Latest Linux and open source news from around the web

TP-Link 8-Port Gigabit Managed Switch Sponsored · View on Amazon → How Linux Works Sponsored · View on Amazon →
LWN.net

Podman 6.0 released

Version 6.0.0 of the Podman container-management tool has been released. Notable new features include the ability to set multiple static IP addresses for containers, improvements in network isolation that make Podman more compatible with Docker, changes to the way Quadlet commands function, many new options for many existing podman commands, and a rewrite of Podman's configuration file handling. There are many breaking changes; see the release notes for a full list of all new features, changes, and bug fixes.

LWN.net

[$] Hardening the kernel with allocation tokens and bootpatch-SLR

There is a lot of work going into eliminating exploitable bugs from the kernel and preventing the addition of new ones. Even if this work is maximally successful, though, there is no chance that the kernel will be free of these bugs anytime soon. Thus, there is also ongoing interest in hardening the kernel to make the existing bugs more difficult to exploit. The upcoming 7.2 kernel release will include a change to how dynamically allocated structures are placed in memory to make them harder to overwrite, while a project to randomize structure layout at boot time has a rather longer timeline.

LWN.net

Security updates for Thursday

Security updates have been issued by AlmaLinux (libpng, libsolv, libtasn1, libxml2, libxslt, python3.14, tigervnc, and vim), Debian (cloud-init, postgresql-13, and yelp), Mageia (nats-server), Oracle (.NET 10.0, .NET 8.0, .NET 9.0, bind9.18, cockpit, compat-openssl11, dnsmasq, dovecot, evince, expat, flatpak, freerdp, gimp, golang, grafana, grafana-pcp, httpd, jmc, jq, kernel, libsndfile, libsoup, libtiff, mod_http2, mysql:8.0, nginx, nginx:1.24, openexr, php:8.2, poppler, pyOpenSSL, python-markdown, redis:7, samba, thunderbird, tigervnc, unbound, and vim), Red Hat (libpng, libpng12, and libpng15), SUSE (apptainer, bind, crun, freeipmi, ghc-crypton-x509-store, ghc-crypton-x509-system, google-guest-agent, google-osconfig-agent, GraphicsMagick, gstreamer-plugins-bad, hamlib, iproute2, java-1_8_0-openjdk, kubevirt1, libarchive, libheif, libpng15, mbedtls, mbedtls-2, openssl-1_1, python-biopython, python-PyJWT, tar, webkit2gtk3, and xen), and Ubuntu (ffmpeg, libdbi-perl, and perl).

Phoronix

Updated Raspberry Pi OS With Linux 6.18 LTS Delivers Some Performance Benefits

Last week marked the release of an updated Raspberry Pi OS that moved to Linux 6.18 LTS from its former Linux 6.12 kernel base along with making a number of other package updates. Given the jump to the newer Long Term Support kernel and other improvements, I ran some fresh benchmarks on the Raspberry Pi 5 (Raspberry Pi 500+) to see the performance difference out of the updated operating system.

Phoronix

Servo 0.3 Released With The Demo Browser Becoming More Useful

Servo 0.3 released today as the latest version of this modern browser engine developed in Rust. With Servo 0.3 the demo servoshell browser is becoming more useful and supporting additional modern web features while Servo also continues to possess much potential moving forward on the embedded front as an alternative to the likes of the Chromium Embedded Framework (CEF)...