Linux Weekly News

Security updates for Wednesday

1 év 1 hónap óta
Security updates have been issued by Debian (firefox-esr, openjdk-17, and wpa), Gentoo (aiohttp, Bitcoin, Cairo, Go, json-c, Levenshtein, libXpm, nghttp2, PostgreSQL, and Redis), Red Hat (kernel, kernel-rt, python-setuptools, python-urllib3, python3.11-setuptools, and wget), Slackware (mozilla), SUSE (bind, curl, docker, ffmpeg, ffmpeg-4, kernel, kernel-firmware, libnbd, patch, shadow, and thunderbird), and Ubuntu (python-django and wpa).
jzb

[$] CircuitPython: Python for microcontrollers, simplified

1 év 1 hónap óta
CircuitPython is an open-source implementation of the Python programming language for microcontroller boards. The project, which is sponsored by Adafruit Industries, is designed with new programmers in mind, but it also has many features that may be of interest to more-experienced developers. The recent 9.1.0 release adds a few minor features, but it follows just a few months after CircuitPython 9.0.0, which brings some more significant changes, including improved graphics and USB support.
jake

Security updates for Tuesday

1 év 1 hónap óta
Security updates have been issued by Debian (libreoffice), Gentoo (containerd and firefox), Red Hat (httpd), SUSE (ca-certificates-mozilla, ksh, openssl-3-livepatches, podman, python-Twisted, and skopeo), and Ubuntu (imagemagick).
corbet

[$] Handling filesystem interruptibility

1 év 1 hónap óta
David Howells wanted to discuss changing the way filesystem code handles the ability to interrupt or kill operations, in order to fix some longstanding problems with network (and other) filesystems, in a session at the 2024 Linux Storage, Filesystem, Memory Management, and BPF Summit. As noted in his session proposal, some filesystems may be expecting to not be interruptible, but are calling code can take locks and mutexes that are interruptible (or killable), which are effectively changing the state of the task incorrectly. He would like to find a solution for that problem.
jake

[$] The complexity of BUSL transformation

1 év 1 hónap óta

The Business Source License (BUSL) is a source-available license that "converts" to an open-source license after a period of time. In theory, this means that a few years after a version of a product is released under the BUSL, it becomes open source and is fair game for Linux distributions to package along with regular open-source projects. In practice, the license throws a few curveballs that require special consideration and caution, as the Fedora Project recently discussed.

jzb

GNU Binutils 2.43 released

1 év 1 hónap óta
Version 2.43 of the GNU Binutils package is out. Changes include some improvements to the assembler and the linker, better support for hardware event counters in the Gprofng profiler, and more.
corbet

Security updates for Monday

1 év 1 hónap óta
Security updates have been issued by Debian (openjdk-11), Fedora (bind, bind-dyndb-ldap, chromium, ffmpeg, hostapd, trafficserver, and wpa_supplicant), and Ubuntu (curl and linux-oem-6.5).
jake

Kernel prepatch 6.11-rc2

1 év 1 hónap óta
Linus has released 6.11-rc2 for testing. "Hopefully we've gotten rid of the bulk of the silly noise here in rc2, and not added too much new noise, so that we can get on with the process of finding more meaningful issues."
corbet

[$] Divvi Up: privacy-respecting telemetry aggregation

1 év 1 hónap óta

There is ongoing discussion about the ethics and effectiveness of telemetry following some recent LWN articles that touched on Thunderbird's use of opt-out telemetry and planned metrics in Fedora. The Internet Security Research Group (ISRG), the nonprofit behind Let's Encrypt, has a potential solution to the problem of how to collect and aggregate telemetry without violating users' privacy. The scheme is based on a draft protocol being standardized with the Internet Engineering Task Force (IETF), and has an open-source implementation available.

daroc

Security updates for Friday

1 év 1 hónap óta
Security updates have been issued by Fedora (chromium), SUSE (docker and patch), and Ubuntu (bind9, gross, linux-azure, linux-azure-4.15, linux-lowlatency-hwe-6.5, and tomcat8, tomcat9).
daroc

Sovereign Tech Fund introduces fellowship pilot program

1 év 1 hónap óta

The Sovereign Tech Fund (STF) has announced a fellowship program to support "the dedicated individuals who keep our digital infrastructure running":

Over the past two years, STF has successfully contracted over 40 FOSS projects, enhancing their technical sustainability through targeted milestones. However, the activities of maintainers, who often work on multiple FOSS projects, are hard to quantify for funding applications, as the demands and challenges vary and can change quickly. This is where the fellowship for maintainers comes into play.

According to the fellowship page the STF plans to fund five fellowships, beginning in the fourth quarter of this year, for a period of 12 months.

jzb

[$] Maximal min() and max()

1 év 1 hónap óta
Like many projects written in C, the kernel makes extensive use of the C preprocessor; indeed, the kernel's use is rather more extensive than most. The preprocessor famously has a number of sharp edges associated with it. One might not normally think of increased compilation time as one of them, though. It turns out that some changes to a couple of conceptually simple preprocessor macros — min() and max() — led to some truly pathological, but hidden, behavior where those macros were used.
corbet

Mel Chua RIP

1 év 1 hónap óta

We have received the sad news that Dr. Mel Chua has passed away. Mel was probably best known in the free-software community as a contributor to the Fedora Project in its early days. The Fedora Community blog honored Mel recently after she had moved to hospice care with tributes from several Fedorans. Stephen Jacobs wrote:

I can't find the words to express how much of a positive impact Mel has had on my work, our shared work, my family, the experiences of my students, and the world of FOSS writ large. Nor can I find the words to convey just how much I will miss her.

Mel will be greatly missed.

jzb

Security updates for Thursday

1 év 1 hónap óta
Security updates have been issued by Debian (chromium), Fedora (kernel, obs-cef, and xen), Mageia (emacs), Oracle (freeradius, freeradius:3.0, and kernel), Red Hat (emacs, httpd, and kpatch-patch-4_18_0-305_120_1), Slackware (curl), SUSE (apache2, cockpit-wicked, glibc, gnutls, gvfs, less, nghttp2, opensc, python-idna, python-requests, qemu, rpm, tpm2-0-tss, tpm2.0-tools, and unbound), and Ubuntu (clickhouse, exim4, libcommons-collections3-java, linux, linux-aws, linux-kvm, linux-lts-xenial, mysql-8.0, openssl, php-cas, prometheus-alertmanager, and snapd).
jzb

[$] Showing up for Python in GNOME

1 év 1 hónap óta

A few years ago, PyGObject—the Python package that provides bindings for GTK and GNOME applications—was not faring particularly well. Several maintainers had left the project and its development was not keeping pace with changes in GTK. At this year's GUADEC, Dan Yeaw presented a talk about the project's decline, improvements in the last year, and his experience getting involved in an undermaintained project.

jzb
Ellenőrizve
2 perc 17 másodperc ago
LWN.net is a comprehensive source of news and opinions from and about the Linux community. This is the main LWN.net feed, listing all articles which are posted to the site front page.
Feliratkozás a következőre: Linux Weekly News hírcsatorna