Brief items

Security quote of the week

It's important for devices to have internet connectivity so the manufacturer can patch remote exploits.

— xkcd

Comments (1 posted)

Kernel release status

The current development kernel is 6.16-rc4, released on June 29. Linus remarked: "Despite a fairly large merge window, things continue to look fairly calm on the rc front".

Stable updates: 6.15.4, 6.12.35, 6.6.95, 6.1.142, 5.15.186, 5.10.239, and 5.4.295 were all released on June 27.

Comments (none posted)

Bcachefs may be headed out of the kernel

The history of the bcachefs filesystem in the kernel has been turbulent, most recently with Linus Torvalds refusing a pull request for the 6.16-rc3 release. Torvalds has now pulled the code in question, but also said:

I think we'll be parting ways in the 6.17 merge window.

You made it very clear that I can't even question any bug-fixes and I should just pull anything and everything.

Honestly, at that point, I don't really feel comfortable being involved at all, and the only thing we both seemed to really fundamentally agree on in that discussion was "we're done".

Bcachefs developer Kent Overstreet has his own view of the situation. Both Torvalds and Overstreet refer to a seemingly private conversation where the pull request (and other topics) were discussed.

Comments (217 posted)

Coccinelle for Rust progress report (Collabora blog)

Over on the Collabora blog, Tathagata Roy has an update on the progress of targeting the Coccinelle tool for matching and transforming source code to Rust. The Coccinelle for Rust project, which we covered in a 2024 talk by Roy at Kangrejos, is adding the ability to transform Rust programs and the goal is "to bring Coccinelle For Rust at par with Coccinelle For C in terms of basic functionalities". There is still work to be done to get there, but progress is being made in various areas.

Computational Tree Logic (CTL) is the heart of Coccinelle, which takes semantic patches and generalizes them over Rust files. Prior to using this engine, CfR used an ad-hoc method for matching patterns of code. This engine is the same as the one used for Coccinelle for C, with a few minor changes. Most of the changes were idiomatic but to the same effect. More information on the engine and its language (CTL-VW) can be found in the POPL Paper. With a standard engine, each step of the matching process can be logged, allowing us to learn and reuse the same design patterns from Coccinelle for C, including critical test cases.

Comments (none posted)

The Netdev Foundation launches

The Netdev Foundation, which is "a user-led effort under the supervision of the Linux Foundation, focused on financially supporting Linux networking development", has announced its existence.

The initial motivation was to move the NIPA testing outside of Meta, so that more people can help and contribute. But there should be sufficient budget to sponsor more projects.

(NIPA is Netdev Infrastructure for Patch Automation).

Comments (none posted)

Quotes of the week

This graph is the one I'm most excited about: the lifetime of security flaws in Linux is finally starting to get shorter (and the number of fixed flaws continues to rise).

— Kees Cook

If your community is a developer of 1 and nobody wants you around, it doesn't matter how good of a coder you are. You have failed at one of the core tenants of your job. In the real world, with real stakes, real bosses, real accountability, you would be fired. And that would be the correct outcome.

The power of OSS is the fact that it's many developers working on a thing. We all witness the power of this every day, but still cling to this fantasy that it's one smart asshole that keeps the whole thing together.

We are all replaceable in OSS. That's the beauty of it. It will outlast every once of us.

— Josef Bacik

Comments (2 posted)

Debian looking for testers with Apple M1/M2 machines

Debian's Bananas team has put out a call for people with Apple M1 or M2 systems to help test Debian on those machines:

The Bananas Team has set up an installer at with images for GNOME, KDE and console installations. While we'd like to build an actual Debian installer sooner or later (we may need a heads-up from the Debian Images team for that), at this time we only provide an asahi-type installer, which installs both the "bootloader" and the OS partitions to disk from the network (as opposed to only installing the bootloader and then letting you install Debian using a d-i USB stick). We haven't forked Trixie from Testing yet, so what you'll get is Debian Testing quite deep into the freeze.

Comments (5 posted)

Oracle Linux 10 released

Version 10 of the Oracle Linux distribution has been released.

Oracle Linux 10 is now generally available for 64-bit Intel and AMD (x86_64) and 64-bit Arm (aarch64) platforms. Oracle Linux 10 delivers robust security and exceptional performance for business agility and demanding workloads at cloud scale. Key features include modernized cryptographic capabilities, advancements in developer tooling, and innovations for resilient infrastructure.

Comments (none posted)

GNU Health Hospital Information System 5.0 released

Version 5.0 of the GNU Health Hospital Information System has been released. This project, working to support medical offices, shows just how far the free-software effort can reach. Changes in this release include improved reporting and analytics, more comprehensive handling of many types of patient information, a reworked medical-imaging subsystem, better insurance and billing functionality, and more.

Comments (none posted)

15 Years of OsmAnd

The OsmAnd map and navigation app project recently celebrated its 15th anniversary.

All these 15 years can be roughly divided into three stages. For the first five years, we built the very basic functionality—offline maps and navigation that just worked. Over the next five years, we transformed OsmAnd into a full-fledged application with plugins, extensive settings, and professional tools. We dedicated the third five-year period to deep internal work: completely rewriting and improving key components like the rendering engine and routing algorithms.

Now, a new, fourth stage begins. We have reached functional maturity, and our main goal for the near future is to polish what we've already built. We will focus on stability, speed, and consolidation. User expectations are growing, and what was once considered normal must now be flawless.

(Thanks to Paul Wise).

Comments (19 posted)

Rust 1.88.0 released

Version 1.88.0 of the Rust language has been released. Changes include the ability to chain let expressions, "naked" functions that have no compiler-generated prologue or epilogue, automatic garbage collection in cargo, a set of stabilized APIs, and more.

Comments (21 posted)

Development quotes of the week

Some money *has* to start flowing into this community or the foundations we all rely on will start rotting away. Given the many-billions-per-quarter in Big Tech profits and the trillion-dollar valuations, it is insulting and absurd to claim a lack of budget for these companies to do the equivalent of keeping their car tires inflated.

— Tim Bray

This project requires that contributors certify that their contributions are made under Developer's Certificate of Origin 1.1, which in turn means that contributors must understand the full provenance of what they are contributing. With AI content generators, the copyright or license status of their output is ill-defined, without any generally accepted legal foundation.

Hence, the project asks that contributors refrain from using AI content generators on changes that are submitted to the project. Contributions in which use of AI is either known or suspected may not be accepted.

— Junio Hamano for the Git project

Comments (none posted)

Copyleft-next project relaunched

The copyleft-next project is an effort to develop a next-generation copyleft license; it was covered here back in 2013 (as well as in 2015 and 2021). The project has stalled in recent years, but now Richard Fontana and Bradley Kuhn have announced a new effort to push copyleft-next forward:

Today, GPLv3 turns exactly 18 years old. This month, GPLv2 turned 34 years old. These are both great licenses and we love them. Nevertheless, at least once in a generation, FOSS needs a new approach to strong copyleft.

Comments (114 posted)