Feed lwn LWN.net

Favorite IconLWN.net

Link https://lwn.net/
Feed http://lwn.net/headlines/rss
Updated 2025-04-21 06:45
Security updates for Wednesday
Security updates have been issued by Debian (elog, needrestart, openssl, and waitress), Fedora (curl, libxml2, slurm, and vim), Scientific Linux (zlib), SUSE (e2fsprogs, nodejs10, php72, and thunderbird), and Ubuntu (apport, clamav, needrestart, and pcre3).
[$] Bringing bcachefs to the mainline
Bcachefs is a longstanding out-of-treefilesystem that grew out of the bcache cachinglayer that has been in the kernel for nearly ten years. Based on asession led by Kent Overstreet at the2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM), though, it wouldseem that bcachefs is likely to be heading upstream soon. He intends tostart the process toward mainline inclusion over the next six months or so.
[$] Sharing page tables with mshare()
The Linux kernel allows processes to share pages in memory, but the pagetables used to control that sharing are not, themselves, shared; as aresult, processes sharing memory maintain duplicate copies of thepage-table data. Normally this duplication imposes little overhead, butthere are situations where it can hurt. At the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM), Khaled Aziz(remotely) and Matthew Wilcox led a session to discuss a proposed mechanismto allow those page tables to be shared between cooperating processes.
Inkscape 1.2 released
Version 1.2 of theInkscape drawing tool has been released. New features include multi-pagesupport, editable markers, the ability to flow text around shapes, andmore; see therelease notes for details.
Security updates for Tuesday
Security updates have been issued by Debian (cifs-utils, ffmpeg, libxml2, and vim), Fedora (rsyslog), Mageia (chromium-browser-stable), SUSE (chromium, containerd, docker, e2fsprogs, gzip, jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core, kernel, nodejs8, openldap2, pidgin, podofo, slurm, and tiff), and Ubuntu (clamav, containerd, libxml2, and openldap).
[$] Dynamically allocated pseudo-filesystems
It is perhaps unusual to have a kernel tracing developer leading afilesystem session, Steven Rostedt said, at the beginning of such a session at the2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM). But he was doingso totry to find a good way to dynamically allocate kernel data structuresfor some of the pseudo-filesystems, such as sysfs, debugfs, and tracefs,in the kernel.Avoiding static allocations would save memory, especially on systemsthat are not actually using any of the files in those filesystems.
SFC v. Vizio remanded back to California state courts
Software Freedom Conservancy (SFC)has announcedthat it succeeded with its motion in US Federal Court to send the case backto California, where it was originally filed. The suit was filedin October 2021 by SFC, as an owner of Vizio televisions, to getthe company to comply with the GPL on some of the code in the TVs. Back in November, Vizio hadasked to move thecase to Federal Court, because the GPL is only a copyright license(which is a dispute handled at the Federal level) and not a contract (thatcould be adjudicated in state court). Friday's ruling disagreed with that premise:
[$] The netfslib helper library
A new helper library for network filesystems, called netfslib, was the subjectof a filesystem session at the2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM). David Howellsdevelopednetfslib, which was merged for 5.13 a year ago, and led the session.Some filesystems, like AFS and Ceph, are already using some of the servicesthat netfslib provides, while others are starting to look into it.
Security updates for Monday
Security updates have been issued by CentOS (gzip, java-1.8.0-openjdk, java-11-openjdk, and zlib), Debian (adminer, htmldoc, imagemagick, libgoogle-gson-java, lrzip, openjdk-8, openssl, and ruby-nokogiri), Fedora (ecdsautils, et, libxml2, podman, and supertux), Mageia (cairo, clamav, curl, fish, freetype2, golang-github-prometheus-client, python-django-registration, python-nbxmpp, python-waitress, and xmlrpc-c), Red Hat (pcs), SUSE (curl, kernel, pidgin, and webkit2gtk3), and Ubuntu (tiff).
Kernel prepatch 5.18-rc7
The 5.18-rc7 kernel prepatch has beenreleased for testing. Linus says: "So things continue to be fairlycalm, and as such this is likely the last rc before 5.18 unless somethingbad happens next week".
Sunday's stable kernels
The5.17.8,5.15.40,5.10.116,5.4.194,4.19.243,4.14.279, and4.9.314stable kernels have been released; each contains another set of important fixes.
[$] Proactive reclaim for tiered memory and more
Memory reclaim in Linux is largely a reactive practice; the kernel tries tofind memory it can repurpose in response to the amount of free memoryfalling too low. Developers have often wondered if a proactive reclaimmechanism might lead to better performance, for some workloads at least,and optimal use of tiered-memory systems will likely require more activereclamation of memory as well. At the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM), Davidlohr Buesoled a brief session on the topic.
[$] CXL 1: Management and tiering
Compute ExpressLink (CXL) is an upcoming memory technology that is clearly on theminds of Linux memory-management developers; there were five sessionsdedicated to the topic at the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM). The first threesessions, on May 3, covered various aspects of memory management in thepresence of CXL. It seems thatCXL may bring some welcome capabilities, especially for cloud-serviceproviders, but that will come at the cost of some headaches on thekernel-development side.
Security updates for Friday
Security updates have been issued by Debian (chromium, postgresql-11, postgresql-13, and waitress), Fedora (curl, java-1.8.0-openjdk-aarch32, keylime, and pcre2), Oracle (gzip and zlib), Red Hat (subversion:1.10), SUSE (clamav, documentation-suse-openstack-cloud, kibana, openstack-keystone, openstack-monasca-notification, e2fsprogs, gzip, and kernel), and Ubuntu (libvorbis and rsyslog).
[$] Merging the multi-generational LRU
Many types of kernel changes can be hammered into shape on the mailinglists. There are certain types of patches, however, that have a hard time getting tothe finish line that way; they are sufficiently large and invasive thatthey need an actual gathering of the developers involved. The multi-generational LRU work (MGLRU) falls into thiscategory, which is why it was the subject of a full-hour session at the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM). The discussionheld there may well have opened the doors for this code to be merged in thenear future.
AlmaLinux 8.6 released
Just one day after the RHEL 8.6 release, AlmaLinux 8.6 Stable has been released. See the release notes for more information.
A big crop of new stable kernels
Seven new stable kernels were released: 5.17.7, 5.15.39, 5.10.115, 5.4.193, 4.19.242, 4.14.278, and 4.9.313. As usual, they contain importantfixes throughout the tree and users of those series should upgrade.
[$] Solutions for direct-map fragmentation
The kernel's "direct map" makes the entirety of a system's physical memoryavailable in the kernel's virtual address space. Normally, huge pages are used forthis mapping, making it relatively efficient to access. Increasingly,though, there is a need to carve some pages out of the direct map; thissplits up those huge pages and makes the system as a whole less efficient.During a memory-management session at the 2022Linux Storage, Filesystem, Memory-management and BPF Summit (LSFMM),Mike Rapoport led a session on direct-map fragmentation and how it might beavoided.
Security updates for Thursday
Security updates have been issued by Fedora (microcode_ctl, mingw-SDL2_ttf, seamonkey, and thunderbird), Mageia (cifs-utils, gerbv, golang, libcaca, libxml2, openssl, python-pillow, python-rencode, python-twisted, python-ujson, slurm, and sqlite3), Red Hat (gzip, kernel, kpatch-patch, podman, rsync, subversion:1.10, and zlib), Scientific Linux (gzip), Slackware (curl), SUSE (clamav), and Ubuntu (curl, firefox, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oracle, linux-raspi, linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon, linux, linux-aws, linux-azure, linux-azure-5.4, linux-azure-fde, linux-gcp, linux-gcp-5.4, linux-gke, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux, linux-aws, linux-kvm, linux-lts-xenial, and linux-oem-5.14).
[$] LWN.net Weekly Edition for May 12, 2022
The LWN.net Weekly Edition for May 12, 2022 is available.
Red Hat Enterprise Linux 9 released
On May 10, Red Hat announced the release of Red Hat Enterprise Linux 9 (RHEL 9). Not surprisingly, the announcement is rather buzzword-heavy and full of marketing, though there are some technical details scattered in it. The release notes for the RHEL 9 beta are available, which have a lot more information. "The platform will be generally available in the coming weeks."
NVIDIA Transitioning To Official, Open-Source Linux GPU Kernel Driver (Phoronix)
Phoronix reportsthat the days of proprietary NVIDIA graphics drivers are coming to a close.
[$] Changing filesystem resize patterns
In a filesystem session at the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM), Ted Ts'o broughtup the subject of filesystems that get resized frequently and whether thedefault parameters for filesystem creation should change as a result. Itstems from a conversation that he had with XFS developer DarrickWong, who is experiencing some of the same challenges as ext4 in this area.He outlined the problem and how it comes about, then led the discussion onways to perhaps address it.
[$] Better tools for out-of-memory debugging
Out-of-memory (OOM) situations are dreaded by users, system administrators,and kernel developers alike. Usually, all that is known is that a lot ofmemory is being used somewhere and the system has run out, but the kernel provides little help toanybody trying to figure out where the memory has gone. In a memory-managementsession at the 2022Linux Storage, Filesystem, Memory-management and BPF Summit (LSFMM),Kent Overstreet asked what could be done to improve OOM reports and reducethe pain for all involved.
The 2022 Python Language Summit (PSF blog)
Over on the Python Software Foundation (PSF) blog, Alex Waygood has a report from this year's Python Language Summit. There are reports from each of the nine sessions, including "Python without the GIL", The 'Faster CPython' project: 3.12 and beyond", "F-Strings in the grammar", lightning talks, and more.
[$] Seeking an API for protection keys supervisor
Memory protection keys are a CPU feature that allows additional accessrestrictions to be imposed on regions of memory and changed in a fast andefficient way. Support for protection keys in user space has been in thekernel for some time, but kernel-side protection (often called "protectionkeys supervisor" or PKS) remains unsupported — on x86, at least. At the 2022 LinuxStorage, Filesystem, Memory-management and BPF Summit (LSFMM), IraWeiny provided an update on the state of PKS and led a discussion on whatthe proper in-kernel API for PKS should be.
The malicious "rustdecimal" crate
The Rust Blog warnsdevelopers of a malicious crate named rustdecimal, which wasevidently targeted at GitLab users who mistype rust_decimal.
Security updates for Wednesday
Security updates have been issued by Debian (mutt), Fedora (blender, freerdp, kernel, kernel-headers, kernel-tools, mingw-freetype, and vim), Oracle (kernel and kernel-container), Red Hat (aspell, bind, bluez, c-ares, cairo and pixman, cockpit, compat-exiv2-026, container-tools:3.0, container-tools:rhel8, cpio, dovecot, exiv2, fapolicyd, fetchmail, flatpak, gfbgraph, gnome-shell, go-toolset:rhel8, grafana, grub2, httpd:2.4, keepalived, kernel, kernel-rt, libpq, libreoffice, libsndfile, libssh, libtiff, lynx, maven:3.5, maven:3.6, mod_auth_mellon, mod_auth_openidc:2.3, openssh, php:7.4, pki-core:10.6, postgresql:10, python-lxml, python27:2.7, python3, python38:3.8 python38-devel:3.8, python39:3.9 python39-devel:3.9, qt5-qtbase, qt5-qtsvg, rust-toolset:rhel8, samba, squid:4, udisks2, virt:rhel virt-devel:rhel, webkit2gtk3, xorg-x11-server xorg-x11-server-Xwayland, and zsh), SUSE (gzip and php-composer), and Ubuntu (busybox, cairo, cron, dnsmasq, libsndfile, and nss).
[$] Page pinning and filesystems
It would have been surprising indeed if the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM) did not include asession working toward solutions to the longstanding problems withget_user_pages(), an internal function that locks user-space pagesin memory for access by the kernel. The issue has, after all, come up numerous timesover the years. This year's event duly contained a session in the jointfilesystem and memory-management track, led by John Hubbard, with a focuson page pinning and how it interacts with filesystems.
[$] Recent RCU changes
In a combined filesystem and memory-management session at the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM), Paul McKenneygave an update onthe changes to the read-copy-update (RCU) subsystem that had been made overthe last several years. He started with a quick overview of what RCU isand why it exists at all. He did not go into anyreal depth, though, since many of the topics could take a 90-minute session of theirown, he said, but he did provide some descriptions of the work that has gone intoRCU recently.
[$] The state of memory-management development
The 2022 LinuxStorage, Filesystem, Memory-management and BPF Summit (LSFMM) was thefirst chance for Linux memory-management developers to gather in threeyears. In a session at the end of the first day led by maintainer AndrewMorton, those developers discussed the memory-management developmentprocess. While the overall governance will remain the same, there arenonetheless some significant changes in store for this subsystem.
Fedora 36 released
The Fedora 36release is now available. Improvements include GNOME 42, Waylandsupport by default on systems with NVIDIA graphics, Podman 4.0,Ansible 5, the removal of support for legacy ifcfgconfiguration files, GCC 12, and more; see therelease notes for details.
[$] Improving memory-management documentation
Like much of the kernel, the memory-management subsystem is under-documented,and much of the documentation that does exist is less than fully current.At the 2022 LinuxStorage, Filesystem, Memory-management and BPF Summit (LSFMM), MikeRapoport ran a session on memory-management documentation and what can bedone to improve it. The result was a reinvigorated interest indocumentation, but only time will tell what actual improvements will comefrom that interest.
Security updates for Tuesday
Security updates have been issued by Debian (kicad and qemu), Fedora (thunderbird), Oracle (expat), Red Hat (samba), Slackware (kernel), and SUSE (firefox, ldb, and rsyslog).
Poettering: Fitting Everything Together
Lennart Poettering designshis ideal desktop operating system in great detail:
McQueen: Evolving a GNOME strategy for 2022 and beyond
Robert McQueen describessome initiatives being taken by the GNOME Foundation to attract moreusers and developers to the platform.
[$] Dealing with negative dentries
The problem of negative dentries accumulating in the dentry cache in anunbounded manner, as we looked at back inApril, came up at the2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM).Negative dentries reflect failed file-name lookups, which are then cached,saving an expensive operation if the file name in question is looked upagain. There is no mechanism to proactively prune back those cacheentries, however, so the cache keeps growing until memory pressure finallycauses the system to forcibly evict some of them, which can make the systemunresponsive for a long time or even cause a soft lockup.
[$] Ways to reclaim unused page-table pages
One of the memory-management subsystem's most important jobs is reclaimingunused (or little-used) memory so that it can be put to better use. When it comes toone of the core memory-management data structures — page tables — though,this subsystem often falls down on the job. At the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit (LSFMM), David Hildenbrand led asession on the problems posed by the lack of page-table reclaim andexplored options for improving the situation.
Four new stable kernels
Greg Kroah-Hartman has announced the release of the 5.17.6, 5.15.38, 5.10.114, and 5.4.192 stable kernels. As usual, thesecontain important fixes throughout the tree; users of those series should upgrade.
Security updates for Monday
Security updates have been issued by CentOS (firefox and thunderbird), Debian (ecdsautils and libz-mingw-w64), Fedora (cifs-utils, firefox, galera, git, java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, java-latest-openjdk, mariadb, maven-shared-utils, mingw-freetype, redis, and seamonkey), Mageia (dcraw, firefox, lighttpd, rsyslog, ruby-nokogiri, and thunderbird), Scientific Linux (thunderbird), SUSE (giflib, kernel, and libwmf), and Ubuntu (dbus and rsyslog).
Kernel prepatch 5.18-rc6
The 5.18-rc6 kernel prepatch is out fortesting. "Please do go test it all out - because things may lookgood now, but continued testing is the only thing that will makesure."
GCC 12.1 Released
The GCC project has made the first release of the GCC 12 series, GCC 12.1. As the announcement notes, this month is the 35th anniversary of the GCC 1.0 release. There are lots of changes and fixes in this release, including:
[$] The ongoing search for mmap_lock scalability
There are certain themes that recur regularly at the Linux Storage,Filesystem, Memory-Management, and BPF Summit; among the most reliable isthe scalability problems posed by the mmap_lock (formerlymmap_sem) lock. This topic has come up in (at least)2013,2018 (twice),and 2019. The 2022 event was noexception, with three consecutive sessions led by Liam Howlett, MichelLespinasse, and Suren Baghdasaryandedicated to the topic. There are improvements on the horizon, but the problemis far from solved.
Security updates for Friday
Security updates have been issued by Debian (dpdk, mruby, openjdk-11, and smarty3), Oracle (thunderbird), Red Hat (thunderbird), SUSE (chromium, libvirt, python-Twisted, and tar), and Ubuntu (cron and jbig2dec).
[$] How to cope with hardware-poisoned page-cache pages
"Hardware poisoning" is a mechanism for detecting and handling memoryerrors in a running system. When a particular range of memory ceases toremember correctly, it is "poisoned" and further accesses to it willgenerate errors. The kernel has had support forhardware poisoning for over a decade, but that doesn't mean it can't beimproved. At the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit, Yang Shi discussed thechallenges of dealing with hardware poisoning when it affects memory usedfor the page cache.
Security updates for Thursday
Security updates have been issued by Debian (firefox-esr), Fedora (firefox, java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, java-latest-openjdk, recutils, suricata, and zchunk), Oracle (firefox and kernel), Red Hat (firefox), Scientific Linux (firefox), Slackware (mozilla, openssl, and seamonkey), SUSE (apache2-mod_auth_mellon, libvirt, and pgadmin4), and Ubuntu (dpdk, mysql-5.7, networkd-dispatcher, openssl, openssl1.0, sqlite3, and twisted).
[$] LWN.net Weekly Edition for May 5, 2022
The LWN.net Weekly Edition for May 5, 2022 is available.
[$] Modern Python performance considerations
There is a lot of work going on right now on speeding up Python; KevinModzelewski gave a presentation at PyCon 2022 on some of thatwork. Much of it has implications for Python programmers in terms of howto best take advantage of these optimizations in their code. He gave anoverview of some of the projects, the kinds of optimizations being workedon, and provided some benchmarks to give a general idea of how much fastervarious Python implementations are getting—and which operations are most affected.
[$] A memory-folio update
The folio project is not yet two years old,but it has already resulted in significant changes to the kernel's memory-management and filesystemlayers. While much work has been done, quite a bit remains. In theopening plenary session at the 2022 Linux Storage,Filesystem, Memory-management and BPF Summit, Matthew Wilcox providedan update on the folio transition and led a discussion on the work thatremains to be done.
Security updates for Wednesday
Security updates have been issued by Debian (openjdk-17), Fedora (chromium and suricata), Oracle (mariadb:10.5), SUSE (amazon-ssm-agent, containerd, docker, java-11-openjdk, libcaca, libwmf, pcp, ruby2.5, rubygem-puma, webkit2gtk3, and xen), and Ubuntu (linux-raspi).
...59606162636465666768...