Linux NewsOver Half a Million Credentials Leaked on GitHub Remain Active
Truffle Security found 543,699 still-valid credentials across more than 224 million public GitHub repositories, including some exposed for over 16 years.
FEX 2610 Released With Handling For AVX-VNNI, Disk Cache Improvements
FEX 2610 released today as the newest monthly release of this open-source emulator for running x86_64 games/apps on AArch64 for ARM64 Linux systems, including most notably by Valve's Steam Frame headset...
Podman Test Week: Help test the Rust-based conmon v3
The Podman and Fedora Quality teams are organizing a test week from Monday, October 12, through Sunday, October 18, 2026. We want your help testing conmon v3, the Rust-based container monitor used with Podman. If you use Podman, try the same containers and commands with conmon v3 and report any differences. Why we’re testing conmon […]
Google Has Shut Down Part of its Open Source Bounty Program
Submitting product vulnerability reports is no longer possible. You can thank AI for that.
[$] Analyzing Rust programs with Charon
Nadrieril is a long-time Rust contributor, and the maintainer of the rustc pattern-matching infrastructure. During his involvement with Rust, he has noticed a problem with the usability of the language: it is difficult to automatically extract information from a Rust crate for use with other tooling. The Charon project aims to fix that by providing a stable API for accessing internal information from the Rust compiler.
OpenVPN 2.7.8 Released with Security and Bug Fixes, Various Improvements
OpenVPN 2.7.8 is now available for download as the eighth maintenance update to the OpenVPN 2.7 series with bug and security fixes, as well as a couple of user-visible changes.
OpenVPN 2.7.8 Released with Certificate and Windows Security Fixes
OpenVPN 2.7.8 is out with fixes for three security vulnerabilities, along with DCO, certificate validation, and server reliability improvements.
NVIDIA 615.78.08 Linux Graphics Driver Improves Support for The Last of Us Part II
NVIDIA 615.78.08 Linux is now available for download with various fixes for bugs and issues to improve gaming, Wayland support, and the overall performance of the graphics driver.
Office 365 Available for Testing on Linux via Bottles
Linux users can now test the official Office 365, thanks to Mirko Brombin's work on Bottles.
[$] Evolving the LAVD scheduler from gaming to servers
The extensible scheduler class, which enables the creation of custom CPU schedulers with BPF, has led to a burst of innovation in this area; the LAVD scheduler has, perhaps, been one of the most noteworthy schedulers to emerge. Though it was originally designed for gaming applications, the LAVD scheduler has since grown to serve other types of workloads as well. At the 2026 edition of Kernel Recipes, Changwoo Min and Gavin Guo presented an overview of this scheduler and how it has evolved over time.
Never lose a command again: How to set up unlimited Bash history
We're going all the way back
NVIDIA 615.78.08 Linux Driver Brings Vulkan Latency, Wayland Fixes
NVIDIA 615.78.08 is now available for Linux as a New Feature Branch driver, bringing gameplay, suspend, Vulkan latency, and Wayland fixes.
A new Raspberry Pi Desktop release is finally available for x86-64
Simon Long has announced a long-awaited release of Raspberry Pi OS, based on Debian 13 ("trixie"), for x86-64 systems. We managed to find the time to update the Desktop for the Buster and Bullseye releases of Debian, but then we all just got too busy with other things, and, while we left the Bullseye version on the website for anyone who wanted it, we simply didn't have time to release any newer versions. But people kept on asking for it – we get two or three emails every week asking when the PC Desktop will be updated, and we haven't had an answer, because we honestly didn't know when we might get a chance to do it. We've continually tried to allocate time to be able to work on this, but it hasn't been easy. [...] Earlier this year, we (or rather Serge) finally got the latest version of the Desktop running on top of a Debian Trixie image. It's now based on 64-bit Debian (the amd64 architecture) rather than the older 32-bit version, as Debian itself has stopped supporting 32-bit for PC
Security updates for Wednesday
Security updates have been issued by AlmaLinux (bind, dovecot, freerdp, kernel, mariadb-connector-c, mod_auth_openidc, nodejs22, nodejs:22, sudo, and vim), Debian (node-shell-quote, puma, rails, ruby-jwt, and suricata-update), Fedora (chromium, cockpit, flocq, freerdp, gappalib-coq, golang-x-mod, httpd, janus, libical, musescore, python3-docs, python3.14, python3.15, rocq, rocq-stdlib, tesseract, why3, and zenon), Mageia (srt and tor), Oracle (freerdp, kernel, libpcap, mariadb-connector-c, nodejs22, sudo, and vim), Red Hat (expat and grafana), Slackware (openssh), SUSE (chromium, docker-stable, firefox, jupyter-jupyterlab, libtcnative-1-0, tomcat, tomcat10, libtcnative-1-0, tomcat11, openexr, python310, python313-azure-storage-queue, python313-langchain-anthropic, python313-sglang, python313-Werkzeug, and valkey), and Ubuntu (fluidsynth, freerdp3, freetype, golang-1.18, golang-1.21, golang-1.24, gst-plugins-good1.0, libsoup2.4, libsoup3, libwebsockets, linux, linux-aws, linux-gcp, linu
Multiple Security Issues Patched in XOrg Server 21.1.25 and Xwayland 24.1.14
XOrg Server 21.1.25 and Xwayland 24.1.14 have been released today to address several security vulnerabilities that could lead to heap corruption, denial of service, or potentially information disclosure.