Latest Linux and open source news from around the web

Cat6 Ethernet Cable 5-Pack Sponsored · View on Amazon → Linux Bible Sponsored · View on Amazon →
LWN.net

[$] LLM-driven security reports disrupt coordinated disclosure

Predictions that LLM tools would cause a surge in reports of security vulnerabilities have, unquestionably, borne out. As expected, maintainers are having to wade through more security reports than ever before; in addition, LLM tools are disrupting traditional-coordinated disclosure practices as well. The method of Copy Fail's disclosure, in particular, left vendors, projects, and users scrambling. In addition, maintainers are seeing parallel discovery of the same security flaws within the embargo window. Both of these developments mean that coordinated security disclosures may become a thing of the past.

LWN.net

Incus 7.0 LTS released

Version 7.0 of the Incus container and virtual-machine management system has been released. Notable changes in this release include the inclusion of a low-level backup API, the addition of basic S3 operations directly in Incus to replace the now-unmaintained MinIO project, as well as the removal of support for cgroups v1 and xtables (iptables/ip6tables/ebtables). This is a long-term-support (LTS) release, with support through June 2031. The first 2 years will feature bug and security fixes as well as minor usability improvements, delivered through occasional point releases (7.0.x). After that initial two years, Incus 7.0 LTS will move to security only maintenance for the remaining of its 5 years of support. A total of 204 individuals contributed to Incus between the 6.0 LTS and 7.0 LTS releases with 45 contributing between the 6.23 and 7.0 LTS releases.

Phoronix

Linux 7.2 To Integrate The AMDGPU "Power Module" To Better Align With Windows

Sent out today was a batch of "new stuff" for the AMDGPU graphics and AMDKFD compute kernel drivers that are ready for DRM-Next to queue until the Linux 7.2 merge window happens in June. Most notable is the introduction of the AMDGPU DC power module to better align with the Radeon power management behavior under Microsoft Windows...

LWN.net

Distributions quote of the week

2,442 days is a fair amount of time, and that's how long I had been on the openSUSE Board as its chair when I started this note. That journey began on August 19th, 2019, and it ends today as I am stepping down as chair of the openSUSE Board. It's been an intense time for most of it β€” just a bit calm the last year and a half. A time of joy and frustration, anger occasionally and rewarding more often than that. During those years we have seen SUSE and openSUSE carve out from Micro Focus (escalations on the IT side included); a global pandemic; SUSE go public and return to private; the arrival of Rancher, NeuVector, and Losant; four CIOs and four (and de facto more) General Managers for Linux at SUSE; repeated discussions on the logo and name of our project; the creation of Geeko Foundation; people move on and others step up; seven board elections; board meetings become public; passionate debates and growing pains; web site refreshes; the number of distros and tooling around them grow and

LWN.net

Security updates for Wednesday

Security updates have been issued by AlmaLinux (corosync, dovecot, image-builder, python-tornado, resource-agents, and systemd), Debian (openjdk-11, openjdk-17, and pyjwt), Fedora (pdns, pyOpenSSL, and squid), Slackware (hunspell), SUSE (alloy, avahi, bubblewrap, cmctl, coredns, curl, dpkg, firefox, golang-github-prometheus-prometheus, grafana, libpng12, PackageKit, sed, and xen), and Ubuntu (docker.io-app, nghttp2, python-django, and python-mako).

Phoronix

Nouveau vs. NVIDIA R595 Linux Driver For Workstation Graphics Performance

When having the HP Z6 G5 A workstation in the lab for benchmarking, one of the curiosity-driven tests was seeing how well the latest open-source and upstream Nouveau driver stack is competing against the latest official NVIDIA R595 driver for workstations. The official NVIDIA Linux driver stack remains the best positioned software solution for RTX (PRO) hardware but Nouveau continues evolving while awaiting the Nova kernel driver to reach the limelight.