Security updates for Friday
Security updates have been issued by Debian (ffmpeg, gsasl, nodejs, postgresql-15, postgresql-17, python3.9, and thunderbird), Fedora (expat, firefox, freerdp, GitPython, kernel, php, rust-podman-sequoia, rust-rpm-sequoia, rust-sequoia-chameleon-gnupg, rust-sequoia-git, rust-sequoia-keystore-server, rust-sequoia-octopus-librnp, rust-sequoia-openpgp, rust-sequoia-sop, rust-sequoia-sq, and rust-sequoia-sqv), Mageia (awstats, libreoffice, perl-HTTP-Tiny, and tomcat), Oracle (corosync, freerdp, … ⌘ Read more
Rocky Linux Launches Optional Security Repository To Get Important Fixes Sooner
In response to the likes of the Dirty Frag and Fragnesia vulnerabilities, Rocky Linux is introducing an optional security repository for shipping important security updates sooner… ⌘ Read more
Vulkan 1.4.352 Introduces VK_NV_cooperative_matrix_decode_vector
Vulkan 1.4.352 is out today as the latest minor spec update to this Khronos API. Besides just a few fixes/clarifications, there is one new extension and that is a NVIDIA vendor extension for cooperative matrix decode vector support… ⌘ Read more
ROCm 7.0.0 vs. ROCm 7.2.3 Performance On The AMD Radeon AI PRO R9700
With the new System76 Thelio Major workstation review unit having arrived equipped with an AMD Radeon AI PRO R9700 graphics card, I took the opportunity of having the extra RDNA4 workstation GPU to satisfy a curiosity over whether there has been any meaningful performance gains from ROCm 7.0.0 released last year to now with the latest ROCm 7.2.3 stable release. Here are those benchmarks results if you are curious about the impact of just updating the use … ⌘ Read more
Security updates for Thursday
Security updates have been issued by AlmaLinux (gimp, jq, and yggdrasil), Debian (nghttp2 and thunderbird), Fedora (chromium, firefox, freerdp, GitPython, kernel, kernel-headers, krb5, nano, nix, nodejs20, php, python-click, python-django5, SDL2_image, and xen), Mageia (dnsmasq, flatpak, kernel, kmod-virtualbox, kernel-linus, perl-Net-CIDR-Lite, perl-XML-LibXML, and redis), SUSE (dnsmasq, firefox, jupyter-jupyterlab, kernel, krb5, libvinylapi3, log4j, Mesa, mozjs60, NetworkManager, O … ⌘ Read more
I’m pleased to announce that express-twtkpr (my ExpressJS library for hosting, editing, and posting to a twtxt.txt file) continues to crawl towards a full release with another (pre-alpha) update published to NPM. This update includes a whole new plugin system, and even a (little) more documentation. Check it out, if you dare (and use it at your own risk): https://www.npmjs.com/package/express-twtkpr
And speaking of plugins, here’s where the fun’s at: announcing express-twtkpr-core-plugins, a set of 3 plugins for your TwtKpr install: emojiButton, uploadButton, and postToMastodon. Like express-twtkpr, this set of plugins is still in pre-alpha, and lacks documentation, examples, tests, installation flexibility, or polish (so also use them at your own risk). Other than that, they work great: https://www.npmjs.com/package/express-twtkpr-core-plugins
Stay tuned for more! 🤘
[$] LWN.net Weekly Edition for May 14, 2026
Inside this week’s LWN.net Weekly Edition:
Front: Fedora AI; Forgejo “carrot” disclosure; memory-management maintainership; huge THPs; mshare; 64KB base pages; DAMON; direct map.
Briefs: Dirty Frag; Fragnesia; Mythos and curl; killswitch; Debian reproducible builds; KDE investment; Quotes …
Announcements: Newsletters, conferences, security updates, patches, and more. ⌘ Read more
Windows Update Is Getting Automatic Rollbacks For Faulty Drivers
Microsoft is adding a Windows Update feature called Cloud-Initiated Driver Recovery that can automatically roll back faulty drivers to a previously known-good version without waiting for hardware makers or users to fix the problem manually. PCWorld reports: The way faulty drivers work today is that the hardware partner is responsible for pushing … ⌘ Read more
Security updates for Wednesday
Security updates have been issued by AlmaLinux (corosync, freerdp, git-lfs, glib2, jq, kernel-rt, krb5, libpng, libtiff, openexr, and thunderbird), Debian (exim4), Mageia (apache, perl-Gazelle, php, and sed), Slackware (expat), SUSE (assimp-devel, go1.26, libQt6Svg6, python-jupyterlab, raylib, thunderbird, tor, and trivy), and Ubuntu (exim4). ⌘ Read more
NetBSD 11.0-RC4 Comes As Hopefully The Last Release Candidate
In addition to FreeBSD 15.1 releasing in the coming weeks, NetBSD 11.0 is also just around the corner as another prominent and major BSD update. NetBSD 11.0-RC4 is now available for last minute testing with this hoping to be the final release candidate… ⌘ Read more
AMD & Intel Roll Out New Linux Updates For Today’s Patch Tuesday
Today’s Patch Tuesday is a busier one than normal for the quarter. Both AMD and Intel have rolled out new updates for Linux customers among other security disclosures today. Thankfully though the vulnerabilities don’t appear to be too widespread or impactful… ⌘ Read more
FCC Says Foreign-Made Routers Can Get Updates Until 2029
The FCC has softened its ban on foreign-made consumer routers, allowing vendors to keep issuing broader software and firmware updates for devices already in use in the U.S. through at least January 2029. Dark Reading reports: Under the original FCC ruling, foreign manufacturers were permitted to provide only limited maintenance and security patches to US custom … ⌘ Read more
Security updates for Tuesday
Security updates have been issued by AlmaLinux (freerdp, glib2, libsoup3, and openexr), Debian (dnsmasq, p7zip, p7zip-rar, python-authlib, and rails), Fedora (chromium, firefox, httpd, and nss), SUSE (java-25-openj9, krb5, libmodsecurity3, and mcphost), and Ubuntu (imagemagick, linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure-4.15, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm, linux-oracle, linux-azure, linux-azure-fips, linux-oracle, linux-az … ⌘ Read more
Fwupd 2.1.3 Brings Firmware Updating To Modular Smartphones
Fresh off the milestone of Dell and Lenovo becoming premier sponsors of the Linux Vendor Firmware Service (LVFS), there is a new feature release of the Fwupd firmware updating tool for Linux systems… ⌘ Read more
Vulkan 1.4.351 Brings Six New Extensions, Including A Ray-Tracing Improvement
Quietly sneaking out at the end of last week was Vulkan 1.4.351 as the newest spec update to this high performance graphics and compute API… ⌘ Read more
HDMI 2.1 Display Stream Compression “DSC” Also Ready For AMDGPU Linux Driver
At the beginning of the month was the surprise milestone of AMD posting AMDGPU kernel driver patches for HDMI 2.1 Fixed Rate Link (FRL) support. The HDMI FRL patches have since been updated to also enable HDMI 2.1’s Display Stream Compression (DSC) functionality for higher resolutions and higher refresh rates with the open-source AMDGPU driver… ⌘ Read more
Update Your iPhone Now for Better Encrypted Messaging With Android
As part of the iOS 26.5 update, Apple’s Messages app can now encrypt texts between some iPhone and Android smartphones. ⌘ Read more
Redesigned Thelio Major Elevates System76’s All-AMD, Open-Source Linux Workstation
A few weeks back we reviewed the redesigned System76 Thelio Mira with a brand new chassis design and powered by the AMD Ryzen 9000 series. This was an interesting Linux-powered desktop manufactured in Colorado while for those needing a bit more performance, since then the redesigned Thelio Major launched. The new System76 Thelio Major provides an updated Thelio case design like Mira while comes packed with the AMD Ryzen Thread … ⌘ Read more
GNOME’s Help Viewer Updated Due To Flatpak Sandbox Escape Vulnerability
GNOME’s help viewer, Yelp, last year was impacted by a serious security issue for arbitrary file reads. There’s a new vulnerability affecting the GNOME help viewer that led to the Yelp 49.1 release to address a possible Flatpak sandbox escape vector… ⌘ Read more
Security updates for Monday
Security updates have been issued by AlmaLinux (corosync, freeipmi, kernel, and kernel-rt), Debian (corosync, firefox-esr, kernel, lcms2, libpng1.6, linux-6.1, php8.2, php8.4, postorius, pyjwt, and tor), Fedora (dotnet10.0, exim, gnutls, kernel, nextcloud, nodejs22, php, proftpd, prosody, python-pulp-glue, python-requests, rclone, and SDL3_image), Mageia (firefox, nss, rootcerts, openvpn, thunderbird, and vim), Oracle (corosync, freeipmi, gstreamer1-plugins-bad-free, gstreamer1-plugins … ⌘ Read more
Debian Release Team: Debian Must Now Ship Reproducible Packages
With half-way through the Debian 14 “Forky” development cycle, the Debian release team is out with an update this weekend and some big news… ⌘ Read more
Nocturne Is The Latest Music Player For GNOME To Hit v1.0
While since GNOME 48 Decibels is the new audio player of the GNOME desktop, there is no shortage of other GNOME/GTK-aligned music players. Last month was the big Amerbol music player update and there are Lollypop and others. The latest GNOME-aligned music player now hitting the 1.0 milestone is Nocturne… ⌘ Read more
Hyprland 0.55 Released With Lua-Based Configuration, User-Defined Layouts
Hyprland 0.55 is out today as a big feature update for this Wayland-based compositor… ⌘ Read more
FreeBSD 15.1 Beta 2 Brings Updated Zstd, Bug Fixes
FreeBSD 15.1 continues working its way toward a stable release in June. Out today is FreeBSD 15.1 Beta 2… ⌘ Read more
[$] A 2026 DAMON update
The kernel’s DAMON subsystem
provides user-space monitoring and management of system memory. DAMON is
developing rapidly, so an update on its progress has become a regular
feature of the annual Linux Storage,\
Filesystem, Memory Management, and BPF Summit. This tradition
continued at the 2026 gathering with an update from DAMON creator SeongJae
Park covering a long list of new capabilities — tiering, data attribute … ⌘ Read more
Security updates for Friday
Security updates have been issued by AlmaLinux (libsoup and mingw-libtiff), Debian (apache2, chromium, lcms2, libreoffice, and prosody), Fedora (openssl and perl-Starman), Oracle (git-lfs, libsoup, and perl-XML-Parser), Slackware (libgpg, mozilla, and php), SUSE (389-ds, cairo, cf-cli, chromedriver, cri-tools, freeipmi, gnutls, grafana, java-11-openjdk, java-17-openjdk, jetty-minimal, libmariadbd-devel, librsvg, mesa, mozjs52, mutt, nix, opencryptoki, python-Django, python-django, p … ⌘ Read more
An update on KDE’s Union style engine
Arjen Hiemstra has published
an article on the status of the Union project: a
single system to support all of KDE’s technologies used for styling
applications.
The work on Union’s Breeze implementation has progressed to the
point where it is very hard to distinguish whether or not you are
running the Union version. We have also tested with a bunch of
applications and … ⌘ Read more
Security updates for Thursday
Security updates have been issued by AlmaLinux (dovecot, fence-agents, freeipmi, git-lfs, image-builder, kernel, libsoup, osbuild-composer, and python-tornado), Debian (apache2, libdatetime-timezone-perl, lrzip, tzdata, and wireshark), Fedora (dovecot, forgejo-runner, gh, gnutls, krb5, nano, pdns, pyOpenSSL, squid, vim, and xorg-x11-server-Xwayland), Mageia (graphicsmagick, kernel-linus, krb5-appl, libexif, libtiff, nano, nginx, ntfs-3g, opam, perl-Net-CIDR-Lite, perl-Starlet, perl-Starma … ⌘ Read more
Three stable kernel updates
The
7.0.4,
6.18.27, and
6.12.86
stable kernels have been released; each contains another set of important
fixes. ⌘ Read more
[$] LWN.net Weekly Edition for May 7, 2026
Inside this week’s LWN.net Weekly Edition:
Front: LLMs and security; restartable sequences and TCMalloc; Fedora and GNOME bug reports; Prolly trees; Arm on s390.
Briefs: NHS open source; Alpine outage; GCC 16.1; Incus 7.0 LTS; NetHack 5.0.0; PHP license; Quotes; …
Announcements: Newsletters, conferences, security updates, patches, and more. ⌘ Read more
Google’s AI Search Results Will Now Turn To Reddit For ‘Expert Advice’
Google is updating AI Overviews and AI Mode to more prominently surface “Expert Advice” from public discussions, social platforms, forums, blogs, and Reddit. Engadget reports: Via a new “Expert Advice” section that can appear in AI responses, Google will display “a preview of perspectives from public online discussions, social media and … ⌘ Read more
ReactOS Unifies Installation Media, Introduces GUI Installer and New ATA Driver
jeditobe writes: Developers of ReactOS told Phoronix that the project has introduced a unified BootCD, replacing its previously separate installation media and LiveCD images. The new image combines the traditional text-mode installer with a LiveCD mode in a single medium. Within this unified BootCD, the updated LiveCD … ⌘ Read more
Dell & Lenovo Now Sponsoring The Linux Vendor Firmware Service
Dell and Lenovo have stepped up to become premier sponsors for the Linux Vendor Firmware Service (LVFS) that provides for seamless system firmware and device/component firmware updating under Linux with the Fwupd client… ⌘ Read more
Security updates for Wednesday
Security updates have been issued by AlmaLinux (corosync, dovecot, image-builder, python-tornado, resource-agents, and systemd), Debian (openjdk-11, openjdk-17, and pyjwt), Fedora (pdns, pyOpenSSL, and squid), Slackware (hunspell), SUSE (alloy, avahi, bubblewrap, cmctl, coredns, curl, dpkg, firefox, golang-github-prometheus-prometheus, grafana, libpng12, PackageKit, sed, and xen), and Ubuntu (docker.io-app, nghttp2, python-django, and python-mako). ⌘ Read more
Flatpak 1.17.7 To Track The Age Of Configurations For Providing Much Better Performance
Flatpak 1.17.7 is now available for continuing to advance open-source app sandboxing and distribution on the Linux desktop. Some interesting new features are in tow with this Flatpak update plus there is also an updated XDG-Desktop-Portal release too… ⌘ Read more
Rusticl Driver Ready To Go With OpenCL 3.1 Working On Radeon, Zink/Vulkan
The Khronos Group today announced OpenCL 3.1 as the first major spec update in six years and incorporating various features into the core spec for enhancing AI and HPC capabilities. As a very exciting development, Rusticl as Mesa’s lead OpenCL driver implementation is ready to go with same-day OpenCL 3.1 support pending… ⌘ Read more
VS Code Update Added Copilot As Default Co-Author To Git Commits
Longtime Slashdot reader UnknowingFool writes: On April 15, 2026, a Microsoft employee made a change to Visual Studio Code and pushed it within 8 hours without review, notification, or documentation. The change added “Co-authored-by: Copilot” by default to the end of commit messages in Git when Copilot was used in creating the code. However, the imple … ⌘ Read more
Security updates for Tuesday
Security updates have been issued by AlmaLinux (kernel, kernel-rt, libcap, LibRaw, openssh, thunderbird, and tigervnc), Debian (libarchive and lxd), Fedora (chromium, insight, nodejs20, rust-sequoia-git, and uriparser), Mageia (kernel, kmod-virtualbox), Oracle (kernel, libcap, thunderbird, and uek-kernel), Red Hat (.NET 10.0, .NET 8.0, .NET 9.0, fence-agents, sudo, and systemd), Slackware (httpd), SUSE (freerdp, hauler, helm, himmelblau, kernel, libspectre, thunderbird, tri … ⌘ Read more
ROCm 7.2.3 Brings Minor Updates, ROCm XIO Documentation
Less than one month after releasing ROCm 7.2.2, the ROCm 7.2.3 is now available with some minor improvements to this open-source AMD GPU compute and AI stack… ⌘ Read more
Omarchy 3.7 Linux Distribution Overhauls Gaming Support, Adds Unified CLI
Omarchy as the Arch Linux based desktop distribution using the Hyprland compositor and led by David Heinemeier Hansson “DHH” is out with a big OS update… ⌘ Read more
Security updates for Monday
Security updates have been issued by AlmaLinux (kernel, libcap, libtiff, sudo, and thunderbird), Debian (dovecot, imagemagick, incus, kernel, libexif, linux-6.1, openjdk-25, pyasn1, python-aiohttp, and thunderbird), Fedora (chromium, firefox, GitPython, glibc, insight, krb5, nano, nss, openssh, openvpn, perl-CryptX, python3.14, rust-openssl, rust-openssl-sys, rust-sequoia-git, and xen), Oracle (dtrace, fence-agents, grafana-pcp, libcap, libtiff, sudo, and xorg-x11-server-Xwayland), **Red Ha … ⌘ Read more
CachyOS Switches Python To Using Tail-Call Interpreter For 5~15% Better Performance
CachyOS is a very fast out-of-the-box Linux distribution and for those concerned about Python performance, the newest updates to this Arch Linux based distribution will provide even better performance… ⌘ Read more
NetHack 5.0 Released
“So yesterday the Devteam (it is always the Devteam) released version 5.0 of legendary and venerable rogueike compuer game NetHack,” writes the Rogue-like games column @Play. “It is 39 years old…”
MilenCent (Slashdot reader #219,397) writes: In addition to play changes it’s left for players to discover, this version updates the code to compile with C99, makes it much easier to cross compile the code for other systems than the one … ⌘ Read more
EndeavourOS “Trtion” To Ship New Desktop/WM Options, Titan Neo Brings Various Updates
In addition to today’s monthly ISO refresh of Arch Linux that is now pulling in the Linux 7.0 kernel and other updates, the downstream EndeavourOS also happens to be out with a new ISO release for starting the month of May… ⌘ Read more
Vulkan 1.4.350 Released With Three New Extensions
Vulkan 1.4.350 released earlier today as the newest routine spec update. Beyond the usual minor fixes/clarifications, Vulkan 1.4.350 tacks on three more extensions… ⌘ Read more
Security updates for Friday
Security updates have been issued by AlmaLinux (fence-agents), Debian (chromium, dovecot, and kernel), Fedora (chromium, dotnet10.0, dotnet8.0, dotnet9.0, emacs, glow, jfrog-cli, openbao, pyp2spec, python3.6, rust-rustls-webpki, vhs, and xen), Oracle (grafana, grafana-pcp, PackageKit, sudo, vim, and xorg-x11-server), Red Hat (rhc), SUSE (avahi, bouncycastle, chromium, container-suseconnect, firewalld, gdk-pixbuf, grafana, java-25-openjdk, kernel, libixml11, libmozjs-140-0, libpng12- … ⌘ Read more
AerynOS Updated With Linux 7.0, Gaming Optimized Kernel Flavor
AerynOS, the Linux distribution formerly known as Serpent OS, is out with a new monthly ISO refresh and details on other recent improvements to this original, from-scratch Linux distribution… ⌘ Read more
Security updates for Thursday
Security updates have been issued by AlmaLinux (buildah, firefox, gdk-pixbuf2, giflib, grafana, java-1.8.0-openjdk, java-21-openjdk, LibRaw, OpenEXR, PackageKit, pcs, python3.11, python3.12, python3.9, sudo, tigervnc, vim, xorg-x11-server, xorg-x11-server-Xwayland, yggdrasil, and yggdrasil-worker-package-manager), Debian (calibre, firefox-esr, and openjdk-17), Fedora (asterisk, binaryen, buildah, dokuwiki, lemonldap-ng, libexif, libgcrypt, miniupnpd, openvpn, podman, python3.9, rust-rpm-sequo … ⌘ Read more
[$] LWN.net Weekly Edition for April 30, 2026
Inside this week’s LWN.net Weekly Edition:
Front: Famfs; Python packaging council; Zig concurrency; pages and folios; Strawberry music manager; 7.1 merge window.
Briefs: GnuPG 2.5.19; Copy Fail; Plasma security; Fedora 44; Ubuntu 26.04; Niri 26.04; pip 26.1; RIP Seth Nickell; RIP Tomáš Kalibera; Quotes; …
Announcements: Newsletters, conferences, security updates, patc … ⌘ Read more
Security updates for Wednesday
Security updates have been issued by AlmaLinux (firefox, gdk-pixbuf2, java-17-openjdk, libxml2, python3, python3.11, python3.12, sudo, and webkit2gtk3), Debian (dnsdist, node-tar, pdns, pdns-recursor, and policykit-1), Fedora (chromium, edk2, and vim), Oracle (firefox, gdk-pixbuf2, go-toolset:rhel8, libpng12, LibRaw, libxml2, python, python3, python3.11, python3.12, python3.12-wheel, vim, webkit2gtk3, xorg-x11-server, xorg-x11-server-Xwayland, yggdrasil, and yggdrasil-worker-package-mana … ⌘ Read more