Latest Linux and open source news from around the web

Ubiquiti UniFi U6+ Sponsored · View on Amazon → Raspberry Pi Camera Module 3 Sponsored · View on Amazon →
OMG! Ubuntu

Little Snitch, the macOS network tool, is now available on Linux

A Linux version of Little Snitch, the iconic network monitoring and firewall tool for macOS, has been released. Little Snitch for Linux is written in Rust and uses eBPF for kernel-level traffic interception (which lets sandboxed code run inside the Linux kernel without modifying it). The tool lists processes on your machine making network connections, with options to block them. Its creator, Christian Starkjohann at Austrian software company Objective Development, says he created the Linux port out of personal necessity. He’d installed Linux on some old hardware, and immediately felt exposed without it. While Linux has alternatives, not least in […]

Phoronix

Redox OS Establishes AI Policy To Forbid Contributions Made Using LLMs

The Rust-based Redox OS open-source operating system provided a status update on all of their interesting development activities during the month of March. In addition to a lot of code improvements, Redox OS also enhanced its documentation as well as added an AI policy to reject any contributions relying on large language models...

LWN.net

[$] Ripping CDs and converting audio with fre:ac

It has been a little while since LWN last surveyed tools for managing a digital music collection. In the intervening decades, many Linux users have moved on to music streaming services, found them wanting, and are looking to curate their own collection once again. There are plenty of choices when it comes to ripping, managing, and playing digital audio; so many, in fact, that it can be a bit daunting. After years of tinkering, I've found a few tools that work well for managing my digital library: the first I'd like to cover is the fre:ac free audio encoder for ripping music from CDs and converting between audio formats.

LWN.net

[$] An API for handling arithmetic overflow

On March 31, Kees Cook shared a patch set that represents the culmination of more than a year of work toward eliminating the possibility of silent, unintentional integer overflow in the kernel. Linus Torvalds was not pleased with the approach, leading to a detailed discussion about the meaning of "safe" integer operations and the design of APIs for handling integer overflows. Eventually, the developers involved reached a consensus for a different API that should make handling overflow errors in the kernel much less of a hassle.

LWN.net

Nix privilege escalation security advisory

The NixOS project has announced a critical vulnerability in many versions of the Nix package manager's daemon. The flaw was introduced as part of a fix for a prior vulnerability in 2024. According to the advisory, all default configurations of NixOS and systems building untrusted derivations are impacted. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating the builds (typically the Nix daemon running as root in multi-user installations) by following symlinks during fixed-output derivation output registration. This affects sandboxed Linux builds - sandboxed macOS builds are unaffected. The location of the temporary output used for the output copy was located inside the build chroot. A symlink, pointing to an arbitrary location in the filesystem, could be created by the derivation builder at that path. During output registration, the Nix process (running in the host mount namespace) would follow that symlink and overwrit

LWN.net

Security updates for Wednesday

Security updates have been issued by Debian (openssl), Fedora (corosync, goose, kea, pspp, and rauc), Mageia (python-pygments, roundcubemail, and tigervnc), SUSE (bind, gimp, google-cloud-sap-agent, govulncheck-vulndb, ignition, ImageMagick, python, python-PyJWT, and python-pyOpenSSL), and Ubuntu (adsys, juju-core, lxd, python-django, and salt).