Security
- rustls 0.23.46, for RUSTSEC-2026-0346 through 0349. Backported from 6.0
(#1467) in #1479. - rustls-webpki 0.103.16 and webpki-root-certs 1.0.10, for RUSTSEC-2026-0382
and RUSTSEC-2026-0383. Backported from 6.0 (#1510) in #1511.
Added
tcp_mibsampler: TCP counters the kernel keeps as SNMP MIBs, from the
TcpExtsection of/proc/net/netstatand theTcpsection of
/proc/net/snmp. Delayed-ACK timer firings and deferrals, and duplicate
data received; RTO expirations, tail loss probes and their recoveries,
lost-segment retransmits by fast recovery or slow start, spurious RTOs,
fast recoveries by SACK or Reno, retransmits lost again, D-SACKs received
and sent by kind, andtcp_segments_retransmitted; zero-window transitions,
withheld zero windows and zero-window drops; receive-queue prunes, prune
failures, out-of-order prunes, collapsed buffers, backlog drops,
receive-buffer drops, out-of-order queueing and TCP memory-pressure
entries; autocorking; listen overflows and drops; aborts by reason; open
failures, established resets, resets sent, input and checksum errors; and
tcp_established_connectionsas a gauge. Columns are matched by name, so
a column the kernel does not print leaves its metric absent. Enabled by
default, likememory_vmstat. The viewer's Network section plots each
metric under TCP when the recording has it. Backported from 6.0 (#1472) in #1478.- Ubuntu 26.04 (resolute) packages, for amd64 and arm64, published to the
ubuntu-resoluteapt repository. (#1573)
Changed
- Debian and Ubuntu packages are published only to rezolus's own apt
repositories (<distro>-<codename>), no longer also to the SystemsLab
package registry. Thesystemslab-repopackage (0.0.14 and later) lists
rezolus's repositories. (#1573)
Fixed
- Viewer: a display-mode line chart asks for one bucket per 4 px of its
width instead of one per pixel, so a long range is drawn in a quarter as
many buckets, and their min/max envelope no longer fills the chart. A
per-entity heatmap draws in one frame up to 60000 cells; it was drawn
progressively above 3000, which cleared and repainted it over several
frames on every live refresh. Per-entity heatmaps are still fetched at
the recording's interval on 5.x. Backported from 6.0 (#1421, #1525) in
#1528. - Viewer: a decimated multi-series line chart draws continuous lines. Once a
range holds more samples than the chart's point budget, each point was
drawn as a short dash followed by a gap, and percentile uncertainty bands
were not drawn, because the gap check compared buckets with the recording
interval. It now uses the spacing between buckets, and decimated lines are
drawn unstepped, like the single-series decimated median. The min/max
envelope still spans a bucket that is actually missing (#1519). Backported
from 6.0 (#1520) in #1521. cpu_perf:cgroup_cpu_cyclesandcgroup_cpu_instructionsno longer
credit a failed counter read as a count. Thesched_switchprogram read
the counters withbpf_perf_event_read, which returns a negative errno
in the same u64 as the count. When the counter group was off the PMU
(-EBUSY), the next switch credited minus the counter's count since the
agent opened it to one cgroup, so that cgroup's series went backwards or
wrapped to near 2^64. On a CPU with no counter open (outside a partial
reserved_pmu_countersgrant, or where the group failed to open) the
first switch lowered one cgroup's counter by 2. Counters are now read with
bpf_perf_event_read_value; a failed read credits nothing, and the next
good read sets a new baseline. Backported from 6.0 (#1477) in #1480.