TrueNAS 26 Beta released today as the initial test release for this next version of this Linux-based operating system for network attached storage (NAS) devices and more...
A Linux version of Little Snitch, the iconic network monitoring and firewall tool for macOS, has been released. Little Snitch for Linux is written in Rust and uses eBPF for kernel-level traffic interception (which lets sandboxed code run inside the Linux kernel without modifying it). The tool lists processes on your machine making network connections, with options to block them. Its creator, Christian Starkjohann at Austrian software company Objective Development, says he created the Linux port out of personal necessity. Heβd installed Linux on some old hardware, and immediately felt exposed without it. While Linux has alternatives, not least in [β¦]
The Rust-based Redox OS open-source operating system provided a status update on all of their interesting development activities during the month of March. In addition to a lot of code improvements, Redox OS also enhanced its documentation as well as added an AI policy to reject any contributions relying on large language models...
GNU nano 9.0 command line text editor for Unix-like systems is now available for download as a major update introducing new features and improvements. Hereβs whatβs new!
Raspberry Pi Imager 2.0.8 SD card flashing utility is now available for download with fastboot improvements, OS Customisation changes, SSH and write operations enhancements.
Anthropic just dropped $1.5 million on the Apache Software Foundation. Is it paying back the open source world -- or buying goodwill? The post Does Acting Like Good Guys Actually Make Anthropic Good Guys? appeared first on FOSS Force.
It has been a little while since LWN last surveyed tools for managing a digital music collection. In the intervening decades, many Linux users have moved on to music streaming services, found them wanting, and are looking to curate their own collection once again. There are plenty of choices when it comes to ripping, managing, and playing digital audio; so many, in fact, that it can be a bit daunting. After years of tinkering, I've found a few tools that work well for managing my digital library: the first I'd like to cover is the fre:ac free audio encoder for ripping music from CDs and converting between audio formats.
On March 31, Kees Cook shared a patch set that represents the culmination of more than a year of work toward eliminating the possibility of silent, unintentional integer overflow in the kernel. Linus Torvalds was not pleased with the approach, leading to a detailed discussion about the meaning of "safe" integer operations and the design of APIs for handling integer overflows. Eventually, the developers involved reached a consensus for a different API that should make handling overflow errors in the kernel much less of a hassle.
The NixOS project has announced a critical vulnerability in many versions of the Nix package manager's daemon. The flaw was introduced as part of a fix for a prior vulnerability in 2024. According to the advisory, all default configurations of NixOS and systems building untrusted derivations are impacted. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating the builds (typically the Nix daemon running as root in multi-user installations) by following symlinks during fixed-output derivation output registration. This affects sandboxed Linux builds - sandboxed macOS builds are unaffected. The location of the temporary output used for the output copy was located inside the build chroot. A symlink, pointing to an arbitrary location in the filesystem, could be created by the derivation builder at that path. During output registration, the Nix process (running in the host mount namespace) would follow that symlink and overwrit
Security updates have been issued by Debian (openssl), Fedora (corosync, goose, kea, pspp, and rauc), Mageia (python-pygments, roundcubemail, and tigervnc), SUSE (bind, gimp, google-cloud-sap-agent, govulncheck-vulndb, ignition, ImageMagick, python, python-PyJWT, and python-pyOpenSSL), and Ubuntu (adsys, juju-core, lxd, python-django, and salt).