Some weekend stable kernel updates

The
5.13.11,
5.10.59,
5.4.141,
4.19.204,
4.14.244,
4.9.280, and
4.4.281
stable kernel updates have been released; each contains a relatively small
number of important fixes.

[$] A firewall for device drivers

Device drivers, along with the hardware they control, have long been
considered to be a trusted part of the system. This faith has been under
assault for some time, though, and it fails entirely in some situations,
including virtual machines th…

[$] PostgreSQL’s commitfest clog

While it may seem like the number of developers would be the limiting factor
in a free-software project, the truth of the matter is that, for all but
the smallest of project, the scarcest resource is reviewer time. Lots of
people like to crank …

Elementary OS 6 released

Version
6 of the elementary OS distribution is now available. “It’s been
a long road to elementary OS 6—what with a whole global pandemic dropped on
us in the middle of development—but it’s finally here. elementary OS 6 Odin
is available to dow…

Firefox 91 released

The Firefox
91 release is available. Changes include stronger tracking-cookie
protection, use of HTTPS within anonymous windows whenever possible, and
more.

[$] Hardening virtio

Traditionally, in virtualized environments, the host is trusted by its
guests, and must
protect itself from potentially malicious guests. With initiatives
like confidential computing, this rule is extended in the other direction: the
guest no lo…

Kernel prepatch 5.14-rc5

The fifth 5.14 prepatch is out for testing.
“Things are looking perfectly normal. Size is nominal, diffstat looks
pretty normal, and the changes are all in the usual places”