Linux Weekly News

Security updates for Friday

11 hónap 4 hét óta
Security updates have been issued by Fedora (haproxy, osc, and python3.11), Oracle (389-ds:1.4), Red Hat (kernel), SUSE (clamav, colord, kernel, postgresql16, and qemu), and Ubuntu (linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle, linux-raspi, linux-azure, linux-azure-5.15, linux-azure-fde, linux-lowlatency-hwe-6.8, linux-nvidia-6.8, and linux-xilinx-zynqmp).
jzb

[$] Debating ifupdown replacements for Debian trixie

11 hónap 4 hét óta

Debian does not have an official way to configure networking. Instead, it has four recommended ways to configure networking, one of which is the venerable ifupdown, which has been part of Debian since the turn of the century and is showing its age. A conversation about its maintainability and possible replacement with ifupdown‑ng has led to discussions about the default network-management tools for Debian "trixie" (Debian 13, which is expected in 2025) and beyond. No route to consensus has been found, yet.

jzb

Security updates for Thursday

1 év óta
Security updates have been issued by Debian (chromium and redis), Fedora (nextcloud, python3.10, python3.13, python3.6, vim, and wolfssl), Mageia (expat, libpcap, and microcode), Oracle (dovecot, kernel, and kernel-container), Red Hat (kernel and krb5), SUSE (389-ds, colord, containerd, curl, expat, glib2, go1.22, go1.23, kernel, libpcap, postgresql16, and runc), and Ubuntu (expat, libxmltok, linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oem-6.8, linux-oracle, linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux-azure, linux-iot, linux-nvidia, linux-nvidia-lowlatency, python-setuptools, setuptools, tiff, and unbound).
jake

[$] A mess in the Python community

1 év óta
The Python community has been roiled, to a certain extent, by an action taken by the steering council (SC): the three-month suspension of a unnamed—weirdly—Python core developer. Tim Peters is the developer in question, as he has acknowledged, though it could easily be deduced from the SC message. Peters has been involved in the project from its early days and, among many other things, is the author of PEP 20 ("The Zen of Python"). The suspension was due to violations of the project's code of conduct that stem from the discussion around a somewhat controversial set of proposed changes to the bylaws for the Python Software Foundation (PSF) back in mid-June.
jake

Security updates for Wednesday

1 év óta
Security updates have been issued by AlmaLinux (389-ds:1.4, dovecot, emacs, and glib2), Fedora (bluez, iwd, libell, linux-firmware, seamonkey, vim, and wireshark), Mageia (apr, libtiff, Nginx, openssl, orc, unbound, webmin, and zziplib), Red Hat (389-ds:1.4), and SUSE (containerd, curl, go1.22, go1.23, gstreamer-plugins-bad, kernel, ntpd-rs, python-Django, and python311).
jzb

Pandoc 3.4 released

1 év óta

Version 3.4 of the Pandoc document-conversion tool has been released. Notable changes in this release include a new ANSI output format (for console output), a switch to WeasyPrint as the PDF engine for HTML to PDF conversion, the ability to position captions above or below tables and figures, and much more.

jzb

[$] The trouble with iowait

1 év óta
CPU scheduling is a challenging job; since it inherently requires making guesses about what the demands on the system will be in the future, it remains reliant on heuristics, despite ongoing efforts to remove them. Some of those heuristics take special note of tasks that are (or appear to be) waiting for fast I/O operations. There is some unhappiness, though, with how this factor is used, leading to a couple of patches taking rather different approaches to improve the situation.
corbet

Radicle 1.0 released

1 év óta
Version 1.0 of the Radicle development platform has been released.

Radicle 1.0 represents the culmination of years of experimentation and hard work from our team and community, where we set out to ensure that free and open source software ecosystems can flourish without having to rely on the whims of Big Tech. We designed Radicle with a first-principles approach, as a natural extension to Git, expanding it to work in a collaborative, local-first, peer-to-peer setting.

LWN looked at Radicle in March.

corbet

Security updates for Tuesday

1 év óta
Security updates have been issued by Debian (cacti), Fedora (aardvark-dns, expat, and firefox), Mageia (ffmpeg, ntfs-3g, and vim), Oracle (emacs, glib2, java-11-openjdk, and qt5-qtbase), Red Hat (emacs, python-setuptools, python3.11, python3.11-setuptools, python3.12-setuptools, python3.9, and python39:3.9), Slackware (netatalk), SUSE (buildah, expat, java-1_8_0-ibm, kanidm, kernel, and postgresql16), and Ubuntu (netty, php7.0, php7.2, tiff, and webkit2gtk).
corbet

Redox OS 0.9.0

1 év óta

Version 0.9.0 of Redox OS, an open-source, Unix-like operating system written in Rust, has been released. Notable changes in this release include performance and stability improvements, better management of physical and virtual memory, bootloader improvements, and more. It also brings support for RustPython, Perl 5, Simple HTTP Server, the addition of several applications including GNU Nano, Helix, and the COSMIC Files, Editor, and Terminal applications. See the changelog section of the announcement for a full list of changes in the release.

jzb

[$] Attracting and retaining Debian contributors

1 év óta
Many projects struggle with attracting and retaining contributors; Debian is no different in that regard. At DebConf24, Carlos Henrique Lima Melara and Lucas Kanashiro gave a presentation about efforts that the Brazilian Debian community has made to increase participation. Their ideas and the lessons learned can be applied more widely, both for other Debian communities and for other projects.
jake

Security updates for Monday

1 év óta
Security updates have been issued by Debian (amanda, aom, bluez, python-jwcrypto, and thunderbird), Fedora (chromium, firefox, and thunderbird), Red Hat (bubblewrap and flatpak, containernetworking-plugins, flatpak, and runc), Slackware (python3), SUSE (apache2, bubblewrap and flatpak, postgresql16, and wireshark), and Ubuntu (thunderbird).
jake

Kernel prepatch 6.11-rc7

1 év óta
Linus has released 6.11-rc7 for testing.

And I wish I could say that things have calmed down, but I can't really say that. In fact, rc7 is slightly bigger than both rc6 and rc5 were, both in number of commits, and in actual diff size. That's not really how it should work out.

That said, there's nothing *scary* in here.

He is apparently "still waffling" about whether to release 6.11 next weekend, which would cause the 6.12 merge window to land on top of the Maintainers Summit, Linux Plumbers Conference, and Open Source Summit.

corbet

[$] Testing AI-enhanced reviews for Linux patches

1 év óta

Code review is in high demand, and short supply, for most open-source projects. Reviewer time is precious, so any tool that can lighten the load is worth exploring. That is why Jesse Brandeburg and Kamel Ayari decided to test whether tools like ChatGPT could review patches to provide quick feedback to contributors about common problems. In a talk at the Netdev 0x18 conference this July, Brandeburg provided an overview of an experiment using machine learning to review emails containing patches sent to the netdev mailing list. Large-language models (LLMs) will not be replacing human reviewers anytime soon, but they may be a useful addition to help humans focus on deeper reviews instead of simple rule violations.

jzb

NGINX has moved to Github

1 év óta

The NGINX team has announced that official NGINX open-source development has moved away from Mercurial to GitHub, and the project will now be taking contributions in the form of pull requests:

Additionally, starting today, we will begin accepting bugs reports, feature requests and enhancements directly through GitHub, under the "Issues" tab. Moreover, we've moved our community forums to the GitHub "Discussions" area, where you will now be able to engage in conversation, ask, and answer questions.

[...] We understand that changes like these may require adjustment, so to give you more time, we will continue accepting patches and provide community support via mailing lists until December 31st, 2024.

jzb
Ellenőrizve
2 perc 51 másodperc ago
LWN.net is a comprehensive source of news and opinions from and about the Linux community. This is the main LWN.net feed, listing all articles which are posted to the site front page.
Feliratkozás a következőre: Linux Weekly News hírcsatorna