Hi there!
Welcome to this month’s AlmaLinux newsletter, where we share the latest AlmaLinux happenings, upcoming events, and more.
Quick notes - find more information below!
Patches for CVE-2024-6387 (regreSSHion) and CVE-2024-6409 are available for AlmaLinux OS 9 users.
We're testing a patch for glibc
A new version of ELevate will be released next week - testers wanted!
Earlier this month, we announced that CTJ has renewed its platinum sponsorship. We also announced 3 new 2024 sponsors!
We just announced 3 Silver Sponsor Members for 2024: Codenotary, ATIX AG, and StorPool Storage AD! We’re so grateful for the contributions of our every-growing list of sponsor members, as more and more companies prove that they believe in what we do. You can read more about our sponsors here!
Recently, the VFX community was faced with a regression in glibc causing instability for very commonly used software in RHEL 9.4 and distributions based on it. The fix has been available upstream but was only recently released to CentOS Stream 9. We need your help testing the fix before we consider releasing it ourselves. Learn more in this blog post!
benny joined a webinar with one of our newest Sponsor Members at the Foundation to talk about why and how people use AlmaLinux. Watch the recording here!
We have been doing a ton of work to automate our image creation, and have been making some important changes for AlmaLinux 9.4 and 8.10 images. You can find a complete breakdown in this recent blog post.
On June 30th CentOS 7 hit end-of-life, ending the long-loved and widely used CentOS Linux era. While the CentOS Project continues on with CentOS Stream, much of the world still needs another option for upgrading CentOS 7. The AlmaLinux community has a few options you can check out in this blog post!
Another recently disclosed vulnerability in OpenSSH in glibc-based Linux systems involves a signal handler race condition, which could expose your system to potential security risks. The OpenSSH patch for CVE-2024-6409 has been released and is available for AlmaLinux OS 9 users. The decision to build the update and push the package to production without waiting for a CentOS Stream or RHEL update was made by our newly-formed technical steering committee, ALESCo. Learn more in this blog post.
In January we announced the availability of ELevateNG (Next Generation) for testing. ELevateNG is based on leapp version 0.19.0 and includes upstream features and bugfixes.
Unless we encounter any blockers, the current version of ELevateNG will move to stable the week of August 5th. Check out this blog post to learn more!
Our friends at Cybertrust Japan Co., Ltd, have renewed their platinum sponsor membership. As a subsidiary of SB Technology Corp, this level of commitment to the foundation is huge, and we cannot thank them enough. Cybertrust Japan’s sizable contributions to AlmaLinux will allow us to expand AlmaLinux OS’s security and adoption in Asia. We’ve also seen a noticeable upswing in the adoption of AlmaLinux in Japan! Learn more in this blog post.
Security is our top priority at AlmaLinux and we aim to deliver patches to our users as quickly as possible. If you aren’t already aware, a vulnerability in OpenSSH in glibc-based Linux systems that was published on July 1, 2024.
We made the decision to make this patch available that same day for AlmaLinux OS 9 users. The decision to build the update and push the package to production on our own (without a CentOS Stream/RHEL update) was made by our newly-formed technical steering committee, ALESCo.
We are committed to working upstream and have submitted this patch to CentOS Stream 9 to benefit the whole ecosystem. You can learn more in this blog post.
July was also pretty light on events, though we did attend Academy Open Source Days and are currently attending SIGGRAPH. Here’s what’s coming up for the rest of the year:
Flock to Fedora, August 7-10 in Rochester New York, US
NERDEARLA, September 24-28, 2024 in Buenos Aires, Argentina
All things open, October 27-29 in Raleigh, North Carolina, US
Seagl, November 8-9 in Seattle, Washington, US
SC (formerly Supercompute), November 17-22 in Atlanta, Georgia, US
If you see an event missing that you think we should attend, or if you know of any amazing open source events in Asia, South America, or Africa, let us know! Our community is growing quickly in those areas, and we’d love a chance to connect with them!
We’re also looking for volunteers from the AlmaLinux community to help staff our booths. If you like chatting with folks about Linux and open source and are local to any of these events (or any others that you think we should be at) fill out this Google form! We’ll cover your travel and hotel.
benny Vasquez
Chair, Board of Directors @AlmaLinux OS Foundation
I am sending this message now because it suits me, but I don’t expect that you will read, respond to, or act on it outside of comfortable hours for your time zone.