Linux NewsRed Hat's Lightwell Doesn't Wait for Upstream Maintainers to Act
A status update shows it clearing 400 vulnerabilities from Java libraries and a key service now being generally available.
3 quick Linux tools that protect your PC from bad updates and hackers
A few extra minutes during setup can mean the world later on.
Canonical Beefs Up Security for Ubuntu 26.10 with Slimmed-Down GRUB, Linux 7.3
Ubuntu 26.10 will introduce new security features like a signed, slimmed down GRUB bootloader, TPM-backed encryption on machines without a hardware root of trust, and hardware-token VPN sign-in in NetworkManager.
Canonical Reaffirms Plans For Ubuntu 27.04 To Use ntpd-rs By Default
Back in March Canonical announced switching to ntpd-rs was its next target as part of transitioning more Ubuntu Linux system components to Rust-based implementations. This time synchronization package is available for testing in the upcoming Ubuntu 26.10 release while it aims to be the default for Ubuntu 27.04...
Ubuntu 26.10 Will Bring Rust Coreutils, OpenSSL 4.0, and a Slimmer GRUB
Ubuntu 26.10, due on October 15, is set to bring Rust-based coreutils, OpenSSL 4.0, post-quantum cryptography, slimmer GRUB, and Linux kernel 7.3.
Raspberry Pi OS Updated with Battery and Squeekboard Dock Widgets
Raspberry Pi OS 2026-10-06 is now available for download with battery and squeekboard dock widgets, Control Centre improvements, and Linux kernel 6.18.50 LTS.
OpenSSH 10.6 Released with Security Hardening, Post-Quantum Support
OpenSSH 10.6 is out with security fixes, the new hybrid post-quantum ssh-mldsa44-ed25519 algorithm, and several new SSH and SFTP features.
[$] Python's two modules for random numbers
Python's random and secrets modules both include utilities for obtaining random values, but only one of them is suitable for generating passwords and security tokens. For much of Python's history, random was used for passwords and tokens anyway, despite documentation that called it unsuitable for cryptography. In 2015, Python's core team debated whether to fix that misuse by making random secure by default. Instead, in 2016, Python 3.6 added a second module: secrets. The random module is still misused at times, so it is instructive to look into how the random-number modules should be used.
Debian Trixie-Based Raspberry Pi Desktop Is Now Available for PC and Mac
Raspberry Pi Desktop for PC and Mac has been updated to the latest Debian 13 "Trixie" operating system series and comes with all the new features from Raspberry Pi OS.
Meta Engineer's Linux Patches For Boosting AMD P-State / Steam Deck Gaming Performance
Back in July I wrote about AMD P-State driver patches boosting 1%-low frame rates for gaming by as much as 31%. That work was done by David Vernet who is a Linux kernel engineer/hacker at Mesa. This week Vernet presented on the topic at the Linux Plumbers Conference happening in Prague...
[$] Last rites for Gentoo's Chromium package
Chromium, the open-source upstream project for Google's Chrome web browser, is the browser of choice for many Linux users. It has also gained a reputation as being difficult for Linux distributions to package and build: Chromium has a complex build system, the project bundles many of its dependencies, and it has frequent releases. All of that, plus user complaints, has led the maintainers of the Gentoo Chromium package to give up on trying to maintain the package.
OpenSSH 10.6 released
Version 10.6 of OpenSSH has been released. The announcement notes that the OpenSSH team has been receiving a large number of AI-assisted security bug reports. "We very much welcome these reports, especially when combined with human triage, analysis, test-cases and particularly when accompanied by proposed fixes". As a result, the project expects to be making more frequent releases to get updates to users more quickly rather than batching the bug fixes until the next planned release. Notable changes in this release include enabling the hybrid post-quantum ssh-mldsa44-ed25519 signature algorithm, addition of a -p option for sftp's lmkdir/mkdir commands, as well as disabling the LZ77 dictionary coder in ssh and sshd to mitigate side-channel leaks (which will result in reduced effectiveness of the Compression option). The scp -R option, which allows copies between two remote hosts, is being deprecated due to security risks; the option will be ignored in the future. See the announcement for
GNOME 52 “Terengganu” Desktop Environment Is Scheduled for March 17th, 2027
The development cycle of the upcoming GNOME 52 "Terengganu" desktop environment kicks off with a draft release schedule and a final release set for March 17th, 2027.
Security updates for Tuesday
Security updates have been issued by AlmaLinux (gd, gimp, kernel, kernel-rt, libpcap, librabbitmq, mariadb-connector-c, osbuild-composer, ruby:2.5, and sudo), Debian (libmodule-cpants-analyse-perl, libpng1.6, libreoffice, roundcube, ruby-oauth2, and sabnzbdplus), Fedora (0install, alt-ergo, apron, brltty, chromium, coccinelle, cri-o1.36, emacs-common-tuareg, flocq, frama-c, freetennis, gappalib-coq, guestfs-tools, haxe, hevea, hivex, kernel, lem, libguestfs, libnbd, nbdkit, not-ocamlfind, ocaml, ocaml-afl-persistent, ocaml-alcotest, ocaml-astring, ocaml-atd, ocaml-augeas, ocaml-b0, ocaml-base, ocaml-base64, ocaml-benchmark, ocaml-bin-prot, ocaml-biniou, ocaml-bisect-ppx, ocaml-bos, ocaml-cairo, ocaml-calendar, ocaml-camlbz2, ocaml-camlidl, ocaml-camlimages, ocaml-camlp-streams, ocaml-camlp5, ocaml-camlp5-buildscripts, ocaml-camlpdf, ocaml-camomile, ocaml-capitalization, ocaml-cinaps, ocaml-cmdliner, ocaml-compiler-libs-janestreet, ocaml-cpdf, ocaml-cppo, ocaml-crowbar, ocaml-cryptokit,
I tried 3 Linux distros inside Windows for free to see which felt most familiar
I put Zorin OS, Linux Mint, and Ubuntu through the same everyday tasks to see which one required the least adjustment after Windows.
Page 1 of 647
Next »