All posts by jzb

Haiku R1/beta5 has been released

Post Syndicated from jzb original https://lwn.net/Articles/990735/

Version
R1/beta5
for the Haiku
project, an open-source “spiritual successor to BeOS“, has been released. Notable
changes in this release include a TUN/TAP network driver, basic
support for USB audio devices, TCP throughput improvements, a
rewritten driver for the FAT filesystem, read-only support for
Unix File System 2 (UFS2), as well as hundreds of bug fixes and
performance improvements since the last release in
December 2022. Thanks to Paul Wise for the tip.

LLVM 19.1.0 released

Post Syndicated from jzb original https://lwn.net/Articles/990706/

Version
19.1.0
of the LLVM compiler suite has been released:

This is the first release in the LLVM 19.x series and represents 6
months of work the LLVM community. During this period 1502 unique
authors contributed 18925 commits (3605729 lines added and 1665792
lines removed) to LLVM.

As usual, there is a long list of changes; see the release notes
for LLVM,
Libc++,
lld,
Clang,
and Extra
Clang Tools
for changes to each.

Security updates for Wednesday

Post Syndicated from jzb original https://lwn.net/Articles/990731/

Security updates have been issued by AlmaLinux (pcs), Debian (expat, galera-4, libreoffice, mariadb-10.5, and php-twig), Fedora (chromium), Red Hat (ghostscript and git), SUSE (gstreamer-plugins-bad, gstreamer-plugins-bad, libvpl, python-dnspython, python3, and python36), and Ubuntu (expat, frr, libxmltok, linux-xilinx-zynqmp, openssl, and quagga).

[$] Vanilla OS 2: an immutable distribution to run all software

Post Syndicated from jzb original https://lwn.net/Articles/989629/

Vanilla OS, an immutable desktop
Linux distribution designed for developers and advanced users, has
recently published its 2.0
“Orchid” release
. Previously based on Ubuntu, Vanilla OS has now
shifted to Debian unstable (“sid”). The release has made it easier to
install software from other distributions’ package repositories, and it
is now theoretically possible to install and run Android applications as well.

Linux Foundation announces OpenSearch Software Foundation

Post Syndicated from jzb original https://lwn.net/Articles/990517/

The Linux Foundation has announced
the creation of the OpenSearch Software
Foundation
as a vendor‑neutral home for the OpenSearch search and observability
software:

Established in 2021 and previously hosted by Amazon Web Services
(AWS), OpenSearch has recorded more than 700 million software
downloads and participation from thousands of contributors and more
than 200 project maintainers.

AWS created
the OpenSearch project as an open-source fork of ElasticSearch and
Kibana in 2021 after Elastic moved those projects to
non-free licenses
. Elastic announced in August that it would
relicense the projects under the Affero GPL (AGPL).

[$] Fedora evicts WolfSSL

Post Syndicated from jzb original https://lwn.net/Articles/989687/

The Fedora
Engineering Steering Committee
(FESCo) has voted to
immediately remove the WolfSSL package from all of Fedora’s
repositories due to its maintainer failing to gain approval to package
a new cryptography library for Fedora. Its brief travels through
Fedora’s package system highlights gaps in documentation, as well as
in the package‑review process. The good news is that this may stir
Fedora to improve its documentation and revive a formal security
team.

Valkey 8.0.0 released

Post Syndicated from jzb original https://lwn.net/Articles/990490/

Version 8.0.0 of
the Valkey open-source in-memory data
store is now available. This is the first major release of Valkey
since the project forked from Redis in March of this year:

While this is a major version, Valkey takes command set compatibility
seriously: Valkey 8.0.0 makes no backwards incompatible changes to the
existing command syntax or their responses. Your existing tools and
custom software will be able to immediately take advantage of Valkey
8.0.0. Since Valkey 8.0.0 does make some small changes to previously
undefined behaviors, it’s wise to read
the release notes
. Additionally, because this version makes changes in how the
software uses threading, you may want to re-evaluate your cluster’s
infrastructure to achieve the highest performance.

GNOME Foundation opens search for new Executive Director

Post Syndicated from jzb original https://lwn.net/Articles/990270/

The GNOME Foundation has announced
that it is looking for a new Executive Director following the departure of Holly Million
in July:

As the cornerstone of our leadership team, the Executive Director will
play a critical role in shaping the strategic direction of the
Foundation, working closely with staff, community members, and
partners to expand our reach and impact. The ideal candidate will have
professional experience working with nonprofits, a strong passion for
open-source software, a deep commitment to our community values, and
the vision to drive the next phase of GNOME’s growth and development.

The window of opportunity for the job is closing quickly,
applications are due by September 20.

Sovereign Tech Fund (STF) to invest in Samba improvements

Post Syndicated from jzb original https://lwn.net/Articles/990264/

Germany’s Sovereign
Tech Fund
(STF) has agreed to invest €688,800
to improve the security, stability, and functionality of Samba. The investment will take
place over three years and will be managed by SerNet, a company that
employs several Samba core developers and offers support for
Samba. According to its announcement,
work has already begun and is expected to complete in 2026:

The project’s focus is on areas like transparent failover, SMB3 UNIX
extensions, and modern security protocols such as SMB over QUIC. These
improvements are designed to ensure that Samba remains a robust and
secure solution for organizations that rely on a sovereign IT
infrastructure that is as independent as possible of proprietary
software regimes, but including optimal interoperability.

Security updates for Friday

Post Syndicated from jzb original https://lwn.net/Articles/990202/

Security updates have been issued by Fedora (haproxy, osc, and python3.11), Oracle (389-ds:1.4), Red Hat (kernel), SUSE (clamav, colord, kernel, postgresql16, and qemu), and Ubuntu (linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle, linux-raspi, linux-azure, linux-azure-5.15, linux-azure-fde, linux-lowlatency-hwe-6.8, linux-nvidia-6.8, and linux-xilinx-zynqmp).

[$] Debating ifupdown replacements for Debian trixie

Post Syndicated from jzb original https://lwn.net/Articles/989055/

Debian does not have an official way to configure
networking. Instead, it has four
recommended ways to configure networking, one of which is the
venerable ifupdown, which
has been part of Debian since the turn of the century and is showing its
age. A conversation about its maintainability and possible replacement with ifupdown‑ng has
led to discussions about the default network-management tools for
Debian “trixie
(Debian 13, which is expected in 2025) and beyond. No route to consensus
has been found, yet.

Security updates for Wednesday

Post Syndicated from jzb original https://lwn.net/Articles/989772/

Security updates have been issued by AlmaLinux (389-ds:1.4, dovecot, emacs, and glib2), Fedora (bluez, iwd, libell, linux-firmware, seamonkey, vim, and wireshark), Mageia (apr, libtiff, Nginx, openssl, orc, unbound, webmin, and zziplib), Red Hat (389-ds:1.4), and SUSE (containerd, curl, go1.22, go1.23, gstreamer-plugins-bad, kernel, ntpd-rs, python-Django, and python311).

Redox OS 0.9.0

Post Syndicated from jzb original https://lwn.net/Articles/989517/

Version
0.9.0
of Redox OS,
an open-source, Unix-like operating system written in
Rust, has been released. Notable changes in this release include
performance and stability improvements, better management of physical
and virtual memory, bootloader improvements, and more. It also brings
support for RustPython, Perl 5, Simple HTTP Server, the addition of
several applications including GNU Nano, Helix, and the COSMIC
Files, Editor, and Terminal applications. See the changelog
section of the announcement
for a full list of changes in the release.

[$] Testing AI-enhanced reviews for Linux patches

Post Syndicated from jzb original https://lwn.net/Articles/987319/

Code review is in high demand, and short supply, for most open-source projects.
Reviewer time is precious, so any tool that can lighten the load is worth exploring.
That is why Jesse Brandeburg and Kamel Ayari decided to test whether
tools like ChatGPT could review patches to provide quick feedback to
contributors about common problems. In a
talk
at the Netdev 0x18 conference this July, Brandeburg provided an overview of an
experiment using machine learning to review emails containing patches
sent to the netdev
mailing list. Large-language models (LLMs) will not be replacing human reviewers anytime
soon, but they may be a useful addition to help humans focus on deeper
reviews instead of simple rule violations.

NGINX has moved to Github

Post Syndicated from jzb original https://lwn.net/Articles/989229/

The NGINX team has announced
that official NGINX open-source development has moved away from
Mercurial to GitHub, and
the project will now be taking contributions
in the form of pull requests:

Additionally, starting today, we will begin accepting bugs reports,
feature requests and enhancements directly through GitHub, under the
“Issues” tab. Moreover, we’ve moved our community forums to the GitHub
“Discussions” area, where you will now be able
to engage in conversation, ask, and answer questions.

[…] We understand that changes like these may require adjustment,
so to give you more time, we will continue accepting patches and
provide community support via mailing lists until December 31st, 2024.

Tellico 4.0 released

Post Syndicated from jzb original https://lwn.net/Articles/988837/

Version 4.0 of the Tellico collection management
software has been released. This is the first release to use the
KDE Frameworks 6 and Qt6 libraries, with a fallback
available for Frameworks 5 and Qt5. Other notable changes in 4.0
include importing video collections from file metadata and correctly
importing multi-disc album data from Discogs, MusicBrainz, and iTunes. Users
of prior versions are advised to make a backup of their data before upgrading.

Security updates for Wednesday

Post Syndicated from jzb original https://lwn.net/Articles/988746/

Security updates have been issued by AlmaLinux (buildah, gvisor-tap-vsock, nodejs:18, python-urllib3, and skopeo), Debian (firefox-esr and openssl), Fedora (apr and seamonkey), Red Hat (podman), Slackware (mozilla and seamonkey), SUSE (bubblewrap and flatpak, buildah, docker, dovecot23, ffmpeg, frr, go1.21-openssl, graphviz, java-1_8_0-openj9, kubernetes1.26, kubernetes1.27, kubernetes1.28, openssl-1_0_0, openssl-3, perl-DBI, python-aiohttp, python-Django, python-WebOb, thunderbird, tiff, ucode-intel, unbound, webkit2gtk3, and xen), and Ubuntu (drupal7 and twisted).