Open-source News

New vulnerabilities may let hackers remotely SACK Linux and FreeBSD systems  Ars Technica

The Linux and FreeBSD operating systems contain newly discovered vulnerabilities that make it easy for hackers to remotely crash servers and disrupt ...

1. New vulnerabilities may let hackers remotely SACK Linux and FreeBSD systems  Ars Technica
2. Netflix patches Linux SACK vulnerability  SC Magazine
3. SACK TCP flaws can crash, slow down Linux-based systems  Help Net Security
4. Netflix to Linux users: Patch SACK Panic kernel bug now to stop remote attacks  ZDNet
5. Linux Kernel Bug Knocks PCs, IoT Gadgets and More Offline  Threatpost
6. View full coverage on Google News

All Linux, all the time: Supercomputers Top 500  ZDNet

The new list of the world's fastest computers is out and, once more, every last one runs Linux.

KDE developer Tomaz Canabrava is working on a set of improvements around their Konsole terminal emulator when running on Wayland...

Microsoft promises to bring Edge to Linux but not any time soon  Windows Report

Microsoft promised to work on Edge for Linux only after completing the stable browser versions for Windows 10 and macOS. This could mean one to two years.

Ubuntu and their downstream flavors all stopped shipping x86 32-bit images and now for the 19.10 cycle they have decided to stop their i386 support entirely. Beginning with Ubuntu 19.10, the archive/packages will not be built for x86 32-bit...

Slimbook Launches New "Apollo" Linux PC, First Beta for Service Pack 5 of SUSE Linux Enterprise 12 Is Out, NVIDIA Binary Drivers for Ubuntu Growing Stale, DragonFly BSD v 5.6 Released and Qt v. 5.12.4 Now Available  Linux Journal

News briefs for June 18, 2019. Slimbook, the Spanish Linux computer company, just unveiled a brand-new all-in-one Linux PC called the "Apollo". It has a 23.6 ...

Docker embraces Windows Subsystem for Linux 2  ZDNet

Docker has realized that Microsoft's new Windows Subsystem for Linux 2 has made Windows much more attractive both to Docker and its container developers ...

Engineers and developers from Facebook, Google, Trail of Bits and more to help advance osquery through neutral forum

SAN FRANCISCO – June 18, 2019 –Facebook and the Linux Foundation, the nonprofit organization enabling mass innovation through open source, today announced plans to create a new foundation for the osquery project, which will be dedicated to growing and sustaining a neutral osquery ecosystem. Engineers and developers from Dactiv, Facebook, Google, Kolide, Trail of Bits, Uptycs, and other companies who are using osquery have committed to supporting the project under the new Foundation.

osquery is an open source tool developed by Facebook in 2014 that makes it easier to collect low level system information and detect potential security issues. It works by exposing an operating system as a high-performance relational database. This design makes it possible to easily and efficiently write SQL-based queries to detect and investigate anomalies.

osquery is being used in production by a variety of high scale companies such as Airbnb, Dropbox, Netflix, Palantir, Etsy, and Uber. Osquery also plays an important role in maintaining insight into the security of Facebook’s infrastructure. The osquery community is among the most vibrant in advancing operating system health and security, with more than 280 contributors and 5,000 commits.

“osquery has fostered a lively and active community that continues to develop new capabilities and use cases based on the ability to monitor their infrastructure more easily. We are thrilled to see the growing engagement with this project, and we believe the creation of the osquery Foundation is the best next step to support the community’s ongoing development and priorities,” said Teddy Reed, an engineering manager at Facebook and longtime osquery contributor.

The osquery Foundation will have an open governance model that encourages participation and technical contribution and will provide a framework for long-term stewardship by an ecosystem invested in osquery’s success. A Technical Advisory Board (TAB) made up of active community contributors will help facilitate the transition to this new model and drive the collective priorities set forth by the foundation members.

“Trail of Bits has long believed that osquery was destined to become an essential part of security infrastructure. Our involvement began in 2016 when we contributed the Windows platform support to osquery, and since then we have continuously provided the engineering services for organizations that wanted to grow its capabilities and contribute those improvements to the project. Trail of Bits has only seen interest in the osquery project increase, and we are pleased to know that the project will transition to a foundation and enter a new stage of growth,” said Mike Myers, principal security engineer at Trail of Bits.

“It is our pleasure to welcome the osquery Foundation into the Linux Foundation. Osquery has drastically simplified the process of operating system monitoring, which has unlocked new methods for securing infrastructure, detecting anomalies and more. We look forward to working with the osquery community to develop the Foundation in a manner that will continue to foster the growth and adoption of osquery while supporting the community’s diverse needs,” said Jim Zemlin, executive director at the Linux Foundation.

About the Linux Foundation

The Linux Foundation is the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and industry adoption. Together with the worldwide open source community, it is solving the hardest technology problems by creating the largest shared technology investment in history. Founded in 2000, The Linux Foundation today provides tools, training and events to scale any open source project, which together deliver an economic impact not achievable by any one company. More information can be found at www.linuxfoundation.org.

# # #

The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page: https://www.linuxfoundation.org/trademark-usage. Linux is a registered trademark of Linus Torvalds.

Media Contact:
Jennifer Cloer
reTHINKit Media
503-867-2304
jennifer@rethinkitmedia.com

The post The Linux Foundation Announces Intent to Form New Foundation to Support osquery Community appeared first on The Linux Foundation.

The Linux Foundation Announces Intent to Form New Foundation to Support osquery Community  PRNewswire

SAN FRANCISCO, June 18, 2019 /PRNewswire/ -- Facebook and the Linux Foundation, the nonprofit organization enabling mass innovation through open ...

VKHR is an open-source, real-time hybrid hair renderer written in Vulkan and developed under the support of AMD/RTG...

Android Low-Memory Killer--In or Out?  Linux Journal

One of the jobs of the Linux kernel—and all operating system kernels—is to manage the resources available to the system. When those resources get used up, ...

Netflix to Linux users: Patch SACK Panic kernel bug now to stop remote attacks  ZDNet

Netflix discovers multiple 'critical' security flaws in the Linux and FreeBSD kernels' TCP stack that could lead to server outages.

While the AMDGPU kernel driver has shipped with the long-awaited FreeSync support since the Linux 5.0 release earlier this year and was quickly wired up for the RadeonSI Gallium3D OpenGL driver in Mesa 19.0 while the recent Mesa 19.1 update brought FreeSync for the RADV Vulkan driver, AMDVLK as AMD's official open-source Vulkan driver isn't yet supporting this variable rate refresh technology...

As Netflix's first security bulletin for 2019, they warned of TCP-based remote denial of service vulnerabilities affecting both Linux and FreeBSD. These vulnerabilities are rated "critical" but already being corrected within the latest Git code...

Netflix Uncovers TCP Bugs Within The Linux & FreeBSD Kernels  Phoronix

As Netflix's first security bulletin for 2019, they warned of TCP-based remote denial of *service* vulnerabilities affecting both Linux and FreeBSD.

In my previous article on MapTool, I explained how to download, install, and configure your own private, open source virtual tabletop so you and your friends can play a role-playing game (RPG) together. MapTool is a complex application with lots of features, and this article demonstrates how a game master (GM) can make the most of it.

read more

One of the main benefits of Linux systems is that they are known to be less prone to security vulnerabilities and exploits than other systems. Linux definitely gives users more flexibility and granular controls over its file systems' security permissions. This may imply that it's critical for Linux users to understand security permissions. That isn't necessarily true, but it's still wise for beginning users to understand the basics of Linux permissions. 

read more

Transparent, frank, and often contentious arguments are part of life in an open organization. But how can we be sure those conversations are productive—not destructive?

read more

Wayland is a secure display protocol as well as a library implementing the protocol, that enables communication between your video hardware (the server) and clients (each and every single application on your system). Wayland...