Latest Linux and open source news from around the web

WD Black SN7100 1TB NVMe SSD Sponsored · View on Amazon → CanaKit Raspberry Pi 5 Starter Kit Sponsored · View on Amazon →
LWN.net

Security updates for Friday

Security updates have been issued by AlmaLinux (buildah, coreutils, evince, libpng, libreoffice, libtasn1, libxml2, libxslt, nginx, nginx:1.24, nginx:1.26, postgresql:12, python-urllib3, python3.12-urllib3, python3.14, python3.14-urllib3, skopeo, tigervnc, tomcat, and vim), Debian (chromium, dnsdist, giflib, libdbi-perl, libssh2, libtext-csv-xs-perl, pdns, pdns-recursor, python-urllib3, and sogo), Fedora (goose, httpd, librabbitmq, perl-Compress-Raw-Bzip2, perl-DBI, perl-IO-Compress, perl-Socket, python-django-allauth, rsync, and strongswan), Oracle (389-ds-base, buildah, containernetworking-plugins, coreutils, evince, fence-agents, giflib, git-lfs, hplip, krb5, libcap, libexif, libtasn1, memcached, opencryptoki, podman, postfix, postgresql:12, postgresql:13, postgresql:15, postgresql:16, python-urllib3, python3.12-urllib3, python3.14-urllib3, python3.9, runc, skopeo, tigervnc, vim, webkit2gtk3, xorg-x11-server, and xorg-x11-server-Xwayland), SUSE (apache-commons-configuration2, apache

LWN.net

The "Akrites" vulnerability-mitigation project launches

The Linux Foundation, in a letter co-signed by a large range of organizations and companies, has announced the launch of "Akrites", a project to fast-track vulnerability fixes into projects. As Akrites works upstream to fix projects at the source, we commit to support downstream efforts to secure critical infrastructure before it can be exploited. When patches are released to the public, adversaries are able to utilize AI to rapidly reverse engineer the underlying vulnerabilities, develop exploits, and launch attacks. The success of our efforts therefore will be measured in patch deployment, not publication. We will partner with critical infrastructure owners and operators, civil society efforts, and governments as they increase coordination to achieve these goals. Confidentiality is non-negotiable: An undisclosed flaw in a widely deployed package is, in effect, a weapon, and the program is built first to prevent leaks. Fixes flow back into each project's own home, working with the mai

Phoronix

How NVIDIA GB10 CPU Performance Compares To Vera

Since delivering NVIDIA Vera CPU benchmarks one month ago and follow-ups like how the ARM Linux server performance has evolved in 8 years or how Vera compares to Ampere Altra that is still quite common in the marketplace, another frequent discussion point and inquiry is about the performance of NVIDIA Vera relative to NVIDIA's GB10 chip. For those curious about the per-core performance and the like, here are some benchmarks of the GB10 up against those initial Vera results.

Phoronix

Experimental Code Enables Per-Monitor Backgrounds For GNOME Shell

One of the limitations of GNOME's current multi-monitor handling is that the same background is used across the displays. For those that want to enjoy per-monitor background selection, some experimental / proof-of-concept code is now working to allow such per-monitor backgrounds to work with the modern GNOME desktop...