Latest Linux and open source news from around the web
Sent out today were the networking subsystem fixes for the ongoing Linux 7.0 kernel. These networking fixes in time for Sunday's Linux 7.0-rc7 release include addressing performance issues within the Qualcomm Ath11k and Ath12k WiFi drivers that have always existed ever since the drivers were upstreamed...
by George Whittaker The MX Linux project has taken a firm stance in a growing controversy across the Linux ecosystem: mandatory age-verification requirements at the operating system level. In a recent update, the team made it clear, they have no intention of implementing such measures, citing concerns over privacy, practicality, and the core philosophy of open-source software. As governments begin introducing laws that could require operating systems to collect user age data, MX Linux is joining a group of projects resisting the shift. What Sparked the Debate? The discussion around age verification stems from new legislation, particularly in regions like the United States and Brazil, that aims to protect minors online. These laws may require operating systems to: Collect user age or date of birth during setup Provide age-related data to applications Enable content filtering based on age categories At the same time, underlying Linux components such as systemd have already begun explorin
The Rust-based version of sudo shows password feedback by default in Ubuntu 26.04 LTS, upending nearly 40 years of learned (and confusing) behaviour. Broadly, that decision has been well received, but those who want a quick option to temporarily mask their sudo input (no asterisks), just got one. You can now toggle sudo password feedback visibility by pressing the tab key. You can press it at any point during password entry (before you start or mid-way through, it doesn’t matter), and rather than asterisk, it shows (no-echo) instead. Here’s a video of it in action: The lack visible feedback during […]
Microsoft today announced their newest open-source (MIT-licensed) software project.. the Agent Governance Toolkit. Microsoft is trying their hand at coming up with runtime security governance for autonomous AI agents...
Netrunner 26 “Twilight” is out now, based on Debian 13 Trixie, with KDE Plasma 6.3.6, Linux kernel 6.16, and updated desktop apps.
The kernel provides a number of ways for processes to communicate with each other, but they never quite seem to fit the bill for many users. There are currently a few proposals for interprocess communication (IPC) enhancements circulating on the mailing lists. The most straightforward one adds a new system call for POSIX message queues that enables the addition of new features. For those wanting an entirely new way to do interprocess communication, there is a proposal to add a new subsystem for that purpose to io_uring. Finally, the bus1 proposal has made a return after ten years.
When I talk about Matrix, I’m not introducing “yet another messaging app.” I’m talking about a communication protocol that solves a series of structural problems introduced in centralized platforms. The discussion is not abstract anymore. Between political pressure, regulatory proposals ... Read more The post Morrolinux: Matrix vs. Chat Control – Why Decentralization Matters appeared first on Linux Professional Institute (LPI).
Brian "bex" Exelbierd has published a blog post exploring follow-up questions raised by the recent debate about the use of the LLM-based review tool Sashiko in the memory-management subsystem. His main finding is that Sashiko reviews are bi-modal with regards to whether they contain reports about code not directly changed by the patch set — most do not, but the ones that do often have several such comments. Hypothesis 1: Reviewers are getting told about bugs they didn't create. Sashiko's review protocol explicitly instructs the LLM to read surrounding code, not just the diff. That's good review practice — but it means the tool might flag pre-existing bugs in code the patch author merely touched, putting those problems in their inbox. Hypothesis 2: The same pre-existing bugs surface repeatedly. If a known issue in a subsystem doesn't get fixed between review runs, every patch touching nearby code could trigger the same finding. That would create a steady drip of duplicate noise across t
OpenSSH 10.3 has been released. Among the many changes in this release are a security fix to address late validation of metacharacters in user names, removal of bug compatibility for SSH implementations that do not support rekeying, and a fix to ensure that scp clears setuid/setgid bits from downloaded files when operating as root in legacy (-O) mode. See the release announcement for a full list of new features, bug fixes, and potentially incompatible changes.
Security updates have been issued by AlmaLinux (python3.11, python3.12, squid, and thunderbird), Debian (gst-plugins-bad1.0 and gst-plugins-ugly1.0), Fedora (bpfman, crun, gnome-remote-desktop, polkit, python3.14, rust-rustls-webpki, rust-sccache, rust-scx_layered, rust-scx_rustland, rust-scx_rusty, and scap-security-guide), Oracle (freerdp, gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free, kernel, libxslt, python3.11, python3.12, squid, and thunderbird), SUSE (389-ds, busybox, chromium, cosign, curl, docker-compose, exiv2, expat, firefox, freerdp, freerdp2, gstreamer-plugins-ugly, harfbuzz, heroic-games-launcher, ImageMagick, kea, keylime, libjxl, librsvg, libsodium, libsoup, net-snmp, net-tools, netty, nghttp2, poppler, postgresql13, postgresql16, postgresql17, postgresql18, protobuf, python-black, python-orjson, python-pyasn1, python-pyOpenSSL, python-tornado, python-tornado6, python311-nltk, thunderbird, tomcat10, tomca
Greg Kroah-Hartman has released the 6.19.11, 6.18.21, 6.12.80, and 6.6.131 stable kernels, followed by a quick release of 6.6.132 with two patches reverted to address a problem building the rust core in 6.6.131. Each kernel contains important fixes; users are advised to upgrade.
OpenSSH 10.3 introduces security fixes, new SSH features, and improvements to agent forwarding, multiplexing, and key handling.
Just over one year ago Intel Linux engineers began working on cache-aware load balancing for Linux or more commonly referred to as Cache Aware Scheduling. The functionality for helping modern Intel Xeon and AMD EPYC processors especially hasn't yet been upstreamed to the Linux kernel but yesterday the fourth version of these patches were posted for review...
Following this morning's announcement of IBM working with Arm on "dual architecture" hardware, we have some more details on at least what's happening from the software side... It's improving Arm virtualization on IBM Z Systems (s390)...
With the Ubuntu 26.04 LTS release due out in three weeks, I have been re-testing a number of different devices on this newest Ubuntu release. One of the most significant improvements to note was when running the Framework Desktop with Ryzen AI Max "Strix Halo" and quantifying the performance gains of the Radeon 8060S Graphics since launch last year. Here's a look at how the Vulkan and OpenGL performance has evolved for the Ryzen AI Max+ 395 since its launch last year in going from Ubuntu 26.04 to Ubuntu 26.04.
Linux News