Post Syndicated from jzb original https://lwn.net/Articles/1050523/

Security updates have been issued by AlmaLinux (firefox, grafana, kernel, libsoup3, mysql8.4, and wireshark), Debian (ruby-git, ruby-sidekiq, thunderbird, and vlc), Fedora (apptainer, chromium, firefox, golangci-lint, libpng, and xkbcomp), Mageia (golang), SUSE (binutils, chromium, firefox, gegl, go1.25, govulncheck-vulndb, hauler, kernel, keylime, libpng12, pgadmin4, postgresql16, python, python-Django, python-django, python3, python311, rhino, thunderbird, unbound, and xkbcomp), and Ubuntu (usbmuxd).

Post Syndicated from jzb original https://lwn.net/Articles/1050270/

Greg Kroah-Hartman has released the 6.18.1, 6.17.12, and 6.12.62 stable
kernels. Each contains important fixes; users of those kernels
are advised to upgrade.

Post Syndicated from jzb original https://lwn.net/Articles/1050262/

KDE has announced the
release of KDE Gear 25.12. This release adds more
“extractors” to the Itinerary travel-assistant
application, improved Git support in the Kate text editor, better PDF
export in Konqueror, and
much more. See the changelog
for all new features, improvements, and bug fixes.

Post Syndicated from jzb original https://lwn.net/Articles/1050251/

Security updates have been issued by AlmaLinux (firefox, luksmeta, mysql, mysql:8.0, mysql:8.4, tomcat, and wireshark), Debian (chromium, kernel, and tzdata), Fedora (brotli, dr_libs, perl-Alien-Brotli, python-urllib3, singularity-ce, wireshark, and yarnpkg), Oracle (firefox, grafana, lasso, libsoup3, luksmeta, ruby, ruby:3.3, tomcat, and wireshark), Slackware (mozilla), SUSE (container-suseconnect, kubernetes-client, libpoppler-cpp2, postgresql14, postgresql15, and python3), and Ubuntu (c-ares, keystone, linux, linux-aws, linux-aws-5.15, linux-azure, linux-gcp, linux-gcp-5.15,
linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15,
linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency,
linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra,
linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle,
linux-oracle-5.15, linux-xilinx-zynqmp, linux-azure, linux-azure-4.15, linux-oracle,, linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux-fips, linux-aws-fips, linux-gcp-fips, linux-hwe-6.8, linux-oracle-6.8, linux-raspi, linux-realtime, linux-intel-iot-realtime, and python-urllib3).

Post Syndicated from jzb original https://lwn.net/Articles/1050129/

Version 24.04 LTS of the Ubuntu-based Pop!_OS distribution has
been released with the COSMIC Desktop Environment:

Today is special not only in that it’s the culmination of over
three years of work, but even more so in that System76 has built a
complete desktop environment for the open source community. We’re
proud of this contribution to the open source ecosystem. COSMIC is
built on the ethos that the best open source projects enable people to
not only use them, but to build with them. COSMIC is modular and
composable. It’s the flagship experience for Pop!_OS in its own way,
and can be adapted by anyone that wants to build their own unique user
experience for Linux.

In addition to the COSMIC desktop environment, Pop!_OS is now
available for Arm computers with the 24.04 LTS release, and the
distribution has added hybrid graphics support for better battery
life. LWN covered an
alpha version of COSMIC in August 2024.

Post Syndicated from jzb original https://lwn.net/Articles/1050125/

Version
1.92.0 of Rust has been released. This release includes a number
of stabilized APIs, emits unwind tables by default on Linux, validates
input to #[macro_export], and much more. See the separate
release notes for Rust,
Cargo,
and Clippy.

Post Syndicated from jzb original https://lwn.net/Articles/1050117/

Security updates have been issued by Debian (ffmpeg, firefox-esr, libsndfile, and rear), Fedora (httpd, perl-CGI-Simple, and tinyproxy), Oracle (firefox, kernel, libsoup, mysql8.4, tigervnc, tomcat, tomcat9, and uek-kernel), SUSE (alloy, curl, dovecot24, fontforge, glib2, himmelblau, java-17-openjdk, java-21-openjdk, kernel, krb5, lasso, libvirt, mozjs128, mysql-connector-java, nvidia-open-driver-G07-signed-check, openssh, poppler, postgresql17, postgresql18, python-cbor2, python-Django, python310, python311-Django, runc, strongswan, tomcat11, and xwayland), and Ubuntu (binutils, libpng1.6, linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4,
linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp, linux, linux-aws, linux-aws-6.14, linux-gcp, linux-hwe-6.14, linux-raspi, linux, linux-aws, linux-gcp, linux-realtime, and qtbase-opensource-src).

Post Syndicated from jzb original https://lwn.net/Articles/1049965/

Let’s Encrypt has published
a retrospective that covers the decade since it published its first
publicly trusted certificate in September 2015:

In March 2016, we issued our one millionth certificate. Just two years
later, in September 2018, we were issuing a million certificates every
day. In 2020 we reached a billion total certificates issued and as of
late 2025 we’re frequently issuing ten million certificates per
day. We’re now on track to reach a billion active sites, probably
sometime in the coming year.

Post Syndicated from jzb original https://lwn.net/Articles/1049963/

Greg Kroah-Hartman is writing
a series of blog posts about Linux becoming a Certificate
Numbering Authority (CNA):

It’s been almost 2 full years since Linux became a CNA (Certificate
Numbering Authority) which meant that we (i.e. the kernel.org
community) are now responsible for issuing all CVEs for the Linux
kernel. During this time, we’ve become one of the largest creators of
CVEs by quantity, going from nothing to number 3 in 2024 to number 1
in 2025. Naturally, this has caused some questions about how we are
both doing all of this work, and how people can keep track of it.

So far, Kroah-Hartman has published the introductory post, as well
as a detailed
post about kernel version numbers that is well worth reading.

Post Syndicated from jzb original https://lwn.net/Articles/1049423/

Linux containers have made it reasonably easy to develop, distribute, and
deploy server applications along with all the distribution dependencies that they
need. For example, anyone can deploy and run a Debian-based PostgreSQL container
on a Fedora Linux host. Distrobox is a project that is designed to
bring the cross-distribution compatibility to the desktop and allow users to
mix-and-match Linux distributions without fussing with dual-booting, virtual
machines, or multiple computers. It is an ideal way to install
additional software on image-based systems, such as Fedora’s Atomic Desktops
or Bazzite, and also
provides a convenient way to move a development environment or
favorite applications to a new system.

Post Syndicated from jzb original https://lwn.net/Articles/1049939/

Security updates have been issued by AlmaLinux (abrt and kernel), Debian (libpng1.6, libsoup2.4, pdns-recursor, webkit2gtk, and wordpress), Fedora (imhex, libwebsockets, lunasvg, python3-docs, and python3.14), Mageia (python3 and webkit2), Red Hat (abrt, firefox, mysql8.4, and postgresql:15), Slackware (mozilla), SUSE (gegl, gnutls, go1.24, go1.25, libpng16-16, openssh, postgresql13, python-Jinja2, and sssd), and Ubuntu (fonttools and netty).

Post Syndicated from jzb original https://lwn.net/Articles/1046228/

One of the things that has historically stood between Linux and the
fabled “year of the Linux desktop” is its lack of support for video
games. Many users who would have happily abandoned Windows have,
reluctantly, stayed for the video games or had to deal with dual
booting. In the past few years, though, Linux support for
games—including those that only have Windows versions—has
improved dramatically, if one is willing to put the pieces
together. Bazzite, an image-based
Fedora derivative, is a project that aims to let users play games and
use the Linux desktop with almost no assembly required.

Post Syndicated from jzb original https://lwn.net/Articles/1049771/

Version
146.0 of the Firefox web browser has been released. One feature of
particular interest to Linux users is that Firefox now natively
supports fractional scaled displays on Wayland. Firefox Labs has also
been made available to all users even if they opt out of telemetry or
participating in studies. “This means more experimental features
are now available to more people.“

This release also adds support for Module-Lattice-Based
Key-Encapsulation Mechanism (ML-KEM) for WebRTC. ML-KEM is
“believed to be secure against attackers with large quantum
computers“. See the release notes for all changes.

Post Syndicated from jzb original https://lwn.net/Articles/1049769/

Security updates have been issued by AlmaLinux (kernel, kernel-rt, and webkit2gtk3), Fedora (abrt and mingw-libpng), Mageia (apache and libpng), Oracle (abrt, go-toolset:rhel8, kernel, sssd, and webkit2gtk3), Red Hat (kernel and kernel-rt), SUSE (gimp, gnutls, kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t, and postgresql13), and Ubuntu (gnupg2, python-apt, radare2, and webkit2gtk).

Post Syndicated from jzb original https://lwn.net/Articles/1049663/

Jon Seager, VP of engineering for Canonical, has announced
a plan to develop a universal Public Key Infrastructure tool called
upki:

Earlier this year, LWN featured an excellent article titled
“Linux’s missing CRL
infrastructure“. The article highlighted a number
of key issues surrounding traditional Public Key Infrastructure (PKI),
but critically noted how even the available measures are effectively
ignored by the majority of system-level software on Linux.

One of the motivators for the discussion is that the Online
Certificate Status Protocol (OCSP) will cease to be supported by Let’s
Encrypt. The remaining alternative is to use Certificate Revocation
Lists (CRLs), yet there is little or no support for managing (or even
querying) these lists in most Linux system utilities.

To solve this, I’m happy to share that in partnership with rustls
maintainers Dirkjan Ochtman
and Joe Birr-Pixton, we’re starting the
development of upki: a universal PKI tool. This project initially aims
to close the revocation gap through the combination of a new system
utility and eventual library support for common TLS/SSL libraries such
as OpenSSL, GnuTLS and rustls.

No code is available as of yet, but the announcement indicates that
upki will be available as an opt-in preview for
Ubuntu 26.04 LTS. Thanks to Dirjan Ochtman for the tip.

Post Syndicated from jzb original https://lwn.net/Articles/1049657/

Security updates have been issued by Debian (ffmpeg, krita, lasso, and libpng1.6), Fedora (abrt, cef, chromium, tinygltf, webkitgtk, and xkbcomp), Oracle (buildah, delve and golang, expat, python-kdcproxy, qt6-qtquick3d, qt6-qtsvg, sssd, thunderbird, and valkey), Red Hat (webkit2gtk3), and SUSE (git-bug, go1, and libpng12-0).

Post Syndicated from jzb original https://lwn.net/Articles/1049554/

Greg Kroah-Hartman has announced the release of the
6.17.11,
6.12.61,
6.6.119,
6.1.159,
5.15.197, and
5.10.247 stable kernels. Each contains important fixes throughout the tree; users of these kernels should upgrade.

Post Syndicated from jzb original https://lwn.net/Articles/1049417/

Security updates have been issued by AlmaLinux (buildah, firefox, gimp:2.8, go-toolset:rhel8, ipa, kea, kernel, kernel-rt, pcs, qt6-qtquick3d, qt6-qtsvg, systemd, and valkey), Debian (chromium and unbound), Fedora (alexvsbus, CuraEngine, fcgi, libcoap, python-kdcproxy, texlive-base, timg, and xpdf), Mageia (digikam, darktable, libraw, gnutls, python-django, unbound, webkit2, and xkbcomp), Oracle (bind, firefox, gimp:2.8, haproxy, ipa, java-25-openjdk, kea, kernel, libsoup3, libssh, libtiff, openssl, podman, qt6-qtsvg, squid, systemd, vim, and xorg-x11-server-Xwayland), Slackware (httpd and libpng), SUSE (chromedriver, kernel, and python-mistralclient), and Ubuntu (cups, linux-azure, linux-gcp, linux-gcp, linux-gke, linux-gkeop, linux-ibm-6.8, linux-iot, and mame).

Post Syndicated from jzb original https://lwn.net/Articles/1049299/

Version 3.23.0 of Alpine Linux has been released. Notable changes
in this release include an upgrade to version 3.0
of the Alpine
Package Keeper (apk), and replacing the linux-edge
package with linux-stable:

For years, linux-lts and linux-edge grew apart and developed their
own kernel configs, different architectures, etc.

Now linux-edge gets replaced with linux-stable which has the
identical configuration as linux-lts, but follows the stable releases
instead of the long-term releases (see https://kernel.org/).

The /usr
merge planned for this release has been postponed; a new timeline
for the change will be published later. See the release
notes for more information on this release.

Post Syndicated from jzb original https://lwn.net/Articles/1049199/

Andreas Schneider has announced
version 2.0 of the cmocka
unit-testing framework for C:

This release represents a major modernization effort, bringing
cmocka firmly into the “modern” C99 era while maintaining the
simplicity and ease of use that users have come to expect.

One of the most significant changes in cmocka 2.0 is the migration
to C99 standard integer types. The LargestIntegralType typedef has
been replaced with intmax_t and uintmax_t from
stdint.h, providing better type safety and portability across
different platforms. Additionally, we’ve adopted the bool type where
appropriate, making the code more expressive and self-documenting.

Using intmax_t and uintmax_t also allows to print
better error messages. So you can now find
e.g. assert_int_equal and assert_uint_equal.

cmocka 2.0 introduces a comprehensive set of type-specific
assertion macros, including `assert_uint_equal()`,
`assert_float_equal()`, and enhanced pointer assertions. The mocking
system has also been significantly improved with type-specific macros
like `will_return_int()` and `will_return_float()`. The same for
parameter checking etc.

LWN covered the
project early in its development in 2013. See the full list of new
features, enhancements, and bug fixes in cmocka 2.0 in the changelog.