Vue normale

Hier — 14 janvier 2025LWN

The people should own the town square (Mastodon Blog)

Par : jzb
14 janvier 2025 à 19:48

The Mastodon project has announced that founder Eugen Rochko will be transferring "key Mastodon ecosystem and platform components (including name and copyrights, among other assets)" to a new non-profit organization:

Practically Mastodon will remain headquartered in and operate from Europe primarily. We will continue day-to-day operations through the Mastodon GmbH for-profit entity, which will become wholly owned by the new European not-for-profit entity. The Mastodon GmbH entity automatically became a for-profit as a result of its charitable status being stripped away in Germany. The existing US-based non-profit entity, the 501(c)(3), will continue to function as a fundraising hub.

[...] We are in the process of a phased transition. First we are establishing a new legal home for Mastodon and transferring ownership and stewardship. We are taking the time to select the appropriate jurisdiction and structure in Europe. Then we will determine which other (subsidiary) legal structures are needed to support operations and sustainability.

Rochko has, naturally, also posted about the transition on Mastodon.social.

[$] The slow death of TuxFamily

Par : jzb
14 janvier 2025 à 19:14

TuxFamily is a French free-software-hosting service that has been in operation since 1999. It is a non-profit that accepts "any project released under a free license", whether that is a software license or a free-content license, such as CC-BY-SA. It is also, unfortunately, slowly dying due to hardware failures and lack of interest. For example, the site's download servers are currently offline with no plan to restore them.

[$] Modifying another process's system calls

Par : corbet
14 janvier 2025 à 17:47
The ptrace() system call allows a suitably privileged process to modify another in a large number of ways. Among other things, ptrace() can intercept system calls and make changes to them, but such operations can be fiddly and architecture-dependent. This patch series from Dmitry Levin seeks to improve that situation by adding a new ptrace() operation to make changes to another process's system calls in an architecture-independent manner.

Security updates for Tuesday

Par : corbet
14 janvier 2025 à 16:31
Security updates have been issued by AlmaLinux (kernel, NetworkManager, and thunderbird), Fedora (golang-github-aws-sdk-2, golang-github-aws-smithy, golang-github-ncw-swift-2, rclone, and thunderbird), Mageia (ceph, firefox, and thunderbird), Oracle (kernel, NetworkManager, and thunderbird), Red Hat (fence-agents and raptor2), SUSE (dpdk, firefox, frr, grafana, operator-sdk, perl-Module-ScanDeps, proftpd, python311-mistune, redis, thunderbird, valkey, and yq), and Ubuntu (hplip and webkit2gtk).

IPU6 camera support status update

Par : jzb
14 janvier 2025 à 16:13

Hans de Goede has posted an update about his work to support IPU6 cameras on Fedora and submitting fixes upstream.

The initial IPU6 camera support landed in Fedora 41 only works on a limited set of laptops. The reason for this is that with MIPI cameras every different sensor and glue-chip like IO-expanders needs to be supported separately.

I have been working on making the camera work on more laptop models. After receiving and sending many emails and blog post comments about this I have started filing Fedora bugzilla issues on a per sensor and/or laptop-model basis to be able to properly keep track of all the work.

LWN covered the lack of IPU6 drivers in 2022.

À partir d’avant-hierLWN

[$] Chimera Linux works toward a simplified desktop

Par : daroc
13 janvier 2025 à 19:41

Chimera Linux is a new distribution designed to be "simple, transparent, and easy to pick up". The distribution is built from scratch, and recently announced its first beta release. While the documentation and installation process are both a bit rough, the project already provides a usable desktop with plenty of useful software — one built primarily on tools adopted from BSD.

Security updates for Monday

Par : jake
13 janvier 2025 à 14:48
Security updates have been issued by AlmaLinux (dpdk, firefox, iperf3, thunderbird, and webkit2gtk3), Debian (firefox-esr, gnuchess, node-mocha, openafs, python-django, and thunderbird), Fedora (libxmp, python-jinja2, suricata, thunderbird, and xen), Mageia (avahi, libjxl, opencontainers-runc, radare2, rizin, and tinyproxy), Oracle (cups, dpdk, firefox, iperf3, kernel, thunderbird, and webkit2gtk3), SUSE (apptainer, chromedriver, dnsmasq, govulncheck-vulndb, gstreamer, gstreamer-plugins-base, gstreamer-plugins-good, logback, and python311-slixmpp), and Ubuntu (libxmltok, linux-realtime, roundcube, and snapd).

Kernel prepatch 6.13-rc7

Par : corbet
12 janvier 2025 à 23:53
Linus has released 6.13-rc7 for testing. "So unless something odd happens the upcoming week, I expect to release a final 6.13 next week as per the normal schedule". Read the full announcement for your details on how to get a free guitar pedal assembled by Linus himself.

Paolo Mantegazza RIP

Par : corbet
10 janvier 2025 à 20:38
We have just now received word of the passing of Paolo Mantegazza, the driving force behind the Real Time Application Interface project and a key figure in the development of realtime Linux.

Paolo used to describe himself as a simple practitioner of software development, one of whose missions was to contribute a free real-time system his students could use, study and improve for their research work at the university, welcoming others to join. Many Linux users and businesses owe him a lot, because under his leadership, the RTAI project has always defended the freedom of developers to implement real-time systems, particularly at times when it was threatened. His fierce will for RTAI served the Xenomai project, as well as others.

He will be missed. (LWN interviewed Mantegazza in 2001).

[$] The state of Vim

Par : jzb
10 janvier 2025 à 19:00

The death of Bram Moolenaar, Vim founder and benevolent dictator for life (BDFL), in 2023 sent a shock through the community, and raised concern about the future of the project. At VimConf 2024 in November, current Vim maintainer Christian Brabandt delivered a keynote on "the new Vim project" that detailed how the community has reorganized itself to continue maintaining Vim and what the future looks like.

Automattic reduces WordPress contributions

Par : jzb
10 janvier 2025 à 15:05

Automattic has announced that it is reallocating its resources away from contributing to the WordPress project as a response to the WP Engine lawsuit:

As part of this reset, Automattic will match its volunteering pledge with those made by WP Engine and other players in the ecosystem, or about 45 hours a week that qualify under the Five For the Future program as benefitting the entire community and not just a single company. These hours will likely go towards security and critical updates.

LWN last covered the ongoing WordPress saga in December. [Thanks to Paul Wise for the heads-up on this latest development.]

Security updates for Friday

Par : daroc
10 janvier 2025 à 14:25
Security updates have been issued by Fedora (chromium and mingw-poppler), Red Hat (dpdk, thunderbird, and webkit2gtk3), SUSE (firefox, govulncheck-vulndb, gstreamer, gstreamer-plugins-base, gstreamer-plugins-good, libmfx, openjpeg2, python310, python312, python39, tomcat, and webkit2gtk3), and Ubuntu (golang-golang-x-net).

Rust 1.84.0 released

Par : corbet
9 janvier 2025 à 18:29
Version 1.84.0 of the Rust language has been released. Changes include improved version selection for dependencies in Cargo, the beginning of the migration to a new trait solver, and some updated pointer-provenance APIs.

Most of the time, programmers do not need to worry much about provenance, and it is very clear how a pointer got derived. However, when casting pointers to integers and back, the provenance of the resulting pointer is underspecified. With this release, Rust is adding a set of APIs that can in many cases replace the use of integer-pointer-casts, and therefore avoid the ambiguities inherent to such casts. In particular, the pattern of using the lowest bits of an aligned pointer to store extra information can now be implemented without ever casting a pointer to an integer or back. This makes the code easier to reason about, easier to analyze for the compiler, and also benefits tools like Miri and architectures like CHERI that aim to detect and diagnose pointer misuse.

SFC reports a successful (L)GPL suit in Germany

Par : corbet
9 janvier 2025 à 15:31
The Software Freedom Conservancy is reporting that AVM has released the full source and installation scripts for its routers in response to a lawsuit, filed by Sebastian Steck, based on Lesser GNU Public License rights.

Historically, lawsuits have focused on the copyrights licensed under GPL (or the GPL and LGPL together). Steck's lawsuit uniquely focused exclusively on users' rights under the LGPL. Steck's work showed that despite being a "Lesser" license than GPL, LGPLv2.1 still guarantees users the right to repair, modify and reinstall modified versions of the software on their device. There is now no doubt that both GPL and LGPL mandate the device owner's ability to make changes to the software in the flash memory so those changes persist across reboots.

[$] Page-table hardening with memory protection keys

Par : corbet
9 janvier 2025 à 15:16
Attacks on the kernel can take many forms; one popular exploitation path is to find a way to overwrite some memory with attacker-supplied data. If the right memory can be targeted, one well-targeted stray write is all that is needed to take control of the system. Since the system's page tables regulate access to memory, they are an attractive target for this type of attack. This patch set from Kevin Brodsky is an attempt to protect page tables (and, eventually, other data structures) using the "memory protection keys" feature provided by a number of CPU architectures.

Security updates for Thursday

Par : jake
9 janvier 2025 à 14:39
Security updates have been issued by AlmaLinux (cups, kernel, and kernel-rt), Debian (chromium, firefox-esr, and webkit2gtk), Fedora (curl, firefox, gimp, mupdf, openjpeg2, and valkey), Red Hat (389-ds-base, cups, firefox, iperf3, kernel, kernel-rt, libreswan, python3.11-urllib3, thunderbird, and webkit2gtk3), Slackware (firefox, seamonkey, and thunderbird), SUSE (apptainer, firefox-esr, libopenjp2-7, libruby3_4-3_4, openjpeg2, and tomcat10), and Ubuntu (firefox, linux-azure, linux-azure, linux-azure-4.15, linux-azure, linux-azure-6.8, linux-azure, linux-intel-iotg-5.15, linux-azure-5.15, python2.7, thunderbird, and xfpt).
❌
❌