LWN.net's Journal
 
[Most Recent Entries] [Calendar View]

Friday, December 4th, 2020

    Time Event
    2:08p
    Security updates for Friday
    Security updates have been issued by Debian (thunderbird), Fedora (c-ares, pdfresurrect, webkit2gtk3, and xen), openSUSE (python3), SUSE (gdm, python-pip, rpmlint, and xen), and Ubuntu (snapcraft).
    3:40p
    GitHub's report on open-source security
    GitHub has released its "2020 State
    of the Octoverse" report
    ; one piece of that is a
    report on security [PDF]
    . There are a number of interesting
    conclusions there, including that a surprising number of security
    vulnerabilities are planted deliberately. "Analysis on a random
    sample of 521 advisories from across our six ecosystems finds that 17% of
    the advisories are related to explicitly malicious behavior such as
    backdoor attempts. Of those 17%, the vast majority come from the npm
    ecosystem. While 17% of malicious attacks will steal the spotlight in
    security circles, vulnerabilities introduced by mistake can be just as
    disruptive and are much more likely to impact popular projects. Out of all
    the alerts GitHub sent developers notifying them of vulnerabilities in
    their dependencies, only 0.2% were related to explicitly malicious
    activity. That is, most vulnerabilities were simply those caused by
    mistakes.
    "
    9:06p
    [$] The future of 32-bit Linux
    The news for processors and system-on-chip (SoC) products these
    days is all about 64-bit cores powering the latest computers and
    smartphones, so it's easy to be misled into thinking that all 32-bit
    technology is obsolete. That quickly leads to the idea of removing support
    for 32-bit hardware, which would clearly make life easier for kernel
    developers in a number of ways.

    At the same time, a majority of embedded systems shipped today do use 32-bit
    processors, so a valid question is if this will ever change, or if 32-bit
    will continue to be the best choice for devices that do not require
    significant resources.
    9:31p
    t2 Linux 20.10 released
    The 20.10 release of the t2 Linux distribution is available. "After
    a decade of development we are proud to announce the availability of the
    new T2 Linux Source and Embedded Linux distribution build kit stable
    release 20.10.
    " More information about this distribution can be
    found at t2sde.org: "T2 SDE is not
    just a regular Linux distribution - it is a flexible Open Source System
    Development Environment or Distribution Build Kit (others might even name
    it Meta Distribution). T2 allows the creation of custom distributions with
    state of the art technology, up-to-date packages and integrated support for
    cross compilation. Currently the Linux kernel is normally used - but the T2
    SDE is being expanded to Minix, Hurd, OpenDarwin, Haiku and OpenBSD - more
    to come.
    "

    << Previous Day 2020/12/04
    [Calendar]
    Next Day >>

LWN.net   About LJ.Rossia.org