Post Syndicated from corbet original https://lwn.net/Articles/1039603/

The Fedora project has posted a
proposal for a policy regarding the use of AI tools when developing for
the distribution.

You are responsible for your contributions. AI-generated
content must be treated as a suggestion, not as final code or
text. It is your responsibility to review, test, and understand
everything you submit. Submitting unverified or low-quality
machine-generated content (sometimes called “AI slop”) creates an
unfair review burden on the community and is not an acceptable
contribution.

Post Syndicated from corbet original https://lwn.net/Articles/1038643/

Inside this week’s LWN.net Weekly Edition:

• Front: Debian stable bug; Canceling async Rust; CHERI Linux; Time-slice extension; Multikernel; Revocable references; Blender 4.5.
• Briefs: Bluefin LTS; RPM 6.0.0; Tails 7.0; Rust 1.90.0; Infrastructure costs; Quotes; …
• Announcements: Newsletters, conferences, security updates, patches, and more.

Post Syndicated from corbet original https://lwn.net/Articles/1038523/

Computers were once relatively static devices; if a peripheral was present
at boot, it was unlikely to disappear while the system was operating.
Those days are far behind us, though; devices can come and go at any time,
often with no notice. That impermanence can create challenges for kernel
code, which may not be expecting resources it is managing to make an abrupt
exit. The revocable
resource management patch set from Tzung-Bi Shih is meant to help with
the creation of more robust — and more secure — kernel subsystems in a
dynamic world.

Post Syndicated from corbet original https://lwn.net/Articles/1038976/

Linus has released 6.17-rc7 for testing.
“Let’s keep the testing going, and we’ll have the final 6.17 in a
week“.

Post Syndicated from corbet original https://lwn.net/Articles/1038847/

The Linux kernel generally wants to be in charge of the system as a whole;
it runs on all of the available CPUs and controls access to them globally.
Cong Wang has just come forward with a different
approach: allowing each CPU to run its own kernel. The patch set is in
an early form, but it gives a hint for what might be possible.

Post Syndicated from corbet original https://lwn.net/Articles/1038235/

Time-slice extension is a proposed scheduler feature that would allow a
user-space process to request to not be preempted for a short period while
it executes a critical section. It is an idea that has been circulating
for years, but efforts to implement it became
more serious in February of this year. The latest developer to make an
attempt at time-slice extension is Thomas Gleixner, who has posted a new patch set
with a reworked API. Chances are good that this implementation is close to
what will actually be adopted by the kernel.

Post Syndicated from corbet original https://lwn.net/Articles/1038649/

Version
1.90.0 of the Rust language has been released. Changes include
switching to the LLD linker by default,
the addition of support for workspace publishing to cargo, and the
usual set of stabilized APIs.

Post Syndicated from corbet original https://lwn.net/Articles/1037644/

Inside this week’s LWN.net Weekly Edition:

• Front: Fighting human trafficking; End of 10; Link tags; Healthy subsystem communities; New kernel tools; Rust and Carbon; Typst.
• Briefs: Brief news items from throughout the community.
• Announcements: Newsletters, conferences, security updates, patches, and more.

Post Syndicated from corbet original https://lwn.net/Articles/1038487/

Version 49 of the GNOME desktop
environment has been released. Changes include new default video
(Showtime) and PDF-viewing (Papers) applications, a number of calendar
improvements, and updates to the Web, Maps, and Software applications.

Post Syndicated from corbet original https://lwn.net/Articles/1038345/

Version
143.0 of the Firefox browser has been released. Changes include the
ability to pin tabs by dragging them to the edge, previews in the camera
permissions dialog, improved fingerprinting protection, and (optional)
automatic deletion of files downloaded in private browsing mode.

Post Syndicated from corbet original https://lwn.net/Articles/1038326/

The Socket.dev blog describes
this week’s attack on JavaScript packages in the npm repository.

A malicious update to @ctrl/tinycolor (2.2M weekly
downloads) was detected on npm as part of a broader supply chain
attack that impacted more than 40 packages spanning multiple
maintainers.

The compromised versions include a function
(NpmModule.updatePackage) that downloads a package
tarball, modifies package.json, injects a local script
(bundle.js), repacks the archive, and republishes it,
enabling automatic trojanization of downstream packages.

Post Syndicated from corbet original https://lwn.net/Articles/1038325/

Security updates have been issued by AlmaLinux (kernel and kernel-rt), Debian (node-sha.js and python-django), Fedora (chromium, cups, exiv2, perl-Catalyst-Authentication-Credential-HTTP, perl-Catalyst-Plugin-Session, perl-Plack-Middleware-Session, and qemu), Red Hat (container-tools:rhel8, podman, and udisks2), SUSE (cargo-audit, cargo-c, cargo-packaging, and kernel-devel), and Ubuntu (libcpanel-json-xs-perl, libjson-xs-perl, rubygems, sqlite3, and vim).

Post Syndicated from corbet original https://lwn.net/Articles/1038271/

Registration for the 2025 Linux Plumbers Conference (Tokyo,
December 11 to 13) is
now open. LPC tickets often sell out quickly, so it would be best not
to delay if you intend to attend.

Post Syndicated from corbet original https://lwn.net/Articles/1037390/

The kernel runs in a special environment that makes it difficult to use
many of the development tools that are available to user-space developers.
Kernel developers often respond by simply doing without, but the truth is
that they need good tools as much as anybody else. Three new tools for the
tracking down of bugs have recently landed on the linux-kernel mailing
list; here is an overview.

Post Syndicated from corbet original https://lwn.net/Articles/1038074/

The 6.17-rc6 kernel prepatch is out for
testing. “But really, none of it is very large. So everything seems slated for a
normal release in two weeks.

Please do keep testing, so that we don’t get complacent.“

Post Syndicated from corbet original https://lwn.net/Articles/1037069/

The Git source-code management system stores a lot of information about
changes to code — but it does not hold everything that might be of interest
to a developer who needs to investigate a specific change in the future.
Commits in a repository are the end result of a (sometimes extended)
discussion; often, that discussion will result in changes to the code that
are not explained in the changelog. For some years now, many maintainers
have followed the convention of applying a Link tag to commits that points
back to the mailing-list posting of the change. Linus Torvalds has been
expressing his dislike for this convention for a while, though, and its
time appears to be coming to an end.

Post Syndicated from corbet original https://lwn.net/Articles/1037703/

The F-Droid project has some
advice for free-software projects on how to deal with takedown
requests.

As part of our legal resilience research, we spoke with a range of
legal experts, software freedom advocates, and maintainers of
mature FOSS infrastructure to understand how others manage these
moments. In this article, we share what we learned, and how F-Droid
is incorporating these lessons into its own approach.

Post Syndicated from corbet original https://lwn.net/Articles/1036683/

Inside this week’s LWN.net Weekly Edition:

• Front: Space Grade Linux; KDE’s new distribution; Rug pulls and forks; Dependency tracker; Kernel configuration; Framework 12 laptop.
• Briefs: npm security; high-memory; Anaconda WebUI; OpenSUSE bcachefs; 32-bit Firefox; Quotes; …
• Announcements: Newsletters, conferences, security updates, patches, and more.

Post Syndicated from corbet original https://lwn.net/Articles/1037496/

The openSUSE project has announced
that the bcachefs filesystem will be disabled in its kernel builds starting
with 6.17; bcachefs users will have to make other arrangements. “The
current 6.16.* is NOT affected. Neither is Slowroll (for now).“

Post Syndicated from corbet original https://lwn.net/Articles/1037391/

As a followup to his OSS Europe talk on the
future of 32-bit support in the kernel, Arnd Bergmann has put together
a
detailed plan for the eventual removal of high-memory support, which he
calls “one of the least popular features of the Linux kernel“. The
intent is “to gradually phase out highmem over the next 2 years for
mainline kernels“. This plan is posted as a prompt for a discussion to
be held at the Kernel Summit in December, so chances are it will evolve
considerably in the next few months.