"git clone" Hit By Vulnerability That Could Lead To Code Execution

Disclosed today is CVE-2021-21300 as a security vulnerability affecting git clone that could lead to specially crafted repositories being able to execute code during the Git clone process.

Git versions back to v2.15 are affected by this security vulnerability. Specially crafted repositories could execute code during the git clone process on case-insensitive file-systems supporting symbolic links. The vulnerability stems from clean/smudge filters being abused like those used by Git LFS.

Users are encouraged to upgrade

openSUSE Leap 15.3 Beta Performance Is Looking Good

Given the beta phase of openSUSE Leap 15.3 having started earlier this month, here are some preliminary benchmarks looking at the performance for openSUSE Leap 15.3 with the initial beta snapshot against Leap 15.2 with all stable release updates against the rolling-release openSUSE Tumbleweed.

For this initial round of benchmarking for the openSUSE Leap 15.3 beta phase, a single Intel system was used for the preliminary benchmarks while once Leap 15.3 is out this summer there will be plenty more

Continue reading...

"Fedora Linux" Is The Latest Change Proposed For F35

While Fedora 34 will be out around the end of next month, there are already change proposals being filed for Fedora 35 that will come in the autumn. One of those early changes for that next release cycle is referring to the OS as "Fedora Linux" within its OS release information.

Arguably most users refer to this Red Hat sponsored Linux distribution as "Fedora" and have been doing so since the original "Fedora Core" days for the distribution prior to merging of the Core and Extras repositories. But

Arch Linux Looking To Employ LTO By Default, Possibly Raise x86-64 Requirements

Arch Linux developers are considering some default enhancements to their Linux distribution that would increase the out-of-the-box performance.

Following openSUSE Tumbleweed using LTO by default , Fedora 33 doing it too , and Ubuntu 21.04 set to ship with LTO'ed packages , Arch Linux is finally looking at enabling link-time optimizations by default for their package builds.

Turning on link-time optimizations (LTO) often enhances the performance of the resulting binary thanks to the added optimizations that can be done
Continue reading...

Experimental Rust-Based Coreutils Working Well Enough To Run Debian Basics

Sylvestre Ledru who is a director at Mozilla by day while also being prolific to Debian/Ubuntu and LLVM/Clang development has managed to get a Rust version of Coreutils packaged and running well enough on Debian.

Using "uutils" as a Rust implementation of the key Coreutils - GNU core utilities, some of the key CLI tools found on Linux systems - Ledru has managed to get a booting Debian system. Not only is Debian booting with the Rust-based Coreutils implementation but it's handling the most popular Debian packages

Linux 5.11.5, 5.10.22 Released With Headless AMD Navi 12 SKU Backported

Just two days after the release of Linux 5.11.4 it has now been succeeded by Linux 5.11.5 and the maintained LTS kernels also saw new releases this morning.

Among the fixes in this latest round of point releases is a USB audio fix for the Corsair Virtuoso SE, disabling VCN for a new Navi 12 SKU, enabling headset mic support on the Acer Swift, several Btrfs file-system fixes, a fix to resume from suspend if the system is running on battery and

Intel Contributes New "KCPUID" Utility For Linux To Reliably Report CPU Features

Intel engineers have been working on a tool called kcpuid for showing the raw CPU features/capabilities of a processor under Linux. This utility will be part of the kernel source tree and is queued up now in tip's x86/misc branch, thereby making it material for Linux 5.13 barring any issues coming up.

Users/administrators can generally rely on /proc/cpuinfo for quickly finding out CPU features of a given system. But the reported CPU information can be a bit misleading as some

Apple Silicon|Intel

LLVM Clang Mainlines Support For The Motorola 68000 Series (m68k)

If it wasn't odd enough during these pandemic times seeing Nintendo 64 support upstreamed into the Linux 5.12 kernel a few weeks back, the latest vintage hardware seeing open-source support still going on is the Motorola 68000 series 32-bit processors. LLVM/Clang today merged the "m68k" target for these three decade old processors.

The Motorola 68000 (m68k) 32-bit processors were found in early Apple

Intel Already Started Working On Linux Driver Code For Lunar Lake

While Intel 11th Gen Rocket Lake desktop processors are launching this month, Intel's open-source Linux driver developers known for their punctual support are already preparing early code around their 14th Gen "Lunar Lake" platform.

Intel's punctual open-source/Linux support across desktop, mobile, and server platforms is one of the strong selling points for those preferring to use something on their PC besides Windows (Intel normally also does more for BSD/FreeBSD than other vendors as well). A

GNOME 40 Mutter Lands Wayland Presentation-Time Support

The patch series implementing support for Wayland's Presentation-Time protocol within the Mutter compositor has been merged ahead of this month's GNOME 40 release.

This Wayland Presentation-Time support has been in the works for GNOME the past four months and today was finally deemed ready for merging.

Wayland's Presentation Time protocol provides a means of accurate presentation timing feedback with a focus on ensuring smooth video playback and audio/video synchronization. The Presentation Time protocol has been around for years: authored in 201