Latest Linux and open source news from around the web

WD Black SN7100 1TB NVMe SSD Sponsored · View on Amazon → Blue Light Blocking Glasses Sponsored · View on Amazon →
LPI

DevOps Tools Introduction #11: Kubernetes Package Management

Kubernetes consists of many layers and features, with a correspondingly complex declarative set of administration rules. Although itโ€™s important to understand Kubernetes itself, DevOps candidates should also master the most common open source projects that have jumped into the complexity ... Read more The post DevOps Tools Introduction #11: Kubernetes Package Management appeared first on Linux Professional Institute (LPI).

Linux Journal

LibreOffice Drives Europeโ€™s Open Source Shift: A Growing Push for Digital Sovereignty

by George Whittaker LibreOffice is increasingly at the center of Europeโ€™s push toward open-source adoption and digital independence. Backed by The Document Foundation, the widely used office suite is playing a key role in helping governments, institutions, and organizations reduce reliance on proprietary software while strengthening control over their digital infrastructure. Across the European Union, this shift is no longer experimental, itโ€™s becoming policy. A Broader Movement Toward Open Source Europe has been steadily moving toward open-source technologies for years, but recent developments show clear acceleration. Governments and public institutions are actively transitioning away from proprietary platforms, often citing concerns about vendor lock-in, cost, and data control. According to recent industry data, European organizations are adopting open source faster than their U.S. counterparts, with vendor lock-in concerns cited as a major driver. LibreOffice sits at the center of t

Phoronix

New Rust-Based BUS1 In-Kernel IPC In Development For The Linux Kernel

After KDBUS failed to make it into the mainline Linux kernel more than one decade ago as an in-kernel version of D-Bus, BUS1 was proposed as a clean sheet design for in-kernel, capability-based inter-process communication (IPC). BUS1 didn't gain enough traction to make it to the mainline kernel and then many of the same developers devised Dbus-Broker as a more performant D-Bus user-space implementation. Well, as a big surprise now, a new version of BUS1 is being worked on for the Linux kernel...

LWN.net

[$] The role of LLMs in patch review

Discussion of a memory-management patch set intended to clean up a helper function for handling huge pages spiraled into something else entirely after it was posted on March 19. Memory-management maintainer Andrew Morton proposed making changes to the subsystem's review process, to require patch authors to respond to feedback from Sashiko, the recently released LLM-based kernel patch review system. Other sub-maintainers, particularly Lorenzo Stoakes, objected. The resulting discussion about how and when to adopt Sashiko is potentially relevant to many other parts of the kernel.

LWN.net

[$] Objections to systemd age-attestation changes go overboard

In early March, Dylan M. Taylor submitted a pull request to add a field to store a user's birth date in systemd's JSON user records. This was done to allow applications to store the date to facilitate compliance with age-attestation and -verification laws. It was to be expected that some members of the community would object; the actual response, however, has been shockingly hostile. Some of this has been fueled by a misinformation campaign that has targeted the systemd project and Taylor specifically, resulting in Taylor being doxxed and receiving death threats. Such behavior is not just problematic; it is also deeply misguided given the actual nature of the changes.

LWN.net

Vulnerability Research Is Cooked (sockpuppet.org)

There is a blog post on sockpuppet.org arguing that we are not prepared for the upcoming flood of high-quality, LLM-generated vulnerability reports and exploits. Now consider the poor open source developers who, for the last 18 months, have complained about a torrent of slop vulnerability reports. I'd had mixed sympathies, but the complaints were at least empirically correct. That could change real fast. The new models find real stuff. Forget the slop; will projects be able to keep up with a steady feed of verified, reproducible, reliably-exploitable sev:hi vulnerabilities? That's what's coming down the pipe. Everything is up in the air. The industry is sold on memory-safe software, but the shift is slow going. We've bought time with sandboxing and attack surface restriction. How well will these countermeasures hold up? A 4 layer system of sandboxes, kernels, hypervisors, and IPC schemes are, to an agent, an iterated version of the same problem. Agents will generate full-chain exploits

LWN.net

Security updates for Tuesday

Security updates have been issued by AlmaLinux (firefox, kernel, and kernel-rt), Debian (phpseclib and roundcube), Fedora (bind, bind-dyndb-ldap, dotnet8.0, dotnet9.0, firefox, freerdp, mingw-expat, musescore, nss, ntpd-rs, perl-YAML-Syck, php-phpseclib3, polkit, pyOpenSSL, python3.12, rust, rust-cargo-rpmstatus, rust-cargo-vendor-filterer, stgit, webkitgtk, and xen), SUSE (dovecot24, ImageMagick, jupyter-nbclassic, kernel, libjxl, libsuricata8_0_4, obs-service-recompress, obs-service-tar_scm, obs-service-set_version, openbao, perl-Crypt-URandom, plexus-utils, python-pyasn1, python-PyJWT, strongswan, traefik, traefik2, and webkit2gtk3), and Ubuntu (gst-plugins-base1.0, gst-plugins-good1.0, imagemagick, pillow, pyasn1, pyjwt, and roundcube).