Tux Machines

Do you waddle the waddle?

Other Sites

9to5Linux

IPFire Linux Firewall Gets Post-Quantum Cryptography Support for IPsec Tunnels

Coming after IPFire 2.29 Core Update 192, the IPFire 2.29 Core Update 193 release introduces support for post-quantum cryptography using the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) in IPsec tunnels.

Fwupd 2.0.8 Adds New Plugins to Update the UEFI Signature Database and KEK

Coming two weeks after fwupd 2.0.7, this release introduces two new plugins for updating the UEFI Signature Database and KEK, an updated UEFI database as a new HSI attribute, /sys/firmware/efi/efivars to ReadWritePaths, support for segment value 0 in the ccgx-dmc image parser, and detection the Firehose protocol features if they aren’t automatically sent.

Linux Mint Debian Edition Is Getting Support for OEM Installations with LMDE 7

One of the big changes that Clement Lefebvre talks about in the March newsletter is support for OEM (Original Equipment Manufacturer) installations for the next major version of LMDE (Linux Mint Debian Edition), which will be based on the upcoming Debian GNU/Linux 13 “Trixie” operating system series.

OpenSSL 3.5 Released with Support for PQC Algorithms, Server-Side QUIC

Coming more than six months after OpenSSL 3.4, the OpenSSL 3.5 release introduces new features like support for server-side QUIC (RFC 9000), support for third-party QUIC stacks (including 0-RTT support), support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA), and support for central key generation in CMP.

LinuxGizmos.com

Topaz Tz170 J484 Development Kit with 256 Mbit x32 LPDDR4 at 1.6 Gbps & MIPI D-PHY

The Topaz Tz170 J484 Development Kit is a compact platform for evaluating and prototyping with the Efinix Tz170 FPGA. It integrates onboard memory, configurable I/O, and a preloaded reference design, providing a practical setup for testing and demonstration across a range of FPGA applications.

HydraNFC Shield v2 and Sniffer Decoder Expand Capabilities for NFC Development & Analysis

The HydraNFC Shield v2 is a high-performance NFC development platform built around the STMicroelectronics ST25R3916 NFC frontend. Designed for NFC research, development, debugging, and security analysis, it is intended to be used with the HydraBus v1.0, a versatile open-source baseboard that acts as the host interface for HydraNFC and other shield extensions.

Tor Project blog

New Alpha Release: Tor Browser 14.5a6

This version includes important security updates to Firefox.

Internet Society

Article 19 of the Marco Civil – Guarantee or Threat to the Future of the Brazilian Internet?

Editor’s note: This post was originally published on 6 April 2025 in JOTA Jornalismo. It has been translated from Portuguese below.

Bash-5.2 Release available

posted by Roy Schestowitz on Sep 27, 2022

Introduction
============

The first public release of bash-5.2 is now available with the URLs
ftp://ftp.cwru.edu/pub/bash/bash-5.2.tar.gz ftp://ftp.gnu.org/pub/gnu/bash/bash-5.2.tar.gz
and from the master branch of the bash git repository (http://git.savannah.gnu.org/cgit/bash.git/log/) and the usual GNU mirror sites.
Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace expansion, and a slew of other features. For more information on the features of Bash that are new to this type of shell, see the file `doc/bashref.texi'. There is also a large Unix-style man page. The man page is the definitive description of the shell's features.
This tar file includes the formatted documentation (pdf, postscript, dvi, info, and html, plus nroffed versions of the manual pages).
Please use `bashbug' to report bugs with this version. It is built and installed at the same time as bash.
Installation ============
Please read the README file first.
Installation instructions are provided in the INSTALL file.
New Features ============
This is an update to the fifth major release of bash.
Read the file NEWS in the bash-5.2 distribution for a complete description of the new features. A copy of the relevant portions is included below.
This release fixes several outstanding bugs in bash-5.1 and introduces a number of new features.
There are a number of bug fixes, including several bugs that caused the shell to crash. Complete details are available in the CHANGES file.
The most notable new feature is the rewritten command substitution parsing code, which calls the bison parser recursively. This replaces the ad-hoc parsing used in previous versions, and allows better syntax checking and catches syntax errors much earlier. The shell attempts to do a much better job of parsing and expanding array subscripts only once; this has visible effects in the `unset' builtin, word expansions, conditional commands, and other builtins that can assign variable values as a side effect. The `unset' builtin allows a subscript of `@' or `*' to unset a key with that value for associative arrays instead of unsetting the entire array (which you can still do with `unset arrayname'). There is a new shell option, `patsub_replacement'. When enabled, a `&' in the replacement string of the pattern substitution expansion is replaced by the portion of the string that matched the pattern. Backslash will escape the `&' and insert a literal `&'. This option is enabled by default. Bash suppresses forking in several additional cases, including most uses of $( All the new features are described below.
Readline has new features as well. There is a new option: `enable-active-region'. This separates control of the active region and bracketed-paste. It has the same default value as bracketed-paste, and enabling bracketed paste enables the active region. Users can now turn off the active region while leaving bracketed paste enabled. Two new bindable string variables are available; their values are terminal escape sequences that set the color used to display the active region and turn it off, respectively. If set, these are used in place of terminal standout mode. Finally, Readline now checks for changes to locale settings (LC_ALL/LC_CTYPE/ LANG) each time it is called, and modifies the appropriate locale-specific display and key binding variables when the locale changes.
There are a few incompatible changes between bash-5.1 and bash-5.2. Here- documents and here-strings use temporary files if the shell compatibility level is 50 or lower. The `unset' builtin in bash-5.2 treats array subscripts `@' and `*' differently than previous versions, and differently depending on whether the array is indexed or associative. Bash-5.2 attempts to prevent double-expansion of array subscripts under certain circumstances, especially arithmetic evaluation, by acting as if the `assoc_expand_once' shell option were set. Set the compatibility level appropriately to revert to previous behavior; details are in the file COMPAT.
Bash can be linked against an already-installed Readline library rather than the private version in lib/readline if desired. Only readline-8.1 and later versions are able to provide all of the symbols that bash-5.2 requires; earlier versions of the Readline library will not work correctly.
A complete list of changes between bash-5.1 and bash-5.2 is available in the file CHANGES; the complete list is too large to include in this message.
Readline ========
Also available is a new release of the standalone Readline library, version 8.2, with its own configuration scripts and Makefiles. It can be retrieved with the URLs
ftp://ftp.cwru.edu/pub/bash/readline-8.2.tar.gz ftp://ftp.gnu.org/pub/gnu/readline/readline-8.2.tar.gz
and from the master branch of the GNU readline git repository (http://git.savannah.gnu.org/cgit/readline.git/log/) and the usual GNU mirror sites.
The formatted Readline documentation is included in the readline distribution tar file.
The changes in Readline are described in a separate announcement.
As always, thanks for your help.
Chet
+========== NEWS ==========+ This is a terse description of the new features added to bash-5.2 since the release of bash-5.1. As always, the manual page (doc/bash.1) is the place to look for complete descriptions.
1. New Features in Bash
a. The bash malloc returns memory that is aligned on 16-byte boundaries.
b. There is a new internal timer framework used for read builtin timeouts.
c. Rewrote the command substitution parsing code to call the parser recursively and rebuild the command string from the parsed command. This allows better syntax checking and catches errors much earlier. Along with this, if command substitution parsing completes with here-documents remaining to be read, the shell prints a warning message and reads the here-document bodies from the current input stream.
d. The `ulimit' builtin now treats an operand remaining after all of the options and arguments are parsed as an argument to the last command specified by an option. This is for POSIX compatibility.
e. Here-document parsing now handles $'...' and $"..." quoting when reading the here-document body.
f. The `shell-expand-line' and `history-and-alias-expand-line' bindable readline commands now understand $'...' and $"..." quoting.
g. There is a new `spell-correct-word' bindable readline command to perform spelling correction on the current word.
h. The `unset' builtin now attempts to treat arguments as array subscripts without parsing or expanding the subscript, even when `assoc_expand_once' is not set.
i. There is a default value for $BASH_LOADABLES_PATH in config-top.h.
j. Associative array assignment and certain instances of referencing (e.g., `test -v' now allow `@' and `*' to be used as keys.
k. Bash attempts to expand indexed array subscripts only once when executing shell constructs and word expansions.
l. The `unset' builtin allows a subscript of `@' or `*' to unset a key with that value for associative arrays instead of unsetting the entire array (which you can still do with `unset arrayname'). For indexed arrays, it removes all elements of the array without unsetting it (like `A=()').
m. Additional builtins (printf/test/read/wait) do a better job of not parsing array subscripts if array_expand_once is set.
n. New READLINE_ARGUMENT variable set to numeric argument for readline commands defined using `bind -x'.
o. The new `varredir_close' shell option causes bash to automatically close file descriptors opened with {var} p. The `$0' special parameter is now set to the name of the script when running any (non-interactive) startup files such as $BASH_ENV.
q. The `enable' builtin tries to load a loadable builtin using the default search path if `enable name' (without any options) attempts to enable a non-existent builtin.
r. The `printf' builtin has a new format specifier: %Q. This acts like %q but applies any specified precision to the original unquoted argument, then quotes and outputs the result.
s. The new `noexpand_translations' option controls whether or not the translated output of $"..." is single-quoted.
t. There is a new parameter transformation operator: @k. This is like @K, but expands the result to separate words after word splitting.
u. There is an alternate array implementation, selectable at `configure' time, that optimizes access speed over memory use (use the new configure --enable-alt-array-implementation option).
v. If an [N]<&WORD- or [N]>&WORD- redirection has WORD expand to the empty string, treat the redirection as [N]<&- or [N]>&- and close file descriptor N (default 0).
w. Invalid parameter transformation operators are now invalid word expansions, and so cause fatal errors in non-interactive shells.
x. New shell option: patsub_replacement. When enabled, a `&' in the replacement string of the pattern substitution expansion is replaced by the portion of the string that matched the pattern. Backslash will escape the `&' and insert a literal `&'.
y. `command -p' no longer looks in the hash table for the specified command.
z. The new `--enable-translatable-strings' option to `configure' allows $"..." support to be compiled in or out.
aa. The new `globskipdots' shell option forces pathname expansion never to return `.' or `..' unless explicitly matched. It is enabled by default.
bb. Array references using `@' and `*' that are the value of nameref variables (declare -n ref='v[@]' ; echo $ref) no longer cause the shell to exit if set -u is enabled and the array (v) is unset.
cc. There is a new bindable readline command name: `vi-edit-and-execute-command'.
dd. In posix mode, the `printf' builtin checks for the `L' length modifier and uses long double for floating point conversion specifiers if it's present, double otherwise.
ee. The `globbing' completion code now takes the `globstar' option into account.
ff. `suspend -f' now forces the shell to suspend even if job control is not currently enabled.
gg. Since there is no `declare -' equivalent of `local -', make sure to use `local -' in the output of `local -p'.
2. New Features in Readline
a. There is now an HS_HISTORY_VERSION containing the version number of the history library for applications to use.
b. History expansion better understands multiple history expansions that may contain strings that would ordinarily inhibit history expansion (e.g., `abc!$!$').
c. There is a new framework for readline timeouts, including new public functions to set timeouts and query how much time is remaining before a timeout hits, and a hook function that can trigger when readline times out. There is a new state value to indicate a timeout.
d. Automatically bind termcap key sequences for page-up and page-down to history-search-backward and history-search-forward, respectively.
e. There is a new `fetch-history' bindable command that retrieves the history entry corresponding to its numeric argument. Negative arguments count back from the end of the history.
f. `vi-undo' is now a bindable command.
g. There is a new option: `enable-active-region'. This separates control of the active region and bracketed-paste. It has the same default value as bracketed-paste, and enabling bracketed paste enables the active region. Users can now turn off the active region while leaving bracketed paste enabled.
h. rl_completer_word_break_characters is now `const char *' like rl_basic_word_break_characters.
i. Readline looks in $LS_COLORS for a custom filename extension (*.readline-colored-completion-prefix) and uses that as the default color for the common prefix displayed when `colored-completion-prefix' is set.
j. Two new bindable string variables: active-region-start-color and active-region-end-color. The first sets the color used to display the active region; the second turns it off. If set, these are used in place of terminal standout mode.
k. New readline state (RL_STATE_EOF) and application-visible variable (rl_eof_found) to allow applications to detect when readline reads EOF before calling the deprep-terminal hook.
l. There is a new configuration option: --with-shared-termcap-library, which forces linking the shared readline library with the shared termcap (or curses/ncurses/termlib) library so applications don't have to do it.
m. Readline now checks for changes to locale settings (LC_ALL/LC_CTYPE/LANG) each time it is called, and modifies the appropriate locale-specific display and key binding variables when the locale changes.
-- ``The lyf so short, the craft so long to lerne.'' - Chaucer ``Ars longa, vita brevis'' - Hippocrates Chet Ramey, UTech, CWRU chet@case.edu http://tiswww.cwru.edu/~chet/

Other Recent Tux Machines' Posts

Linux Mint Debian Edition Is Getting Support for OEM Installations with LMDE 7
Linux Mint Debian Edition is getting OEM support with the LMDE 7 release based on the Debian GNU/Linux 13 “Trixie” operating system.
Techrights Focus [original]
some thoughts
OpenSSL 3.5 Released with Support for PQC Algorithms, Server-Side QUIC
OpenSSL 3.5 has been released today as a major update to this open-source, cross-platform, and free software library that provides secure communications over computer networks for applications and websites.
Linus Torvalds Announces First Linux Kernel 6.15 Release Candidate
Today, Linus Torvalds announced the general availability of the first Release Candidate development milestone of the upcoming Linux 6.15 kernel series for public testing.
Benchmark Stuff: Linux Better Than Windows and Facebook is Misleading With Its Proprietary LLMs (Openwashing and Other Deceit)
testing speeds
FreeDOS 1.4 is Out
new FreeDOS release
 
Games: DUCKSIDE, Sonic Rumble, and More
latest stories from GamingOnLinux
Linkwarden 2.10 Brings AI Tagging, Advanced Search, and More
Linkwarden 2.10 self-hosted bookmark manager introduces powerful new tools—highlighting, advanced search
Android Leftovers
This Android OEM could let you easily overclock or underclock your phone
FreeDOS 1.4 Now Available — A Major Update for the Beloved DOS Revival
FreeDOS 1.4 open-source MS DOS-compatible OS released with updated core utilities, better reliability
Best Free and Open Source Software
We recommend the best free and open source alternatives
Proxmox Virtual Environment 8.4 Released
Proxmox VE 8.4 is out now, featuring live VM migration with NVIDIA vGPU, API for backups, virtiofs, and updated open-source tech
openSUSE’s Agama Installer Lands with Enhanced Web UI
openSUSE's new Agama installer v13 is here, bringing hostname configuration
EasyNAS – Linux distribution designed for storage management
EasyNAS is a storage management system for home or small office
CAINE – live Linux distribution for digital forensics
CAINE (Computer Aided INvestigative Environment) is an Italian Linux live distribution created as a Digital Forensics project
Wesley Gardner presents: Draw and Paint Better with Krita
Some time ago we reached out to Wesley Gardner because, a bit belatedly, we saw he has published a great book on Krita, titled Draw and Paint Better with Krita
The easiest way to try out Ubuntu Linux
Don't have a spare computer? Afraid the installation will be too difficult
We’re in Kenya. Fedora at Murang’a University
On March 28, 2025, we brought Fedora to Murang’a University of Technology in Kenya
today's leftovers
misc. picks for today
Security Leftovers
Security news and such
LWN on 6.15 merge window and the 2025 Linux Storage, Filesystem, Memory-Management, and BPF Summit
outside the paywall now
Making the OpenWrt One
GPL-enforcement activities
Catching up with calibre
Calibre development started in 2006, when creator Kovid Goyal bought a Sony E Ink reader
Today in Techrights
Some of the latest articles
OpenSUSE and Ubuntu Leftovers
only 3 more links
Free, Libre, and Open Source Software Events, More
today's leftovers
Programming Leftovers
Development of programs and games
BSD Leftovers
OpenBSD and ramble
Fedora and Red Bait (IBM) Leftovers
3 stories for now
Audiocasts/Shows: Destination Linux, MiSTer FPGA, "Non-Woke Software List", Microsoft Moles
new videos or episodes
IPFire Linux Firewall Gets Post-Quantum Cryptography Support for IPsec Tunnels
IPFire 2.29 Core Update 193 has been released today for this powerful, open-source, and secure Linux-based firewall distribution designed to protect networks against evolving cyber threats introducing post-quantum cryptography.
Fwupd 2.0.8 Adds New Plugins to Update the UEFI Signature Database and KEK
Fwupd 2.0.8 is out today as the eighth maintenance update to the latest fwupd 2.0 release of this open-source Linux firmware update utility with support for more devices, new features, and bug fixes.
today's howtos
many from idroot
IPFire 2.29 - Core Update 193 released
We are happy to announce the release of IPFire 2.29 - Core Update 193
FOSS, Education, Sharing, and Standards
today's leftovers
Programming Leftovers
Git, Prolog, and more
Windows TCO Leftovers
Microsoft's cost
IBM and Latest in redhat.com
Mostly redhat.com articles/fluff
Open Hardware: SBCs, Arduino, OrangePi, and More
Hardware picks
Android Leftovers
Google fixes two Android zero-day bugs actively exploited by hackers
Git Distributed Version Control System Turned 20
Git, Linus Torvalds's brainchild that revolutionized software development, just turned 20
Microchip SAMA7D65 Cortex-A7 MPU comes in SoC and SiP packages with up to 2Gbit integrated DDR3L memory
The company mentions that the device supports various tools and software, including the Linux4SAM platform for embedded Linux development
Free and Open Source Software, howtos and Installations
This is free and open source software
PBXware is a Linux telephony platform distribution
PBXware is a Gentoo-based single-purpose distribution that serves as a telephony platform
Plasma 6.3.4 Now Available
Although not a major release, Plasma 6.3.4 does fix some bugs and offer a subtle change for the Plasma sidebar
Games: Croc Legend of the Gobbos, The Fortress of Dr. Radiaki, and More
latest from GamingOnLinux
Today in Techrights
Some of the latest articles
Asahi Linux hits an M4 support roadblock
The Asahi Linux project is having trouble bringing the operating system to M4 Macs
Operating Systems and Standards
today's leftovers
Free, Libre, and Open Source Software Leftovers
FOSS picks for today
Native NPU support for openSUSE Linux and Logo Call openSUSE.Asia Summit
Some opensuse news
Fedora / Red Hat / IBM Leftovers
4 more stories
Open Hardware/Modding: Retro, ESP32, and More
hardware leftovers
Mozilla: Shafting Developers, Pushing LLM Slop, Firefox Nightly
Mozilla news
Programming Leftovers
Development picks for today
KDE and Qt Leftovers
mostly the latter
Audiocasts/Shows: Linux User Space and Late Night Linux
2 new episodes
FreeBSD: On FreeBSD Jails and a Journey to FreeBSD
Some BSD picks
GNOME Desktop/GTK: Foundry.DocumentationManager and Keypunch 6.0
Some GNOME news
Security Leftovers
Security-related leftovers
Applications: Istio 1.23.6, GNU gperf 3.2, SageMath, Resources 1.8, and More
Software news
today's howtos
Instructionals/Technical picks
Kernel Space: Microsoft- and Microsoft LF-Sponsored Rust-in-Linux Advocacy, Benchmarking Up To 8,192 Cores On Linux
kernel news
today's howtos
only a handful for now
Windows TCO Leftovers
Windows TCO examples
Open Hardware: Arduino abd Raspberry Pi Projects
Raspberry Pi and more
Games: Truckful, Fogpiercer, and Linux GPU Control Application (LACT)
9 new articles from GamingOnLinux
Android Leftovers
This Samsung Galaxy S25 variant will get eight years of Android updates
Wine 10.5 Released with Vulkan H.264 Decoding
Wine 10.5 is out with ARM64 large page support, updated Mono 10.0
DXVK 2.6.1 Improves Support for Assassin’s Creed Origins and AMD Vega GPUs
DXVK 2.6.1 Vulkan-based implementation of D3D9, D3D10, and D3D11 for Linux / Wine is now available for download with improvements for several games and various bug fixes.
I tried gaming on Linux — and it's better (and worse) than you think
Gaming on Linux has come a long way, but is it ready to replace Windows yet
Free and Open Source Software, howtos and Installations
This is free and open source software
BlueOnyx is a fully-integrated Internet hosting platform
BlueOnyx is open source software, released under a Sun modified BSD license
I'm a Linux power user, and the latest Ubuntu update put a smile on my face | ZDNET
Canonical is preparing the release of Ubuntu 25.04 (Plucky Puffin) with a new kernel, the latest desktop environment, and an improved installer.
Today in Techrights
Some of the latest articles