To: fsf-and-gnu@fsf.orgCC: gnu-misc-discuss@gnu.org As volunteers for the GNU Project we are happy that the FSF provides GNU with services like fiscal sponsorship, technical infrastructure, promotion, copyright assignment, and volunteer management. And we note that the FSF is looking for feedback on this relationship going forward: FSF and GNU: https://www.fsf.org/news/fsf-and-gnu To that end we have held […]
As part of the Software Freedom Conservancy Donor Match they did a little interview with me. Please read it and get inspired to Donate or join the Conservancy as a Supporter.
I decided to be part of the Software Freedom Conservancy Donor Match this year. Because I believe many more free software communities deserve to have a home for their project at the Conservancy. In their own words: Software Freedom Conservancy is a not-for-profit organization that helps promote, improve, develop, and defend Free, Libre, and Open […]
New GNU Governance There is now a public discussion about GNU governance issues as described in this LWN article: Rethinking the governance of the GNU Project. We have had private discussion about GNU governance issues for the last couple of decades between GNU maintainers, but that never resulted in actual change. And recent events made […]
Andy Wingo wrote some thoughts on rms and gnu. Although I don’t agree with the description of RMS as doing nothing for GNU, the part describing GNU itself is spot on: Software does not, by itself, change the world; it lacks agency. It is the people that maintain, grow, adapt, and build the software that […]
FSF and GNU the FSF is now working with GNU leadership on a shared understanding of the relationship for the future. Joint statement on the GNU Project The GNU Project we want to build is one that everyone can trust to defend their freedom.
elfutils 0.177 was released with various bug fixes (if you ever had issues updating > 2GB ELF files using libelf, this release is for you!) and some new features. One of the features is eu-elfclassify, a utility by Florian Weimer to analyze ELF objects. People use various tricks to construct ELF files that might make […]
Compiling with the GCC sanitizers and then fuzzing the resulting binaries might find real bugs. But not all such bugs are security issues. When a CVE is filed there is some pressure to treat such an issue with urgency and push out a fix as soon as possible. But taking your time and making sure […]
We are happy to announce the release of bzip2 1.0.8. This is a fixup release because the CVE-2019-12900 fix in bzip2 1.0.7 was too strict and might have prevented decompression of some files that earlier bzip2 versions could decompress. And it contains a few more patches from various distros and forks. bzip2 1.0.8 contains the […]
We are happy to announce the release of bzip2 1.0.7. This is an emergency release because the old bzip2 website is gone and there were outstanding security issues. The original bzip2 home, downloads and documentation can now be found at: https://sourceware.org/bzip2/ bzip2 1.0.7 contains only the following bug/security fixes: Fix undefined behavior in the macros […]