Latest Linux and open source news from around the web

Beelink EQ14 Mini PC Sponsored · View on Amazon → Linux Pocket Guide Sponsored · View on Amazon →
Phoronix

Linux Provides Better Performance With The AMD Ryzen 9 9950X3D2 Over Windows 11

Last month with the new AMD Zen 5 "Dual Edition" 3D V-Cache CPU, the AMD Ryzen 9 9950X3D2 Dual Edition showed great performance on Linux across a range of workloads. Curious if the operating system was playing into the greater benefit of Ryzen 9 9950X3D2 versus just the workloads tested, this article is looking at both the AMD Ryzen 9 9950X3D and Ryzen 9 9950X3D2 on Microsoft Windows 11 and Ubuntu 26.04 LTS Linux across a range of native benchmarks.

Phoronix

Linux Sound Subsystem Also Seeing Many Fixes Driven By AI/LLMs

It's not only the Linux networking subsystem where many fixes have been appearing -- including several notable security fixes for local privilege escalation issues -- leading to "craziness" from AI / LLMs. The Linux sound subsystem has also been seeing an uptick in activity with many "assisted-by" patches coming about in recent weeks...

OMG! Ubuntu

ONLYOFFICE 9.4 brings new features – and a stricter licence

A new version of ONLYOFFICE, the open-source productivity suite, is out with a small set of improvements. The new release lands nearly two months after ONLYOFFICE suspended its eight-year Nextcloud partnership over Euro-Office, a fork by a European consortium that ONLYOFFICE says violates its AGPLv3 licence terms. Totally unrelated (yes, sarcasm), ONLYOFFICE 9.4 updates its licensing to tighten language around attribution, copyright notices and the labelling of modified versions. Viva le fork; it still permits modifications, but is more sniffy about use of its trademarks. Features-wise, ONLYOFFICE 9.4.0 adds Croatian language translations across all editors and shuffles chart settings out […]

LWN.net

Vulnerabilities in various GTK-based PDF readers

Michael Catanzaro has disclosed a command-injection vulnerability affecting a number of GTK-based PDF readers; exploits included: They contain a script for building malicious polyglot PDFs that are simultaneously both valid PDF files and also valid ELF binaries. When the user opens the PDF in the PDF viewer and clicks on a malicious link embedded in the PDF, the PDF abuses the command injection vulnerability to load itself as a GTK module using the `--gtk-module` command line flag. It can then execute arbitrary code via its library constructor. That flag was removed in GTK 4, which is why the vulnerability is much less serious for Papers than it is for Evince, Atril, and Xreader.