The Cybersecurity and Infrastructure Security Agency (CISA) recently conducted an in-depth Red Team Assessment (RTA) to enhance cybersecurity in US critical infrastructure sectors. One critical infrastructure organization requested this ass...
Red Hat has brought its Universal Base Image to Docker Hub as “Verified Publisher” images in an effort to help developers and operators build more secure and scalable containerized solutions.
The Linux Foundation Technical Advisory Board reports on what was found in its complete examination of University of Minnesota patches, putting out the fire between the Linux kernel community and the University of Minnesota (UMN).
The researchers who prompted the University of Minnesota's ban from Linux kernel development are attempting to bury the hatchet, and have issued an apology letter to the Linux community.
Some researchers from the University of Minnesota tried to slip bad patches into the Linux kernel as a "test." When they kept trying, Greg Kroah-Hartman, the Linux kernel maintainer for the stable branch, put an end to their efforts by banning their university from Linux development.
In the latest sign of the growing influence of open source software, the Linux Foundation has announced that it is creating a new research unit to provide greater insight into open-source technology, as well as the people creating it. Among the group’s priorities are examining diversity and security.
Microsoft is open-sourcing the CodeQL queries that it used to investigate the impact of Sunburst or Solarigate malware planted in the SolarWinds Orion software updates, enabling other organizations to use the queries to perform a similar analysis. Mike Hanley, CSO of GitHub, says CodeQL provides, "key guardrails that help developers avoid incidents and shipping vulnerabilities".
As part of an effort to advance Linux security, Sysdig has donated a sysdig kernel module, along with libraries for the Falco security platform for Kubernetes, to the Cloud Native Computing Foundation (CNCF).
With the popular Linux distro's acquisition of StackRox, Red Hat is taking a major step forward in securing not only its own Kubernetes distribution, OpenShift, but other Kubernetes distros as well.
Node.js is wildly popular - but the open-source JavaScript runtime is not easy to learn. Now is the perfect time to pick it up - the Linux Foundation is offering a free online Node.js class.
Linus Torvalds has released Linux kernel version 5.11 with plenty of support updates for Intel, AMD and Arm-based hardware - and he seems to be content. "In fact, it's a smaller-than-average set of commits from rc7 to final, which makes me happy. And I already have several pull requests lined up for tomorrow, so we're all set for the merge window to start," noted Torvalds announcing the release over the weekend.
SpamCop - Cisco's anti-spam service - failed to renew spamcop.net over the weekend, causing it to lapse and resulting in countless messages being falsely labeled and rejected as spam around the world.
OpenSSF was launched in August of 2020 as “a cross-industry collaboration that brings together leaders to improve the security of open source software (OSS)”. This article provides an overview of OpenSSF's mission, what it’s accomplished in its first six months and its plans for the future.
A free, community-driven fork of Red Hat Enterprise Linux, AlmaLinux will serve as drop-in alternative for CentOS
PALO ALTO, Calif., January 12, 2021 -- CloudLinux has named the free CentOS replacement AlmaLinux, which will be available in the first quarter this year. Previously, it was code-named Project Lenix.
CloudLinux announced the drop-in CentOS alternative last month, committing $1 million annually in development.
“The demise of the CentOS stable release left a very large gap in the Linux community which prompted CloudLinux to step in and launch a CentOS alternative,” said Igor Seletskiy, CEO and founder of CloudLinux Inc.. “For CloudLinux it was an obvious move: the Linux community was in need, and the CloudLinux OS is a CentOS clone with significant pedigree – including over 200,000 active server instances. AlmaLinux is built with CloudLinux expertise but will be owned and governed by the community. We intend to deliver this forever-free Linux distribution this quarter.”
AlmaLinux references the Latin-language word for soul. CloudLinux chose the name AlmaLinux in honor of the tireless efforts of the Linux community, efforts that started with Linus Torvalds’ first Linux kernel release in 1991. The diverse individuals and organizations that constitute the Linux community have developed Linux into a flexible operating system (OS) kernel that powers everything from desktops to enterprise servers. Go to AlmaLinux OS - Forever-Free Enterprise-Grade Operating System for more information.
In delivering AlmaLinux to the community, CloudLinux pivots off its existing, established Linux expertise. The team at CloudLinux has spent 10 years building, developing, and supporting the CloudLinux OS. CloudLinux OS supports enterprise-scale server fleets in the cloud and is in itself a version of CentOS, the free RHEL fork.
“Why alma? Just like every developer and every user that relies on a Linux-powered OS, we at CloudLinux benefit from the dedicated and often selfless efforts of the Linux community. This community is the soul of Linux. In the spirit of the Linux community, we decided to name our new distribution AlmaLinux”, said Seletskiy.
Following Red Hat’s December 2020 announcement that the CentOS stable release is no longer under development, CloudLinux launched a project to deliver a drop-in replacement. The project was code-named Project Lenix.
Project Lenix has now crystallized into AlmaLinux, a 1:1 binary compatible fork of RHEL 8, with an effortless migration path from CentOS to AlmaLinux. Future RHEL releases will also be forked into a new AlmaLinux release. CloudLinux backs AlmaLinux with $1 million annual investment in development, and a commitment to supporting AlmaLinux through 2029.
About CloudLinux
CloudLinux is on a mission to continually increase security, stability and availability of Linux servers and devices.
Headquartered in Palo Alto, California, CloudLinux Inc. develops a hardened Linux distribution, Linux kernel live security patching, extended support options for Linux, and web server security software used by enterprises, service providers, governments and universities all over the world.
CloudLinux has more than 4,000 customers and partners, more than 500,000 product installations globally, and dedicated analysts and developers that together have more than 450 years' worth of Linux experience along with a passion for delivering the best customer care.
For more information, visit CloudLinux OS: The Platform for Linux Web Hosting..
# # #
Contact:
Glenn Rossman
Eckert Communications (for CloudLinux)
This email address is being protected from spambots. You need JavaScript enabled to view it.
914-623-8354
RedHat's acquisition of StackRox underscores the growing significance of DevSecOps. "DevSecOps, the best of DevOps and security operations, is becoming a top priority for enterprise customers. StackRox, with its integration with existing DevOps and CI/CD tools, delivers seamless DevSecOps for Kubernetes."
SUSE's acquisition of open-source Kubernetes startup Rancher Labs closed earlier this month - and this decision could very well make the German company behind the SUSE Linux distro the hybrid cloud company to watch in 2021.
The Linux Foundation's OpenSSF is offering training courses to help keep the open source ecosystem secure by teaching DevOps professionals how to develop secure software.
The Linux Foundation's Open Source Security Foundation (OpenSSF) looks to jointly mitigate risks inherent to the open-source style of development, and the foundation just announced that a total of 16 new contributors have joined OpenSSF including Canonical, Facebook, Samsung, Huawei Technologies, and more.