{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreifwkw3o5umxnk4wptqknhhy6fikcuvma46sv4a5ye75kud4ypvakm",
    "uri": "at://did:plc:46ti67tc37qcmwp2vaynk6fq/app.bsky.feed.post/3mncviersgff2"
  },
  "path": "/ben/blog/2026/06/02/foss-activity-in-2025.html",
  "publishedAt": "2026-06-02T15:21:15.177Z",
  "site": "https://www.decadent.org.uk",
  "tags": [
    "boot-time crashes in the parallel port\nsubsystem",
    "cis-tools",
    "Bugs",
    "1135267: pack_cis should be installed in /usr/bin",
    "dracut",
    "1131809: dracut: ppc64el autopkgtest are flaky and take 7 hours per run",
    "firmware-free",
    "1122755: firmware-free: Please remove/replace usage of dh_movetousr",
    "!11: Apply relevant changes from firmware-nonfree",
    "firmware-nonfree",
    "!68: Draft: Update bullseye in line with buster",
    "!146: gencontrol: s/initramfs-tools/update-initramfs/",
    "!147: control: stop suggesting initramfs-tools",
    "!148: Update to 20260519",
    "!149: Include more firmware in binary packages",
    "!150: Update and remove obsolete package relations",
    "gnome-shell",
    "1135951: linux-image-6.12.85+deb13-amd64: secure data is visible when waking from suspsend",
    "initramfs-tools",
    "1108924: initramfs-tools: Cannot boot Trixie d-i rc2 USB storage target riscv64 MODULES=most (missing: cdns3 cdns3_starfive)",
    "!142: Handle simple-framebuffer drivers and framebuffer_coreboot built as modules",
    "!150: Do not install ARM/RISCV specific modules on other architectures",
    "!173: Draft: Introduce copy_file helper program to replace copy_file function",
    "!195: unmkinitramfs: Make it compatible with Busybox cpio",
    "!196: add module to add fw files from DT firmware-name properties",
    "Uploads",
    "ktls-utils",
    "!5: Update to 1.4.0",
    "linux",
    "1130365: linux-image-6.18.15+deb14-amd64: kernel panic during startup",
    "1136800: linux-image-7.0.4+deb14-amd64: fails to boot",
    "1136894: linux-image-7.0.4+deb14-amd64: Kernel Panic - AMDGPU crash",
    "1136978: linux-image-7.0.4+deb14-amd64: kernel NULL pointer dereference",
    "1137202: linux-image-7.1-amd64: Kernel panic on boot",
    "1137203: bnx2: ifupdown-hotplug fails at boot, no network, regression from 5.10.0-42",
    "1137642: linux-image-7.0.7+deb13-amd64: Failed to load Bluetooth driver",
    "!1720: arm64: Enable Renesas RZ/G2L features",
    "!1759: [arm64] Enable AIR_EN8811H_PHY as module",
    "!1792: [arm64] Enable BST platform support",
    "!1817: [sparc64] Add patches to fix user stack sync and add clone3() syscall",
    "!1837: [arm64] Enable configs for Qualcomm RB1 boards",
    "!1845: [amd64,arm64] Enable KEXEC_HANDOVER and LIVEUPDATE",
    "!1878: [riscv64] Enable CMA and DMA_CMA. Set CMA_SIZE_MBYTES=64",
    "!1884: [amd64] Enable Intel USBIO bridge driver and submodules",
    "!1904: Improve package descriptions for most of the kernel packages",
    "!1906: Enable SND_SOC_SDCA_CLASS and SND_SOC_SDCA_{FDL, HID, IRQ} for Panther Lake audio support",
    "!1910: Add backported patches for Dirty Frag attack",
    "!1911: Qualcomm Monaco and Talos support",
    "!1913: d/watch: migrate to version 5",
    "!1936: [sparc64] Add nvme module to scsi-modules udeb",
    "!1948: [amd64] Enable Intel Platform Hardware Support Drivers",
    "!1951: Fix dirtying of the source tree when building tools",
    "!1954: 7.0 backport ‘Fix for “fragnesia” (CVE-2026-46300) and variants’",
    "!1955: 6.12 backport ‘Fix for “fragnesia” (CVE-2026-46300) and variants’",
    "!1956: Draft: Enable a fully parallel build",
    "linux-6.1",
    "miniramfs",
    "1132532: miniramfs: Missing cpio dependency",
    "nfs-utils",
    "1138209: nfs-kernel-server: Parameter RPCNFSDCOUNT from /etc/default/nfs-kernel-server is ignored after Upgrade from Deb12",
    "wireless-regdb",
    "release.debian.org",
    "1135902: trixie-pu: package initramfs-tools/0.148.4",
    "debian-boot",
    "Please add loong64 to Daily/Weekly builds of installer images",
    "debian-devel",
    "Licensing of licenses",
    "debian-kernel",
    "Agenda items for kernel-team meeting on 2026-05-13",
    "[RFC] Using SimpleDRM in the initramfs",
    "[bjarniig@simnet.is: kernel-img.conf.5: warning from “lint”]",
    "debian-lts-announce",
    "[SECURITY] [DLA 4560-1] linux security update",
    "[SECURITY] [DLA 4561-1] linux-6.1 security update",
    "[SECURITY] [DLA 4572-1] linux security update",
    "[SECURITY] [DLA 4574-1] linux-6.1 security update",
    "[SECURITY] [DLA 4587-1] linux security update",
    "[SECURITY] [DLA 4588-1] linux-6.1 security update",
    "[SECURITY] [DLA 4606-1] linux security update",
    "[SECURITY] [DLA 4607-1] linux-6.1 security update",
    "linux-hyperv",
    "[PATCH] uio_hv_generic: Bind to FCopy device by default",
    "linux-perf-users",
    "[PATCH 0/3] Fix out-of-tree build of some tools",
    "linux-sh",
    "[PATCH] sh: uaccess: Handle exception on second instruction of __put_user_u64",
    "linux-trace-kernel",
    "[PATCH RESEND] rtla: Fix output files in source tree",
    "netdev",
    "[PATCH net] net: skbuff: propagate shared-frag marker through pskb_copy()",
    "stable",
    "Linux 5.15.205",
    "[5.10,5.15] i3c: fix uninitialized variable use in i2c setup",
    "[6.6] fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros",
    "[6.6] net: skbuff: propagate shared-frag marker through frag-transfer helpers",
    "[6.6] x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function",
    "[7.0] perf loongarch: Fix build failure with CONFIG_LIBDW_DWARF_UNWIND",
    "[PATCH 5.10 002/589] ASoC: SOF: topology: reject invalid vendor array size in token parser",
    "[PATCH 5.10 027/589] xfrm: Wait for RCU readers during policy netns exit",
    "[PATCH 5.10 072/589] media: uvcvideo: Use heuristic to find stream entity",
    "[PATCH 5.10 095/589] ALSA: usb-audio: fix null pointer dereference on pointer cs_desc",
    "[PATCH 5.10 096/589] scsi: ufs: core: Improve SCSI abort handling",
    "[PATCH 5.10 1/2] Revert “RDMA/rxe: Fix double free in rxe_srq_from_init”",
    "[PATCH 5.10 101/589] rxrpc: Fix key quota calculation for multitoken keys",
    "[PATCH 5.10 114/589] arm64: dts: imx8mq-librem5: Dont mark buck3 as always on",
    "[PATCH 5.10 176/589] KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state",
    "[PATCH 5.10 177/589] KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2",
    "[PATCH 5.10 2/2] RDMA/rxe: Fix double free in rxe_srq_from_init",
    "[PATCH 5.10-5.15] apparmor: validate default DFA states are in bounds",
    "[PATCH 5.10-6.1] fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter",
    "[PATCH 5.10-6.1] x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function",
    "[PATCH 5.10] Revert “s390/cio: Fix device lifecycle handling in css_alloc_subchannel()”",
    "[PATCH 5.10] net: skbuff: preserve shared-frag marker during coalescing",
    "[PATCH 5.10] net: skbuff: propagate shared-frag marker through frag-transfer helpers",
    "[PATCH 5.10] phy: renesas: rcar-gen3-usb2: Fix msleep() in atomic context",
    "[PATCH 5.10] selftests: forwarding: lib: Add helpers for checksum handling",
    "[PATCH 5.15 1/2] Revert “RDMA/rxe: Fix double free in rxe_srq_from_init”",
    "[PATCH 5.15 2/2] RDMA/rxe: Fix double free in rxe_srq_from_init",
    "[PATCH 5.15.y] net: usb: lan78xx: Fix double free issue with interrupt buffer allocation",
    "[PATCH 5.15] net: skbuff: propagate shared-frag marker through frag-transfer helpers",
    "[PATCH 5.15] selftests: forwarding: lib: Add helpers for checksum handling",
    "[PATCH 6.1 1/2] Revert “RDMA/rxe: Fix double free in rxe_srq_from_init”",
    "[PATCH 6.1 2/2] RDMA/rxe: Fix double free in rxe_srq_from_init",
    "[PATCH 6.1] apparmor: validate default DFA states are in bounds",
    "[PATCH 6.1] net: skbuff: propagate shared-frag marker through frag-transfer helpers",
    "[PATCH 6.1] selftests: forwarding: lib: Add helpers for checksum handling",
    "[PATCH 6.6] net: skbuff: propagate shared-frag marker through frag-transfer helpers",
    "[PATCH] parport: Fix race between port and client registration"
  ],
  "textContent": "This was a particularly busy month for me in terms of Debian contributions.\n\nIt started with a week in Hamburg for the MiniDebConf. I talked to many colleagues face-to-face and worked on various bugs and maintenance tasks. I’m pleased to have finally found the time to reproduce and fix the boot-time crashes in the parallel port\nsubsystem that have been reported many times recently.\n\nA series of easily exploited kernel LPE (local privilege execution) issues were published this month, mostly with very little coordination with distributions. Salvatore and I had to upload fixes for these at roughly weekly intervals. All of these fixes needed to be applied to 4 different upstream branches (currently 5.10, 6.1, 6.12, and 7.0) and 7 Debian branches (including backports).\n\n  * Debian packages:\n    * cis-tools:\n      * Bugs:\n        * replied to #1135267: pack_cis should be installed in /usr/bin\n    * dracut:\n      * Bugs:\n        * replied to #1131809: dracut: ppc64el autopkgtest are flaky and take 7 hours per run (and discussed it in-person in Hamburg)\n    * firmware-free:\n      * Bugs:\n        * closed #1122755: firmware-free: Please remove/replace usage of dh_movetousr\n      * Merge requests:\n        * opened !11: Apply relevant changes from firmware-nonfree\n    * firmware-nonfree:\n      * Merge requests:\n        * closed !68: Draft: Update bullseye in line with buster\n        * reviewed and merged !146: gencontrol: s/initramfs-tools/update-initramfs/\n        * merged !147: control: stop suggesting initramfs-tools\n        * opened and merged !148: Update to 20260519\n        * opened and merged !149: Include more firmware in binary packages\n        * opened !150: Update and remove obsolete package relations\n    * gnome-shell:\n      * Bugs:\n        * replied to and reassigned #1135951: linux-image-6.12.85+deb13-amd64: secure data is visible when waking from suspsend\n    * initramfs-tools:\n      * Bugs:\n        * closed #1108924: initramfs-tools: Cannot boot Trixie d-i rc2 USB storage target riscv64 MODULES=most (missing: cdns3 cdns3_starfive)\n      * Merge requests:\n        * reviewed !142: Handle simple-framebuffer drivers and framebuffer_coreboot built as modules\n        * closed !150: Do not install ARM/RISCV specific modules on other architectures\n        * closed !173: Draft: Introduce copy_file helper program to replace copy_file function\n        * opened and merged !195: unmkinitramfs: Make it compatible with Busybox cpio\n        * reviewed !196: add module to add fw files from DT firmware-name properties\n      * Uploads:\n        * uploaded version 0.148.4 to trixie\n    * ktls-utils:\n      * Merge requests:\n        * merged !5: Update to 1.4.0\n      * Uploads:\n        * uploaded version 1.4.0-1 to unstable\n    * linux:\n      * Bugs:\n        * replied to #1130365: linux-image-6.18.15+deb14-amd64: kernel panic during startup\n        * replied to #1136800: linux-image-7.0.4+deb14-amd64: fails to boot\n        * replied to #1136894: linux-image-7.0.4+deb14-amd64: Kernel Panic - AMDGPU crash\n        * replied to #1136978: linux-image-7.0.4+deb14-amd64: kernel NULL pointer dereference\n        * replied to and closed #1137202: linux-image-7.1-amd64: Kernel panic on boot\n        * replied to #1137203: bnx2: ifupdown-hotplug fails at boot, no network, regression from 5.10.0-42\n        * replied to #1137642: linux-image-7.0.7+deb13-amd64: Failed to load Bluetooth driver\n      * Merge requests:\n        * closed !1720: arm64: Enable Renesas RZ/G2L features\n        * merged !1759: [arm64] Enable AIR_EN8811H_PHY as module\n        * merged !1792: [arm64] Enable BST platform support\n        * closed !1817: [sparc64] Add patches to fix user stack sync and add clone3() syscall\n        * merged !1837: [arm64] Enable configs for Qualcomm RB1 boards\n        * reviewed !1845: [amd64,arm64] Enable KEXEC_HANDOVER and LIVEUPDATE\n        * merged !1878: [riscv64] Enable CMA and DMA_CMA. Set CMA_SIZE_MBYTES=64\n        * merged !1884: [amd64] Enable Intel USBIO bridge driver and submodules\n        * opened !1904: Improve package descriptions for most of the kernel packages\n        * reviewed and merged !1906: Enable SND_SOC_SDCA_CLASS and SND_SOC_SDCA_{FDL, HID, IRQ} for Panther Lake audio support\n        * opened and merged !1910: Add backported patches for Dirty Frag attack\n        * merged !1911: Qualcomm Monaco and Talos support\n        * merged !1913: d/watch: migrate to version 5\n        * reviewed !1936: [sparc64] Add nvme module to scsi-modules udeb\n        * reviewed !1948: [amd64] Enable Intel Platform Hardware Support Drivers\n        * opened and merged !1951: Fix dirtying of the source tree when building tools\n        * merged !1954: 7.0 backport ‘Fix for “fragnesia” (CVE-2026-46300) and variants’\n        * merged !1955: 6.12 backport ‘Fix for “fragnesia” (CVE-2026-46300) and variants’\n        * opened !1956: Draft: Enable a fully parallel build\n      * Uploads:\n        * (LTS) uploaded versions 5.10.251-2, 5.10.251-3, 5.10.251-4, 5.10.251-5, 5.10.257-1 to bullseye-security\n        * uploaded versions 6.12.85-1~bpo12+1, 6.12.86-1~bpo12+1, 6.12.88-1~bpo12+1, 6.12.90-1~bpo12+1, 6.12.90-2~bpo12+1 to bookworm-backports\n        * uploaded versions 6.19.14-1~bpo13+1, 7.0.10-1~bpo13+1, 7.0.4-1~bpo13+1, 7.0.7-1~bpo13+1, 7.0.9-1~bpo13+1 to trixie-backports\n    * (LTS) linux-6.1:\n      * Uploads:\n        * uploaded versions 6.1.170-1~deb11u1, 6.1.170-3~deb11u1, 6.1.172-1~deb11u1, 6.1.174-1~deb11u1 to bullseye-security\n    * miniramfs:\n      * Bugs:\n        * replied to #1132532: miniramfs: Missing cpio dependency\n    * nfs-utils:\n      * Bugs:\n        * replied to and closed #1138209: nfs-kernel-server: Parameter RPCNFSDCOUNT from /etc/default/nfs-kernel-server is ignored after Upgrade from Deb12\n    * wireless-regdb:\n      * Uploads:\n        * uploaded version 2026.03.18-1 to unstable\n  * Debian non-package bugs:\n    * release.debian.org:\n      * opened #1135902: trixie-pu: package initramfs-tools/0.148.4\n  * Mailing lists:\n    * debian-boot:\n      * replied to Please add loong64 to Daily/Weekly builds of installer images\n    * debian-devel:\n      * replied to Licensing of licenses\n    * debian-kernel:\n      * posted Agenda items for kernel-team meeting on 2026-05-13\n      * posted and replied to [RFC] Using SimpleDRM in the initramfs\n      * replied to [bjarniig@simnet.is: kernel-img.conf.5: warning from “lint”]\n    * debian-lts-announce:\n      * posted [SECURITY] [DLA 4560-1] linux security update\n      * posted [SECURITY] [DLA 4561-1] linux-6.1 security update\n      * posted [SECURITY] [DLA 4572-1] linux security update\n      * posted [SECURITY] [DLA 4574-1] linux-6.1 security update\n      * posted [SECURITY] [DLA 4587-1] linux security update\n      * posted [SECURITY] [DLA 4588-1] linux-6.1 security update\n      * posted [SECURITY] [DLA 4606-1] linux security update\n      * posted [SECURITY] [DLA 4607-1] linux-6.1 security update\n    * linux-hyperv:\n      * posted [PATCH] uio_hv_generic: Bind to FCopy device by default\n    * linux-perf-users:\n      * posted and replied to [PATCH 0/3] Fix out-of-tree build of some tools\n    * linux-sh:\n      * posted [PATCH] sh: uaccess: Handle exception on second instruction of __put_user_u64\n    * linux-trace-kernel:\n      * posted [PATCH RESEND] rtla: Fix output files in source tree\n    * netdev:\n      * replied to [PATCH net] net: skbuff: propagate shared-frag marker through pskb_copy()\n    * (mostly LTS) stable:\n      * replied to Linux 5.15.205\n      * posted [5.10,5.15] i3c: fix uninitialized variable use in i2c setup\n      * posted [6.6] fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros\n      * posted [6.6] net: skbuff: propagate shared-frag marker through frag-transfer helpers\n      * posted [6.6] x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function\n      * posted [7.0] perf loongarch: Fix build failure with CONFIG_LIBDW_DWARF_UNWIND\n      * replied to [PATCH 5.10 002/589] ASoC: SOF: topology: reject invalid vendor array size in token parser\n      * replied to [PATCH 5.10 027/589] xfrm: Wait for RCU readers during policy netns exit\n      * replied to [PATCH 5.10 072/589] media: uvcvideo: Use heuristic to find stream entity\n      * replied to [PATCH 5.10 095/589] ALSA: usb-audio: fix null pointer dereference on pointer cs_desc\n      * replied to [PATCH 5.10 096/589] scsi: ufs: core: Improve SCSI abort handling\n      * posted [PATCH 5.10 1/2] Revert “RDMA/rxe: Fix double free in rxe_srq_from_init”\n      * replied to [PATCH 5.10 101/589] rxrpc: Fix key quota calculation for multitoken keys\n      * replied to [PATCH 5.10 114/589] arm64: dts: imx8mq-librem5: Dont mark buck3 as always on\n      * replied to [PATCH 5.10 176/589] KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state\n      * replied to [PATCH 5.10 177/589] KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2\n      * posted and replied to [PATCH 5.10 2/2] RDMA/rxe: Fix double free in rxe_srq_from_init\n      * posted [PATCH 5.10-5.15] apparmor: validate default DFA states are in bounds\n      * posted [PATCH 5.10-6.1] fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter\n      * posted [PATCH 5.10-6.1] x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function\n      * replied to [PATCH 5.10] Revert “s390/cio: Fix device lifecycle handling in css_alloc_subchannel()”\n      * posted [PATCH 5.10] Revert “s390/cio: Fix device lifecycle handling in css_alloc_subchannel()”\n      * posted [PATCH 5.10] net: skbuff: preserve shared-frag marker during coalescing\n      * posted [PATCH 5.10] net: skbuff: propagate shared-frag marker through frag-transfer helpers\n      * posted [PATCH 5.10] phy: renesas: rcar-gen3-usb2: Fix msleep() in atomic context\n      * posted [PATCH 5.10] selftests: forwarding: lib: Add helpers for checksum handling\n      * posted [PATCH 5.15 1/2] Revert “RDMA/rxe: Fix double free in rxe_srq_from_init”\n      * posted [PATCH 5.15 2/2] RDMA/rxe: Fix double free in rxe_srq_from_init\n      * replied to [PATCH 5.15.y] net: usb: lan78xx: Fix double free issue with interrupt buffer allocation\n      * posted [PATCH 5.15] net: skbuff: propagate shared-frag marker through frag-transfer helpers\n      * posted [PATCH 5.15] selftests: forwarding: lib: Add helpers for checksum handling\n      * posted [PATCH 6.1 1/2] Revert “RDMA/rxe: Fix double free in rxe_srq_from_init”\n      * posted [PATCH 6.1 2/2] RDMA/rxe: Fix double free in rxe_srq_from_init\n      * posted [PATCH 6.1] apparmor: validate default DFA states are in bounds\n      * posted [PATCH 6.1] net: skbuff: propagate shared-frag marker through frag-transfer helpers\n      * posted [PATCH 6.1] selftests: forwarding: lib: Add helpers for checksum handling\n      * posted [PATCH 6.6] net: skbuff: propagate shared-frag marker through frag-transfer helpers\n      * replied to [PATCH net] net: skbuff: propagate shared-frag marker through pskb_copy()\n      * posted [PATCH] parport: Fix race between port and client registration\n\n",
  "title": "Ben Hutchings: FOSS activity in 2025",
  "updatedAt": "2026-06-02T14:17:21.000Z"
}