Efforts to introduce malicious code into the open-source supply chain have been on the rise in recent years, and there is no indication that they will abate anytime soon. These attacks are often found quickly, but not quickly enough to prevent the compromised code from being automatically injected into other projects or code deployed by users where it can wreak havoc. One method of avoiding supply-chain attacks is to add a delay of a few days before pulling upates in what is known as a "dependency cooldown". That tactic is starting to find favor with users and some language ecosystem package managers. While this practice is considered a reasonable response by many, others are complaining that those employing dependency cooldowns are free-riding on the larger community by letting others take the risk.
Linux kernel 6.19 reached end of life and all users are now recommended to upgrade their systems to the latest Linux 7.0 kernel series as soon as possible.
In Rust, types either possess a constant size known at compile time, or a dynamically calculated size known at run time. That is fine for most purposes, but recent proposals for the language have shown the need for a more fine-grained hierarchy. RFC 3729 from David Wood and Rémy Rakic would add a hierarchy of traits to describe types with sizes known under different circumstances. While the idea has been subject to discussion for many years, a growing number of use cases for the feature have come to light.
Version 2.26.0 of the LilyPond music-engraving program has been released. Major changes include the ability to use the Cairo library to generate output and improvements in spacing between clefs and time signatures. See the release notes for a full list of miscellaneous improvements as well as what's new with musical and specialist notation.
Greg Kroah-Hartman has announced the release of the 7.0.1, 6.19.14, 6.18.24, and 6.12.83 stable kernels. As usual, each contains important fixes throughout the tree. Users are encouraged to upgrade.
Ahead of tomorrow's Ubuntu 26.04 LTS release, Canonical published a blog post today outlining the state of Rust Coreutils for its premiere in this long-term support (LTS) version. Canonical also commissioned a security audit recently of Rust Coreutils that turned up 44 CVEs and 113 issues in total...
GCC 16.1 as the first stable version of the GCC 16 compiler is nearly ready for its official debut as this year's major feature release for this open-source compiler...
FreeBSD is out today with their Q1-2026 status report to outline the many different development initiatives their open-source developers have participated in over the past quarter. There is a lot of hardware enablement efforts ongoing as well as continuing to make a more compelling desktop experience and also improving GUI and management options for FreeBSD systems...
KMSCON 9.3.4 is out today for this virtual terminal (VT) emulator in user-space that runs atop the Linux DRM/KMS APIs for those wanting to enjoy a CONFIG_VT=n Linux kernel experience...
Linux News