Brief items
Security
Security quotes of the week
Kernel development
Kernel release status
The 5.1 merge window remains open; it will mostly likely close on March 17.Stable updates: 5.0.1, 4.20.15, and 4.19.28 were released on March 10. The relatively large 5.0.2, 4.20.16, 4.19.29, 4.9.163, and 4.14.106 updates are in the review process; they are due on March 14.
Cook: security things in Linux v5.0
Kees Cook reviews some of the security-related enhancements in the 5.0 kernel. "While the C language has a statement to indicate the end of a switch case ('break'), it doesn’t have a statement to indicate that execution should fall through to the next case statement (just the lack of a 'break' is used to indicate it should fall through — but this is not always the case), and such 'implicit fall-through' may lead to bugs. Gustavo Silva has been the driving force behind fixing these since at least v4.14, with well over 300 patches on the topic alone (and over 20 missing break statements found and fixed as a result of the work). The goal is to be able to add -Wimplicit-fallthrough to the build so that the kernel will stay entirely free of this class of bug going forward. From roughly 2300 warnings, the kernel is now down to about 200. It’s also worth noting that with Stephen Rothwell’s help, this bug has been kept out of linux-next by him sending warning emails to any tree maintainers where a new instance is introduced (for example, here’s a bug introduced on Feb 20th and fixed on Feb 21st)."
Quotes of the week
How's performance? Great, because I haven't measured it.
But this isn't the way to get those changed! The process for making such changes involves large numbers of people arguing at each other (perhaps at kernel summit) until Linus comes in and tells everyone how it's going to be.
Distributions
Distribution quotes of the week
Further Discussion builds concensus within Debian!
Further Discussion gets things done!
Further Discussion welcomes diverse perspectives in Debian!
We’ll grow the community with Further Discussion!
I am not sure what kind of governance the project needs today. We should collectively think about this before rushing someone to invest all his emotional and physical energy for one year.
Development
The Linux Foundation's CommunityBridge platform
The Linux Foundation has announced a new initiative called CommunityBridge; its purpose is to help with funding and support for open-source developers. It includes some security-related services and a means for connecting developers with mentors. The program is in an "early access" mode for now.The Linux Foundation is not the first to provide such services, of course; see this statement from the Software Freedom Conservancy for its take on this new initiative.
Malcolm: Usability improvements in GCC 9
David Malcolm writes about improved diagnostics and more in the GCC 9 release. "Speaking of annotations, this example shows another new GCC 9 feature: diagnostics can label regions of the source code to show pertinent information. Here, what’s most important are the types of the left-hand and right-hand sides of the '+' operator, so GCC highlights them inline. Notice how the diagnostic also uses color to distinguish the two operands from each other and the operator."
Introducing Season of Docs
Google Open Source has announced Season of Docs. "During Season of Docs, technical writers will spend a few months working closely with open source communities. Each writer works with their chosen open source project. The writers bring their expertise to the projects’ documentation while at the same time learning about open source and new technologies. Mentors from participating open source organizations share knowledge of their communities’ processes and tools. Together the technical writers and mentors build a new doc set, improve the structure of the existing docs, develop a much-needed tutorial, or improve contribution processes and guides." Open source organizations may apply to take part in Season of Docs starting April 2.
Announcing the release of sway 1.0
Drew DeVault has announced the first stable release of sway, an i3-compatible Wayland desktop for Linux and FreeBSD. "Sway 1.0 adds a huge variety of features which were sorely missed on 0.x, improves performance in every respect, offers a more faithful implementation of Wayland, and exists as a positive political force in the Wayland ecosystem pushing for standardization and cooperation among Wayland projects."
Development quotes of the week
And yet, there is a part of me that feels it’s all so… cold. Servers having "personalities" was always a distinctly dubious thing, but these days as we work through more and more layers of virtualization and indirection and become more distant from the hardware, we lose an appreciation for what we have and the many shoulders of giants upon which we stand.
If nothing else, SSPL was a serious license proposal and deserved serious consideration it didn't get. THis was a dramatic failure of the license-review process, and I think shows that this group needs to be reconstituted.
Miscellaneous
SPI annual report
Software in the Public Interest has released its annual report [PDF] for 2018. "During the current board term SPI continues to strive for self-improvement and renewal. Treasury teamsprints, bank visits, and legal consultations during in-person meetings have helped keep the wheels turning. An overhaul of our corporate bylaws that better meets our needs is being presented to the members for their approval. And we have improved our reimbursement workflow with a view toward speedier and smoother processing."
Page editor: Jake Edge
Next page:
Announcements>>
