Latest Linux and open source news from around the web

All Sources 9to5Linux Fedora Magazine Foss Force How-to Geek It's FOSS Linux Insider Linux Journal Linux Magazine Linux TLDR Linux.org Linuxiac LPI LWN.net OMG! Ubuntu Phoronix
OMG! Ubuntu

COSMIC Desktop ‘Frosted Glass’ UI Effect Previewed

COSMIC, the Linux desktop that can look and work however you dang well like, is adding more bling. System76 co-founder Carl Richell has given us our first look at the ‘Frosted Glass’ effect coming to the COSMIC desktop in Epoch 2 (as the desktop releases are named): System76’s engineering team is opting to use a ‘more performant’ Dual Kawase blur, commonly used in gaming, to handle the dynamic effect. This apparently offers a ‘close approximation’ of Gaussian blur, but is not as resource intensive. That’s important. Flashy UI effects often involve a performance hit and, more keenly, a knock-on effect […]

Phoronix

Apple M3 Progress On Linux: Asahi Can Boot To KDE Desktop - But No GPU Acceleration Yet

While the Asahi Linux project has made good progress on bringing Linux to Apple Silicon hardware, much of the success and in turn upstreaming to the Linux kernel has been around the aging M1 and M2 Macs. Apple M3 and newer has been a struggle but progress is being made. One of the Asahi Linux developers shared the ability now to boot to the KDE Plasma desktop with the experimental Asahi Linux code on an M3 MacBook but without any GPU acceleration yet...

LPI

DevOps Tools Introduction #02: Modern Software Development

The DevOps world never stands still — and neither does the Linux Professional Institute (LPI). With the release of the DevOps Tools Engineer certification version 2.0, LPI has aligned the exam with what professionals are actually using in production today: ... Read more The post DevOps Tools Introduction #02: Modern Software Development appeared first on Linux Professional Institute (LPI).

LWN.net

A critical GnuPG security update

There is a new GnuPG update for a "critical security bug" in recent GnuPG releases. A crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack buffer overflow in gpg-agent during the PKDECRYPT--kem=CMS handling. This can easily be used for a DoS but, worse, the memory corruption can very likley also be used to mount a remote code execution attack. The bug was introduced while changing an internal API to the FIPS required KEM API. Only versions 2.5.13 through 2.5.16 are affected.

LWN.net

The GNU C Library is moving from Sourceware

GNU C Library maintainer Carlos O'Donell has announced that the project will be moving its core services away from Sourceware in favor of services hosted at the Linux Foundation. While it was clear to the GNU Toolchain leadership that requirements were coming to improve the toolchain cyber-security posture, these requirements were not clear to all project developers. As part of receiving this feedback we have worked to document and define a secure development policy for glibc and at a higher level the GNU Toolchain. While Sourceware has started making some critical technical changes, the GNU Toolchain still faces serious, systemic concerns about securing a global, highly available service and building a sustainable, diverse sponsorship model. This has been a long-running discussion; see this 2022 article for some background.