Language Selection

English French German Italian Portuguese Spanish

OpenSSH, Squid, PostgreSQL Update in Tumbleweed

Filed under
SUSE

Three openSUSE Tumbleweed snapshots released this week have brought updates for text editors, browsers, emails clients, database management systems and many other pieces of software.

Mozilla Firefox, Thunderbird, nano, and PostgreSQL were all in the latest 20211012 snapshot. A new major version of Firefox 93.0 added support for the optimised image format AVIF, which offers a significant file size reduction as opposed to other image formats. The browser also improved web compatibility for privacy protections and fixed more than a handful of Common Vulnerabilities and Exposures. Thunderbird 91.2.0 addressed many of the same CVEs, fixed some issues with the calendar and fixed the new mail notifications that did not properly take subfolders into account. The 5.9 version of text editor nano added syntax highlighting for YAML files and fetchmail 6.4.22 added a few patches, addressed a CVE related to an IMAP connections and now highlights being compatible with OpenSSL 1.1.1 and 3.0.0. The new major version of postgresql 14 provided improvements for heavy workloads, enhanced distributed workloads and added a couple more predefined roles like pg_read_all_data, pg_write_all_data and pg_database_owner. Other packages to update in the snapshot were GNOME’s document viewer evince 41.2, Flatpak 1.12.1, graphics library gegl 0.4.32, glusterfs 9.3 and many RubyGems and YaST package updates.

Read more

Also: openSUSE Tumbleweed – Review of the weeks 2021/40 & 41

More in Tux Machines

Programming Leftovers

  • Cracking the Spotify Code

    Spotify offers a little picture that, when scanned, opens almost anything searchable with Spotify. Several lines are centered on the Spotify logo with eight different heights, storing information in octal. Many visual encoding schemes encode some URI (Uniform Resource Identifier) that provides a unique identifier for that specific song, album, or artist when decoded. Since many URIs on Spotify are pretty long (one example being spotify :show:3NRV0mhZa8xeRT0EyLPaIp which clocks in at 218 bits), some mechanism is needed to compress the URIs down to something more manageable. Enter the media reference, a short sequence encoding a specific URI, generally under 40 bits. The reference is just a lookup in a database that Spotify maintains, so it requires a network connection to resolve. The actual encoding scheme from media reference to the values in the bars is quite complex involving CRC, convolution, and puncturing. The CRC allows the program to check for correct decoding, and the convolution enables the program to have a small number of read errors while still having an accurate result. Puncturing is just removing bits to reduce the numbers encoded, relying on convolution to fill in the holes.

  • Day 7: Neural Nets in Raku (Part 1) – Raku Advent Calendar

    Thinky the Elf was sitting in his office, it had been a closet but he’d been given it as his office after the great baked beans incident. It wasn’t his fault. He was right that feeding the reindeer beans would give them a jet boost but Santa had not been all that happy about it. And his tendency to stare of into space while suddenly having a thought wasn’t great while working on the shop floor meant it was safer to put him out of the way to do some thinking. Recently he’d been thinking about how to sort children into naughty or nice. This was Santa’s big job all year and Thinky thought that there must be a way to simplify it, he’d spent some time watching videos on YouTube and there was one that gave a brilliant description of Neural Networks (jump to 20 minutes for that bit but it’s an interesting video). As Thinky watched this he couldn’t help thinking about Raku and how the connections between nodes felt like Supplies.

  • Rblpapi 0.3.12: Fixes and Updates

    The Rblp team is happy to announce a new version 0.3.12 of Rblpapi which just arrived at CRAN. Rblpapi provides a direct interface between R and the Bloomberg Terminal via the C++ API provided by Bloomberg (but note that a valid Bloomberg license and installation is required). This is the twelveth release since the package first appeared on CRAN in 2016. Changes are detailed below and include both extensions to functionality, actual bug fixes and changes to the package setup. Special thanks goes to Michael Kerber, Yihui Xie and Kai Lin for contributing pull requests!

  • LLVM Now Has "Official" Support For Targeting NEC's Vector Engine (VE) - Phoronix

    The LLVM compiler infrastructure supports not only a growing number of CPU architectures but continues to lead when it comes to its support for different accelerators. Back in 2019 NEC was working to upstream their SX-Aurora VE "Vector Engine" Accelerator and now as of this week that target is considered officially supported upstream. NEC originally launched the SX-Aurora Vector Engine (VE) back in 2018 as a PCI Express accelerator card and supporting up to eight vector processors per server. The NEC SX-Aurora has its own architecture for the "VE" and is backed by HBM2 memory. The current VE processor is rated for 1.53 TB/s of memory bandwidth and a double precision peak performance of 3.07 TFLOPS or 4.91 single precision TFLOPS.

  • 5 Excellent Free Books to Learn CSS - LinuxLinks

    Web pages are built with HTML, which specifies the content of a page. CSS (Cascading Style Sheets) is a separate language which specifies a page’s appearance. CSS code is made of static rules. Each rule takes one or more selectors and gives specific values to a number of visual properties. Those properties are then applied to the page elements indicated by the selectors. Here’s our recommended books to learn CSS.

SSH Key Rotation with the POSIX Shell - Sunset Nears for Elderly Keys

OpenBSD has recently stressed to us the value of key rotation by their use of “Signify” distribution release signatures. We have realized that SSH keys should also rotate, to reduce the risk of powerful keys that fall into the wrong hands which become “the gift that keeps on giving.” There have always been open questions on the retirement of SSH keys. These questions have grown in volume and many are joining the advocacy for SSH certificate authorities. To “rotate” an SSH key is to replace it, in such a way that it is no longer recognized, requiring removal from the authorized_keys file. SSH rotation is commonly addressed with Ansible, but this leaves many users on smaller systems or lacking privilege without recourse. A more basic and accessible method to migrate SSH keys is sorely lacking. Below is presented an SSH key rotation script written in nothing more than the POSIX shell. There is palpable danger in the misuse of such a tool. Many administrators control inaccessible systems that entail massive inconvenience in a loss of control. Demonstrated here are rotation schemes of increasing risk, for any holder of a key to choose, to their own tolerance. Hopefully, I have not made grave mistakes in the design. The most conservative users of this approach should tread with extreme caution, test carefully, and ensure alternate means of access prior to any deployment. As the author, I have no desire to assume any responsibility for a failed rotation, and its consequences. I especially disavow the “wipe” option below to remove entries from authorized_keys. It is presented as commentary, not working code. In any case, we foolishly rush in where the more prudent fear to tread. Read more

Amazon Linux 2022 Performs Well, But Intel's Clear Linux Continues Leading In The Cloud

AWS recently introduced Amazon Linux 2022 in preview form as the latest iteration of their Linux distribution now based on Fedora with various alterations to catering to their customers running it on EC2. Last week were benchmarks looking at Amazon Linux 2022 compared to Amazon Linux 2 and other distributions like CentOS and Ubuntu. In this article we are seeing how Amazon Linux 2022 can compete with Intel's own Clear Linux performance-optimized distribution. Read more

Games: Pokémon, Roundup, and Some More Titles on GNU/Linux

  • Bridging Game Worlds With The ‘Impossible’ Pokémon Trade | Hackaday

    Transferring hard-earned Pokémon out of the second generation GameBoy game worlds into the ‘Advance Era’ cartridges (and vice versa) has never been officially supported by Nintendo, however [Goppier] has made these illicit trades slightly easier for budding Pokémon trainers by way of a custom PCB and a healthy dose of reverse engineering. Changes to the data structure between Generation II on the original GameBoy (Pokémon Gold, Silver and Crystal) and Generation III on the GameBoy Advance (Pokémon Ruby, Sapphire, FireRed, LeafGreen and Emerald) meant that trades between these cartridges was never a possibility – at least not through any legitimate means. In contrast, Pokémon trades are possible between the first and second generation games, as well as from Generation III and beyond, leaving the leap from Gen II to Gen III as an obvious missing link.

  • Punk Wars, Axis & Allies 1942 Online, Melvor Idle, Unpacking … - itsfoss.net

    One more to liven up the December bridge, and that is that there is nothing more entertaining to pass the time than to play a game and that is partly Linux Play, our premiere native games section for Linux with this, its monthly edition with the best that came out in November. Including construction and survival title and Punk wars, the classic war strategy of Axis & Allies 1942 Online, the RPG hardcore Melvor idle… And a lot more, without forgetting the free title with which we close the list and that this time transfers the television phenomenon of The Squid Game to PC controls under the name of Crab Game. Linux Play!

  • NeuroNet: Mendax Proxy gets some first footage, mixing elements of Your Grace & Reigns | GamingOnLinux

    NeuroNet: Mendax Proxy is an upcoming adventure that the developer claims blends together elements found in the likes of Your Grace, Reigns and Astrologaster into something new. Set to launch in 2022, NeuroNet sees you take control of an AI charged with managing a city called Catena. You will need to make quick-fire decisions that impact the future and the prosperity of its citizens, with every choice and decision taken having a lasting effect on those you meet and the city's status. Lots of cyberpunk theming going on here with a new trailer giving a look into what to expect you can see below.

  • The Jackie and Daria update for Spiritfarer lands December 13 | GamingOnLinux

    The biggest update yet for the award-winning Spiritfarer lands on December 13, with plenty of new content. Spiritfarer is a casual thoughtful experience about being a ferrymaster for the deceased. You build up a boat, explore and care for various spirits before letting them go. With the new update coming the developer said it is the biggest yet with a new island to explore, there's two new spirits to make friends with and a hospital to bring back from the brink. On top of that there's also some sort of new platforming event and new upgrades for your ferry.