You are not logged in.
Not sure where all the hostility is coming from?
My source of the version info is here: https://tracker.debian.org/pkg/yt-dlp
But there are inconsistencies between the source and binary package versions for stable backports:
https://packages.debian.org/source/trix … rts/yt-dlp
https://packages.debian.org/trixie-backports/yt-dlp
The source is ahead of the binary, which may mean the update is in the works... so yes you're correct that it's still behind for now.
All we know about this particular CVE is that there is no DSA against it and thus no patch. For some reason Debian security aren't in a hurry to fix it.
This isn't the Debian official forum or mailing lists though, so maybe take it up with them using one of those channels? Mailing list is preferred - perhaps search the list first.
With the number of vulnerabilities found in this over the last three years, it may be better to direct your concerns to the upstream project itself rather than Debian.
https://www.cvedetails.com/vulnerabilit … oject.html
Currently, the backports version is the same as the version in unstable, so the solution seems to be to install the bacports version and follow that. I thought it was commonly known that, with few exceptions, Debian "freezes" packages at a specific version and any security patches are backported as necessary. So any newer version will never be available in stable. As it stands, there is no DSA for this as yet. You would have to search the mailing lists / ask the maintainer.
RedGreen925, I mentioned the plagiarism aspect in another recent post and in the past in other posts here and on other sites.
The likes of Microsoft, the owner of github, are well placed to use the "tools" they are promoting to "steal" code from the massive array of private and public github repositories it hosts. This is in fact a means for proprietary vendors to effectively circumvent GPL licensing.
What many of you fail to realise is that it's all for profit. "AI" is just the last product from Big Tech, it is being heavily invested in, it's a bubble and it will burst at some point. It exists to make money for shareholders. But the immense amount of hype surrounding it, means that your boss is slowly becoming convinced that it can do your job. It probably can't - or maybe it can do aspects of your job well enough, that you can be laid off. You can then run along and babble about "AI" geing a great "tool", while the billionaires laugh at the real "tools" who bought into it all.
As Altoid said, it will run amok, because as with everything else, the risks are all acceptable, and the "running amok" is actually part of the plan - we're now at the stage where the big players want it regulated, so that they can maintain ownership, control and exclude competition. To be seen as viable "AI", and boost share value, LLMs are going to need be "headline news".
IamThatIAm, this has zero to do with politics or "woke"...
The only people involved in software dev, who call "AI" a tool are either those who may use it for auditing purposes or the low skilled frauds and plaigarists trying to pass themselves off as "developers".
If I use an "AI" art website to create some artwork am I now an "artist"? If I create music am I now a musician? Only the deluded or those with an agenda would answer yes to either.
It's actually the professionally offended. often anti meritocracy "woke" types as you might call them, who are big proponents of LLMs, as it allows the unskilled to get involved in what they would previously have been excluded from. These same people often denounce their detractors as "elitist".
It's no different from a person who is barely literate, instructing an LLM to write their resume/CV for them.
I can probably guess why that thread was closed, the mindset behind closing it, etc, but that hardly matters. As you're really just promoting the other site after all. It's all very silly and juvenile, but typical of Linux forums, where there's lots of drama and chat and conflict.
This site was always about one individual imposing their will and ideology on those they regard as inferior and misguided - i.e. the Devuan users / other people in general.
The other site mainly consists of a group of "can do" oriented people who don't seem to have any clear direction. In my view it's a "talking shop" and in particular an echo chamber for one individual (a staff member) who can't tolerate any opinions that don't match their worldview - would be good if they proved me wrong. I suppose we'll find out. But yes, not so different to here really. Most people start these types of sites start with the best of intentions, then the cliques form, etc.
Hosted on github...
...and every commit is attributed to "claude"...
Yes...
The filesystem metadata is not fully rewriiten by a kernel update. I assume from your post that you don't know what it is? It is the information relating to files and directories which is not part of those objects data. This includes things like file sizes, modified date, file permissions, etc. There is nothing which should be rewrilting this. It's read by those utils you mentioned.
Utils such as df, just read this metadata, so I would suggest that you're barking up the wrong tree. The metadata won't have changed between boots/kernels.
So far all of your responses have been "already done that" with no real specifics. The big question is : Booting from that 6.1.176 kernel apparently frees up 400MB which is then lost when reverting to the previous 6.1.174 kernel. But how are you doing that? You need both kernels installed simultaneously. Then you need to reboot into each and check. If you're doing any package management operations between each boot, this obscures your results.
Does booting from any newer kernel also free up this same amount of space? Does the latest stable kernel give the same result? Does the latest 6.1.177 kernel also apparently free up 400MB.
In all tests, are you booting single user mode and comparing all results there?
Have you compared the sizes or kernel image, initrd, kernel modules for each?
Install the firmware-b43-installer package. That includes a script to extract the firmware from the old Broadcom STA driver, which will then be usable by the in tree b43 driver. You will need to reboot or unload and load the b43 module for it to work.
Or cut out the drama, get the previous kernel and boot from that. Also install the latest stable kernel and boot from that - compare the results...
If you were to report a bug, those are the kind of steps which would be expected as a bare minimum.
Here you have presented the scenario along with your theorised cause and there's really nothing there in the way of useful data. Perhaps you lost some cache or similar data from /tmp in the course of a reboot after a kernel upgrade? Were any packages removed? Who can say? One can only speculate. If it were a kernel bug, you could easy have proven / eliminated that yourself by booting from the previous kernel...
"I don't know squat about writing man pages though, the raw format is weird. Seems like they could have just used .txt files."
As in a MS DOS / Windows format?
Anyone capable of thinking for themselves dismisses Lunduke's sensationalist clickbait crap...
EDX-0, you missed the point, then went off on a tangent.
They're rewriting in rust, and the replacements are permissive licensed, rather than GPL. There are those still in the GNU/Linux camp who aren't comfortable with that and would question the motives. This has nothing to do with the licence of similar utilities in any of the BSDs.
Looking at the linked mailing list thread, even Theodore T'so has concerns about uutils and it's license.
This is what more should be concerned about. Unfortunately, if you raise such concerns, you're a conspiracy nut.
The are rewriting something which has essentially just worked, for decades in a "memory safe" language and the end result is a bug fest, with numerous CVEs.
I'm wondering if this will be the beginning of a new "rewrite in rust, and release under permissive licence" trend.
If Ubuntu are getting it, you can be certain that eventually Debian will too.
sysvinit is still maintained. Until it's no longer maintained, it will still be around. Is it any good? Is anything? Is vi any good if you love emacs? It worked for years, it was versatile and you had the freedom to use it or not - and if you wanted e.g. service supervision, you installed and configured something to do that.
You could say the same for C - it's ancient, but still used for all meaningul systems programming. Other languages have come and gone, some have lingered around, but theyre used for application programming. Look at Qt for example, it's written in C++. Also there's the likes of C#, java and (I hesitate to mention it) rust. It took over 30 years to get the Linux kernel and BSD kernels to get to where they are now. Similar with the NT kernel. No one is going to commit commercial suicide and rewrite these in the latest fad language. It's the same with sysvinit - you can write as many init replacements as you like, but unless one comes along with clear technical merits which leads to widespread adoption, people won't switch. That's why the corporate backers of systemd used a clear strategy of funding/hiring to get distributions to move - to a solution which, at the time, wasn't very mature and had an awful lot of issues.
One of the pillars of free software used to be freedom of choice - so someone could work on a project, they and others could use the result, without people calling for it's obsolescence or sneering. The corporations had a lot of willing useful idiots to assist with this.
There seems to be a dependency for xserver-xorg-core on "libsystemd0".
Not sure what the issue was with xserver-common.
The first step is:
% man manRun it from a terminal emulator and post the output?
Back in the day, I used to look up obvious spammers who had not yet edited in their links on stopforumspam's db and if I got both an email address and IP address hit I would ban both and delete the account. Never ran it server side. It could be quite labour intensive. Some sites simply get indundated, to the point where you need a few dedicated volunteers, those people eventually get bored or burn out and move on. And now there are"AI" scrapers, making sites unusable also.
Times have changed. A lot of people use VPNs for very valid reasons these days, there are also dynamic IP addresss as it is, so automatically banning using SFS is admittedly a bit brutal. I'm not altogether sure the level of traffic here warrants it, but it's up to those running the site. Usually these kind of countermeasures have some kind of message, informing the blocked user and providing some means of making contact? Is that the case here?
It's one of those problems which won"t go away - they use disposable email addresses, so banning only on email address is ineffective. VPN use also means banning IPs is also of little use.
The problem is the modern web - it's become a cesspool. Years ago, Tor and similar software, seemed like ideal solutions for privacy - then nearly every site you visit blocks you and after cycling through exit nodes for a time, most will give up.
So it's not actually stopforumsspam or this site's fault - it's the fault of the people/corporations who have collectively transformed the web into 99% shit.
coder-hase, you started out with a put down, followed by a wall of meaningless babble, most of which falls into tl;dr territory. What I can discern is that you haven't understood my post at all. Not interested.
That's more of a workaround. That error is amdgpu driver related. So the first step should be to compile a newer kernel to see if this has been fixed. There are usually newer kernels in backports, so if you don't want to compile your own, install the latest, reboot and test.
Service supervision is "real world" crap which enterprise demands. There's a reason why BSD projects don't include it in the base system - the philosophy was always "write your programs correctly, so that they don't crash". Unfortunately people code up stuff that is "good enough". This is because Big Tech don't pay people to sit around fixing bugs or refactoring code.
As an example, enterprise also demands "LTS" Linux kernels - predictable failure - which are no benefit at all to the typical desktop user, which are buggy and only include back ported security parches. You could be fighting with and working around a wifi or display driver problem, for example, that was fixed in the next kernel release, but your distribution of choice went down the "LTS" route - using a kernel intended for the likes of Red Hat. There is "choice" many will say, but unfortunately a good proprtion are quite simply unaware or misinformed.
One of the "selling points" often parrotted by systemd fanbois was boot times. I was often told how fast it boots up, and I usually responded with words to the effect that actually it shuts down very quickly. You would gain more from just switching from a hard disk to an SSD if you cared that much about boot time.
All the talk of service supervision and boot times is just a "race to the bottom" against systemd. Stability, simplicity,code correctness, robustness and reliability are worth pursuing. Boot performance and a functionality to babysit and restart equally unreliable crap is not.
That's a lot of workarounds. It could be graphics stack / acceleration related. In such cases I would normally install a newer kernel from backports and see if that resolves it.
Also you will need the "non-free" drm firmware installed for Intel or AMD GPUs - that's the first step.