Latest Linux and open source news from around the web

Practical Vim Sponsored · View on Amazon → Cat6 Ethernet Cable 5-Pack Sponsored · View on Amazon →
LWN.net

[$] Open-source security is not a solo activity

Over time, many open-source maintainers face the same problem: they lack the time to do all of the work that their project needs, and no one else is stepping up to provide adequate help. Maintainers, though, are often reluctant to throw in the towel. The result is suboptimal all around; the maintainer is stressed out, project quality suffers, and users face security risks that they may not be fully aware of. At the 2026 Open Source Summit North America, Robin Bender Ginn spoke about this problem, when it might be time for maintainers to pass the torch, and the responsibilities of users.

OMG! Ubuntu

Ubuntu plans to add AI voice input to all text fields

Ever wished you could talk in to a text field rather than type? Ubuntu 26.10 hears you – quite literally. Canonical VP of Engineer Jon Seager, speaking at the Ubuntu Summit in May, said the distro aims to let you β€œpress a button and talk into any field that you could previously type in […] by default on every Ubuntu machine”. Speech to text will be powered by a small language parsing model like Whisper, turning any text entry point on the desktop to offer optional speech input. This means you could bark β€œFirefox” in the GNOME Shell overview rather […]

LWN.net

[$] BPF in the agentic era

Alexei Starovoitov gave "less of a presentation, more of a scream of realization" at the BPF track of the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit. He shared a set of ideas for how BPF could change to avoid being swept away by the sea-change in programming represented by modern large language models (LLMs) and the coding agents based on them. In a follow-up session, the discussion covered more problems with how coding agents use tools like bpftrace, and the current deluge of patches in need of review in the BPF subsystem.

LWN.net

Tridgell: rsync and outrage

Andrew Tridgell has written a blog post responding to complaints that he has begun using LLM tools in his work maintaining rsync: Like many developers of open source packages I've been hit by a flood of security reports lately in my role as the rsync maintainer. Many of those reports are AI generated (not all though, there are some notable ones with very careful and high quality manual analysis). As this flood started to get more intense I realised I needed to raise the defences on rsync a lot β€” we needed much more thorough test suites, code coverage analysis, CI testing on a lot more platforms, deliberate and thorough scanning for possible security issues (so I find at least some of them before other people!) and the addition of a whole lot of defence-in-depth hardening techniques. [...] Now to the future, because we're not done yet by a long shot. The security reports keep rolling in. I'm working on a bunch of CVEs right now. Luckily I've been joined by some other very good developer

LWN.net

Security updates for Wednesday

Security updates have been issued by Debian (php-twig), Fedora (hplip, python-wsgidav, roundcubemail, and xorg-x11-server), Oracle (compat-openssl10, httpd:2.4, and kernel), Red Hat (osbuild-composer), SUSE (busybox, cloudflared, cockpit, cups, ffmpeg-4, gnutls, google-osconfig-agent, helm, hplip, kernel, kubelogin, libjxl, libsoup, libunbound8, LibVNCServer-devel, mapserver, nvidia-open-driver-G06-signed, nvidia-open-driver-G07-signed, openssh, python-idna, qemu, rqlite, shadowsocks-v2ray-plugin, ucode-intel, unbound, vim, vorbis-tools, and xorg-x11-server), and Ubuntu (age, dovecot, editorconfig-core, gobgp, libapache-mod-jk, libcommons-lang-java, libcommons-lang3-java, libeconf, linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-azure, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oracle, linux-oracle-6.8, linux-raspi, linux-

Phoronix

AMD EPYC 8635P "Sorano" Benchmarks: Significant Upgrade Opportunity For EPYC 8004 Servers

After announcing the AMD EPYC 8005 "Sorano" series back in February, AMD recently began shipping these Zen 5 successors to the EPYC 8004 "Siena" line-up. With the EPYC 8005 product stack ranging from 8 to 84 cores and being drop-in upgrades for EPYC 8004 servers after a BIOS update, these are quite some interesting processors for those after a single socket, performant server. Up today are benchmarks of the EPYC 8635P as the flagship 84 core Sorano CPU.