Latest Linux and open source news from around the web
One week after the Copy Fail vulnerability, a new Linux local privilege escalation bug has been made public. This time around there are no patches or CVEs yet for this "Dirty Frag" vulnerability as the embargo was broken early and thus the security researcher went ahead and published earlier than anticipated...
Ubuntu Touch OTA 1.3 update is now rolling out with improvements to handling of desktop apps on Lomiri, improved handling of docks with input devices, improved playback of AMR voice message sent via MMS, and other changes.
Not a good week for Ubuntu fans.
Following Linux 7.1 beginning to phase out i486 CPU support and in turn drivers like those for the old AMD Elan SoCs now being removed, for Linux 7.2 the processor support removal is going further to now include some i586 and i686 class processors...
Yazi makes it easier to build your terminal-first workflow by giving you a pwoerful, featuree-rich file manager.
UBports releases Ubuntu Touch 24.04-1.3 while preparing 24.04-2.0, targeting a newer Morph Browser stack with Qt 6 work.
KDE Gear 26.04.1 is now available as the first maintenance update to the latest KDE Gear 26.04 open-source software suite series with fixes for various KDE applications.
by George Whittaker Linus Torvalds has officially released Linux kernel 7.1-rc2, the second release candidate in the Linux 7.1 development cycle. While Torvalds described the update as a “fairly normal” RC release, the kernel includes a broad collection of driver fixes, subsystem cleanups, and stability improvements that continue shaping the next major Linux kernel release. Although still an early testing version intended mainly for developers and enthusiasts, Linux 7.1-rc2 already delivers several notable fixes—especially for graphics hardware, networking, and gaming devices like the Steam Deck OLED. A Strange-Looking Release—But for a Good Reason One of the first things Torvalds mentioned in the release announcement was the unusually large patch statistics. At first glance, the release appears much larger than expected, but there’s an explanation behind the inflated numbers. Much of the activity comes from a large cleanup effort in the KVM selftests subsystem, where developers rename
Traefik Proxy 3.7 adds production-ready Ingress NGINX migration support, new TLS certificate visibility, and Gateway API 1.5.1 updates.
On April 21, Andrew Morton let it be known that he intends to begin stepping away from the maintainership of kernel's memory-management subsystem — a responsibility he has carried since before memory management was even seen as its own subsystem. At the 2026 Linux Storage, Filesystem, Memory Management, and BPF Summit, one of the first sessions in the memory-management track was devoted to how the maintainership would be managed going forward. There are a lot of questions still to be answered.
Arjen Hiemstra has published an article on the status of the Union project: a single system to support all of KDE's technologies used for styling applications. The work on Union's Breeze implementation has progressed to the point where it is very hard to distinguish whether or not you are running the Union version. We have also tested with a bunch of applications and made sure that any differences were fixed. So we are at a stage where we need to get Union into the hands of more people, both to get extra people testing whether there are any major issues, but also to have interested people creating new styles. This means that with the upcoming Plasma 6.7 release, we plan to include Union. Discussion is currently ongoing whether we will enable it by default, but even if not there will be a way to try it out. See Hiemstra's introductory article on Union, published in February 2025, for more about the project and its creation. KDE 6.7 is expected to be released in mid-June.
Not every version of Linux requires extensive customization and tinkering.
KDE Gear 26.04.1 is now available as the first maintenance update for the KDE Gear 26.04 application collection.
Security updates have been issued by AlmaLinux (dovecot, fence-agents, freeipmi, git-lfs, image-builder, kernel, libsoup, osbuild-composer, and python-tornado), Debian (apache2, libdatetime-timezone-perl, lrzip, tzdata, and wireshark), Fedora (dovecot, forgejo-runner, gh, gnutls, krb5, nano, pdns, pyOpenSSL, squid, vim, and xorg-x11-server-Xwayland), Mageia (graphicsmagick, kernel-linus, krb5-appl, libexif, libtiff, nano, nginx, ntfs-3g, opam, perl-Net-CIDR-Lite, perl-Starlet, perl-Starman, tcpflow, and virtualbox), Oracle (dovecot, fence-agents, freeipmi, image-builder, kernel, libcap, LibRaw, libsoup, openssh, osbuild-composer, python, python-tornado, python3, systemd, thunderbird, and tigervnc), SUSE (containerd, curl, erlang, flatpak, java-11-openjdk, java-21-openjdk, java-25-openjdk, liblxc-devel, libpng12, libthrift-0_23_0, openCryptoki, openexr, openssl-3, python3, python311-social-auth-core, rclone, skim, and thunderbird), and Ubuntu (apache2, coin3, editorconfig-core, insightt
A fake AI agent, a near-identical Ubuntu URL, and a crypto wallet prompt, here's how hackers used Ubuntu's own branding against its users.
Linux News