Inside this week’s LWN.net Weekly Edition:
SUSE kicked off its SUSECON 2025 conference this week in Orlando with a keynote introduced by Dominic Laurie in his role as comms director… who handed immediately over to SUSE CEO Dirk-Peter van Leeuwen.
The Radxa CM3J is an industrial-grade compute module built around the Rockchip RK3568J SoC. This compact module integrates a CPU, PMU, LPDDR4X, eMMC, and wireless connectivity options such as Wi-Fi 5 and Bluetooth 5.0 in a 55mm x 40mm form factor.
After releasing Garuda Linux “Broadwing”, the development team behind this Arch Linux-based distribution announced that they’re working on a new edition featuring the up-and-coming COSMIC desktop environment.
Intel announced a short time ago that Lip-Bu Tan has been named as the company’s next CEO…
As we’ll show later, many people (even inside OSI) are very angry at the OSI right now
Garuda Linux has introduced the first ISO builds of its COSMIC offering. Users can test out what it has to offer.
On February 25, the Python
Software Foundation (PSF), which runs the Python Package Index (PyPI), announced
new terms
of service (ToS) for the repository. That has led to some questions
about the new ToS, and the process of coming up with them. For one thing, the previous terms
of use for the service were shorter and simpler, but there are other
concerns with specific wording in the new agreement.
Damien Neil has written an article for the Go Blog about path
traversal vulnerabilities and the os.Root API added in Go 1.24 to help prevent
them.
Root permits relative path components and symlinks that do not escape
the root. For example, root.Open("a/../b") is permitted. Filenames are
resolved using the semantics of the local platform: On Unix systems,
this will follow any symlink in “a” (so long as that link does not
escape the root); while on Windows systems this will open “b” (even if
“a” does not exist).
As you scroll through social media, the posts blend together: a heroic cat, a shocking statistic, a breaking news clip. But in a world where AI blurs the line between fact and fiction, how do you tell what’s real from what’s misinformation?
Plans have been drafted to begin using more Rust-rewritten Linux system components within the Ubuntu 25.10 release due out later this year and ahead of next year’s all important Ubuntu 26.04 LTS release. Among the Rust components being planned for use in Ubuntu 25.10 is the Rust Coreutils “uutils” software…
Merged for the Linux 6.13 kernel was the AMD 3D V-Cache Optimizer driver for being able to influence the kernel’s scheduling decisions on AMD processors where only a subset of CCDs have the larger 3D V-Cache. With this new driver users can communicate their cache vs. frequency preference for influencing where new tasks are first placed if on the CCD with the larger L3 cache or with the higher frequency potential. Here is a look at the impact of using the AMD 3D V-Cache Optimizer driver with the new AMD Ryzen 9 9950X3D.
The Zig project has
announced the release of the 0.14 version of the language,
including changes from more than 250 contributors. Zig is a low-level,
memory-unsafe programming language that aims to compete with C instead of
depending on it. Even though the language has not yet had a stable release,
there are a number of projects using it as an alternative to C with better
metaprogramming.
While the project’s release
schedule has been a bit inconsistent, with the release of version 0.14 being
delayed
several times, the release contains a number of new convenience features,
broader architecture support, and the next steps toward removing Zig’s
dependency on LLVM.
The SUSE Security Team blog has a post with a
detailed analysis of a vulnerability (CVE-2025-27591)
in the below
tool for recording and displaying system data.
In January 2025, Below was packaged and submitted to openSUSE
Tumbleweed. Below runs as a systemd service with root privileges. The
SUSE security team monitors additions and changes to systemd service
unit files in openSUSE Tumbleweed, and through this we noticed
problematic log directory permissions applied in Below’s code.
The LLVM project’s Fortran compiler, which has for many years gone by the name “flang-new”, will now simply be “flang”, starting from LLVM’s 20.1.0 release on March 4. The
announcement, which includes details about the history of flang, comes after a long period of development and discussion. The community has considered renaming flang several times before now, but has always held off out of a feeling that the compiler was not yet ready. Now, the members of the project believe that flang has become stable and complete enough to earn its name.
We are almost 10 years from the first announcement of what would
become LLVM Flang. In the LLVM monorepo alone there have been close
to 10,000 commits from around 400 different contributors. Undoubtedly
more in Classic Flang before that.
Fedora Linux 43 may ship with RPM 6, bringing enhanced security features like enforced signature checking and multiple signatures per package.
OpenSSL 3.5 Alpha 1 is out today as the first development milestone on the path to releasing OpenSSL 3.5.0 in April…
Today marks the retail availability of the AMD Ryzen 9 9900X3D and Ryzen 9 9950X3D processors. At the top of the hour when the new AMD Zen 5 3D V-Cache processors went on sale, I found both the 9900X3D and 9950X3D in-stock and at MSRP pricing… Less than a half hour later, the 9950X3D is now out of stock while as of writing the 9900X3D remains in-stock at major Internet retailers at its $599 price point…
Version
1.26.0 of the GStreamer cross-platform multimedia framework has
been released. Notable changes in this release include support for the
H.266
Versatile Video Coding (VVC) codec, Low Complexity Enhancement
Video Coding (LCEVC) support, closed caption improvements, and JPEG XS image codec
support.
A set of patches from Intel for utilizing the CPU type for CPU matching as part of the x86 mitigation handling is likely to be part of the upcoming Linux 6.15 kernel. These patches are intended for helping with CPU security mitigations on Intel Core hybrid processors where there are security vulnerabilities affecting only P cores or only E cores but not both sets of CPU cores present in the system…