All posts by corbet

Security updates for Wednesday

Post Syndicated from corbet original https://lwn.net/Articles/926205/

Security updates have been issued by Debian (node-sqlite3 and qemu), Fedora (libmemcached-awesome, manifest-tool, sudo, and vim), Red Hat (gnutls, kernel, kernel-rt, lua, and openssl), Slackware (mozilla), SUSE (amanda, firefox, go1.19, go1.20, jakarta-commons-fileupload, java-1_8_0-openjdk, nodejs18, peazip, perl-Net-Server, python, python-cryptography, python-Django, python3, rubygem-rack, and xorg-x11-server), and Ubuntu (ipython, linux-ibm, linux-ibm-5.4, and linux-kvm).

[$] Heuristics for software-interrupt processing

Post Syndicated from corbet original https://lwn.net/Articles/925540/

The kernel’s software-interrupt (“softirq”) mechanism was added prior to
the 1.0 kernel release, but it implements a design seen in systems that were
already old when Linux was born. For much of that time, softirqs have been
an impediment to the kernel community’s scalability and response-time
goals, but they have proved resistant to removal. A recent discussion on a
proposed new heuristic to mitigate a softirq-related performance problem
may have reinvigorated interested in doing something about this subsystem
as a whole rather than just tweaking the parameters of how it operates.

[$] Interview: the FreeCAD Project Association

Post Syndicated from corbet original https://lwn.net/Articles/924953/

The sustainability of free software continues to be mostly uncharted
waters. No team is the same as any other, so copying, say, the Blender Foundation’s
approach to governance will, most likely, not work for other projects. But
there is value in understanding how various non-commercial organizations
operate in order to make informed decisions for the governance of new ones.
In late 2021, the FreeCAD team
launched the FreeCAD Project
Association
(FPA) to handle the various assets that belong to this free
3D CAD project. In this interview, Yorik van Havre, a longtime FreeCAD
developer — and current president of the Association — guides us through
the process of starting and managing the FPA.

[$] An EEVDF CPU scheduler for Linux

Post Syndicated from corbet original https://lwn.net/Articles/925371/

The kernel’s completely fair scheduler
(CFS)
has the job of managing the allocation of CPU time for most of
the processes running on most Linux systems. CFS was merged for the 2.6.23
release in 2007 and has, with numerous ongoing tweaks, handled the job
reasonably well ever since. CFS is not perfect, though, and there are some
situations it does not handle as well as it should. The EEVDF
scheduler
, posted by Peter Zijlstra, offers the possibility of
improving on CFS while reducing its dependence on often-fragile heuristics.

Rust 1.68.0 released

Post Syndicated from corbet original https://lwn.net/Articles/925732/

Version
1.68.0
of the Rust language has been released. Changes include the
stabilization of the “sparse” Cargo protocol, the ability for (some)
applications to recover from memory-allocation failures, and “local Pin
construction”:

The new pin! macro constructs a
Pin<&mut T> from a T expression,
anonymously captured in local state. This is often called
stack-pinning, but that “stack” could also be the captured state of
an async fn or block.

Security updates for Thursday

Post Syndicated from corbet original https://lwn.net/Articles/925723/

Security updates have been issued by CentOS (kernel, pesign, samba, and zlib), Oracle (kernel), Slackware (httpd), SUSE (emacs, libxslt, nodejs12, nodejs14, nodejs16, openssl, poppler, python-py, python-wheel, xen, and xorg-x11-server), and Ubuntu (linux-gcp-5.4, linux-gkeop, opusfile, and samba).

a2ps 4.15 released

Post Syndicated from corbet original https://lwn.net/Articles/925631/

Version 4.15 of the “anything to PostScript” filter a2ps has been released
— the first release since 2007.
This release contains few user-visible changes. It does however
contain a lot of changes “under the hood”: code clean-up,
etc. Therefore, it’s likely that there are new bugs.

Security updates for Wednesday

Post Syndicated from corbet original https://lwn.net/Articles/925606/

Security updates have been issued by Debian (apr), Fedora (c-ares), Oracle (curl, kernel, pesign, samba, and zlib), Red Hat (curl, gnutls, kernel, kernel-rt, and pesign), Scientific Linux (kernel, pesign, samba, and zlib), SUSE (libX11, python-rsa, python3, python36, qemu, rubygem-rack, xorg-x11-server, and xwayland), and Ubuntu (libtpms, linux-ibm, linux-raspi, linux-raspi, python3.7, python3.8, and sofia-sip).

The initial posting of the Apple AGX graphics driver

Post Syndicated from corbet original https://lwn.net/Articles/925503/

Asahi Lina has posted an
initial version
of a Rust-based driver for Apple AGX graphics
processors; the posting includes a fair amount of Rust infrastructure for
graphics drivers in general.

While developing the driver, I tried to make use of Rust’s safety
and lifetime features to provide not just CPU-side safety, but also
partial firmware-ABI safety. Thanks to this, it has turned out to
be a very stable driver even though GPU firmware crashes are fatal
(no restart capability, need to reboot!) and the FW/driver
interface is a huge mess of unsafe shared memory structures with
complex pointer chains.

McQueen: Flathub in 2023

Post Syndicated from corbet original https://lwn.net/Articles/925472/

The Flathub organization (in the form of Robert McQueen) has posted a lengthy
update
on the state of Flathub and its plans for the coming year.

So far, the GNOME Foundation has acted as an incubator and legal
host for Flathub even though it’s not purely a GNOME product or
initiative. Distributing software to end users along with
processing and forwarding payments and donations also has a
different legal profile in terms of risk exposure and nonprofit
compliance than the current activities of the GNOME
Foundation. Consequently, we plan to establish an independent legal
entity to own and operate Flathub which reduces risk for the GNOME
Foundation, better reflects the independent and cross-desktop
interests of Flathub, and provides flexibility in the future should
we need to change the structure.

Security updates for Tuesday

Post Syndicated from corbet original https://lwn.net/Articles/925469/

Security updates have been issued by Debian (kopanocore), Fedora (golang-github-projectdiscovery-chaos-client, rust-sequoia-octopus-librnp, rust-sequoia-sop, rust-sequoia-sq, and usd), Oracle (libjpeg-turbo and pesign), Red Hat (kernel, kernel-rt, kpatch-patch, osp-director-downloader-container, pesign, rh-mysql80-mysql, samba, and zlib), SUSE (mariadb), and Ubuntu (fribidi, gmp, linux, linux-aws, linux-kvm, linux-lts-xenial, linux-azure, linux-azure-4.15, linux-kvm, linux-raspi2, linux-snapdragon, linux-raspi, nss, python3.6, rsync, systemd, and tiff).