Security updates for Thursday
Security updates have been issued by Debian (ruby-kaminari
and tomcat8), Mageia (389-ds-base, ansible, apache, apr, cpio, curl, firefox,
ghostscript, gifsicle, gpac, libarchive, libgd, libssh, lynx, nextcloud-client,
openssl, postgresql, proftpd, python3, thunderbird, tor, and vim), openSUSE
(chromium, ffmpeg, grilo, hivex, linuxptp, and samba), Oracle (go-toolset:ol8,
kernel, kernel-container, krb5, mysql:8.0, and nodejs:12), SUSE (ffmpeg,
firefox, grilo, hivex, kernel, linuxptp, nodejs14, and samba), and Ubuntu (ca-
certificates, edk2, sqlparse, and webkit2gtk).
[$] LWN.net Weekly Edition for September 23, 2021
The LWN.net Weekly Edition for September 23, 2021 is
available.
Courtès: What's in a package
Over at the Guix-HPC blog, Ludovic Courtès writes about
trying to package the PyTorch machine-learning library for the Guix
distribution. Building from source in a user-verifiable manner is part of the
philosophy behind Guix, but there were a number of problems that were
encountered: The first surprise when starting packaging PyTorch is that, despite
being on PyPI, PyTorch is first and foremost a large C++ code base. It does have
a setup.py as commonly found in pure Python packages, but that file delegates
the bulk of the work to CMake.
The second surprise is that PyTorch bundles
(or "vendors", as some would say) source code for no less than 41 dependencies,
ranging from small Python and C++ helper libraries to large C++ neural network
tools. Like other distributions such as Debian, Guix avoids bundling: we would
rather have one Guix package for each of these dependencies. The rationale is
manifold, but it boils down to keeping things auditable, reducing resource
usage, and making security updates practical.
[$] A discussion on folios
A few weeks ago, Matthew Wilcox might have guessed that his
session at the 2021 Linux Plumbers Conference would be focused rather
differently. But, as we reported earlier in September, his folio patch set ran
into some, perhaps unexpected, opposition and, ultimately, did not land in the
mainline for 5.15. Instead of discussing how to use folios as part of the File
Systems microconference, he led a discussion that was, at least in part, on the
path forward for them.
GNOME 41 released
The GNOME project has announced the release of GNOME
41.
The most notable changes this in release include an improved Software
app, new multitasking settings, and enhanced power management features. With
these changes, GNOME is smarter, more flexible, and offers a richer and more
engaging experience than ever before.
The new release also comes with
significant improvements for developers, including a new developer documentation
website, a major new version of the Human Interface Guidelines, new features in
the Builder IDE, GTK 4 enhancements, and much more.
