May 2025 - wlug - list.wlug.org.nz

Fedora 43 to Remove GNOME X11 Support
by Peter Reutemann 07 May '25

07 May '25

'X11 is singing its swan song. While some Linux distributions still rely on it, the major players are steadily moving toward replacing it with Wayland or even dropping X11 support entirely. Now, Fedora is also making clear moves in that direction. That said, yesterday, Neal Gompa made a new proposal to remove every GNOME X11 package from the distribution’s repositories. If the Fedora Engineering and Steering Committee (FESCo) accepts the “Wayland-only GNOME” change for Fedora Linux 43 (scheduled for release in late October or early November), users who still log in to “GNOME on Xorg” will be transparently switched to the default GNOME Wayland session. For GNOME developers, X11 has been on extended life support for quite a while. Upstream maintainers finished addressing the last user-experience blockers with GNOME 48 and plan to disable X11 at compile time in GNOME 49, with complete removal slated for GNOME 50.' -- source: https://linuxiac.com/fedora-43-to-remove-gnome-x11-support/ Cheers, Peter

1 0

Microsoft Makes Fedora an Official Windows Subsystem for Linux (WSL) Distribution
by Peter Reutemann 07 May '25

07 May '25

'Fedora Linux is now officially available as a Windows Subsystem for Linux (WSL) distribution! That's right, folks, following prior testing, you can now run Fedora 42 natively inside Windows using WSL. As someone who considers Fedora to be my favorite Linux distribution, this is a pretty exciting development. Installing it is simple enough. Just open up a terminal and type wsl --install FedoraLinux-42 to get started. After that, launch it with wsl -d FedoraLinux-42 and set your username. No password is required by default, and you'll automatically be part of the wheel group, meaning you can use sudo right out of the gate.' -- source: https://linux.slashdot.org/story/25/05/06/1652215 Cheers, Peter

1 0

Hundreds of E-Commerce Sites Hacked In Supply-Chain Attack
by Peter Reutemann 06 May '25

06 May '25

'Ars Technica reports: Hundreds of e-commerce sites, at least one owned by a large multinational company, were backdoored by malware that executes malicious code inside the browsers of visitors, where it can steal payment card information and other sensitive data, security researchers said Monday. The infections are the result of a supply-chain attack that compromised at least three software providers with malware that remained dormant for six years and became active only in the last few weeks. At least 500 e-commerce sites that rely on the backdoored software were infected, and it's possible that the true number is double that, researchers from security firm Sansec said. Among the compromised customers was a $40 billion multinational company, which Sansec didn't name. In an email Monday, a Sansec representative said that "global remediation [on the infected customers] remains limited." "Since the backdoor allows uploading and executing arbitrary PHP code, the attackers have full remote code execution (RCE) and can do essentially anything they want," the representative wrote. "In nearly all Adobe Commerce/Magento breaches we observe, the backdoor is then used to inject skimming software that runs in the user's browser and steals payment information (Magecart)." The three software suppliers identified by Sansec were Tigren, Magesolution (MGS), and Meetanshi. All three supply software that's based on Magento, an open source e-commerce platform used by thousands of online stores. A software version sold by a fourth provider named Weltpixel has been infected with similar code on some of its customers' stores, but Sansec so far has been unable to confirm whether it was the stores or Weltpixel that were hacked. Adobe has owned Megento since 2018.' -- source: https://it.slashdot.org/story/25/05/05/2034207/hundreds-of-e-commerce-sites… Cheers, Peter

1 0