Latest Linux and open source news from around the web
Arch User Repository hit by a large-scale malware campaign, with maintainers racing to roll back malicious commits and lock out bad actors. The post Arch Devs Scramble as 400 AUR Packages Infected With Malware appeared first on FOSS Force.
Flock to Fedora is more than a conference – it’s where the Fedora community comes alive. As part of the In the CommitHistory campaign, we sat down with confirmed Flock 2026 speakers to hear their stories: what brought them to Fedora, what Flock means to them personally, and what they’re hoping for in Prague this […]
GStreamer 1.28.4 open-source multimedia framework is now available for download with support for decoding FLAC files and new codec mime/profile mappings for Android, bug fixes, and various other improvements.
GStreamer 1.28.4 delivers security updates, playback fixes, better debug logging, audio fixes, and improved stability across platforms.
Peppermint OS Devuan distribution has been updated today to Devuan 6 (Excalibur), based on the Debian 13 (Trixie) operating system series but without the systemd init system.
Hundreds of orphaned packages hosted by the Arch User Repository (AUR) have been compromised by an attacker who has added a malicious npm package (atomic-lockfile) that can exfiltrate sensitive data. The project is currently working on cleaning up the mess. There is a list of affected packages and post by "sodiboo" with additional information. Arch Linux users (or users of Arch-based distributions) that use AUR packages may wish to see if they have installed any of the compromised updates.
Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, bind, expat, httpd:2.4, kernel, kernel-rt, mod_http2, openssl, poppler, redis, redis:7, samba, and unbound), Debian (ironic, kernel-wedge, libinput, linux-base, and neutron), Fedora (kernel, openssl, vaultwarden, and vaultwarden-web), Mageia (erlang-hex_core, erlang-rebar3, gnupg2, and sqlite3), Red Hat (buildah, podman, and skopeo), SUSE (flannel, gdk-pixbuf-loader-libheif, gnutls, google-cloud-sap-agent, grafana, graphite2, hplip, libIex-3_4-33, libzypp, nginx, openssh, perl-DBI, perl-Git-Repository, perl-Protocol-HTTP2, python-Pygments, python-simpleeval, python311-Django4, rclone, roundcubemail, strongswan, tomcat10, tomcat11, unbound, and webkit2gtk3), and Ubuntu (apache2, dotnet8, dotnet9, dotnet10, gst-plugins-base1.0, ironic, linux-azure-5.15, linux-azure-fips, lwip, mistral, and ubuntu-kylin-software-center).
Linux 7.1 stable is expected to be released this Sunday with its many new features. Immediately following the Linux v7.1 tagging, the Linux 7.2 merge window will open and a lot of new feature material is expected to be merged over the next two weeks...
Some commands don’t always behave the same.
Last year when releasing Red Hat Enterprise Linux 10.0, Red Hat announced a RHEL 10.0 developer preview for RISC-V. Since then that RISC-V developer preview hadn't been updated but now Red Hat has published a new developer preview snapshot based on RHEL 10.2...
On Sunday it's anticipated that Linus Torvalds will released the stable Linux 7.1 kernel. This is a really terrific mid-year update to the Linux kernel! Here's what makes me excited about Linux 7.1...
Among the many new features planned for Ubuntu 26.10 is switching the default D-Bus implementation over to using the high performance Dbus-Broker drop-in replacement...
Ever since AMD announced openSIL in early 2023 for open-source CPU silicon initialization to eventually replace AGESA and enhance their Coreboot support, I have been eager to try it out. The openSIL code drops to date though have just focused on select reference platforms with only aiming for production status in the Zen 6 timeframe. But thanks to 3mdeb porting openSIL and Coreboot to a Gigabyte server motherboard, it's now possible to try out openSIL+Coreboot right now on Zen 5 hardware.
One of the exciting additions to the Linux 7.1 kernel is the introduction of the new NTFS file-system kernel driver. While in good shape already and proving advantageous over other NTFS open-source driver options, one of the initial limitations on it is around Windows native symbolic link handling but that is now in the process of being resolved...
PeppermintOS releases a new systemd-free build based on Devuan Excalibur, offering SysVinit, OpenRC, and runit as installer options.
Linux News