[$] Linux and Secure Boot certificate expiration

Linux users who have Secure Boot enabled on their systems knowingly or unknowingly rely on a key from Microsoft that is set to expire in September. After that point, Microsoft will no longer use that key to sign the shim first-stage UEFI bootloader that is used by Linux distributions to boot the kernel with Secure Boot. But the replacement key, which has been available since 2023, may not be installed on many systems; worse yet, it may require the hardware vendor to issue an update for the system firmware, which may or may not happen. It seems that the vast majority of systems will not be lost in the shuffle, but it may require extra work from distributors and users.

OIG Work Plan (Current as of July 16, 2025)

The Work Plan presents the audits and evaluations that we have planned, are developing, and are conducting to assist the Board of Governors of the Federal Reserve System and the Consumer Financial Protection Bureau in fulfilling their respective missions. Our independent oversight is statutorily mandated by the Inspector General Act of 1978 and other federal statutes, such as the Federal Information Security Modernization Act of 2014. We focus on those programs and operations in which potential deficiencies pose the highest risk to the Board and the CFPB in achieving their strategic goals, objectives, and priorities; meeting budgetary and financial commitments; and complying with applicable laws, regulations, and guidance.

Limited functionality of product MyWebsite Now

Jul 16, 12:14 EDT
Resolved - The issue has been resolved.

Jul 16, 11:47 EDT
Identified - Some customers may face issues while using their MyWebsite product. At this time, it may not be possible to use the website editor. The online websites that have already been created may also be affected.

[$] Fedora SIG changes Python packaging strategy

Fedora's NeuroFedora special-interest group (SIG) is considering a change of strategy when it comes to packaging Python modules. The SIG, which consists of three active members, is struggling to keep up with maintaining the hundreds of packages that it has taken on. What's more, it's not clear that the majority of packages are even being consumed by Fedora users; the group is trying to determine the right strategy to meet its goals and shed unnecessary work. If its new packaging strategy is successful, it may point the way to a more sustainable model for Linux distributions to provide value to users without trying to package everything under the sun.

Security updates for Wednesday

Security updates have been issued by Oracle (cloud-init, emacs, firefox, glib2, go-toolset:rhel8, kernel, lz4, python-setuptools, python3.11-setuptools, python3.12-setuptools, and socat), Red Hat (fence-agents, glib2, glibc, java-17-openjdk, kernel, kernel-rt, python-setuptools, python3.11-setuptools, and python3.12-setuptools), Slackware (libxml2), SUSE (glib2, gpg2, kernel, libxml2, poppler, rmt-server, runc, stalld, and xen), and Ubuntu (jpeg-xl).