Ubuntu Weekly Newsletter Issue 834

Welcome to the Ubuntu Weekly Newsletter, Issue 834 for the week of March 31 - April 6, 2024

In this Issue

  • Xz/liblzma security update (post #2)
  • Noble Numbat Beta milestone delayed (xz/liblzma security update)
  • Welcome New Members and Developers
  • Ubuntu Stats
  • Hot in Support
  • Ubuntu Noble Numbat (24.04) Release Party at Tàrrega (Saturday May 18, 2024)
  • Ubuntu 24.04 InstallFest + Workshop - Apr 27th @Busan
  • LoCo Events
  • Ubuntu Telegram channel in english
  • Lubuntu Council Elections 2024
  • Kubuntu Graphic Design Contest Deadline Extension
  • New LXD image server available (images.lxd.canonical.com)
  • Netplan v1.0 paves the way to stable, declarative network management
  • Other Community News
  • Ubuntu Cloud News
  • Canonical News
  • Featured Audio and Video
  • Meeting Reports
  • Upcoming Meetings and Events
  • Updates and Security for Ubuntu 20.04, 22.04, and 23.10
  • And much more!

General Community News

Xz/liblzma security update (post #2)

Brian Murray provides a follow up about the Xz/liblzma or CVE-2024-3094 giving us more details. We’re reminded Ubuntu 24.04 daily builds were never impacted. To be affected one must have manually installed the infected libraries (from noble-proposed).

https://discourse.ubuntu.com/t/xz-liblzma-security-update-post-2/43801

Noble Numbat Beta milestone delayed (xz/liblzma security update)

Łukasz ‘sil2100’ Zemczak on behalf of the Ubuntu Release team reports that as a result of CVE-2024-3094, Canonical has decided to rebuild all binary packages built after the bad xz-utils code was committed; thus the beta release of Ubuntu 24.04 LTS has been rescheduled to April 11, 2024 (from April 4).

https://lists.ubuntu.com/archives/ubuntu-devel-announce/2024-April/001346.html

Welcome New Members and Developers

Congratulations to this contributor!

Ubuntu Stats

Bug Stats

  • Open: 144175 (-36)
  • Critical: 319 (-6)
  • Unconfirmed: 72527 (-104)

As always, the Bug Squad needs more help. If you want to get started, please see: https://wiki.ubuntu.com/BugSquad

Translations

  • Ukrainian: 87.98% (38258/1121)
  • German: 86.45% (43137/419)
  • French: 82.34% (56201/7260)
  • Spanish: 80.23% (62929/4897)
  • Swedish: 77.83% (70551/999)

Hot in Support

Ask Ubuntu Top 5 Questions

Ask (and answer!) questions at: https://askubuntu.com/

Ubuntu Forums Top 5 Threads

Find more support at: https://ubuntuforums.org/

LoCo News

Ubuntu Noble Numbat (24.04) Release Party at Tàrrega (Saturday May 18, 2024)

Walter Garcia Fontes tells us the Ubuntu Catalan team has a Ubuntu Noble Numbat (24.04) Release party scheduled for May 18, 2024. We’re given details, and told how to register for attendance.

https://discourse.ubuntu.com/t/ubuntu-noble-numbat-24-04-release-party-at-tarrega-saturday-may-18-2024/43752

Ubuntu 24.04 InstallFest + Workshop - Apr 27th @Busan

Yeonguk Choo informs us of a Ubuntu 24.04 Install Fest and Workshop in Busan Korea. We’re given details of date/time (April 27, 2024) and its location, plus we are given some details of talks (including that they’re all in Korean). Links are provided for more details and how to register.

https://discourse.ubuntu.com/t/ubuntu-24-04-installfest-workshop-apr-27th-busan/43786

LoCo Events

The following LoCo team events are currently scheduled in the next two weeks:

Looking beyond the next two weeks? Visit the respective LoCo Team calendar to browse upcoming events.

Please see:

The Hub

Ubuntu Telegram channel in english

Alexander Bejarano tells us the Ubuntu Columbia team has added an sub-channel on Telegram that is using English. We’re given a link to the channel.

https://discourse.ubuntu.com/t/ubuntu-telegram-channel-in-english/43748

Lubuntu Council Elections 2024

Simon Quigley provides notice of the Lubuntu Council elections for 2024: giving details, timeline, and a link to the Lubuntu Discourse post for more info.

https://discourse.ubuntu.com/t/lubuntu-council-elections-2024/43769

Kubuntu Graphic Design Contest Deadline Extension

Rick Timmis reports the extension of the submission deadline for the Kubuntu Brand Graphic Design contest. We’re told there has been ‘overwhelming engagement’ which led to the extension to April 6, 2024. In the provided details the new plan of action/review are provided, and links for more info.

https://discourse.ubuntu.com/t/kubuntu-graphic-design-contest-deadline-extension/43816

New LXD image server available (images.lxd.canonical.com)

Thomas Parrott writes that the LXD team is pleased to announce a new image server that will hold non-Ubuntu server images for both containers and VMs. We’re told it is open for testing, though images for amd64 only are currently being built. Details and links are provided, with us told these are currently unofficial images intended for testing.

https://discourse.ubuntu.com/t/new-lxd-image-server-available-images-lxd-canonical-com/43824

New webinar on AI/ML on the public cloud with open source

Aaron Whitehouse tells us he and Andreea Munteanu recorded a webinar on open source tooling for AI/ML projects using public clouds. We’re provided a link and told this thread can be used for comments or questions.

https://discourse.ubuntu.com/t/new-webinar-on-ai-ml-on-the-public-cloud-with-open-source/43828

The Planet

Netplan v1.0 paves the way to stable, declarative network management

Lukas Märdian reports the release of Netplan v1.0. We’re told there have been about eighty contributors to the work in the last seven years, before given a list of the highlights of this release. Many links for more details are given, and we’re told this is now the default for Ubuntu 23.10 Desktop and later.

https://blog.slyon.de/2024/04/04/netplan-v1-0-paves-the-way-to-stable-declarative-network-management/

Other Community News

Flathub now prominently notes unverified Flatpak apps

Liam Dawe reminds us briefly of Canonical Snap package scams, before telling us of the changes occurring at Flathub that will make it easier to detect unverified flatpak packages. We’re shown an example screenshot, and given links if we need to read further.

https://www.gamingonlinux.com/2024/04/flathub-now-prominently-notes-unverified-flatpak-apps/

German state moving 30,000 PCs to LibreOffice

Mike Saunders informs us that the German federal state of Schleswig-Holstein is moving away from Microsoft Windows and Microsoft Office on the 30,000 PCs used by the local government. Mike quotes from the Minister-President, and mentions breaches of the European Data Protection Supervisor laws. We’re given a additional link to the full statement of the State Chancellery (German only).

https://blog.documentfoundation.org/blog/2024/04/04/german-state-moving-30000-pcs-to-libreoffice/

Ubuntu Cloud News

Canonical News

Featured Audio and Video

Ubuntu Security Podcast: Episode 224

“It’s been an absolutely manic week in the Linux security community as the news and reaction to the recent announcement of a backdoor in the xz-utils project was announced late last week, so we dive deep into this issue and discuss how it impacts Ubuntu and give some insights for what this means for the open source and Linux communities in the future.”

https://ubuntusecuritypodcast.org/episode-224/

Ubuntu Portugal Podcast: Episode 293 - A Microsoft salvou o Linux

“Não, não é uma mentira de 1 de Abril (até porque gravámos no dia 2). A semana foi agitada, plena de arreliações e polémicas; o mundo ficou de pernas para o ar com o “backdoor” XZ; um funcionário da Microsoft salvou o Linux; a Canonical meteu ordem nos snaps de criptomoedas; o Miguel perdeu a paciência com séries do Japão Feudal que o levaram a experimentar Debian Bookworm em Raspberry pi; alguém abriu um bug no Bugzilla, o Diogo tem um brinquedo novo com botões que já está no carrinho de compras; e no meio disso tudo ainda tivemos tempo para fazer as malas a caminho da Wikicon em Évora.”

https://podcastubuntuportugal.org/e293/

Destination Linux: episode 364 - SCaLE 21x

“DL Crew goes to SCaLE 21x, Largest Community Linux Expo in North America”

https://tuxdigital.com/podcasts/destination-linux/dl-364/

Changelog News: Episode 88 - Who in the world is Jia Tan?

“The big story right now is the recently uncovered backdoor in liblzma (aka XZ) – a relatively obscure compression library that happens to be a dependency of OpenSSH.
This incident is noteworthy for so many reasons: the exploit itself, how it was deployed, how it was found, what it says about our industry & how the community reacted. Let’s dig in!”

https://changelog.com/news/88

Meeting Reports

Upcoming Meetings and Events

Times shown are UTC unless otherwise specified. For more details and farther dates please visit: https://fridge.ubuntu.com/calendars/

Updates and Security for Ubuntu 20.04, 22.04, and 23.10

Security Updates

Ubuntu 20.04 Updates

End of Standard Support: April 2025

Ubuntu 22.04 Updates

End of Standard Support: April 2027

Ubuntu 23.10 Updates

End of Life: July 2024

Subscribe

Get your copy of the Ubuntu Weekly Newsletter delivered each week to you via email at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-news

Or follow us via our various social media presences:

Archive

You can always find older Ubuntu Weekly Newsletter issues at: https://wiki.ubuntu.com/UbuntuWeeklyNewsletter/Archive

Further News

As always you can find more Ubuntu news and announcements at:

Conclusion

Thank you for reading the Ubuntu Weekly Newsletter.

See you next week!

Credits

The Ubuntu Weekly Newsletter is brought to you by:

  • Krytarik Raido
  • Bashing-om
  • Chris Guiver
  • Wild Man
  • And many others

Glossary of Terms

Other acronyms can be found at: https://discourse.ubuntu.com/t/glossary-uwn/42405

Get Involved

The Ubuntu community consists of individuals and teams, working on different aspects of the distribution, giving advice and technical support, and helping to promote Ubuntu to a wider audience. No contribution is too small, and anyone can help. It’s your chance to get in on all the community fun associated with developing and promoting Ubuntu. More on this at: https://community.ubuntu.com/contribute/

Or get involved with the Ubuntu Weekly Newsletter team! We always need summary writers and editors, if you’re interested, learn more at: https://discourse.ubuntu.com/t/joining-the-ubuntu-weekly-newsletter-team/40929

Feedback

This document is maintained by the Ubuntu Weekly News Team. If you have a story idea or suggestions for the Weekly Newsletter, join the Ubuntu News Team mailing list at https://lists.ubuntu.com/mailman/listinfo/Ubuntu-news-team and submit it. Ideas can also be added to the wiki at https://discourse.ubuntu.com/t/ubuntu-weekly-newsletter-ideas/40053/. If you’d like to contribute to a future issue of the Ubuntu Weekly Newsletter, please feel free to edit the appropriate wiki page. If you have any technical support questions, please check https://community.ubuntu.com/help-information/ for more information on where to get help.

Except where otherwise noted, this issue of the Ubuntu Weekly Newsletter is licensed under a Creative Commons Attribution ShareAlike 3.0 License.

3 Likes