Latest Linux and open source news from around the web

Crucial BX500 1TB SATA SSD Sponsored · View on Amazon → Docker Deep Dive Sponsored · View on Amazon →
LWN.net

Vulnerabilities in various GTK-based PDF readers

Michael Catanzaro has disclosed a command-injection vulnerability affecting a number of GTK-based PDF readers; exploits included: They contain a script for building malicious polyglot PDFs that are simultaneously both valid PDF files and also valid ELF binaries. When the user opens the PDF in the PDF viewer and clicks on a malicious link embedded in the PDF, the PDF abuses the command injection vulnerability to load itself as a GTK module using the `--gtk-module` command line flag. It can then execute arbitrary code via its library constructor. That flag was removed in GTK 4, which is why the vulnerability is much less serious for Papers than it is for Evince, Atril, and Xreader.

Linux.org

Banana Pi R4 (BPI-R4) - DHCP for Multiple Subnets

We are going to set up the Banana Pi R4 as a DHCP server that assigns IP addresses on multiple subnets. The Banana Pi R3 has four 1-gigabit Ethernet ports, which we will use to create four subnets. These four subnets will allow traffic to be routed between them. There are three Local Area Network (LAN) ports and one Wide Area Network (WAN) port. Which we will connect the WAN port to the local network that is connected to the Internet. The three remaining ports will allow for three networks... https://www.linux.org/threads/banana-pi-r4-bpi-r4-dhcp-for-multiple-subnets.61666/

Phoronix

Today's Linux Networking Fixes: "Craziness Continues With No End In Sight"

Driven by AI/LLM bots like Shashiko uncovering new issues within the Linux kernel source tree, including various security vulnerabilities like Dirty Frag, the mailing list has been wild with bug reports and fixes. Today's networking fixes pull request for Linux 7.1 continues to highlight the ongoing craziness and fears that the worst may be yet to come...

Linux Journal

Alpine Linux Experiments with Systemd Compatibility While Keeping Its Lightweight Identity

by George Whittaker Alpine Linux, one of the most recognizable non-systemd Linux distributions, is reportedly experimenting with an optional systemd compatibility layer, a move that has sparked intense discussion across the Linux community. For years, Alpine has stood apart from mainstream Linux distributions by avoiding both glibc and systemd, instead relying on: musl libc BusyBox OpenRC as its init system Now, growing software compatibility pressures, especially around desktop applications, containers, and enterprise tooling, appear to be pushing Alpine developers to explore new approaches. Why Alpine Linux Avoided Systemd for So Long Alpine Linux built its reputation around simplicity, security, and minimalism. Unlike many mainstream distributions, Alpine intentionally avoided systemd in favor of the lighter and more modular OpenRC init system. This design philosophy made Alpine extremely popular for: Containers and Docker images Embedded systems Lightweight virtual machines Securit

OMG! Ubuntu

Vivaldi 8.0 is out with a dramatic new look and UI layouts

A bold new look arrives in Vivaldi 8.0, the latest update to the Chromium-based web browser. Vivaldi 8.0 sees the browser’s main UI elements (the bits that make a browser looks like a browser, so tabs, toolbars, panels, and content) drop their boundaries to form a continuous look. Hence the named Unified. “Unified is not a visual refresh. It is a rethinking of how the Vivaldi interface works as a system” the company says in its press release (a suspiciously AI-sounding parallelism that falls apart when your brain moves past ‘that sounds impressive’ since er, it is actually a visual […]