Rhythmbox 3.5 Media Player Improves Lyrics Search and Podcast Support
Rhythmbox 3.5 open-source media player is now available for download with improvements to lyrics search, podcast support, and the new playback backend. Here's what's new!
Latest Linux and open source news from around the web
Rhythmbox 3.5 open-source media player is now available for download with improvements to lyrics search, podcast support, and the new playback backend. Here's what's new!
The same low-quality AI patterns kept showing up in submissions even after GNOME updated its review guidelines in December.
For those of us with a long memory: John Goerzen has announced the release of C-Kermit 11, the first release of this file-transfer utility in 15 years. As Debian maintainer of Kermit, I noticed some areas where it wasn't matching modern expectations. One area was, not surprising for a project of its age, security. Another area was that its character set or line-ending conversions are usually not desired now; we are used to byte-identical binary transfers, and the defaults caused confusion and even some rare instances of data corruption. So I started making a few patches last year. See the changelog for details on the work that has been done. Most of us probably haven't thought about C-Kermit in years (if ever), but there was a time when it was an essential tool for moving files between machines.
The Filesystem in Userspace (FUSE) subsystem provides a way to service filesystem requests from a user-space server, which moves the format-handling code out of the kernel. The FUSE server can use the io_uring facility for better performance, but Bernd Schubert is concerned that memory is being wasted because the current implementation has a single, large buffer size that is excessive for small I/O operations. He led a discussion on that topic in the filesystem track of the 2026 Linux Storage, Filesystem, Memory Management, and BPF Summit in Zagreb, Croatia.
NVIDIA 610.57.04 graphics driver is now available for download with many bug fixes that improve support for multiple video games, as well as the overall performance and stability.
Flock 2026 was my first Fedora conference, and it wonβt be my last. I came home with new ideas, new friendships, and even a new project to work on for next year. Appreciation I want to start by appreciating the Flock organizers and volunteers. Putting together an event like this takes a lot of quiet, [β¦]
The JFrog blog examines some reported vulnerabilities in SQLite, some of which made their way into high-profile vulnerability databases, that turned out to be entirely fabricated by LLMs. These LLM slop CVEs can cause organizations to waste time investigating and patching vulnerabilities that do not actually exist, as well as polluting vulnerability databases. In environments where Critical vulnerabilities are automatically prioritized or tickets are opened based on vulnerability scores, such fabricated CVEs can turn into a real burden. In environments where AI is used to automate vulnerability triage and remediation this becomes even more concerning. An AI agent that encounters a fabricated CVE may attempt to locate the vulnerable function, generate a patch, or recommend changes based on code that does not even exist. Instead of helping security teams remediate real vulnerabilities, it can lead them down a completely wrong path, potentially introducing unnecessary changes and wasting
Merged back in Linux 7.3 was NULLFS as a "completely catatonic minimal pseudo filesystem". Now expected for Linux 7.3 is its sibling: FailFS...
Ubuntu 26.04 LTSβs minimal cloud images have been missing curl β accidentally, it turns out, so Canonical has put it back. Curl is a commonly-used command-line tool for fetching files from remote servers. Itβs called on in countless install scripts, CI pipelines and one-liners youβve no doubt pasted into your terminal without thinking twice about. But the package has been missing from the server-cloud-minimal images of 26.04 to date. That caught those running pared-back cloud installs unawares, breaking expected workflows, has it had been available in previous versions. The manual fix is to install curl from the repos which, in [β¦]
NVIDIA releases its 610.57 New Feature Branch driver for Linux, delivering fixes for Vulkan, kernel module builds, displays, and stability.
Greg Kroah-Hartman has announced the release of the 7.1.6, 6.18.42, 6.12.101, and 6.6.148 stable kernels. Each contains hundreds of patchesβthe 7.1.6 kernel has more than 700βwith fixes throughout the tree. Users are advised to upgrade.
The release of NetBSD 11.0, the 19th major version of the operating system, has been announced. There are many changes and enhancements since the 10.1 release, including a new port to RISC-V, better support for Linux system calls in compat_linux(), as well as improvements to the NPF firewall. As you are probably aware, the number of security issues found or suspected everywhere has massively increased with the advent of AI tools. As a consequence, we can't publish a release without open issues. Instead of delaying the release further to fix them (new ones are being reported all the time), we've instead chosen to be transparent about this. See the full release notes for links to the binary distributions and links to the full change logs.
Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, fence-agents, kernel, kernel-rt, openssh, osbuild-composer, perl-Archive-Tar, perl-DBI, perl:5.32, pipewire, python-pillow, qemu-kvm, unbound, and vim), Debian (chromium, incus, kernel, kissfft, libgd2, libmodbus, libssh, node-tar, php8.4, poppler, python-authlib, sslh, and starlette), Fedora (borgbackup, coturn, curl, exim, fuse-overlayfs, gh, GitPython, goaccess, lemonldap-ng, libgit2, nextcloud, nsd, php, postgresql16, python3.12, rabbitmq-server, rust-libgit2-sys, and xen), Mageia (bluez, firmware, kernel, kmod, wireless-regdb), Oracle (buildah, compat-libtiff3, dovecot, fence-agents, firefox, gimp, glibc, grafana, gstreamer1-plugins-bad-free, java-25-openjdk, kernel, libgcrypt, libtiff, libXfont2, nodejs24, nodejs:22, nodejs:24, openssh, openssl, PackageKit, pipewire, python-pillow, rest, sssd, vim, and yelp), SUSE (bind, chromium, dnsdist, gdk-pixbuf-loader-libheif, gio-branding-upstream, google-guest-
A dozen containers now use the storage and RAM of one.
Google has started offering native ARM64 Linux builds of Chrome for Debian, Ubuntu, Fedora, and openSUSE through its official download page.