Linux NewsHyprland 0.54.2 Wayland Compositor Released with Multiple Crash Fixes
Hyprland 0.54.2 introduces crash fixes, layout improvements, and several stability patches backported from the main development branch.
CrackArmor Exposed: Critical Flaws in AppArmor Put Millions of Linux Systems at Risk
by George Whittaker A newly disclosed set of vulnerabilities has sent shockwaves through the Linux security community. Dubbed “CrackArmor,” these flaws affect AppArmor, one of the most widely used security modules in Linux, potentially exposing millions of systems to serious compromise. Discovered by the Qualys Threat Research Unit, the vulnerabilities highlight a concerning reality: even core security mechanisms can harbor weaknesses that go unnoticed for years. What Is CrackArmor? “CrackArmor” refers to a group of nine critical vulnerabilities found in the Linux kernel’s AppArmor module. AppArmor is a mandatory access control (MAC) system designed to restrict what applications can do, helping contain attacks and enforce system policies. These flaws stem from a class of issues known as “confused deputy” vulnerabilities, where a lower-privileged user can trick trusted processes into performing actions on their behalf. Why These Vulnerabilities Are Serious The impact of CrackArmor is si
KeePassXC 2.7.12 Password Manager Adds Nested Bitwarden Import
KeePassXC 2.7.12 open-source password manager adds nested folder support for Bitwarden imports, a TIMEOTP Auto-Type placeholder, and more.
OpenSSL 4.0 Promises Support for Encrypted Client Hello, SNMP KDF, and SRTP KDF
OpenSSL 4.0 is now available for public testing with an alpha version adding support for Encrypted Client Hello, support for SNMP KDF and SRTP KDF, and other changes. Here’s what to expect!
These 3 classic Linux distros are a blast from the past
If you grew up with computers and tech, these Linux distros will put a smile on your face.
Current RISC-V CPUs Being Too Slow Causes Headaches For Fedora: ~5x Slower Builds
The current crop of RISC-V SoCs are still much slower than alternative CPU architectures and lead to much longer build times for Fedora packages as a result. There's hope with next-gen RISC-V processors being faster but for now even compiling Binutils as an example is around five times slower than x86_64 -- and that's with disabling compiler link-time optimizations (LTO) for RISC-V to avoid an even longer build process...
Fedora Linux 44 Beta has GNOME 50, KDE Plasma 6.6, and installer improvements
Fedora 44 is just around the corner, and now the beta release is available.
KeePassXC 2.7.12 Password Manager Adds Support for Bitwarden’s Nested Folders
KeePassXC 2.7.12 open-source password manager is now available for download with support for nested folders for Bitwarden imports, support for setting BE and BS flags to true for Passkeys, and more.
MSI PRO B850-P WiFi: A Special AMD Ryzen AM5 Motherboard For Linux / Open-Source Enthusiasts
The MSI PRO B850-P WIFI motherboard is a unique AMD Ryzen AM5 motherboard for Linux/open-source enthusiasts that is competitively priced at just $179 USD. It's interesting not because of the doings of MSI but rather 3mdeb with this being the desktop motherboard they are working on porting AMD openSIL and Coreboot to for allowing an open-source firmware stack.
I tried the top 8 Linux terminal emulators so you don't have to
Who doesn't want a Linux terminal that works like a video game?
[$] Debian decides not to decide on AI-generated contributions
Debian is the latest in an ever-growing list of projects to wrestle (again) with the question of LLM-generated contributions; the latest debate stared in mid-February, after Lucas Nussbaum opened a discussion with a draft general resolution (GR) on whether Debian should accept AI-assisted contributions. It seems to have, mostly, subsided without a GR being put forward or any decisions being made, but the conversation was illuminating nonetheless.
Security updates for Tuesday
Security updates have been issued by Debian (imagemagick), Fedora (chromium, matrix-synapse, mingw-zlib, perl-Net-CIDR, polkit, and rust-pythonize), Mageia (coturn, firefox, and thunderbird), Oracle (delve, git-lfs, gnutls, go-rpm-macros, image-builder, kernel, libsoup, nfs-utils, nginx:1.24, osbuild-composer, postgresql, thunderbird, udisks2, and valkey), Red Hat (grafana, image-builder, and opentelemetry-collector), SUSE (c3p0 and mchange-commons, corepack24, go1, ImageMagick, python-Flask, tomcat, tomcat10, tomcat11, virtiofsd, and weblate), and Ubuntu (apache2 and yara).
KDE Plasma 6.5.6 Released as Final Bugfix Update for the 6.5 Series
KDE Plasma 6.5.6 arrives as the final maintenance update for the Plasma 6.5 series, delivering multiple bug fixes across KWin, Discover, Powerdevil, and more.
KDE Plasma 6.5.6 Released as the Last Update in the Series with More Fixes
KDE Plasma 6.5.6 is now available as the sixth and last maintenance update to the latest KDE Plasma 6.5 desktop environment series with more bug/crash fixes.
OpenSSL 4.0 Alpha 1 Released With Encrypted Client Hello "ECH" & Other Features
The first alpha release of OpenSSL 4.0 is now available for testing. With OpenSSL 3.0 they are removing support for SSLv3 that has been deprecated for over one decade while also dropping OpenSSL engines and other removals while also adding in some new features...