Latest Linux and open source news from around the web

YubiKey 5 NFC Security Key Sponsored · View on Amazon → Raspberry Pi Camera Module 3 Sponsored · View on Amazon →
OMG! Ubuntu

GIMP 3.2.6 gets faster font loading, Wacom barrel rotation input

GIMP 3.2.6 has arrived, a new maintenance update in the 3.2.x series that made a splash earlier this year. You won’t find any major new features, but plenty of improvements – not least in font handling. GIMP say font loading is faster, with start-up times, Text tool typing and closing large font lists all nippier when lots of fonts are installed. The team note “some lag remains”, and solving that would require a GTK4 port – for which some initial prep has begun. On the editing side, Cut now works on layer groups; Color Picker can picks up filters applied […]

OMG! Ubuntu

Ubuntu 24.04.5 LTS released with Linux kernel 7.0

The fifth (and final planned) point release of Ubuntu 24.04 LTS is now available to download. Ubuntu 24.04.5 LTS brings refreshed installation media (ISOs) that includes of the software updates, bug fixes and security patches released since the last ISO was produced. This cuts down on the number of updates that need to downloaded post-install. More important than that, this release runs on a new hardware enablement (HWE) stack, back-ported from Ubuntu 26.04 LTS. The 24.04.5 LTS HWE stack brings the Linux 7.0 kernel and Mesa 26.0 GPU drivers (plus some other key hardware-related packages) to those who need to […]

OMG! Ubuntu

Liquid Glass extension for GNOME Shell

You can now give the Ubuntu desktop a ‘Liquid Glass’ makeover using a new GNOME Shell Extension that written with ‘significant’ help from AI. Its developer, Ryosuke Watanabe, said they loved the look of Liquid Glass – Apple’s new design material that gives UI elements light-bending surfaces with depth and motion – but, not owning an Apple device, wanted a way to enjoy it on their Linux desktop. So they created an extension to do it. “The design, the shader math, the architecture decisions, and all of the testing on real hardware are mine”, says Watanabe, but adds that a […]

LWN.net

Forgejo 16.0.4 and 15.0.8 address critical security vulnerability

The Forgejo software-forge project has announced the release of versions 16.0.4 and 15.0.8, which fixes two security vulnerabilities. One is a critical flaw that would allow remote-code execution (RCE): When generating a new repository from a template repository, Forgejo clones the template repository, removes the .git folder, performs variable template expansion on files listed in .forgejo/template, and initializes a new git repository. During this process, variable template expansion could be misused in order to create a new .git folder, which git would adopt and incorporate during its initialization of a new git repository. A malicious template repository could be used to read arbitrary data from the Forgejo host, and to execute arbitrary processes on the Forgejo host, as a remote code execution attack. To address this issue, after variable expansion is completed, any existing .git folder is removed from the directory before the git repository is initialized. The project recommends