Hírolvasó

Read more…

Using os.urandom isn't actually the problem here though, the reason the secrets module got introduced is because people were using the random module for generating passwords and such, even though the random module doesn't produce cryptographically safe tokens.

The software Vulkan renderer in Mesa, lavapipe, achieved official Vulkan 1.3 conformance. The official entry in the table is  here . We can now remove the nonconformant warning from the driver. Thanks to everyone involved!

Cirq is a Python framework for writing, running, and analyzing the results of quantum computer programs. It was designed for near-term quantum computers, those with a few hundred qubits and few thousands of quantum gates. The significance of the 1.0 release is that Cirq has support for the vast majority of workflows for these systems and is considered to be a stable API that we will only update with breaking changes at major version numbers.

This is a follow-up to the End of Life warning sent earlier to confirm that as of July 14, 2022, Ubuntu 21.10 is no longer supported. No more package updates will be accepted to 21.10, and it will be archived to old-releases.ubuntu.com in the coming weeks.

The first possible option is the venerable sendfile syscall, which was originally added to improve the file serving performance of web servers. Originally, sendfile required the destination file descriptor to be a socket, but this restriction was removed in Linux 2.6.33. Unfortunately, sendfile is not perfect: because it only supports file descriptors which can be memory mapped, we must use a different strategy when using copying from stdin.

We obviously had that whole "Retbleed" thing, and it does show up in both the diffstat and the shortlog, and rc7 is definitely bigger than usual. And also as usual, when we've had one of those embargoed hw issues pending, the patches didn't get the open development, and then as a result missed all the usual sanity checking by all the automation build and test infrastructure we have. So no surprise - there's been various small fixup patches afterwards too for some corner cases.

That said, last week there were two other development trees that independently also asked for an extension, so 5.19 will be one of those releases that have an additional rc8 next weekend before the final release.

We have released OpenBGPD 7.5, which will be arriving in the OpenBGPD directory of your local OpenBSD mirror soon.

Read more…

The problems are purely due to the fact that we were forced to do this type of work "in private" with very limited ability for testing by the normal larger kernel community like we rely on. We don't have fancy or huge private testing labs where we can do all of this work as we are an open source project, and we rely on open testing in public.

The ongoing problems might yet slow down the 5.19 release as well.

Update: there has actually been a different set of updates released: 5.18.12, 5.15.55, 5.10.131, and 5.4.206. These revert a single problematic MTD patch.

OpenBSD limits security to a small pond, but makes it easy. Linux is a big tent, but makes it impossibly hard. SECCOMP BPF might as well be the Traditional Chinese of programming languages, since only a small number of people who've devoted the oodles of time it takes to understand code like what you see above have actually been able to benefit from it.