A new style of GPL-enforcement lawsuit was
filed on October 19 by Software Freedom Conservancy (SFC)
against television maker Vizio. Unlike previous GPL-enforcement suits, which
have been pursued on behalf of the developers and copyright h…
How a simple Linux kernel memory corruption bug can lead to complete system compromise (Project Zero)
Over at the Project Zero blog, Jann Horn has a lengthy post on a kernel bug, ways to exploit it, and various ideas on mitigation. While the exploitation analysis is highly detailed, more than half of the post looks at various defenses to this k…
[$] Moving toward Qubes OS 4.1
On October 11, the first release candidate for Qubes OS version 4.1 was announced. Qubes OS
is a security-oriented desktop operating system that uses multiple virtual
machines (VMs or “qubes”) to isolate
various types of functiona…
SFC files suit against Vizio over GPL violations
Software Freedom Conservancy has announced that it filed suit against TV maker Vizio over “repeated failures to fulfill even the basic requirements of the General Public License (GPL)”. The organization raised the problems with Vizio in August …
Security updates for Friday
Security updates have been issued by Debian (squashfs-tools, tomcat9, and wordpress), Fedora (openssh), openSUSE (kernel, mbedtls, and rpm), Oracle (httpd, kernel, and kernel-container), SUSE (firefox, kernel, and rpm), and Ubuntu (linux-azure, …
Ubuntu 21.10 (Impish Indri) released
The latest release of the Ubuntu Linux distribution is out: Ubuntu 21.10, code named “Impish Indri”. The release notes fills in all of the details for the new features in this version, but the announcement lists some as well:
Ubuntu Desktop 2…
Security updates for Thursday
Security updates have been issued by Mageia (golang, grilo, mediawiki, plib, python-flask-restx, python-mpmath, thunderbird, and xstream/xmlpull/mxparser), Oracle (389-ds-base, grafana, httpd:2.4, kernel, libxml2, and openssl), Red Hat (httpd), …
[$] Scrutinizing bugs found by syzbot
The syzbot
kernel-fuzzing system finds an enormous number of bugs, but, since many
of them may seem to be of a relatively low severity, they have a lower priority
when contending for the attention of developers. A talk
at the recent Linux
Sec…
[$] Digging into Julia’s package system
We recently looked at
some of the changes and new features arriving with the upcoming
version 1.7 release of the Julia programming language.
The package system provided by the language makes it easier to
explore new language versions, while…
[$] A QEMU case study in grappling with software complexity
There are many barriers to producing software that is reliable and
maintainable over the long term. One of those is software complexity. At
the recently concluded 2021 KVM
Forum, Paolo Bonzini
explored
this topic, using QEMU, the open source e…