Late Night Linux – Episode 386

Great funding news for LVFS and KDE, why Europe probably needs some more home-grown distros, a conspiracy theory about Cloudflare seems unlikely, and we wonder what can be done about all the irresponsibly disclosed vulnerabilities that new tools are discovering. With guest host Andy from Linux Dev Time.

News

LVFS Sponsorship Announcement

Sovereign Tech Fund invests over €1 million in KDE software development

KDE bags €1.3M as Europe realizes it might need an OS of its own

Can Someone Please Explain Whether Cloudflare Blackmailed Canonical?

‘Dirty Frag’ Linux flaw one-ups CopyFail with no patches and public root exploit

Dirty Frag gets a sequel as Fragnesia hands Linux attackers root-level access

Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos

DirtyCBC: When Linux Kernel Decrypt-Before-MAC Turns Authenticated Encryption Into a Page-Cache Write