Latest Linux and open source news from around the web

How Linux Works Sponsored · View on Amazon → The Art of UNIX Programming Sponsored · View on Amazon →
LWN.net

[$] Disagreements over post-quantum encryption for TLS

The Internet Engineering Task Force (IETF) is the standards body responsible for the TLS encryption standard β€” which your browser is using right now to allow you to read LWN.net. As part of its work to keep TLS secure, the IETF has been entertaining proposals to adopt "post-quantum" cryptography (that is, cryptography that is not known to be easily broken by a quantum computer) for TLS version 1.3. Discussion of the proposal has exposed a large disagreement between participants who worried about weakened security and others who worried about weakened marketability.

LWN.net

Addressing Linux's missing PKI infrastructure

Jon Seager, VP of engineering for Canonical, has announced a plan to develop a universal Public Key Infrastructure tool called upki: Earlier this year, LWN featured an excellent article titled "Linux's missing CRL infrastructure". The article highlighted a number of key issues surrounding traditional Public Key Infrastructure (PKI), but critically noted how even the available measures are effectively ignored by the majority of system-level software on Linux. One of the motivators for the discussion is that the Online Certificate Status Protocol (OCSP) will cease to be supported by Let's Encrypt. The remaining alternative is to use Certificate Revocation Lists (CRLs), yet there is little or no support for managing (or even querying) these lists in most Linux system utilities. To solve this, I'm happy to share that in partnership with rustls maintainers Dirkjan Ochtman and Joe Birr-Pixton, we're starting the development of upki: a universal PKI tool. This project initially aims to close

Phoronix

Linux 6.19's Hung Task & System Lockup Detectors Can Provide Greater Insight

Beginning with the Linux 6.19 kernel, the hung task detector and system lock-up detector are now optionally able to provide greater insight into the issues by dumping additional system information. The new lockup_sys_info and hung_task_sys_info sysctl knobs were merged over as part of the pull requests managed by Andrew Morton...

Phoronix

Live Update Orchestrator "LUO" Merged For Linux 6.19

Google engineers for the past number of months have been working on the Live Update Orchestrator as a new way of applying live Linux kernel updates. The Live Update Orchestrator "LUO" builds atop the Kexec Handover "KHO" functionality already within the kernel. Google has since been deplyoing LUO in their production environments for faster security updates to kernels, especially when involving VMs. LUO is now upstream in Linux 6.19...

LWN.net

Security updates for Monday

Security updates have been issued by Debian (ffmpeg, krita, lasso, and libpng1.6), Fedora (abrt, cef, chromium, tinygltf, webkitgtk, and xkbcomp), Oracle (buildah, delve and golang, expat, python-kdcproxy, qt6-qtquick3d, qt6-qtsvg, sssd, thunderbird, and valkey), Red Hat (webkit2gtk3), and SUSE (git-bug, go1, and libpng12-0).

Linux.org

Radxa Rock 5T Review: A Powerful ARM Single Board Computer

It has been a while since I've done hardware reviews. Hopefully, some of you may recall the article 'Rock Pi 4 and Android TV'. Since the Rock Pi 4, by Radxa, there have been a few newer boards. In this article, I will cover the Rock 5T board. Specifications There is a lot of hardware on this board. This is a major update to the Rock Pi 4. Let's look at some of the hardware specs in the Rockchip RK3588... https://www.linux.org/threads/radxa-rock-5t-review-a-powerful-arm-single-board-computer.57752/