Vue normale
Security updates for Friday
[$] Anubis sends AI scraperbots to a well-deserved fate
Few, if any, web sites or web-based services have gone unscathed by the locust-like hordes of AI crawlers looking to consume (and then re-consume) all of the world's content. The Anubis project is designed to provide a first line of defense that blocks mindless bots—while granting real users access to sites without too much hassle. Anubis is a young project, not even a year old. However, its development is moving quickly, and the project seems to be enjoying rapid adoption. The most recent release of Anubis, version 1.20.0, includes a feature that many users have been interested in since the project launched: support for challenging clients without requiring users to have JavaScript turned on.
Security updates for Thursday
[$] LWN.net Weekly Edition for July 10, 2025
- Front: Python packaging; Kernel API specification; Kselftests and KUnit; niri; pedalboard.
- Briefs: Git security fixes; Amarok 3.3; Bash 5.3; Thunderbird 140; tmux-rs; U-Boot 2025.07; Quotes; ...
- Announcements: Newsletters, conferences, security updates, patches, and more.
Amarok 3.3 released
Version 3.3 of the Amarok music player has been released. This is the first release of Amarok based on KDE Frameworks 6 and Qt 6. Amarok 3.3 also includes a major rework of its audio engine to use GStreamer for audio playback.
The reworked audio engine provides unified feature set for all users and should provide a solid and future-proof sonic experience for years to come. Notable improvements have also landed to the database system: improved character set support helps with e.g. emojis in podcast descriptions and other very exotic symbols, date handling has been improved ('year 2038 problem'), and various other potential and actual database-related issues have been fixed.
New upgrade paths for ELevate
The AlmaLinux project has announced new upgrade paths for its ELevate utility, which allows users to upgrade between major versions of Red Hat Enterprise Linux derivatives. The new paths include upgrades from AlmaLinux 9 to AlmaLinux 10 and CentOS Stream 9 to CentOS Stream 10, with support for EPEL, Docker CE, and PostgreSQL third-party package repositories. LWN covered ELevate last year.
[$] Reinventing the Python wheel
reinvent the wheel". While the project's name refers to Python's wheel binary distribution format, its goals stretch much further than simply the format.
Security updates for Wednesday
A set of Git security-fix releases
This is a set of coordinated security fix releases. Please update at your earliest convenience". See the announcement for details; many of the vulnerabilities have to do with tricks buried in untrusted repositories.
Thunderbird 140 released
Version 140 of the Thunderbird mail client has been released. Notable features include "dark message mode" to adapt message content to dark mode, the ability to easily transfer desktop settings to the mobile Thunderbird client, experimental support for Microsoft Exchange, as well as global controls for message threading and sort order.
Thunderbird 140 is an extended-support release (ESR) which will be supported for 12 months. However, the Thunderbird project is trying to encourage users to adopt the Release channel for monthly updates instead. The project is staggering upgrades to 140 for existing Thunderbird users in order to catch any significant bugs before they are widely deployed, but users can upgrade manually via the Help > About menu. See the release notes for a full list of changes.
[$] Toward the unification of kselftests and KUnit
Security updates for Tuesday
U-Boot v2025.07 released
As this is a full release, and not just a release candidate I'm hoping for a few more people to read this and then read what I'm linking to as well. For the overall health of the project, and the community, I'm hoping to find a few people within the community that can help with overall organization and management. I would like to long term be able to move us to being under the Software Freedom Conservancy umbrella and that in turn means having a organizational structure that's not just a single person.
He also noted that there is a community meeting on July 8th, 2025 at 9am (GMT -06:00) on Google Meet.
Bash-5.3-release available
new form of command substitution that executes the command in the current shell execution context", pathname-completion sorting will be handled based on the GLOBSORT shell variable, generated completions can go to a shell variable instead of to stdout, the source code has been updated to C23, and more. Meanwhile:
Readline has new features as well. There is a new option that allows case-insensitive searching, a new command that executes a named readline command, and a new command that exports possible word completions in a specified format for consumption by another process.
[$] A tour of the niri scrolling-tiling Wayland compositor
Niri is a relatively new Rust-based compositor for Wayland with a different take on tiling window management: windows are placed onscreen in an "infinite" row that can expand beyond the bounds of the visible workspace. It is not a full-blown desktop environment, but niri may be a suitable option for Linux users who want tiling features and the minimalism of a window manager for Wayland.
Security updates for Monday
Kernel prepatch 6.16-rc5
Please keep testing, but this all feels fairly regular for this phase of the release".