corbet

Version 5.0 of
the Krita painting program has been released.
“This is a huge release, with a lot of new features and
improvements”.
Changes include a reworked
resource system, dithered gradients, faster color management, a reworked
animation su…

The LWN.net Weekly Edition for December 23, 2021 is available.

It may have seemed questionable at times, but we have indeed survived yet
another year — LWN’s 22nd year of publication. That can only mean one
thing: it is time to take a look back at our
ill-advised attempt to make predictions in January and …

Today’s stable kernel updates are
5.15.11,
5.10.88,
5.4.168,
4.19.222,
4.14.259,
4.9.294, and
4.4.296.
Each contains another set of important fixes.

Security updates have been issued by CentOS (firefox, ipa, log4j, and samba), Debian (sogo, spip, and xorg-server), Fedora (jansi and log4j), Mageia (apache, apache-mod_security, kernel, kernel-linus, and x11-server), openSUSE (log4j and xorg-x1…

The Linux Foundation has announced
the posting of a report on its research into diversity, equity, and
inclusion in open-source communities.

The research shows that while
a majority of respondents feel welcome in open source, many in
underrepr…

Security updates have been issued by Mageia (log4j), openSUSE (chromium, log4j, netdata, and nextcloud), Oracle (kernel and kernel-container), Red Hat (kernel, kernel-rt, log4j, openssl, postgresql:12, postgresql:13, and virt:rhel and virt-devel…

Techdirt looks
at the problem of copyleft trolls, and those who target users of
Creative Commons materials in particular.

However, in the end, they are still licenses, and those licenses
are still backed by copyright — which means that if y…

The 5.16-rc6 kernel prepatch is out for
testing.

Regardless of what happens, I will be making an rc8 – not because
this release looks particularly problematic, but simply due to the
seasonal holidays. There’s no point in releasing a final 5…

The Google Security Blog looks
into the ripple effects of the Log4j vulnerability.

Most artifacts that depend on log4j do so indirectly. The deeper
the vulnerability is in a dependency chain, the more steps are
required for it to be fixed. …