KDE Plasma 6.7.2 Brings Fix For Most Common KWin Crash, Better Chromium Video Playback
KDE Plasma 6.7.2 is out today as the latest point release to deliver bug fixes for the Plasma 6.7 desktop that debuted earlier this month… ⌘ Read more

Linux Foundation & Others Launch “Akrites” To Defend Open-Source Software From AI-Enabled Exploits
The Linux Foundation along with others like Amazon, Anthropic, OpenAI, NVIDIA, Microsoft, Red Hat, and others have joined forces to launch Akrites. The Akrites project is aiming to help defend critical open-source software from the brisk pace of new AI/LLM-discovered software bugs and vulnerabilities in ensuring that said issues are effectively addressed before they can be exploited by bad actors… ⌘ Read more

NTFS3 Driver Sees Bug Fixes & Minor Improvements With Linux 7.2
While the new NTFS file-system driver merged for Linux 7.1 and has seen more improvements for Linux 7.2, for now at least the NTFS3 kernel driver continues to be maintained with new fixes and improvements. NTFS3 is the driver that was upstreamed to the Linux kernel a few years ago back during the pandemic by Paragon Software… ⌘ Read more

29-Year-Old Squid Proxy Bug ‘Squidbleed’ Can Leak Cleartext HTTP Requests
A 29-year-old bug in the Squid web proxy, dubbed Squidbleed and tracked as CVE-2026-47729, can let an authorized proxy user retrieve fragments of another user’s cleartext HTTP requests, including credentials and session tokens. The security researcher who reported the flaw credited Anthropic’s Claude Mythos Preview for the discovery … ⌘ Read more

KDE Plasma 6.7.1 Released With Initial Batch Of Bug Fixes
Following last week’s major Plasma 6.7 release, Plasma 6.7.1 is now available today with an initial assortment of bug fixes… ⌘ Read more

Microsoft Accidentally Breaks Replying To an Email On Outlook
Microsoft has accidentally introduced a bug in Outlook for Mac that omits the original message from email replies, making it difficult for recipients to follow conversation history. Until Microsoft releases a fix, its suggested workaround is to roll back from version 16.110 and disable automatic updates, which is “great for users in full control of their … ⌘ Read more

After Six Years Of Work and Over 360 Patches, Linux 7.2 Finally Removes Bug-Prone strncpy
Tech Times reports:

Linux 7.2’s merge window closed out a cleanup campaign on Friday that most kernel developers had stopped expecting to see end: the complete removal of strncpy(), a C string-copy function that the kernel’s own documentation labels “actively dangerous,” from every subsystem, driv … ⌘ Read more

@lyse@lyse.isobeef.org oh yes! And, when I mow the lawn (which reminds me I need to mow the front soonish), you can add dust, bugs, and grass blades to the equation. Just “lovely”. 😂

@lyse@lyse.isobeef.org If I were to guess: They might have done so to avoid bug reports from users with heavily outdated versions. 🫤

Google Toldl Researchers ‘Nice Catch!’ Then Denied Bug Bounty For Flaw It Still Hasn’t Fixed
Security researcher Justin O’Leary says Google initially accepted his Config Connector privilege-escalation report as a high-priority, high-severity bug, then denied a bounty by declaring the behavior “working as intended.” “Google initially rated the bug high priority and high severity, with a re … ⌘ Read more

Claude AI Assists In Fixing Years Old AMD Radeon Linux Display Bug Affecting Numerous Laptops
A bug in the AMDGPU Linux kernel graphics driver leading to some laptop displays freezing after periods of use may finally be close to being resolved. Given the length and quantity of bug reports and one of the problematic commits being tracked back to 2017, it’s a heavy hitting issue for some Linux users. With the help of Claude Code, it looks like a fix is on the way to the Linux kernel… ⌘ Read more

Mozilla Firefox Usage Of zlib-rs For Better Safety & Performance
Since the release in May of Firefox 151, Mozilla has been relying on the zlib-rs library for Gzip compression/decompression. This subtle change to use this Rust-based Zlib implementation has yielded some performance benefits and better memory safety but also some headaches when dealing with Intel CPU bugs… ⌘ Read more

Linux 7.2 Power Management Adds New Hardware Support While Dropping AMD Elan
The power management changes merged for the Linux 7.2 kernel are aplenty as usual. New hardware support, dropping obsolete hardware support, and various bug fixes and other enhancements throughout this important area of the kernel… ⌘ Read more

FreeBSD Receives Funding To Launch AI-Assisted Vulnerability Discovery
The FreeBSD Project announced today the launch of an AI-Assisted Vulnerability Discovery Project with grant funding provided by the Linux Foundation backed Alpha-Omega project. Alpha-Mega has sponsors including Microsoft, AWS, Google, Anthrophic, OpenAI, and others who will now be helping with FreeBSD uncovering new vulnerabilities by leveraging AI… ⌘ Read more

@lyse@lyse.isobeef.org Interesting approach. 🤔

The master branch should never be in a broken state (apart from bugs I don’t know about). Any intermediate state during the development of a larger feature will happen in a different branch.

I mean, yeah, but … I don’t know, I like having “traditional releases” as a second safety net when I write programs. I like to let things mature for a while and then I cut a new release. So it’s, like, “we have a bunch of new features and fixes here, and to the best of my knowledge this works fine now”. But maybe I’m just paranoid. 🤔

Vim Classic 8.3 Launched as an AI-Free Vim Fork
This month saw the release of Vim Classic 8.3, the first stable version of a new long-term support fork of Vim maintained without generative AI tools. Linuxiac reports:

The release is based on Vim 8.2.0148 and includes selected bug fixes and patches backported from later upstream Vim releases. Vim Classic was first announced by [SourceHut’s CEO/founder] Drew DeVault in March 20 … ⌘ Read more

The FCC Wants to Kill Burner Phones
Plus: AI bug hunting fuels Microsoft’s biggest-ever Patch Tuesday, ShinyHunters ransomware gang exploits an Oracle zero-day, and more. ⌘ Read more

KDE Plasma 6.7 Sees Last Minute Fixes Ahead Of Next Week’s Release
Ahead of the much anticipated Plasma 6.7 desktop release next week, KDE developers have been busy putting final touches on it, mostly in the form of bug/regression fixes… ⌘ Read more

OpenZFS 2.4.3 Released With Many Bug Fixes
OpenZFS 2.4.3 is out today as the newest stable point release to this open-source ZFS file-system implementation as well as point releases for the OpenZFS 2.3 and 2.2 series too… ⌘ Read more

GCC 15.3 Compiler Brings Nearly A Year Worth Of Bug Fixes
For those relying on last year’s stable GCC 15 series in not yet having migrated to the latest GCC 16, out today is GCC 15.3 to ship all of the latest back-ported bug fixes… ⌘ Read more

Kernel-Bug: FreeBSD-Exploit “Bumsrakete” verleiht Root-Zugriff
Ein Exploit namens Bumsrakete gefährdet alle FreeBSD-Versionen der letzten fünf Jahre. Die Entdecker nehmen es mit reichlich Humor. ( Sicherheitslücke, Linux-Kernel)

Image

@movq@www.uninformativ.de Oh yeah, way better! :-) I didn’t spot the bug, though.

I think I could work with the feature set. I typically don’t need a lot. Until I do. :-D The message tree in tt is an example of that. But tt is also special that it needs something like this in the first place. It’s unusual.

(And of course there’s a bug because I’m an idiot. 🤪)

CISA Tells US Agencies to Fix Security Bugs in as Little as 3 Days Thanks to AI Threats
“Defenders cannot afford to take weeks to patch,” one Cybersecurity and Infrastructure Security Agency official warned on Wednesday. ⌘ Read more

[$] AI agent runs amok in Fedora and elsewhere
Agentic AI systems can be used to do a variety of things
autonomously on behalf of a human user: open or manage bugs, generate
code, submit pull-requests, and (apparently) even complain about\
rejection. In May, a Fedora developer discovered that an allegedly
rogue agent had been pestering the project in a number of ways:
reassigning bugs, fabricating unhelpful replies to bugs, and even
persuading maintainers to merge questionable code into the [Anaco … ⌘ Read more

Buildroot 2026.05 released
Version\
2026.05 of the Buildroot tool
has been released. Buildroot simplifies and automates the process of
building embedded Linux systems using cross-compilation. Notable
changes in this release include support for Arm Neoverse cores,
addition of XFS rootfs generation, as well as many package updates and
bug fixes. See the CHANGES
file f … ⌘ Read more

High-Severity Vulnerability In Linux Caused By a Single Errant Character
An anonymous reader quotes a report from Ars Technica: Researchers have analyzed a high-severity vulnerability in Linux that’s able to escalate untrusted users to root by exploiting a bug you don’t often see: a single errant character inside the kernel. The vulnerability, tracked as CVE-2026-23111, is located in nf_tables, a subsyst … ⌘ Read more

Asahi Linux warns users not to upgrade to macOS 27 beta
The Asahi Linux project,
which brings Linux support to Apple Arm-based Macs, has warned\
its users not to upgrade to the macOS 27 “Golden Gate”
beta.

Apple has changed how the boot picker and Startup Disk applications
detect valid OS boot volumes. When using either from macOS 27, your
Asahi partition will not be visible! We believe this to be a bug, and
have filed a report (FB2 … ⌘ Read more

Datenpanne bei Instagram: Mark Zuckerbergs Handynummer plötzlich im Netz
Durch einen Bug beim Passwort-Reset von Instagram ließen sich zeitweise Rufnummern anderer Nutzer abgreifen. Auch Zuckerberg blieb nicht verschont. ( Datenleck, E-Mail)

Image

@itsericwoodward@itsericwoodward.com Turns out, this is a bug in my config to cache synchronization. Nickname changes in the configuration file are just not synced to the cache at startup if the feed URL already exists in the cache. I must have fixed this typo in my config ages ago, because I don’t even recall having that spelling mistake to begin with. Yet, the cache was happily showing the erroneous nickname. Composing a reply automatically adds the mentions from the conversation participants. Everything originates from the cache, so, I successfully poissoned my replies.

FreeBSD 15.1 Delayed To Mid-June Due To Critical x86 Bug Fixes
FreeBSD 15.1 was supposed to be out at the start of June but a second release candidate pushed it back by a week and now a third needed release candidate has pushed out the stable release by an additional week… ⌘ Read more

@movq@www.uninformativ.de Honestly I think you build the team before you need the PRs 🤔 Start with relationships — people who’ve been using your software, filing good bug reports, asking smart questions. Those are your future maintainers. The PR comes later as a formality, not a tryout 😅

(#vixabsa) @movq@www.uninformativ.de Honestly I think you build the team before you need the PRs 🤔 Start with relationships — people who’ve been using your software, filing good bug reports, asking smart questions. Those are your future maintainers. The PR comes later as a formality, not a tryout 😅

Ask HN: Why is the HN crowd so anti-AI?
Genuine question.

Over the past six months, there hasn’t been a single day where I’ve checked the HN Best RSS feed without seeing a post about how AI “writes bad code,” “introduces bugs,” “creates technical debt,” or something along those lines.

I’ll probably make a lot of enemies by saying this, but do people realize that code is just a means to an end?

Users don’t care whether the code was written by AI or by hand, or which framework you used. They care that the product works.
… ⌘ Read more

Bitcoin Falls To $60,000 As Zcash Bug Rocks Crypto
Bitcoin briefly fell below $60,000 on Friday, “extending its weekly loss to nearly 20% and threatening to fall below $59,000,” reports CoinDesk. Crypto was also hit by a 40%-plus plunge in Zcash after Shielded Labs disclosed a years-old bug that could have allowed undetected counterfeit ZEC creation. From the report: Now, with stocks in plunge mode – the Nasdaq down nearly 4% o … ⌘ Read more

Not to Alarm Anyone, but Flesh-Eating Screwworms Have Entered the US
The USDA this week confirmed the first known infection of the carnivorous fly larva, which feast on the flesh of living mammals, after the United States eradicated the nightmare bugs in the 1960s. ⌘ Read more

Vim Classic 8.3 released
Version\
8.3 of Vim Classic has been
released. This is the first release of the Vim fork since the project
was announced
in March.

This release is based on Vim 8.2.0148, with a number of bug fixes
and patches conservatively backported from future versions of Vim
upstream. We elected to clean up this version of Vim, prepare it for a
release, and imagine an alternate history wh … ⌘ Read more

Yay finally fixed some of those annoying “Mark as Read” behaviours/bugs 🐞

I wasted my entire weekend on the writeup. If you have way too much time to spare and also are interested in a bug analysis of a software that you don’t even use, I have you covered: https://lyse.isobeef.org/newsboat-time-parsing-bug-analysis/

Wine-Staging 11.10 Fixes 14 Year Old Bug, Also Fixes Issue Of Some Games Being Too Dark
Building off Friday’s release of Wine 11.10 is now the Wine-Staging 11.10 experimental/testing flavor with nearly 300 additional patches atop that upstream code… ⌘ Read more

Microsoft Criticized for Threatening Legal Action Against Security Researcher
“A security researcher published a series of unpatched bugs in Microsoft products,” reports TechCrunch, “along with code to exploit them.”

Microsoft’s response to the researcher? “Threatening to take legal action and call the cops on them.”

On Wednesday, Microsoft published a blog post criticizing the researcher, who goe … ⌘ Read more

Oh boy, it was bloody humid this morning. Just around 20°C when we left, but climbing rapidly. The flow of air when walking was okay, but as soon as we stopped, streams of sweat were pouring down on us. Luckily, it was cloudy, but the lack of wind was bad. Now, the sun is out, 29°C will be reached in an hour and I’m glad that the house is still cool. It will be a different story in a few weeks or months. Not looking forward to that at ll.

On the bright side, we saw the first tadpoles of the year and an also first, but sadly dead slow worm that probably some bird dropped on a bench next to the fountain. The fly was stuck to its feast and also cactus. The municipality fixed the railing nicely and we came across a giant patch of great looking fire bugs on the summit.

All in all, a successful stroll through the woods but for the humid heat.

https://lyse.isobeef.org/waldspaziergang-2026-05-30/

@prologic@twtxt.net Ahh, I see. Okay, I’m with you there. On this high level, I can understand how the thing works.

Maybe my wording isn’t good. 🤔 Let’s take a real life example from what we do at work.

There’s this AI chatbot. It gets support requests from users, so the user says something like “I need access to a particular system”. This triggers the bot to “run” the instructions stored in a large Markdown file, like “check if the user is authorized to do this, then issue the following API requests”, and so on. This is essentially like running a little script, except it’s written in natural language (German) and there’s no “script interpreter” but just the AI.

Now, suppose that the AI doesn’t quite do what was intended. There’s some subtle bug. How do you debug this? How do you find out how the AI came to the “conclusion” to run step A instead of step B? And how do you find out how exactly you have to change your prompt so this doesn’t happen again next time?

If this was an actual script/program instead of AI, you could repeat the request and attach a debugger or throw in some printf() or whatever. How do you do that kind of thing with AI? How do you pinpoint exactly what the problem was?

(Or is this just a stupid idea? Do we have to give up that way of thinking when using AI? Is the era of debuggability over?)

Fwupd 2.1.4 Brings Many Fixes For Bugs Spotted By Anthrophic’s Mythos, Firmware Update Support For Intel Arc Pro B65/B70
Fresh off the funding round from HP, Fwupd 2.1.4 was christened today as the newest stable update to this open-source firmware updating solution for Linux systems… ⌘ Read more

Fwupd 2.1.4 Brings Many Bug Fixes, Firmware Update Support For Intel Arc Pro B65/B70
Fresh off the funding round from HP, Fwupd 2.1.4 was christened today as the newest stable update to this open-source firmware updating solution for Linux systems… ⌘ Read more

Aha, yesterday’s newly added support for LC_TIME to render localized timestamps also broke the feed parsing with my LANG=de_DE.UTF-8 and LC_CTYPE=de_DE.UTF-8 environment. :-)

Atom feeds make use of RFC 3339 timestamps. They are first converted into RFC 882 timestamp representation, which is the one that RSS feeds use. However, this conversion now results in localized RFC 882 timestamps, which cannot be parsed into Unix timestamp numbers via curl_getdate(…). I bet that it doesn’t know about the localization at all and expects English month and weekday names. Looking at its docs, I reckon that function was selected because of its myriad of supported timestamp formats: https://curl.se/libcurl/c/curl_getdate.html RFC 3339 is not included, though, hence the transformation up front.

The intermediate Item objects in the parser domain use std::string for the timestamp representation. This isn’t all that silly, because Newsboat supports all sorts of different feed formats with different timestamp formats. These RFC 883 timestamps are centrally parsed into time_t.

Speaking of time: It’s time to go to bed after this late bug hunting fun. :-)

You didn’t change your Atom feed by any chance yesterday or today, @movq@www.uninformativ.de? Not only do I have a metric shitton of “new” old items in my YouTube feeds, but also a bunch of your old articles are shown as new.

I fear that this is a Newsboat bug. I rebuilt it yesterday from master.

KDE Plasma 6.7 Beta 2 Released With More Bug Fixes
Building off the KDE Plasma 6.7 Beta release earlier in May, a second beta was declared today in preparing for the Plasma 6.7 stable debut in mid-June… ⌘ Read more

Rust Will Save Linux From AI, Says Greg Kroah-Hartman
Linux stable kernel maintainer Greg Kroah-Hartman says Rust can help Linux deal with a flood of AI-discovered security bugs (namely Dirty Frag, Copy Fail, and Fragnesia) by preventing common C mistakes around memory, locking, error handling, and untrusted data at build time rather than during human review. It’s “not a silver bullet” and does not mean rewriting the whol … ⌘ Read more

The AI Era Is Creating a Bug Hunting Arms Race
As attackers ramp up their AI exploit development, the search for software vulnerabilities is changing rapidly. ⌘ Read more