Arguments continue but change suggests it's not Free Software anymore The Bitwarden online credentials storage service is changing its build requirements – which some commentators feel mean it's no longer FOSS.... [...]

Newly discovered flaw affects OpenSSH 8.7 and 8.8 daemon The founder of Openwall has discovered a new signal handler race condition in the core sshd daemon used in RHEL 9.x and its various offshoots.... [...]

In happier news, Ubuntu Pro extended support now goes up to 12 years After multiple waves of cryptocurrency credential-stealing apps were uploaded to the Snap store, Canonical is changing its policies.... [...]

Multiple CHERI-related projects win money for important research that prizes safety over speed The inaugural Beacon Awards has handed three prizes to projects working on safer software for CHERI-enabled hardware running on the CheriBSD operating system.... [...]

Version 2.2.2 and also 2.1.14, showing that this wasn't a new issue in the latest release The bug that was very occasionally corrupting data on file copies in OpenZFS 2.2.0 has been identified and fixed, and there's a fix for the previous OpenZFS …

Tributes paid to husband, father, son and rogue-turned-consultant Obit Kevin Mitnick, probably the world's most-famous computer hacker – and subsequently writer, public speaker, and security consultant – has succumbed to pancreatic cancer. He was 59.... [...]

G.N.U. Silicon Graphics: a company is not dead while its name is still spoken SGI may be no more but people are still using its code – and some more of that code may be about to enjoy a revival.... [...]

Getting connection failures? Don't panic. Get new keys GitHub has updated its SSH keys after accidentally publishing the private part to the world. Whoops.... [...]

Used by millions – and the first official finished version The ClamAV command-line virus scanner used on many Linux boxes has attained an important-looking milestone release: version 1.0.0.... [...]

Keeping the contents of your clusters secure from whoever's hosting them Red Hat is backing a Cloud Native Computing Foundation (CNCF) project that aims to improve the security of containers in Kubernetes clusters by running them inside hardware-enforced enclaves.... [...]

Users of cookie-warning-buster add-on already forking off due to privacy concerns The lone developer of anti-cookie-warning browser add-on "I Don't Care About Cookies" has sold it to Avast, resulting in both concern – and new forks.... [...]

Arbitrary code execution flaws in the X Keyboard Extension were bad news X.org has released a bunch of updates, which includes closing two security holes and, yes, this affects Wayland users too.... [...]

Whole new meaning for zero consequences Java versions 15 to 18 contain a flaw in its ECDSA signature validation that makes it trivial for miscreants to digitally sign files and other data as if they were legit organizations.... [...]

Update those boxes pronto – yes, we're looking at you, users of Trusty Tahr and Xenial Xerus Ubuntu has issued a batch of updates that cover the default as well as the AWS and KVM flavours for the current short-term release 21.10, both the original 5.04 and OEM …

Big Zoomer is listening to us, complain users Apple Mac users running the Zoom meetings app are reporting that it's keeping their computer's microphone on when they aren't using it.... [...]

Uh, why is the mic indicator light on all the time, netizens wonder Apple Mac users running the Zoom meetings app are reporting that it's seemingly keeping their computer's microphone on when they aren't using it.... [...]

This is the final software update from Google for the Pixel 3, 3 XL, too The February edition of Google's monthly Android security update tackles, among other vulnerabilities, an eyebrow-raising critical flaw in Android 12.... [...]

Patch now An exploit in Samba 4 allowed remote code as root due to a bug in its support for Mac clients. It's fixed in 4.13.17, 4.14.12 and 4.15.5, and in case you can't update, there are patches.... [...]

Red Hat agrees The CVE-2022-0185 vulnerability in Ubuntu is severe enough that Red Hat is also advising immediate patching.... [...]

Who should your PC work for: you, or your antivirus vendor? Germany-based security biz Avira's antivirus has enabled a new feature: " Avira Crypto ". It's opt-in, but if you click "yes", the AV will use your computer to mine Ethereum.... [...]

Eight years after Snowden, you'll never know how much they spy on you... The US Supreme Court this week refused [PDF] to hear a case that would have forced the country's hush-hush Foreign Intelligence Surveillance Court (FISC) to explain its justifications for giving the Feds the right to help …