How to check if you are impacted

To get the version of the sudo package installed, run the following command:

dpkg -l 'sudo*' | grep ^ii

The following table lists the fixed versions of the sudo package in all supported Ubuntu releases:

Release	Package	Fixed version
Questing Quokka (25.10)	sudo	1.9.17p2-1ubuntu1.1
	sudo-ldap	1.9.17p2-1ubuntu1.1
	sudo-rs	Not affected
Noble Numbat (24.04 LTS)	sudo	1.9.15p5-3ubuntu5.24.04.2
	sudo-ldap	1.9.15p5-3ubuntu5.24.04.2
Jammy Jellyfish (22.04 LTS)	sudo	1.9.9-1ubuntu2.6
	sudo-ldap	1.9.9-1ubuntu2.6
Focal Fossa (20.04 LTS)	sudo	Not affected
	sudo-ldap	Not affected
Bionic Beaver (18.04 LTS)	sudo	Not affected
	sudo-ldap	Not affected
Xenial Xerus (16.05 LTS)	sudo	Not affected
	sudo-ldap	Not affected
Trusty Tahr (14.04 LTS)	sudo	Not affected
	sudo-ldap	Not affected

Affected sudo versions

How to address

We recommend you upgrade all packages:

sudo apt update && sudo apt upgrade

If this is not possible, the sudo userspace mitigations can be installed directly and does not require a reboot to apply:

sudo apt update
sudo apt install sudo

The unattended-upgrades feature is enabled by default for Ubuntu Xenial Xerus (16.04 LTS) onwards. This service:

• Applies new security updates every 24 hours automatically.
• If you have this enabled, the patches above will be automatically applied within 24 hours of being available.

Linux consulting firm Igalia announced this week Moonforge, a new in-house Linux distribution by them based on Yocto and OpenEmbedded.

Moonforge is a new Linux distribution designed to provide a production-ready foundation for embedded and device operating systems. Moonforge is designed around long-term maintainability, flexibility, and extensibility. Moonforge consists as a set of Yocto layers and configuration files for building out immutable, maintainable, and easily updated OS images.

Fwupd developer Richard Hughes released fwupd 2.1.1 today as a major update of this open-source Linux firmware update utility that introduces numerous new features and extends hardware support.

Fwupd 2.1.1 is a major release that introduces support for updating the firmware on Blestech touchpads, ELAN Haptic MCU devices, FocalTouch devices, Himax touchscreens, HP Engage One G2 Advanced Hubs, KATAR PRO Wireless Gaming Dongles, PixArt touchpads, and Novatek touchscreens.

The list of newly supported hardware introduced in the fwupd 2.1.1 release continues with Lenovo keyboard and mouse accessories, Lenovo Sapphire Folio keyboards, Lightware Taurus HC40 and HC60 devices, Rolling RW101-CAT12 modems, as well as Sunwinon HID devices.

The Fedora 44 Beta release is out today on schedule in working toward the official Fedora 44 release around mid-April.

Fedora Workstation 44 features the latest GNOME 50 desktop components. Or if you are a KDE fan, Fedora 44 delivers on a unified KDE out-of-the-box experience with Plasma 6.6 and is also using the new Plasma Login Manager in place of SDDM. There are also other updated desktop options in Fedora 44 like the Budgie 10.10 desktop.

For those making use of Microsoft’s exFAT file-system under Linux, tagged today was exfatprogs 1.3.2 as the newest update to these open-source user-space programs for going along with the Linux kernel’s exFAT file-system driver.

Most of the work in exfatprogs 1.3.2 involves improvements to the mkfs.extfat utility for making exFAT file-systems.

Fedora Project Leader Jef Spaleta announced a new proposal for “A Technology Innovation Lifecycle Process for Fedora.” With the help of Google’s Gemini AI, Spaleta laid out a proposal to help Fedora make greater accommodations for experimental concepts and building more interest around innovative ideas without a firm commitment to integrate them into Fedora proper until they can be assured of sustainability.

It’s a lengthy proposal and ultimately around fostering more innovations in the Fedora space without commiting to shipping and maintaining said features. Spaleta mentioned that this idea came up during a Red Hat Enterprise Linux 11 (RHEL 11) planning meeting at Red Hat that he was sitting in on.

The Fedora Project released today the beta version of the upcoming Fedora Linux 44 for public testing to give us a glimpse of the new features and report potential bugs.

Powered by the latest and greatest Linux 6.19 kernel series, the Fedora Linux 44 beta ships with the soon-to-be-released GNOME 50 desktop environment for the flagship Fedora Workstation edition, as well as the latest KDE Plasma 6.6 desktop environment for the Fedora KDE Plasma Desktop edition.

Some interesting features in Fedora Linux 44 include Plasma Login Manager as the default login manager on all Fedora KDE variants instead of SDDM, automatic DTB selection for AArch64 (ARM64) EFI systems, and support for the latest Budgie 10.10 desktop environment on the Fedora Budgie spin.

Hello everyone, this version is special not only because of the new features, but also because for the first time someone has contributed to the code. This may seem trivial, but it is important to me and to the project, as it means that people like it and it will continue to grow over time

Djmenig, I don’t know if you will read this, but thank you for your time and for your interest in making Fluid Tile better

Features

• Auto-switch layout based on tile count made by djmenig This new feature allows you to choose whether you want to add new desktops or switch to the next available layout with the default layouts, avoiding the creation of new desktops
• Add “Trigger overflow per screen”, only works when “Switch to next tile layout” is enabled

Improvements

• The trigger that displayed the UI is now more accurate
• The QML object Timer is created dynamically and works independently
• Simplified the tile assignment process
• Preventing signals from other windows from being disabled in certain processes
• Maximize trigger simplified

That’s all, remember that you can support the project by adding your ideas, reporting errors, or making pull requests, as well as inviting me to a “ko-fi”

Have a nice K-day!!!

Developer @Serroda@lemmy.world

I recently started using my Chromebook more and was struggling to find a way to make the video playback smoother when using mpv running on ChromeOS.

I quickly realized the default config doesn’t use hardware accel on ChromeOS as it is disabled for crostini.

I wrote a guide on how to enable it and use a custom config to enhance the user experience.

GitHub repo is a fork modified to enable mpv hw accel support in crostini.

OC by @nki@lemmy.ml

A month and a half after the previous January update, the Arch-based performance-focused CachyOS has released its second update of the year, powered by the Linux kernel 6.19.

A key change is the addition of animated previews in the installer. When selecting a desktop environment, users now see GIF or WebP clips that offer a quick visual overview of each option. Previews are available for KDE Plasma, GNOME, Niri, and COSMIC.

Merged back in 2018 for Linux 5.0 was support for the Apple Magic Trackpad 2. Merged this week for the in-development Linux 7.0 kernel is fixing battery reporting for those using the Magic Trackpad 2 under Linux.

This week’s HID fixes pull for Linux 7.0-rc3 contains just a few fixes. There are some memory leak fixes in some of the C code, potential kernel crashes in some of the drivers, and also fixing a potential null pointer dereference too. For end users what’s likely most notable is fixing battery reporting for the Apple Magic Trackpad 2.