Canonical/Ubuntu Leftovers
-
Ubuntu 23.10 Swapping DejaVu for Noto Fonts
Ubuntu devs plan on making a notable typographic change in the upcoming release of Ubuntu 23.10 ‘Mantic Minotaur’. In an effort to improve the quality and (marginally) reduce the number of fonts a standard Ubuntu install comes with, the plan is to ship the Noto fonts package by default. This package includes sans-serif and serif fonts that cover a swathe of latin and non-latin scripts. In current versions of Ubuntu the DejaVu fonts package is pre-installed and pre-configured to handle non-latin scripts.
-
Securing open source through CVE prioritisation | Ubuntu
According to a recent study, 96% of applications in the enterprise market use open-source software. As the open source landscape becomes more and more fragmented, the task to assess the impact of potential security vulnerabilities for an organisation can become overwhelming. Ubuntu is known as one of the most secure operating systems, but why? Ubuntu is a leader in security because, every day, the Ubuntu Security team is fixing and releasing updated software packages for known vulnerabilities. In fact, on average, the team is providing more than 3 updates each day, and the most vital updates are prepared, tested and released within 24 hours. To achieve that result, Canonical designed a robust process to review, prioritise and fix the most crucial software vulnerabilities first. Software vulnerabilities are tracked as part of the Common Vulnerabilities and Exposures (CVE) system, and almost all security updates published by the Ubuntu Security team (via Ubuntu Security Notices – USNs) are in response to a given public CVE.
-
Start your SNP VMs on Google Cloud [Ed: Surveillance ploy disguised as "confidential", begging you to outsource all your data to American companies that collaborate with the NSA]
SEV-SNP is a new security feature that is available on AMD’s EPYC processors. It stands for Secure Encrypted Virtualization Secure Nested Pages. SEV-SNP provides a new level of protection for firmware by encrypting the memory pages that contain the firmware code.