9 hónap 1 hét óta
Greg Kroah-Hartman has released the
6.12.2,
6.11.11, and
4.19.325 stable kernels. Note that both
6.11.11 and 4.19.325 are the last kernels in those series, "please move
off to a newer kernel version". In the 4.19.325 release notice, he has
a rather longer-than-usual message, including:
As a "fun" proof that this one is finished (and that any company saying
they care about it really should have their statements validated with
facts), I looked at the "unfixed" CVEs from this kernel release.
Currently it is a list 983 CVEs long, too long to list here.
You can verify it yourself by cloning the vulns.git repo at
git.kernel.org and running:
./scripts/strak v4.19.325
Note, this does NOT count the hardware CVEs which kernel.org does not
track, and many are sill unfixed in this kernel branch.
jake
9 hónap 1 hét óta
Security updates have been issued by Fedora (thunderbird, tuned, and webkitgtk), Mageia (python-aiohttp and qemu), Oracle (container-tools:ol8, firefox, java-1.8.0-openjdk, java-11-openjdk, kernel, kernel:4.18.0, krb5, pam, postgresql:16, python-tornado, python3:3.6.8, thunderbird, tigervnc, tuned, and webkit2gtk3), Red Hat (bzip2, postgresql, postgresql:13, postgresql:15, postgresql:16, python-tornado, and ruby:3.1), Slackware (python3), SUSE (postgresql, postgresql16, postgresql17, postgresql13, postgresql14, postgresql15, python-python-multipart, and python3), and Ubuntu (python-django and recutils).
jake
9 hónap 1 hét óta
Fedora Project Leader Matthew Miller reports
that the project's search to replace Pagure as its git forge is
almost complete, with the Fedora Council strongly in favor of Forgejo:
The Council, currently, has a clear preference for Forgejo. This is a
big decision and we don't want it to feel rushed. Therefore, we're
opening this up one last time to everyone's comments. After two weeks,
we'll take our formal vote — and then get on with the work!
LWN looked at
Forgejo in February.
jzb
9 hónap 1 hét óta
Linus Walleij
writes
about a pair of security features for 32-bit Arm systems; these landed
in 6.10, but, he says, have now stabilized to the point that distributors
may want to enable them.
PAN is an abbreviation for the somewhat grammatically incorrect
Privileged Access Never. [...]
For modern ARM32 systems with large memories configured to use LPAE
nothing like PAN was available: this version of the MMU simply did
not implement a PAN option.
As of the patch originally developed by Catalin Marinas, we deploy
a scheme that will use the fact that LPAE has two separate
translation table base registers (TTBR:s): one for userspace
(TTBR0) and one for kernelspace (TTBR1).
corbet
9 hónap 1 hét óta
Linux offers two broad ways of performing I/O to files. Buffered I/O,
which is the usual way of accessing a file, stores a copy of the
transferred data in the kernel's page cache to speed future accesses.
Direct I/O, instead, moves data directly between the storage device and a
user-space buffer, avoiding the page cache. Both modes have their
advantages and disadvantages. In 2019, Jens Axboe
proposed an uncached buffered mode to get some
of the advantages of both, but that effort stalled at the time. Now,
uncached buffered
I/O is back with some impressive performance results behind it.
corbet