Aleksa Sarai, as the maintainer of the runc container runtime, faces a constant battle against security problems. Recently, runc has seen another instance of a security vulnerability that can be traced back to the difficulty of handling file paths on Linux. Sarai spoke at the 2025 Linux Plumbers Conference (slides; video) about some of the problems runc has had with path-traversal vulnerabilities, and to ask people to please use libpathrs, the library that he has been developing for safe path traversal.
by George Whittaker The Linux kernel development cycle continues with the release of Linux 6.19-rc4, the fourth release candidate in the lead-up to the final 6.19 stable kernel. As with previous RC builds, this release is aimed squarely at developers, testers, and early adopters who help identify bugs and regressions before the kernel is finalized. Release candidates are not feature drops — they are checkpoints. And rc4 reflects exactly that role. What Does rc4 Mean in the Kernel Cycle? By the time the fourth release candidate arrives, the merge window is long closed. That means all major features for Linux 6.19 are already in place, and the focus has shifted entirely to: Fixing bugs introduced earlier in the cycle Addressing regressions reported by testers Refining drivers, subsystems, and architecture-specific code In other words, rc4 is about stability and correctness, not surprises. What’s Changed in Linux 6.19-rc4 While rc releases don’t usually headline major features, they do in
Version 26.0 ("Anh-Linh") of the Arch-based Manjaro Linux distribution has been released. Manjaro 26.0 includes Linux 6.18, GNOME 49, KDE Plasma 6.5, Xfce 4.20, and more.
The Fedora Engineering and Steering Committee (FESCo) has approved a Fedora 44 change for switching all KDE variants away from using the SDDM display manager to instead use the newer Plasma Login Manager...
Security updates have been issued by AlmaLinux (kernel, ruby, and thunderbird), Debian (libsodium and ruby-rmagick), Fedora (gnupg2 and proxychains-ng), Oracle (gcc-toolset-14-binutils, rsync, tar, and thunderbird), Red Hat (buildah, mariadb, mariadb10.11, podman, and tar), SUSE (alloy, apache2, buildah, erlang26, glib2, ImageMagick, kernel, libsoup, pgadmin4, python-tornado6, python3, python312, python313, qemu, webkit2gtk3, and xen), and Ubuntu (webkit2gtk).
Ubuntu 25.04 (Plucky Puffin) will reach end of life on January 15, 2026, after which security updates and official support will no longer be available. Users should upgrade promptly.
Linux hardware vendor StarLabs announced today that its StarBook Horizon Linux-powered laptop is now on sale as a 13-inch Coreboot notebook designed for privacy and …
With some Linux distributions like Fedora Workstation and Ubuntu defaulting to "madvise" Transparent Hugepages (THP) while others like CachyOS and openSUSE defaulting to "always", you may be curious about the madvise vs. always THP difference in modern Linux environments. If so this round of benchmarking is for you in looking at the performance impact of madvise vs. always THP.
Gentoo’s 2025 report outlines stable finances, ongoing migration to SPI, and plans to move development infrastructure away from GitHub toward Codeberg.
Linux News