There are some parts of the kernel where even the most experienced and
capable developers fear to tread; one of those is surely the code that
implements signals. The nature of the signal API almost guarantees that
any implementation will be ful…
[$] Lessons from Log4j
By now, most readers will likely have seen something about the Log4j
vulnerability that has been making life miserable for system administrators
since its disclosure on December 9. This bug is relatively easy to
exploit, results in remote…
[$] LWN.net Weekly Edition for December 16, 2021
The LWN.net Weekly Edition for December 16, 2021 is available.
Mold (linker) 1.0 released
Version
1.0 of the mold linker has been released.
mold 1.0 is the first stable and production-ready release of the
high-speed linker. On Linux-based systems, it should “just work” as
a faster drop-in replacement for the default GNU linker f…
Kdenlive 21.12 released
Version
21.12 of the Kdenlive video editor is out.
The last and most exciting release of Kdenlive this year is out and
brings long awaited features like Multicam Editing and Slip
trimming mode, all of which drastically improve your editing
…
[$] Digging into the community’s lore with lei
Email is often seen as a technology with a dim future; it is slow, easily
faked, and buried in spam. Kids These Days want nothing to do with it, and
email has lost its charm with many others as well.
But many development projects are still depe…
EFF: Chrome Users Beware: Manifest V3 is Deceitful and Threatening
The Electronic Frontier Foundation warns
against Manifest V3, a set of changes coming to a Chrome browser near
you.
Manifest V3, or Mv3 for short, is outright harmful to privacy
efforts. It will restrict the capabilities of web
extensions—e…
Kernel prepatch 5.16-rc5
The 5.16-rc5 kernel prepatch is out for
testing.
Do give it a good testing – with the holidays coming up, things are
probably going to slow down both on the development and testing front,
and as a result I expect that I will also extend the rc…
The Log4j mess
For those who have not yet seen it, this
advisory from Apache describes a nasty vulnerability in the widely used
Log4j package.
Apache Log4j2 <=2.14.1 JNDI features used in configuration, log
messages, and parameters do not protect agains…
Mourning Fredrik “Effbot” Lundh
Guido van Rossum has posted the sad news that longtime Python
contributor Fredrik Lundh has died.
Fredrik was an early Python contributor (e.g. Elementtree and the
‘re’ module) and his enthusiasm for the language and community were
inspirin…