Latest Linux and open source news from around the web

TP-Link 8-Port Gigabit Managed Switch Sponsored · View on Amazon → USB to Ethernet Adapter Sponsored · View on Amazon →
OMG! Ubuntu

Firefox Nova โ€“ we just got our first look at Mozillaโ€™s upcoming browser redesign

A new look Firefox is on the way, with Mozilla designers working on a โ€˜Novaโ€™ redesign for the browser that makes greater use of curves and colour. First reported by tech blogger Sรถren Hentzschel, who has published a handful of design mockups, Nova gives Firefox a more rounded appearance: tabs and the address bar sport uniform radii, and sit in a segmented island design that matches. Everything neatly nestles. Elements like hover effects, settings pages and parts of the New Tab Page are similarly rounded. If you look closely at the image above youโ€™ll notice new icons that (you guessed [โ€ฆ]

Linux.org

Banana Pi R4 (BPI-R4)

The Banana Pi R4 is an open-source smart router. You can use it for networking jobs, as you will tell from the specs on the hardware. Keep in mind that this Single Board Computer (SBC) may be small, but it is powerful, especially when dealing with networking over any type of connection. Banana Pi R4 Specs The main specs are: MediaTek MT7988A (Filogic 880) quad-core Arm Cortex-A73, 1.8GHz processor 4 GB/8 GB DDR4 8 GB eMMC flash 128MB SPI-NAND Flash Micro SD... https://www.linux.org/threads/banana-pi-r4-bpi-r4.60066/

LWN.net

Rust 1.94.0 released

Version 1.94.0 of the Rust language has been released. Changes include array windows (an iterator for slices), some Cargo enhancements, and a number of newly stabilized APIs.

LWN.net

A GitHub Issue Title Compromised 4,000 Developer Machines (grith.ai)

The grith.ai blog reports on an LLM prompt-injection vulnerability that led to 4,000 installations of a compromised version of the Cline utility. For the next eight hours, every developer who installed or updated Cline got OpenClaw - a separate AI agent with full system access - installed globally on their machine without consent. Approximately 4,000 downloads occurred before the package was pulled. The interesting part is not the payload. It is how the attacker got the npm token in the first place: by injecting a prompt into a GitHub issue title, which an AI triage bot read, interpreted as an instruction, and executed.