Seven new stable kernels

Sasha Levin has announced the release of the 5.13.13, 5.10.61, 5.4.143, 4.19.205, 4.14.245, 4.9.281, and 4.4.282 stable kernels. As usual, they
contain important fixes throughout the tree. Users of those series should upgrade.

Security updates for Thursday

Security updates have been issued by Fedora (community-mysql, containerd, dotnet3.1, dotnet5.0, perl-Encode, and tor), Mageia (gpsd), openSUSE (cacti, cacti-spine, go1.16, jetty-minimal, libmspack, mariadb, openexr, and tor), SUSE (aspell, jetty…

[$] DVB, header files, and user-space regressions

A regression that was recently reported for 5.14 in the media
subsystem is a bit of a strange beast. The kernel’s user-space binary
interface (ABI) was not changed, which is the usual test for a patch to get
reverted, but the report still…

[$] Adding a “duress” password with PAM Duress

Users often store a lot of sensitive information on their computers—from
credentials to banned texts to family photos—that they might
normally expect to be
protected by the login password of their account. Under some
circumstances, though, us…

Security updates for Friday

Security updates have been issued by Fedora (libtpms and mingw-exiv2), openSUSE (389-ds, aspell, c-ares, fetchmail, firefox, go1.15, go1.16, haproxy, java-1_8_0-openjdk, krb5, libass, libmspack, libsndfile, openexr, php7, qemu, and tor), Oracle …

LibreOffice 7.2 Community released

The Document Foundation has announced the latest release of LibreOffice:

LibreOffice 7.2 Community, the new major release of the volunteer-supported free office suite for desktop productivity, is available from https://www.libreoffice.org/down…

Security updates for Thursday

Security updates have been issued by CentOS (exiv2, firefox, and thunderbird), Fedora (libsndfile, python-docx, and xscreensaver), openSUSE (haproxy), and SUSE (haproxy).

[$] PEP 649 revisited

Back in June, we looked at a change to
Python annotations, which provide a way to associate metadata, such as type
information, with functions. That change
was planned for the upcoming Python 3.10 release, but was deferred due to
questions …

[$] STARTTLS considered harmful

The use of Transport
Layer Security (TLS) encryption is ubiquitous on today’s internet,
though that has largely happened over the last 20 years or so; the first
public version of its predecessor, Secure Sockets Layer (SSL), appeared in
1995. B…

Go 1.17 is released

The Go blog has announced the release of version 1.17 of the Go programming language. The new version has some fairly small changes to the language, support for the Arm 64-bit architecture on Windows, along with other features, bug fixes, …