Puranjay Mohan shared some of the
work he's been doing recently on improving the
performance of read-copy-update (RCU) at the 2026
Linux
Storage, Filesystem, Memory-Management, and BPF Summit; his talk would have
been nice context to have earlier in the day when Harry Yoo and Alexei
Starovoitov l…
William Woodruff, better known online as "yossarian", has published
a blog post to make the case that users should not place their trust
in trusted
publishing:
Trusted Publishing is a mechanism for establishing trust between an
external machine identity (like a CI/CD workflow) and one or more
proje…
At the 2026 Linux Security Summit North America, Eric Biggers spoke about
some of the problems with the kernel's cryptography framework, as well
as the recent progress in adding library APIs to allow developers to
use cryptographic functions without using the traditional crypto
API. He walked throug…
Over on the OpenMandriva
forum, the Linux distribution has reported
sabotage of its repositories by a disgruntled contributor with
administrative credentials. According to "AngryPenguin", an abusive
incident in a distribution Matrix chat led to a user being kicked out of
the chat; that "triggered a…
Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its codebase. [...]
Version
1.97.0 of the Rust programming language has been released. Changes
include using a new symbol-mangling scheme by default, support for denying
warnings in Cargo, and an end to the practice of hiding the linker's output
after a successful build.
Kitty is a terminal
emulator that
runs on Linux, macOS, and the BSDs, which is notable for its speed and features
such as image support and advanced font handling. It is under active development; a
recent major release adds a
new level of mouse support. Here, we will look at some of those features
a…
The 7.2-rc2 kernel prepatch is out for
testing. Linus said: "It's Sunday afternoon, and rc2 is out. Things
look very normal - it's not a small rc2, but it's in line with recent
releases, and slightly smaller than rc2 was in 7.1. Let's see how that all
continues, but so far so good."
Conversations about the kernel's filesystem implementations often involve a
layer called "iomap", but relatively few people can reliably say what iomap
actually is. That is just the kind of gap that LWN exists to fill. In
short, iomap handles the mapping between data in the filesystem space
(ident…
OpenSSH 10.4 has been released. In addition to a number of security
and bug fixes, there are a few notable changes; this release adds
experimental support for a composite post-quantum signature scheme
combining ML-DSA 44 and Ed25519 as described in this
IETF draft. With 10.4, if OpenSSH is compiled …
Greg Kroah-Hartman has announced the release of the 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211, and 5.10.260 stable kernels. Several kernels
in this batch include a
fix for a vulnerability introduced in the 6.0 kernel in IPv6 (CVE-2026-53362),
which could
allow an attacker to escape a conta…
The kernel community (like many other free-software projects) has recently
seen a large influx of patches developed with the assistance of large
language models (LLMs). Those patches tend to come from developers who
were previously unknown to the community. At the moment, though, the
memory-manage…
Aoife Moloney has, on behalf of the Fedora Council, posted an
announcement that the Fedora Council is "proposing we pause the
Community Initiatives process as an official project process"
because it has decided the current process is ineffective. It is also
closing discussion regarding the AI develo…
We were made aware today of an email sent to a reader that was
spoofed to appear to be from LWN. The message claimed, among other
things, that we were providing personal information about the reader
to another site user. As is explained in our privacy policy we do not,
and would not, provide such in…
A few astute observers have noticed that some
content on kernel.org had disappeared and were understandably
concerned. Konstantin Ryabitsev has provided an update via
social.kernel.org:
There was an unfortunate error while changing the kernel.org
primary/secondary mirroring infrastructure, which re…
In August 2025, the CalyxOS privacy-focused
Android distribution announced
that it was pausing all releases while it reworked its
release process, security protocols, and changed its signing keys
following the departure of one of its founders. The project has now announced
that it is "officially bac…
A number of problems related to negative directory entries (dentries) were
the topic of a filesystem-track session at
the 2026 Linux Storage,
Filesystem, Memory Management, and BPF Summit. Negative dentries are
used to indicate that a file of a given name does not exist in a directory;
it is an opt…
The GNU Guix project has announced
three vulnerabilities in the guix substitute utility as well
as a fourth that affects the guix pull and guix
time-machine commands. The impact of the vulnerabilities ranges from remote privilege
escalation to local disclosure of sensitive files.
The remote exploit…
When a BPF program is used to filter or redirect packets in the networking
subsystem, the program will often want to associate data with each packet as it
moves through the kernel. The kernel's
local BPF storage API, which
associates extra data with some kernel objects, provides a way to do that. …
The 7.2-rc1 kernel prepatch is out for
testing. Linus said: "So two weeks have passed, and the merge window is
closed. Things look reasonably normal for this release (knock wood)."
Mageia 10 has been
released with the 6.18 Linux kernel, DNFÂ 5.4.0, RPMÂ 4.20.1,
and an increase in hardware requirements for x86Â 32-bit systems; users now
need a CPU with SSE2 features. See the release
notes for a full list of updates, and the errata page
for known problems.
The Kubernetes project has published a blog
post explaining its AI
policy:
The main problem is that AI has made generating code fast but there
has been very little improvement in maintaining code bases. In this
post, we will highlight the ways the Kubernetes community is adapting
to the world of AI…
The xsnow
application, which generates an animated snowfall effect (and other
pleasant diversions) for X11 desktops, does not seem like an obvious
channel for political statements. Nevertheless, xsnow's maintainer
seems to have included a political protest in the program: an
Easter egg that is trigg…
Linus Torvalds released 7.2-rc1
and closed the 7.2 merge window on June 28; by that time, 13,412
non-merge commits had found their way into the mainline. That makes this
the busiest merge window since the 6.7 development cycle in 2024 (15,418
commits, including 2,800 for the entire bcachefs develop…
Git maintainer Junio Hamano has announced
Git 2.55.0, which has non-merge commits from 100 people; 33 of
those are first-time contributors to the project. LWN recently covered some of
the noteworthy changes in 2.55, including new features for the
experimental "git history" command, addition of the G…
Lisp-like languages have historically led the world in metaprogramming and
flexibility. While many modern languages have adopted the idea of macros,
Lisp-like languages such as
Racket have continued pushing the envelope,
attempting to make macros as easy as possible to incorporate into everyday
pr…
Dee Harris has published a summary
of the recent "fireside chat" featuring Creative Commons founders Hal
Abelson, Lawrence (Larry) Lessig, Molly Van Houweling, and Glenn Otis
Brown. The chat was to mark the 25th anniversary
of Creative Commons and included a look back at its history as
well as a loo…
Linux users who have Secure Boot enabled on
their systems rely on certificates issued by Microsoft to verify the software
used to boot a system is trusted by the user. One of those certificates expired
recently, but that will not cause systems that are able to boot to stop doing
so. There are situat…
The Power Management
and Scheduling in the Linux Kernel Summit, which still goes by the
historical acronym OSPM, was held in Cambridge, UK, in mid-April. As has
become traditional, the presenters at that event have since written
summaries of their sessions, and this work has kindly been made availa…
BPF arenas are areas of memory (potentially shared with user space)
where programs have free reign to build their
own data structures, unburdened by the verifier's bounds checks. Many of those
data structures are potentially usable in multiple programs. Emil Tsalapatis
brought his work on libarena…
Compromised accounts are one of the most common ways that attackers
can sneak malware into the open-source supply chain. One way to
reduce account compromise is for projects to require two-factor
authentication (2FA) or multi-factor authentication (MFA), but that is
easier said than done. However, F…
There is a lot of work going into eliminating exploitable bugs from the
kernel and preventing the addition of new ones. Even if this work is
maximally successful, though, there is no chance that the kernel will be
free of these bugs anytime soon. Thus, there is also ongoing interest in
hardening t…
Version 6.0.0 of the Podman
container-management tool has been released. Notable new features
include the ability to set multiple static IP addresses for
containers, improvements in network isolation that make Podman more
compatible with Docker, changes to the way Quadlet
commands function, many new…
MinIO is
a popular object-storage server that offered compatibility with the Amazon Simple Storage Service (S3)
API. In December 2025, the company behind the project (also named MinIO)
announced
that the project was in maintenance mode and would not accept new changes; it
was archived
completely in…
The Linux Foundation, in a
letter co-signed by a large range of organizations and companies, has
announced the launch of "Akrites", a project to fast-track vulnerability
fixes into projects.
As Akrites works upstream to fix projects at the source, we commit
to support downstream efforts to secur…
The Git v2.55.0-rc2
testing release appeared on June 23, suggesting that the final Git
2.55 release can be expected in the near future. While this Git update
lacks radical new features, it does include a number of improvements that
regular Git users will appreciate, including commands to easily edi…
Lennart Poettering has posted a
list of Mastodon posts about the changes in the systemd v261 release.
The Mastodon format makes the reading harder, but there is a lot of useful
information there.
Writeback is the process of ensuring that dirty pages or folios in the page
cache are flushed to the disk, so that changes to those files are made
persistent. In a filesystem-track session at the 2026 Linux Storage,
Filesystem, Memory Management, and BPF Summit, Jeff Layton wanted to
discuss whethe…
The Power Management
and Scheduling in the Linux Kernel Summit, which still goes by the
historical acronym OSPM, was held in Cambridge, UK, in mid-April. As has
become traditional, the presenters at that event have since written
summaries of their sessions, and this work has kindly been made availa…
The
7.1.2,
7.0.14, and
6.18.37
stable kernel updates have been released; each contains a relatively small
number of important fixes. Note that 7.0 is the end of the 7.0.x series.
Version
2.0 of the FairScan document-scanning app for Android has been
released. The headline feature for this release is the addition of
optical-character-recognition (OCR) support using Tesseract to produce PDFs
with searchable text from scans. FairScan developer Pierre-Yves
Nicolas has written a …
Jan Kara has been working
on cleaning up how buffer
heads are used by some kernel filesystems. In a short
filesystem-track session at the 2026 Linux Storage,
Filesystem, Memory Management, and BPF Summit, he gave an update on
that work and where it is headed. Topics included generic infrastructure…
LWN.netGOLD 8.5tecnologĂaâś“ 5 fuentesđź“Š datosWed, 17 Jun 2026 15:30:12
The Python Software Foundation blog has a post
with a summary of the security-related content at PyCon US 2026 with links to
slides from important sessions. The recordings will be published to
the PyCon US channel on
YouTube, and the post will be updated with links to those videos as
they are made a…
The results
are in for Fedora's F44 election cycle for seats on the Fedora
Council, Fedora Engineering
Steering Committee, Fedora
Mindshare Committee, and EPEL
Steering Committee.
Miro HronÄŤok and Aleksandra Fedorova have won
seats on the council. Neal Gompa, Fabio Valentini, Michel Lind,
Maxwell G,…
Security updates have been issued by AlmaLinux (dracut, podman, postfix, rsync, xorg-x11-server, and xorg-x11-server-Xwayland), Debian (atril, firefox-esr, and nginx), Mageia (libcap, perl, and python-pillow), Oracle (firefox, gstreamer-plugins-base and gstreamer-plugins-good, httpd:2.4, kernel, lib…
How can cloud providers efficiently supply durable virtual block devices? Remote
Direct Memory Access (RDMA) provides a way for servers in a cluster to share
chunks of memory, but there still needs to be a protocol that operates on top of
RDMA to provide the guarantees expected of a block device. T…
Version
4.6 of the Mastodon fediverse platform has been released.
The headliner of this release is Collections, a way to create and
share curated collections of profiles. Part of Mastodon's work
ethos is our commitment to trust and safety, so we've put a lot of
thought and care into the design…
The 7.2 merge window started with the 7.1
kernel release on June 14. As of this writing, just over 7,000
non-merge changesets have been pulled into the mainline for the next kernel
release. Many of the core subsystems have been pulled at this point,
meaning that most of the changes that can be exp…
The Software Freedom
Conservancy (SFC) has announced
the release of its recommendations
for using LLM-backed generative AI systems for FOSS
contributions. The recommendations were created by the SFC and
volunteers from the free-software community.
The recommendations reflect the extremely difficult…
Security updates have been issued by AlmaLinux (mod_http2, postfix, and webkit2gtk3), Debian (bird2, libgd-perl, and libreoffice), Fedora (7zip, ack, hugo, and perl-Mojo-JWT), Mageia (atril, evince, xreader, emacs, lcms2, libgcrypt, libinput, libsndfile, putty, and sudo), Red Hat (openssl and osbuil…
LWN.netGOLD 8.5tecnologĂaâś“ 2 fuentesđź“Š datosTue, 16 Jun 2026 13:22:04
Version
6.7 of KDE's Plasma desktop has been released. Notable changes in
this release include per-screen virtual desktops, faster desktop
switching, introduction of the Union
theming system as a tech preview, as well as many other improvements and bug
fixes. The release is dedicated to Eric Laffoon…
Version
152.0 of the Firefox web browser has been released. Notable
changes in this release include a brand-new look for the Firefox
Settings interface, the ability to disable tracker blocking in private
browsing tabs, a feature to mute browser sound from the address bar,
experimental support for th…
On June 15 at Fedora's Flock conference, held in
Prague, Fedora Project Leader (FPL) Jef Spaleta delivered a short "State of
Fedora" keynote that provided a bit of insight into the status of the
project. Topics included the overall growth for Fedora usage, ways to increase
contributions, and an alar…
Part of running LWN is keeping a list of potentially interesting topics
that may merit the effort to turn into articles. As an experiment, we are
now exposing that list to our subscribers at the
Project Leader and Supporter levels. The hope is that this list will
provide useful insights into what …
Linus has released the 7.1 kernel.
"So it's only Sunday morning back home, but it's Sunday afternoon where
I am right now, so I'm doing the 7.1 release at the regular time -
just not in the regular timezone."
Significant changes in 7.1 include
the removal of support for some old 486-based architec…
Daniel Stenberg has announced
that curl will not be accepting vulnerability reports from July 1
through August 3, unless the submitter has a paid support
contract. He is calling it the "curl summer of bliss".
As previously mentioned, we have been under a huge pressure
for the last four months or so…
Linus Torvalds released
the 7.1 kernel as expected on June 14. This development cycle
brought in a lot of new features — and a lot of new developers as well.
The time has come for our traditional look at where the changes in 7.1 came
from, with a digression into how our community may be changing in…
