Linux

Your ‘umble scribe has been using Debian GNU/Linux for the best part of 15 years now.

Besides being a distribution in its own right, Debian is also used as the basis for many other Linux distros, such as the Ubuntu family and derivatives, as well as specialised distros like the security- and privacy-conscious Tails.

Furthermore, Debian stable version releases don't occur very often, only every 2-3 years (unlike the Ubuntu family, which is on a rigid twice-yearly release cycle. Ed.).

Consequently, a Debian stable version release is a major event and the latest release occurred on Friday, as announced in an email to the Debian Developer Announce mailing list

The start of the email reads as follows:

Hi,
On 14th August 2021 we released Debian 11 “bullseye”.
There are too many people who should be thanked for their work on getting us to this point to list them all individually, and we would be sure to miss some. Nevertheless, we would like to particularly thank the installer team, the buildd and ftp teams, the CD team, the publicity team, the webmasters, the Release Notes editors, porters and all the bug squashers, NMUers, package maintainers and translators who have contributed to making bullseye a great release of which we should all be proud.

The email goes on the state that first point release for bullseye will take place about one month after the initial release.

Testing will soon start for the next Debian stable release – Debian 12, codenamed bookworm.

Finally, it’s worth noting that bullseye comes with 5 years’ support and an additional 10,000 software packages, as noted by ZDNet.

Version 11 of Debian GNU/Linux, codenamed ‘bullseye‘, is due for release on 14th August The Register reports.

A new Debian release is an important event in the world of Linux and free and open source software as it doesn’t happen all that frequently, the last version release being over 2 years ago.

Not only is Debian an important distribution in its own right, but is also influential since it froms the basis for many others including the various flavours of Ubuntu (e.g. Kubuntu, Xubuntu, etc. Ed.), Mint, Devuan, Knoppix, Tails, Raspbian, Pop!_OS and SteamOS, to name but a few.

A post to Debian’s developer announcements list stated: “We plan to release on 2021-08-14”.

It’s a little over 2 years since the last stable Debian version, Debian 10 or ‘buster‘, was made available for download.

The newest version – 2.06 – of the GRUB bootloader used by most Linux distributions contains two new features, German IT news site heise reports. The software now supports boot partitions encrypted with LUKS2 and the update also contains several bug fixes and security improvements. This is the first new version of GRUB in nearly 2 years. It was originally to have been released in summer 2020, but developers were thwarted by a nasty security hole.

Attackers could gain access to the boot process and execute malicious code via a vulnerability named BootHole. To begin with Linux distributors patched their own GRUB packages. Unfortunately, BootHole patches for Red Hat, CentOS, Debian and Ubuntu blocked GRUB2. GRUB has now officially patched BootHole with the new version

GRUB developers have taken over the additional patches used in the meantime by Red Hat, Debian and a few other distributors to secure their own GRUB packages. The distributors had tried to bridge the gap in the lone release times between GRUB versions. In addition, several errors have been eliminated and GRUB’s code tidied up. GRUB can now be compiled with the GCC 10 and Clang 10 C compilers.

New security module

As a new feature, GRUB 2.06 supports the Xen hypervisor’s XSM/FLASK security module and Secure Boot Advanced Targeting (SBAT). The developers of the Shim bootloader came up with the latter technology to further complicate attacks on the boot process. In simple terms, the procedure automatically considers outdated versions of a program involved in the boot process to be unsafe. In addition to this, GRUB 2.06 offers a lockdown mechanism that is similar to the equivalent of the Linux kernel of the same name.

Mozilla, the organisation behind the free and open source Firefox web browser and Thunderbird email client, has just released the Pyodide project from its organisation and it will henceforth be managed independently by the community, French IT news site Le Monde Informatique reports. Formed within Mozilla in 2018 as an experimental project to create in full Python stack for data science, the tool is compiled to WebAssembly and can be used to leverage Python in a web browser and give the language full access to web-based APIs. Via WebAssembly, Pyodide thus brings the Python 3.8 runtime to the browser, with its scientific stack including NumPy, Pandas, Matplotlib, SciPy and scikit-learn. Almost 75 packages are currently offered, with the tool providing transparent object conversion between JavaScript and Python.

The project currently has a separate GitHub organisation and documentation site. It will be maintained by volunteers. A governance document and roadmap have been published to set out Pyodide’s targets, including better Python code performance, reducing the size of downloads and simplifying package uploads. The roadmap introduction states:

This document lists general directions that core developers are interested to see developed in Pyodide. The fact that an item is listed here is in no way a promise that it will happen, as resources are limited. Rather, it is an indication that help is welcomed on this topic.

Pyodide can install any Python package in wheel format from the PyPi repository. It also includes an interface which exposes Python packages Python to JavaScript and exposes the browser interface (including the DOM) to Python. Developers can test Pyodide in an REPL environment.

Version 0.17.0 with API revision

Mozilla has at the same time announced the release of Pyodide version 0.17.0 with major maintenance improvements, a revision of the central APIs and the squashing of bugs and memory leaks. Since its creation the project has given rise to plenty of interest and is used in several projects outside Mozilla.