Anthropic Just Handed Apache $1.5M to Secure the Open Source Stack AI Depends On
Apache Software Foundation's Ruth Suehle says this kind of sustained investment is what keeps critical open source up and running.
Latest Linux and open source news from around the web
Apache Software Foundation's Ruth Suehle says this kind of sustained investment is what keeps critical open source up and running.
GNU Nano 9.0 command-line text editor delivers smoother side scrolling, rebindable Meta arrow keys, improved macro handling, and more.
Raspberry Pi Imager 2.0.8 updates Fastboot, improves write reliability on slow cards, and fixes bugs across Linux, SSH, and UI handling.
GNU nano 9.0 command line text editor for Unix-like systems is now available for download as a major update introducing new features and improvements. Hereโs whatโs new!
Raspberry Pi Imager 2.0.8 SD card flashing utility is now available for download with fastboot improvements, OS Customisation changes, SSH and write operations enhancements.
Anthropic just dropped $1.5 million on the Apache Software Foundation. Is it paying back the open source world -- or buying goodwill? The post Does Acting Like Good Guys Actually Make Anthropic Good Guys? appeared first on FOSS Force.
It has been a little while since LWN last surveyed tools for managing a digital music collection. In the intervening decades, many Linux users have moved on to music streaming services, found them wanting, and are looking to curate their own collection once again. There are plenty of choices when it comes to ripping, managing, and playing digital audio; so many, in fact, that it can be a bit daunting. After years of tinkering, I've found a few tools that work well for managing my digital library: the first I'd like to cover is the fre:ac free audio encoder for ripping music from CDs and converting between audio formats.
Meta's Helion and Hugging Face's Safetensors are now hosted projects under the PyTorch umbrella.
On March 31, Kees Cook shared a patch set that represents the culmination of more than a year of work toward eliminating the possibility of silent, unintentional integer overflow in the kernel. Linus Torvalds was not pleased with the approach, leading to a detailed discussion about the meaning of "safe" integer operations and the design of APIs for handling integer overflows. Eventually, the developers involved reached a consensus for a different API that should make handling overflow errors in the kernel much less of a hassle.
The NixOS project has announced a critical vulnerability in many versions of the Nix package manager's daemon. The flaw was introduced as part of a fix for a prior vulnerability in 2024. According to the advisory, all default configurations of NixOS and systems building untrusted derivations are impacted. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating the builds (typically the Nix daemon running as root in multi-user installations) by following symlinks during fixed-output derivation output registration. This affects sandboxed Linux builds - sandboxed macOS builds are unaffected. The location of the temporary output used for the output copy was located inside the build chroot. A symlink, pointing to an arbitrary location in the filesystem, could be created by the derivation builder at that path. During output registration, the Nix process (running in the host mount namespace) would follow that symlink and overwrit
Security updates have been issued by Debian (openssl), Fedora (corosync, goose, kea, pspp, and rauc), Mageia (python-pygments, roundcubemail, and tigervnc), SUSE (bind, gimp, google-cloud-sap-agent, govulncheck-vulndb, ignition, ImageMagick, python, python-PyJWT, and python-pyOpenSSL), and Ubuntu (adsys, juju-core, lxd, python-django, and salt).
For those who never warmed up to Breeze, Oxygen and Air are shaping up to be compelling alternatives again.
APT 3.2 expands package history management by introducing undo, redo, and rollback commands to Debianโs package manager.
At the end of March AMD announced the Ryzen 9 9950X3D2 processor with both dies having 3D V-Cache. This 16 core processor with 206MB of total cache is quit exciting and will be on sale later this month but AMD refrained from commenting on the price until today...
Setting up Ubuntu shouldnโt take the entire dayโhereโs the shortcut.