We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
Future Intel CPUs and some existing processors via a microcode update will support a new feature called the Asynchronous EXit (AEX) notification mechanism to help with Software Guard Extensions (SGX) enclave security. Patches for the Linux kernel are pending for implementing this Intel AEX Notify support with capable processors.
Indirect Branch Tracking (IBT) is still being eyed for enabling as part of the default Linux x86_64 kernel configurations to provide better out-of-the-box security on supported processors. A patch sent out today continues the upstream discussion over flipping on this feature by default that is part of Intel's Control-flow Enforcement Technology (CET) for helping to defend against jump/call oriented programming attacks.
Sigstore that is backed by Google, Red Hat, GitHub, and other prominent organizations with an aim to secure the open-source software supply chain has reached general availability and issued the "v1.0" releases for their key software components.
Linux Torvalds, founder of the Linux kernel, has posted in the kernel mailing list that he wants to drop support for Intel 486 (i486) processors, citing their age. The i486 CPUs were introduced way back in April 1989 and discontinued in 2007. They were designed by Pat Gelsinger, who is now Intel’s CEO.
Now that Linux 6.1-rc1 was released, here is my look at all of the interesting kernel changes and new features that landed over the past two weeks. Linux 6.1 is shaping up to be another exciting kernel with many new software features, new hardware enablement work, and other changes for this end-of-year 2022 kernel version that is also likely to be the next Linux LTS release.
Google, one of very few tech companies willing to experiment with new operating systems, has unveiled KataOS for embedded machine learning devices.
Google this week has announced the release of KataOS as their newest operating system effort focused on embedded devices running ambient machine learning workloads. KataOS is security-minded, exclusively uses the Rust programming language, and is built atop the seL4 microkernel as its foundation.
In addition to MGLRU and Maple Tree having been merged overnight, Linus Torvalds also picked up the x86/mm changes for Linux 6.1 that will now by default warn about W+X mappings.
If the next version of the Linux kernel emerges a little slower than usual, blame a dodgy DIMM in Linus Torvalds's AMD Threadripper-powered PC and the vagaries of the memory market.
Fwupd 1.8.6 is out as the newest stable release of this open-source firmware updating tool most notably used by Linux systems but also supported on various BSDs and even Windows.
Linux 6.0 comes with many notable hardware support additions and other improvements, here is a reminder of all what is great about this imminent kernel release.
It's been two weeks since the release of LLVM 15.0 and its sub-projects like Clang 15.0 so per their rapid release rhythm, LLVM 15.0.1 is out with the initial batch of fixes.
At the Kernel Maintainers Summit, the question wasn't, "Would Rust make it into Linux?" Instead, it was, "What to do about its compilers?"
A few years ago developers knew eBPF as a handy way to build firewalls yet now it's used everywhere for everything. Get ready for io_uring to do the same.
The GCC compiler and related GNU toolchain infrastructure has long been hosted by Sourceware.org that has been sponsored by Red Hat the past two decades. But now the GNU Toolchain Infrastructure (GTI) project is being established as it works to leverage the Linux Foundation's IT services to provide more robust and secure infrastructure for these critical open-source projects.
Wolfi is a Linux undistro that focuses on resolving security issues with the software supply chain. Explore more here.
Open-source security has been high on the agenda this year, with a number of initiatives, projects, and guidance launched in 2022 to help improve the cyber resiliency of open-source code, software and development.
Following the July disclosure of the Retbleed CPU security vulnerability affecting older processors and an AMD change made in August, here is a fresh look at the performance impact of the Retbleed mitigations on Linux, including if opting for the IBPB-based Retbleed mitigation, and the accumulated CPU security mitigation impact for Zen 2 with the flagship Ryzen 9 3950X processor.
A change queued up as part of the "x86/mm" TIP changes expected to land for Linux 6.1 will now have the default kernel configuration warn at kernel boot time around any W+X mappings that pose a security risk.
SOS.dev initiative will combat software supply chain attacks by encouraging researchers to suggest security improvements to key projects.
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
