I am writing to inform you about a critical and time-sensitive situation facing the Open Source Lab. Over the past several years, we have been operating at a deficit due to a decline in corporate donations. While OSU's College of Engineering (CoE) has generously filled this gap, recent changes in university funding have led to a significant reduction in CoE's budget. As a result, our current funding model is no longer sustainable and CoE needs to find ways to cut programs.[Read more](https://lwn.net/Articles/1019520/) ## [$] The mystery of the Mailman 2 CVEs **Category:** Linux **Tags:** General **Published:** Wed, 30 Apr 2025 17:06:06 +0000 **TL;DR:** Here is a 2-sentence summary: GNU Mailman version 2.1 was thought to be no longer supported due to its age and being declared "mostly" end-of-life in 2020, but it still has active users and projects using the software. Despite three vulnerabilities being announced, WebPros, which maintains a port of Mailman 2.1.x to Python 3 for its customers, disputes that the CVEs are valid, suggesting that the software may not be as vulnerable as initially thought.Earlier this week, I was informed that unless we secure $250,000 in committed funds, the OSL will be forced to shut down later this year.
Many eyebrows were raised recently when three vulnerabilities were announced that allegedly impact GNU Mailman 2.1, since many folks assumed that it was no longer being supported. That's not quite the case. Even though version 3 of the GNU Mailman mailing-list manager has been available since 2015, and version 2 was declared (mostly) end of life (EOL) in 2020, there are still plenty of users and projects still using version 2.1.x. There is, as it turns out, a big difference between mostly EOL and actually EOL. For example: WebPros, the company behind the cPanel server and web-site-management platform, still maintains a port of Mailman 2.1.x to Python 3 for its customers and was quick to respond to reports of vulnerabilities. However, the company and upstream Mailman project dispute that the CVEs are valid.
[Read more](https://lwn.net/Articles/1019149/) ## [$] Better debugging information for inlined kernel functions **Category:** Linux **Tags:** Linux **Published:** Wed, 30 Apr 2025 16:10:03 +0000 **TL;DR:** Here is a summary of the text in 2 sentences: Compilers perform many optimizations that can make debugging more complicated, which Song Liu and Thierry Treyer aim to address. They propose adding information about selectively inlined functions to BPF Type Format (BTF) to improve support for tracing tools and make debugging easier.Modern compilers perform a lot of optimizations, which can complicate debugging. Song Liu and Thierry Treyer spoke about a potential improvement to BPF Type Format (BTF) debugging information that could partially combat that problem at the 2025 Linux Storage, Filesystem, Memory-Management, and BPF Summit. They want to add information on selectively inlined functions to BTF in order to better support tracing tools. Treyer participated remotely.
[Read more](https://lwn.net/Articles/1018475/) ## The conclusion of the FSF board review **Category:** Linux **Tags:** AI **Published:** Wed, 30 Apr 2025 15:42:45 +0000 **TL;DR:** Here is a 2-sentence summary: The Free Software Foundation has completed its review of its board of directors, resulting in the reconfirmation of all five sitting members. The review process involved philosophical and policy discussions with global associate members on topics such as the Free Software Definition and developments in machine learning. The Free Software Foundation has announced the completion of the review of its board of directors; the process resulted in the reconfirmation of all five sitting board members.
The review examined board members Ian Kelling, Geoffrey Knauth, Henry Poole, Richard Stallman, and Gerald Sussman. The process generated detailed philosophical and policy discussions between board members and the FSF's global associate members on topics ranging from the firmness of the Free Software Definition, developments in machine learning, to the board's president position.[Read more](https://lwn.net/Articles/1019479/)