt@cvs.openbsd.org 2024/08/23 11:29:08 Modified files: games/quiz : Makefile games/quiz/datfiles: index Added files: games/quiz/datfiles: ship Removed files: games/quiz/datfiles: greek Log message: The greek quiz is so obscure that it is ridiculous -- noone can play this. Replace it with a new quiz about galley (ship) parts. This commit changes the *LAST UNMODIFIED ORIGINAL FILE* (meaning revision 1.1.1.1) from the original import that created OpenBSD on Oct 18, 1995. With this commit, we have completed an amusing mission of replacing the final parts of the original OpenBSD. We have reached OpenBSD of Theseus. ideas & assistance from mglocker, naval terminology help from jmcLinux Plumbers Conference: Welcome to the Android Micro-conference!
Every year the Android Micro-conference brings the upstream Linux community and the Android systems developers together at the Linux Plumbers Conference. They discuss how they can effectively engage the existing issues and collaborate on upcoming changes to the Android platform and their upstream dependencies.
This year Android MC is scheduled to start at 10am on Friday, 20th Sep at Hall L1 (Austria Center). Attending Android MC gives you a chance to contribute to the broader discussion on Android platform ecosystem and Linux kernel development. You can share your own experiences, offer feedback, and help shape the future direction of these technologies.
Discussion topics for this year include:
- Android kernel support and long term AOSP maintainership to support device longevity
- The pursuit of AOSP developer community
- Android Generic bootloader efforts
- Supporting generic restricted dmabuf heap
- memcg v2 updates in Android
- Bring-up devices with 16kb page_size support
- ublk based zero copy I/O use case in Android
- Leveraging large folios (mTHP) on Android phones
Android MC will be followed by a Android BoF session, which will be a audience directed discussion. It can be a follow-up of the discussions from any of the Android MC topics or a free-form discussion on Android related topics.
[$] The history, status, and plans for reproducible builds
Forgejo changes license to GPLv3+
The Forgejo project has announced that, starting from version 9.0, Forgejo will be released under the GPLv3 license (or a later version). Older versions of the software forge remain MIT-licensed.
A copyleft license makes reusing other copyleft software easier. Recently, we discovered that some of the dependencies we used were incompatible with the license Forgejo was distributed with, and they had to be removed for now. Choosing copyleft licenses enables us to reuse more work, and saves us precious time to focus on improving Forgejo itself.Security updates for Friday
Még több változás jön az európai iPhone-okra
Többet költenek hírközlésre a magyar háztartások
Búcsúzik a Windows egyik legrégebbi eleme
Még több ügyfélre ereszti rá az 5G-t a Telekom
Mobilstop a suliban: van értelme?
Pofátlanul drágul nálunk is a YouTube Premium
LibreOffice 24.8 released
[$] A review of file descriptor memory safety in the kernel
On July 30, Al Viro sent a patch set to the linux-fsdevel mailing list with a comprehensive cover letter explaining his recent work on ensuring that the kernel's internal representation of file descriptors are used correctly in the kernel. File descriptors are ubiquitous; many system calls need to handle them. Viro's review identified a few existing bugs, and may prevent more in the future. He also had suggestions for ways to keep uses consistent throughout the kernel.
Garrett: What is an SBAT and why does everyone suddenly care
So why is this suddenly relevant? SBAT was developed collaboratively between the Linux community and Microsoft, and Microsoft chose to push a Windows update that told systems not to trust versions of grub with a security generation below a certain level. This was because those versions of grub had genuine security vulnerabilities that would allow an attacker to compromise the Windows secure boot chain, and we've seen real world examples of malware wanting to do that.