First handset with MTE on the market (Project Zero)

The Google Project Zero blog celebrates
the launch of the Pixel 8 handset
, the first to make use of Arm’s
Memory Tagging Extension (MTE). Linux has supported MTE since the 5.10 release in 2020,
but that support has only now shown up (in experimental form) in an
available handset.

I think this is a huge improvement for the general security of the
device – many zero-click attack surfaces involve large amounts of
unsafe C/C++ code, whether that’s WebRTC for calling, or one of the
many media or image file parsing libraries. MTE is not a silver
bullet for memory safety – but the release of the first production
device with the ability to run almost all user-mode applications
with synchronous-MTE is a huge step forward, and something that’s
worth celebrating!

The article includes detailed instructions for how to turn the MTE feature
on.

Source: LWN.net – First handset with MTE on the market (Project Zero)

LibreOffice 7.5.8 Is Here as the Last Update in the Series, Upgrade to LibreOffice 7.6 Now

LibreOffice 7.5.8 is here one and a half months after LibreOffice 7.5.7, which was an emergency, unscheduled update that addressed a security vulnerability in the WebP codec. LibreOffice 7.5.8 contains a total of 21 bug fixes to make the LibreOffice 7.5 series more stable and reliable.

The post LibreOffice 7.5.8 Is Here as the Last Update in the Series, Upgrade to LibreOffice 7.6 Now appeared first on Linux Today.



Source: Linux Today – LibreOffice 7.5.8 Is Here as the Last Update in the Series, Upgrade to LibreOffice 7.6 Now

How to Install Redmine with Apache and Let's Encrypt SSL on Debian 12

Redmine is a free and open-source project management and issue-tracking tool. Follow this step-by-step guide to install the Redmine project management and issue-tracking tool on Debian 12 Server. By following this, you will install Redmine with MariaDB as the database server and Apache2 as the web server.

Source: LXer – How to Install Redmine with Apache and Let’s Encrypt SSL on Debian 12

OpenELA's first code drop

The Open Enterprise Linux Association, a
joint venture founded by CIQ, Oracle, and SUSE, has announced
its first code release.

OpenELA is excited to announce that the source code for all
packages necessary for anyone to build a derivative Enterprise
Linux operating system is now available. The initial focus is on
EL8 and EL9, and packages for EL7 are forthcoming. The project is
committed to ensuring the continued availability of EL sources to
the community indefinitely.

The organization has also announced a technical
steering committee
made up of “highly experienced individuals from
the founding companies
“.

Source: LWN.net – OpenELA’s first code drop

[$] The first half of the 6.7 merge window

As of this writing, 9,842 non-merge changesets have found their way into
the mainline repository since the 6.7 merge window opened. Nearly a third
of those consist of the entire bcachefs development history but, even
discounting that, there has been a lot of material landing for the next
release. Read on for a summary of the most interesting changes pulled so
far in this development cycle.

Source: LWN.net – [$] The first half of the 6.7 merge window

Linux 6.7 Networking Adds New Hardware Support, A ~20% Perf Boost For Single TCP Flow

As with each kernel cycle, the networking subsystem updates for Linux 6.7 are heavy with a wide assortment of core networking infrastructure improvements, (e)BPF features continue to be tacked on, and new wired and wireless network hardware is supported…

Source: Phoronix – Linux 6.7 Networking Adds New Hardware Support, A ~20% Perf Boost For Single TCP Flow

Audacity 3.4 Released with Music Workflows, New Exporter & More

Coming more than six months after Audacity 3.3, the Audacity 3.4 release is here to introduce three new features, starting with music workflows, allowing you to switch between hh:mm:ss time and Beats & Measures, as well as to time-stretch clips to align them to a song’s tempo.

The post Audacity 3.4 Released with Music Workflows, New Exporter & More appeared first on Linux Today.



Source: Linux Today – Audacity 3.4 Released with Music Workflows, New Exporter & More

DreamWorks' OpenMoonRay 1.4 Released With Intel OIDn GPU Acceleration

One of the great open-source achievements for 2023 was DreamWorks Animation open-sourcing their MoonRay renderer as the OpenMoonRay project. Since then DreamWorks along with other open-source stakeholders have continued advancing this open-source renderer and today marks the release of OpenMoonRay 1.4…

Source: Phoronix – DreamWorks’ OpenMoonRay 1.4 Released With Intel OIDn GPU Acceleration

Understanding LiteSpeed: A Comparison with Apache and Nginx

LiteSpeed Web Server (LSWS) comes equipped with features that directly correspond with Apache’s popular functionalities, such as its Rewrite Engine and ModSecurity. LSWS can even load Apache’s configuration files seamlessly. Regarded as a drop-in replacement, LiteSpeed can integrate fully with control panels written for Apache, including, but not limited to, cPanel, Plesk, and DirectAdmin.

Source: LXer – Understanding LiteSpeed: A Comparison with Apache and Nginx

Landlock Access Controls Extended To Networking With Linux 6.7

Landlock was merged back in 2021 with Linux 5.13 for unprivileged application sandboxing. Landlock is focused on restricting ambient rights and is implemented as a stackable Linux security module (LSM). With Linux 6.7 the Landlock LSM is now moving beyond just file-system access controls to also introduce initial networking support…

Source: Phoronix – Landlock Access Controls Extended To Networking With Linux 6.7

Linux 6.7 Adds A Cross-Vendor Solution For Confidential Computing Attestation Reports

While confidential computing is a hot area right now, there’s been a limited amount of cross-vendor cooperation with AMD having their own route with Secure Encrypted Virtualization (SEV) and Intel designing the Trusted Domain Extensions (TDX) that is still available in limited form. As one improvement coming with Linux 6.7, “configfs-tsm” has been submitted for pulling as a cross-vendor solution for confidential computing attestation reports…

Source: Phoronix – Linux 6.7 Adds A Cross-Vendor Solution For Confidential Computing Attestation Reports