Notifications Help

Explore

clear filters

Newest Feeds

Domains

Users

lwn.net ×

[$] A change in direction for security-module stacking?

lwn.net

The long-running effort to complete the work on stacking (or composing) the Linux security modules (LSMs)...

The long-running effort to complete the work on stacking (or composing) the Linux security modules (LSMs) recently encountered a barrier—in the form of a "suggestion" to discontinue it from Linus Torvalds. His complaint revolved around the indirect function calls that are used to implement LSMs, but he also did not think much of the effort to switch away from those calls. While it does...

Security updates for Monday [LWN.net]

lwn.net

Security updates have been issued by AlmaLinux (firefox and java-1.8.0-openjdk), Debian (chromium, flatpak, guix, openjdk-11, openjdk-17,...

Security updates have been issued by AlmaLinux (firefox and java-1.8.0-openjdk), Debian (chromium, flatpak, guix, openjdk-11, openjdk-17, thunderbird, and tomcat9), Fedora (chromium, firefox, glibc, nghttp2, nodejs18, python-aiohttp, python-django3, python-pip, and uxplay), Mageia (putty & filezilla), Red Hat (Firefox, firefox, java-1.8.0-openjdk, java-21-openjdk, nodejs:18, shim, and thunderbird), Slackware (freerdp), SUSE (apache-commons-configuration2, nodejs14, perl-CryptX, putty, shim, and wireshark), and Ubuntu (linux, linux-aws, linux-aws-5.15, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15,...

Introduce BPF Trampoline (2019)

lwn.net

From: Alexei Starovoitov <ast-AT-kernel.org> To: <davem-AT-davemloft.net> Subject: [PATCH v4 bpf-next 00/20] Introduce BPF trampoline Date: Thu,...

From: Alexei Starovoitov <ast-AT-kernel.org> To: <davem-AT-davemloft.net> Subject: [PATCH v4 bpf-next 00/20] Introduce BPF trampoline Date: Thu, 14 Nov 2019 10:57:00 -0800 Message-ID: <20191114185720.1641606-1-ast@kernel.org> Cc: <daniel-AT-iogearbox.net>, <x86-AT-kernel.org>, <netdev-AT-vger.kernel.org>, <bpf-AT-vg...

Gentoo bans AI-created contributions

lwn.net

The following subscription-only content has been made available to you by an LWN subscriber. Thousands of...

The following subscription-only content has been made available to you by an LWN subscriber. Thousands of subscribers depend on LWN for the best news from the Linux and free software communities. If you enjoy this article, please consider accepting the trial offer on the right. Thank you for visiting LWN.net! By Joe...

Security updates for Thursday [LWN.net]

lwn.net

Security updates have been issued by Debian (firefox-esr, jetty9, libdatetime-timezone-perl, tomcat10, and tzdata), Fedora (cockpit, filezilla,...

Security updates have been issued by Debian (firefox-esr, jetty9, libdatetime-timezone-perl, tomcat10, and tzdata), Fedora (cockpit, filezilla, and libfilezilla), Red Hat (firefox, gnutls, java-1.8.0-openjdk, java-17-openjdk, kernel, kernel-rt, less, mod_http2, nodejs:18, rhc-worker-script, and shim), Slackware (mozilla), SUSE (kernel), and Ubuntu (apache2, glibc, and linux-xilinx-zynqmp).

Kernel prepatch 6.9-rc4 [LWN.net]

lwn.net

The 6.9-rc4 kernel prepatch is out for testing. "Nothing particularly unusual going on this week -...

The 6.9-rc4 kernel prepatch is out for testing. "Nothing particularly unusual going on this week - some new hw mitigations may stand out, but after a decade of this I can't really call it 'unusual' any more, can I?"

Saturday's stable kernel updates [LWN.net]

lwn.net

The 6.8.6, 6.6.27, 6.1.86, 5.15.155, 5.10.215, 5.4.274, and 4.19.312 stable kernel updates have all been released;...

The 6.8.6, 6.6.27, 6.1.86, 5.15.155, 5.10.215, 5.4.274, and 4.19.312 stable kernel updates have all been released; each contains a relatively large number of important fixes.

[$] Completing the EEVDF scheduler

lwn.net

The Earliest Virtual Deadline First (EEVDF) scheduler was merged as an option for the 6.6 kernel....

The Earliest Virtual Deadline First (EEVDF) scheduler was merged as an option for the 6.6 kernel. It represents a major change to how CPU scheduling is done on Linux systems, but the EEVDF front has been relatively quiet since then. Now, though, scheduler developer Peter Zijlstra has returned from a long absence to post a patch series intended to finish the EEVDF work. Beyond...

Security updates for Thursday [LWN.net]

lwn.net

Security updates have been issued by AlmaLinux (kernel, less, libreoffice, nodejs:18, nodejs:20, rear, thunderbird, and varnish),...

Security updates have been issued by AlmaLinux (kernel, less, libreoffice, nodejs:18, nodejs:20, rear, thunderbird, and varnish), Debian (pillow), Fedora (dotnet7.0), SUSE (sngrep, texlive-specs-k, tomcat, tomcat10, and xorg-x11-server), and Ubuntu (nss, squid, and util-linux).

[$] LWN.net Weekly Edition for April 11, 2024

lwn.net

The LWN.net Weekly Edition for April 11, 2024 is available.

Gentoo Linux becomes an SPI Associated Project [LWN.net]

lwn.net

The Gentoo Linux project has announced that it is now an Associated Project of Software in...

The Gentoo Linux project has announced that it is now an Associated Project of Software in the Public Interest (SPI), which will allow it to accept tax deductible donations in the US and reduce its "non-technical workload": The current Gentoo Foundation has bylaws restricting its behavior to that of a non-profit, is a recognized non-profit only in New Mexico, but a for-profit entity at...

Four stable kernel updates [LWN.net]

lwn.net

Greg Kroah-Hartman has announced another round of stable kernel updates: 6.8.5, 6.6.26, 6.1.85, and 5.15.154 have...

Greg Kroah-Hartman has announced another round of stable kernel updates: 6.8.5, 6.6.26, 6.1.85, and 5.15.154 have all been released; each contains another set of important fixes, including the mitigations for the recently disclosed branch history injection hardware vulnerability.

[$] Book review: Practical Julia

lwn.net

A recent book by LWN guest author Lee Phillips provides a nice introduction to the Julia...

A recent book by LWN guest author Lee Phillips provides a nice introduction to the Julia programming language. Practical Julia does more than that, however. As its subtitle ("A Hands-On Introduction for Scientific Minds") implies, the book focuses on bringing Julia to scientists, rather than programmers, which gives it something of a different feel from most other books of this sort.

[$] Continued attacks on HTTP/2

lwn.net

On April 3 security researcher Bartek Nowotarski published the details of a new denial-of-service (DoS) attack,...

On April 3 security researcher Bartek Nowotarski published the details of a new denial-of-service (DoS) attack, called a "continuation flood", against many HTTP/2-capable web servers. While the attack is not terribly complex, it affects many independent implementations of the HTTP/2 protocol, even though multiple similar vulnerabilities over the years have given implementers plenty of warning.

Security updates for Wednesday [LWN.net]

lwn.net

Security updates have been issued by Debian (gtkwave), Fedora (dotnet7.0, dotnet8.0, and python-pillow), Mageia (apache, gstreamer1.0,...

Security updates have been issued by Debian (gtkwave), Fedora (dotnet7.0, dotnet8.0, and python-pillow), Mageia (apache, gstreamer1.0, libreoffice, perl-Data-UUID, and xen), Oracle (kernel, kernel-container, and varnish), Red Hat (edk2, kernel, rear, and unbound), SUSE (apache2-mod_jk, gnutls, less, and xfig), and Ubuntu (bind9, linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux, linux-aws, linux-azure, linux-azure-6.5, linux-gcp, linux-gcp-6.5,...

Rivendell v4.2.0 released [LWN.net]

lwn.net

Version 4.2.0 of the Rivendell radio automation system has been released. Changes include a new data...

Version 4.2.0 of the Rivendell radio automation system has been released. Changes include a new data feed for 'next' data objects, improvements to its podcast system, numerous bug fixes, and more.

Introducing Jpegli: A New JPEG Coding Library (Google Open Source Blog) [LWN.net]

lwn.net

The Google Open Source Blog is carrying an announcement for a new JPEG library called "Jpegli"....

The Google Open Source Blog is carrying an announcement for a new JPEG library called "Jpegli". There are a number of advantages claimed, including: Jpegli can be encoded with 10+ bits per component. Traditional JPEG coding solutions offer only 8 bit per component dynamics causing visible banding artifacts in slow gradients. Jpegli's 10+ bits coding happens in the original 8-bit formalism and the resulting...

[$] The PostgreSQL community debates ALTER SYSTEM

lwn.net

Sometimes the smallest patches create the biggest discussions. A case in point would be the process...

Sometimes the smallest patches create the biggest discussions. A case in point would be the process by which the PostgreSQL community — not a group normally prone to extended, strongly worded megathreads — resolved the question of whether to merge a brief patch adding a new configuration parameter. Sometimes, a proposal that looks like a security patch is not, in fact, intended to be...

GNU Stow 2.4.0 released [LWN.net]

lwn.net

Version 2.4.0 of the GNU Stow symbolic-link manager has been released. This marks the first release...

Version 2.4.0 of the GNU Stow symbolic-link manager has been released. This marks the first release for GNU Stow since 2019. Maintainer Adam Spires wrote: I would like to sincerely apologise to all Stow users for this incredibly overdue release, the cadence of which is perhaps vaguely reminiscent of releases by the great Donald Knuth, except with none of the grace and deliberate planning....

Security updates for Monday [LWN.net]

lwn.net

Security updates have been issued by Debian (jetty9, libcaca, libgd2, tomcat9, and util-linux), Fedora (chromium, micropython,...

Security updates have been issued by Debian (jetty9, libcaca, libgd2, tomcat9, and util-linux), Fedora (chromium, micropython, and upx), Mageia (chromium-browser-stable, dav1d, libreswan, libvirt, nodejs, texlive-20220321, and util-linux), Red Hat (less, nodejs:20, and varnish), Slackware (tigervnc), and SUSE (buildah, c-ares, cdi-apiserver-container, cdi-cloner-container, cdi- controller-container, cdi-importer-container, cdi-operator-container, cdi- uploadproxy-container, cdi-uploadserver-container, cont, curl, expat, go1.21, go1.22, guava, helm, indent, krb5, kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container,...

Kernel prepatch 6.9-rc3 [LWN.net]

lwn.net

The 6.9-rc3 kernel prepatch is out for testing. Ok, so this rc3 looks a bit different...

The 6.9-rc3 kernel prepatch is out for testing. Ok, so this rc3 looks a bit different than the usual ones, because there's a large series to bcachefs to do filesystem repair after corruption. Not normally something we'd see in an rc kernel, but hey, if you had a corrupted bcachefs filesystem you'd probably want this, and if you thought bcachefs was stable already, I...

Tridge Returns to Rsync

lwn.net

Eclipse Foundation announces collaboration for CRA compliance [LWN.net]

lwn.net

The Eclipse Foundation, the organization behind the Eclipse IDE and many other software projects, announced a...

The Eclipse Foundation, the organization behind the Eclipse IDE and many other software projects, announced a collaboration between several different open-source-software foundations to create a specification describing secure software development best practices. This work is motivated by the European Union's Cyber Resilience Act (CRA). The leading open source communities and foundations have for years developed and practised secure software development processes. These are processes...

Explore

Tags

Domains

Users