Latest Linux and open source news from around the web

The Art of UNIX Programming Sponsored · View on Amazon → Designing Data-Intensive Applications Sponsored · View on Amazon →
LWN.net

Rust 1.100.0

Version 1.100.0 of the Rust programming language has been released. It includes a huge number of stabilized features, such as the never type, the DropGuard type in the standard library, and the Allocator API. Cargo can also now set a minimum age for dependencies, to stop supply chain attacks, and can point out unused dependencies more reliably. Taken together, many users depending on unstable features may be able to switch to the stable version of the compiler.

LWN.net

Rust 1.100.0 released

Version 1.100.0 of the Rust language has been released. Notable changes include the stabilization of the never type, core parts of the Allocator API, reporting of unused dependencies in Cargo, and more.

LWN.net

Glasswing overwhelms maintainers with underwhelming findings (VulnCheck)

Patrick Garrity of VulnCheck has written a blog post that looks at vulnerabilities found by Anthropic's Project Glasswing since it launched on April 7, and finds it wanting: Of the 37,966 findings Anthropic reports, only 7,349 (19.4%) have been made public. Just 217 of those have been marked fixed. The more glaring number is that 4.4% (1,654) of the project's findings have already been marked as duplicates, 7.5x more duplicates than fixes. On top of that, 419 findings have been withdrawn. It seems odd that the ledger now claims a 94.2% true positive rate, up from 90.8% at launch, when more findings have been withdrawn or marked as duplicates than fixed, likely a feedback loop missing to the triage rates listed as "True Positives". [...] AI is a valuable tool for finding vulnerabilities, and I'm not discounting that. But seven months in, the evidence still doesn't match the launch narrative. The CVEs are a sliver of this year's total, almost none are being exploited, fixes have stalled

LPI

Linux Essentials 2.0: Command Line Basics and Practicing Efficiency

The point of learning Linux is not to boast about how cool you are or to join an arcane community of illuminati, but to get more work done. That is why Linux Professional Institute offers its series of certifications for ... Read more The post Linux Essentials 2.0: Command Line Basics and Practicing Efficiency appeared first on Linux Professional Institute (LPI).