Linux Weekly News
Security updates for Friday
October project goals update (Rust Blog)
The Rust blog has an update on its progress on some of its project goals. One of the project's flagship goals is to resolve the biggest blockers to Linux building on stable Rust:
Finally, we have been finding an increasing number of stabilization requests at the compiler level, and so @wesleywiser and @davidtwco from the compiler team have started attending meetings to create a faster response. One of the results of that collaboration is RFC #3716, authored by Alice Ryhl, which proposes a method to manage compiler flags that modify the target ABI. Our previous approach has been to create distinct targets for each combination of flags, but the number of flags needed by the kernel make that impractical. Authoring the RFC revealed more such flags than previously recognized, including those that modify LLVM behavior.[$] The Overture open-mapping project
Security updates for Thursday
[$] LWN.net Weekly Edition for October 31, 2024
Ravier: What's new for Fedora Atomic Desktops in Fedora 41
Timothée Ravier has written a blog post about changes in the Fedora Atomic Desktops for Fedora Linux 41. Some of the notable new features for Atomic Desktops include bootloader updates enabled by default for UEFI systems, first steps towards using bootable containers, and more.
A new release of Raspberry Pi OS
The Raspberry Pi project has announced a new version of Raspberry Pi OS. It includes a number of significant changes, the most notable of which is that the Raspberry Pi Desktop now uses Wayland by default for all Pi models using the labwc compositor:
For most of this year, we have been working on porting labwc to the Raspberry Pi Desktop. This has very much been a collaborative process with the developers of both labwc and wlroots: both have helped us immensely with their support as we contribute features and optimisations needed for our desktop.This release also features Linux 6.6.51, improved touchscreen support, a new screen configuration tool called raindrop, and more. See the release notes for a full list of changes.
[$] An update on Apple M1/M2 GPU drivers
Thunderbird for Android now available
The first stable release of the Thunderbird mail client for Android is now available:
Just over two years ago, we announced our plans to bring Thunderbird to Android by taking K-9 Mail under our wing. The journey took a little longer than we had originally anticipated and there was a lot to learn along the way, but the wait is finally over! For all of you who have ever asked "when is Thunderbird for Android coming out?", the answer is – today!It is immediately available on the Google Play Store, via GitHub Releases, or from the Thunderbird web site, and it will be "coming soon" to the F-Droid repository for FOSS Android applications. See the release notes for detailed information about Thunderbird 8.0 for Android.
Security updates for Wednesday
Firefox version 132.0 is now available
Mozilla has announced the release of a new version of Firefox. This version has the usual mix of security fixes and new features, as well as a handful of deprecations. The release removes support for HTTP/2 Push, but adds hardware acceleration for SVGs, support for wide color gamuts on more platforms, and restores support for remote debugging via USB.
Fedora 41 released
Fedora Linux 41 has been released. See the "what's new" pages for Fedora Workstation and Fedora KDE, to learn more about the latest in those editions. There is also a new Fedora Miracle Window Manager Spin that offers the Miracle tiling window manager for Wayland.
[$] A new approach to validating test suites
The first program that Martin Pool ever wrote, he said, had bugs; the ones he's writing now most likely have bugs too. The talk Pool gave at RustConf this year was about a way to try to write programs with fewer bugs. He has developed a tool called cargo-mutants that highlights gaps in test coverage by identifying functions that can be broken without causing any tests to fail. This can be a valuable complement to other testing techniques, he explained.
Security updates for Tuesday
Flock: a Flutter fork
We describe Flock as "Flutter+". In other words, we do not want, or intend, to fork the Flutter community. Flock will remain constantly up to date with Flutter. Flock will add important bug fixes, and popular community features, which the Flutter team either can't, or won't implement.
(LWN looked at flutter in 2020).
Coker: The CUPS vulnerability
Debian Developer Russell Coker has written up an analysis of the remote exploit of CUPS announced in September:
He seems to have a different experience to me of reporting bugs, I have had plenty of success getting bugs fixed without hyping them. I just report the bug, wait a while, and it gets fixed. [...] I was quite confident that my systems wouldn't be at any risk.
When it was published my opinion was proven to be correct, it turned out to be a series of CUPS bugs.
Open Source Initiative announces Open Source AI Definition 1.0
The Open Source Initiative (OSI) has announced the release of version 1.0 of the Open Source AI Definition:
The OSAID offers a standard by which community-led, open and public evaluations will be conducted to validate whether or not an AI system can be deemed Open Source AI. This first stable version of the OSAID is the result of multiple years of research and collaboration, an international roadshow of workshops, and a year-long co-design process led by the Open Source Initiative (OSI).LWN covered the OSAID process, and final release candidate, on October 25.
[$] The performance of the Rust compiler
Sparrow Li presented virtually at RustConf 2024 about the current state of and future plans for the Rust compiler's performance. The compiler is relatively slow to compile large programs, although it has been getting better over time. The next big performance improvement to come will be parallelizing the compiler's parsing, type-checking, and related operations, but even after that, the project has several avenues left to explore.
