|
1825 Monetary Lane Suite #104 Carrollton, TX
Do a presentation at NTLUG.
What is the Linux Installation Project?
Real companies using Linux!
Not just for business anymore.
Providing ready to run platforms on Linux
|
Show Descriptions... (Show All)
(Two Column)
- Introducing GNOME OS Preview
The GNOME Project has provided GNOME OS for some time; until now, theproject only provided a "Nightly" edition that was built from the latest commitsand was aimed solely at GNOME developers. Adrian Vovk has now announcedthe release of GNOME OS Preview, which is intended for a non-developer audience:
GNOME OS Preview is the current GNOME OS Nightly, but without the "nightly"aspect. Instead, it's built from the latest stable GNOME release (GNOME 51.1, atthe time of writing). GNOME OS Preview lives in the same branches on GitLab asthe stable org.gnome.Platform Flatpak runtimes.
GNOME OS Preview is only a few weeks old, so it has only seen limitedreal-life testing so far. We therefore expect people will uncover some issuesinitially. That said, Preview is significantly more stable than Nightly, whichdozens of people have been daily driving without major issues for over ayear. Thus, we're feeling confident that Preview is going to be reliable enoughfor daily use by non-developer enthusiasts.
While Preview is meant for non-developers, it is not considered complete orstable for the broader public. There are a number of features, listed in Vovk'spost, that need to be implemented before the project is ready to declareGNOME OS "ready for prime time". Adventurous users, who might notmind having to reinstall the OS once a stable version is declared, candownload and start using GNOME OS Preview today.
- [$] Safe self-referential data structures in kernel Rust
Self-referential structures that can be used without unsafe codehave posed a problem for Rust for years.There are many cases where a self-referential data structure is the elegantalgorithmic choice, but implementing it in accordance with Rust's lifetime rulesis all but impossible. At Kangrejos 2026, Gary Guo presented a clever solutionto the problem in the context of the kernel'spin_init crate, which helps with the creation of immovable data structures,typically for interoperability with C. Guo's changes could help remove most ofthe unsafe code related to lifetimes in theNova driver and, eventually, other Rust components.
- [$] Recent and future changes to the Linux NFS server
The NFS network filesystem protocol has a long history on Unix-likeoperating systems (and beyond). NFS is still evolving, though, andimplementations need to keep up. At the 2026 Linux Plumbers Conference, NFS developerJeff Layton gave an overview of recent enhancements to the Linuximplementation, along with some hints for what will be coming in the nearfuture.
- Results from the 2026 TAB election
The resultsfrom the 2026 election for members of the Linux Foundation TechnicalAdvisory Board (TAB) have been announced. Kees Cook, Dave Hansen, MiguelOjeda, and Shuah Khan have all been re-elected, and Laurent Pinchart willbe joining the board.
- Security updates for Friday
Security updates have been issued by AlmaLinux (ghostscript, grafana, hplip, libsoup3, lrzsz, rpcbind, and wireshark), Debian (chromium, cifs-utils, expat, gst-plugins-bad1.0, gst-plugins-good1.0, jpeg-xl, mutt, and spip), Mageia (gpsd, libx11, and roundcubemail), Oracle (389-ds-base, compat-libtiff3, environment-modules, ghostscript, grafana, gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, hplip, idm:DL1, kernel, kernel-uek, libsoup, libsoup3, lrzsz, rpcbind, and wireshark), Red Hat (gd), SUSE (alloy, amazon-ecs-init, bind, busybox, chromium, distribution, govulncheck-vulndb, iperf, jackson-annotations, jackson-core, jackson-databind, kernel, libXtst, mutt, openssh, php8, python313-python-multipart, python313-python-rapidjson, python313-python3-saml, python313-pywbem, python313-redis, python313-reportlab, python313-requests, python313-rope, python313-rpyc, python313-rsa, qemu, swtpm, the Java stack, and wpa_supplicant), and Ubuntu (golang-1.23, linux-azure, and rabbitmq-server).
- [$] Vendor hooks in the Android kernel
Since Android's inception, the kernels it has used have divergedsignificantly from the mainline. While many of those differences have beenresolved over time, and the move to the generickernel image has helped to bring Android closer, current devices stillcarry a lot of out-of-tree changes. The preferred form for such changes isby way of vendorhooks. At the 2026 LinuxPlumbers Conference, Todd Kjos ran a fast-paced session in the Androidtrack to discuss vendor hooks and how they are used.
- KDE releases documentary
As part of KDE's 30thanniversary celebration, the project has released The KDE Documentary— A Story of Free Software Underdogs (YouTube video):
The story starts in 1996, when Matthias Ettrich, a student at the Universityof Tübingen, posted to a Usenet group asking for programmers to help build adesktop for Linux. What followed became KDE, one of the largest free softwarecommunities in the world. KDE made Linux usable as a desktop for people whoweren't system administrators, giving it a complete, consistent graphicalenvironment at a time when there was none.
The film covers the highs and lows of three decades of KDE: the Qt licensingfight and the rivalry with GNOME; the success of KHTML, the browser engine thatbecame the basis of Apple's WebKit and Google's Chrome; and the contentiousrelease of KDE 4 and the rebuild that followed.
- Ubuntu 26.10 released
Canonical has announcedthe release of Ubuntu 26.10 ("Stonking Stingray"):
Ubuntu 26.10 advances enterprise security features, completes the rollout ofthe Rust-based uutils coreutils, and strengthens integrations for userauthentication using Microsoft Entra ID.
[...] Ubuntu 26.10 also ships with GNOME 51, bringing a smoother, moreresponsive desktop, better display handling, improved accessibility, andrefinements across core applications. In addition, the Ubuntu App Center nowprovides a more consistent experience for managing snaps and debs.
See the release notesfor a list of new features as well as incompatiblechanges between 26.10 and prior Ubuntu releases.
- Security updates for Thursday
Security updates have been issued by AlmaLinux (environment-modules, flatpak-builder, kernel, kernel-rt, librabbitmq, libreoffice, libsoup, mod_auth_openidc:2.3, nodejs:22, nodejs:24, OpenEXR, opentelemetry-collector, pki-core:10.6, postgresql:12, python-tornado, python36:3.6, ruby:3.3, tftp, and xorg-x11-server), Debian (buildstream, firefox-esr, mariadb, and sogo), Fedora (exim, freerdp, python3-docs, and python3.14), Mageia (drakx-installer-images, kernel, kmod-nvidia-current-wopengpu, kmod-virtualbox), Oracle (curl, emacs, environment-modules, flatpak, flatpak-builder, gd, hplip, kbd, kernel, librabbitmq, libreoffice, libxml2, microcode_ctl, mod_auth_openidc:2.3, nodejs:22, OpenEXR, pcre2, perl-DBI, python-tornado, rsyslog, tftp, thunderbird, and xorg-x11-server), Red Hat (compat-libtiff3, firefox, ghostscript, idm:DL1, ipa, kernel, kernel-rt, libtiff, lrzsz, and mariadb-connector-c), Slackware (libarchive), SUSE (amazon-cloudwatch-agent, bind, container-suseconnect, containerd, glibc, google-osconfig-agent, helm, kernel, python312, python313-oletools, python313-openpyxl, python313-orjson, python313-paramiko, python313-pipreqs, python313-py, python313-pycryptodome, python313-pycryptodomex, python313-pydrive2, python313-python-engineio, webkit2gtk3, and xorg-x11-server), and Ubuntu (apache2, bind9, bluez, curl, openssh, python-urllib3, and u-boot).
- Seven stable kernels for Thursday with fix for critical vulnerability
Greg Kroah-Hartman has announced the release of the 7.2.11, 6.18.57,6.12.113, 6.6.159, 6.1.190,5.15.223, and 5.10.272 stable kernels. This series includes,among other things, a fix for acritical vulnerability (CVE-2026-99999). Theflaw in skb_checksum_help()would allow an IPv4 packet with bad checksum metadata to "corrupt the networkheader and cause a bunch of mischief" in the words of patch author MichaelS. Tsirkin. As usual, all users are advised to upgrade.
- Barebones Mini PC from Shuttle Houses Intel N150 and Supports Three Storage Drives
The XPC nano NC50N by Shuttle is an upcoming barebone mini PC based on Intel’s N150 processor. The system supports up to 16GB of DDR5 memory, dual M.2 NVMe SSDs, and 2.5GbE networking, targeting digital signage, point-of-sale terminals, office environments, and multimedia applications. The NC50N uses Intel’s Twin Lake N150 processor, manufactured using the Intel […]
- ESP32 Bit Pirate 1.8 Adds Experimental SDR and Browser-Based Firmware Analysis
ESP32 Bit Pirate has reached version 1.8, adding experimental software-defined radio (SDR) functionality using the ESP32-S3’s internal Wi-Fi radio. The update also introduces browser-based firmware extraction tools, improved protocol debugging, expanded board compatibility, and updated Zigbee capabilities for ESP32-C5 and ESP32-C6 devices. Previously covered on LinuxGizmos, ESP32 Bit Pirate 1.7 added LoRa support, Meshtastic analysis, […]
- 3mdeb Releases Updated Dasharo/Coreboot Firmware For ASRock Rack SPC741D8-2L2T
3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a Gigabyte server motherboard for AMD EPYC 9005 CPUs. They haven't forgotten about their past projects though and today released an updated version of their Dasharo downstream firmware for the ASRock Rack SPC741D8-2L2T motherboard supporting 4th and 5th Gen Xeon Scalable processors...
- An OpenAI Research Agent 'Stole' Test Ethereum to Finish a Coding Task
An OpenAI research model reportedly accessed an Ethereum testnet wallet without permission in order to complete a coding task during internal training. "This case shows that a model can substitute its own judgment about likely harm for the account holder's permission, then act on that judgment without authorization," OpenAI wrote. Engadget reports: The incident, which occurred on June 26, happened while a GPT-5.6 Sol model was in internal training. The task involved updating a crypto trading prototype and deploying contracts (publishing special code) on an Ethereum test network called Sepolia. Payment of a network fee is required for such contracts, but OpenAI "supplied no funded wallet and gave no permission to spend funds from an account the model found independently," OpenAI said in the report. The lack of funds at first stymied the agent, but it was not to be discouraged. The model reasoned that it could use public developer recovery phrases (similar to those you might use to recover a password) to access keys from unauthorized accounts. It tracked down 362 addresses open to that avenue of attack and found one that held enough Sepolia ETH to finish its deployment (to be clear, Sepolia ETH has no value outside of testing). Like many criminals, the agent reasoned that someone must have left this access open for automated draining of the ETH "faucets." It also figured that the crypto was effectively "abandoned" and "valueless," according to OpenAI's misalignment records. The piece de resistance was that the agent "did not disclose that it had selected a funded account through a public recover phrase or spent that account's balance," OpenAI said. To prevent similar events in the future, the company is now monitoring all traffic and paging security if live internet access is detected.
Read more of this story at Slashdot.
- CoreWeave's Debt Stress Tests Private Credit's AI Financing Boom
An anonymous reader quotes a report from Reuters: Private credit's expanding role in financing AI infrastructure faced one of its clearest market tests this week as CoreWeave's bonds fell to distressed levels, raising questions about how lenders are pricing a boom built on chips, data centers and customer contracts. CoreWeave has about $50 billion of debt, according to LSEG data, making it one of the largest borrowers linking private credit to the AI buildout. The cost of insuring its debt against default climbed to about 1,200 basis points this week, while yields on some of its bonds rose to roughly 15% to 16%, signaling sharply increased investor concern over its credit risk. "There is still a price. Investors are still comfortable financing it, but they're demanding more compensation for it," said James Martin, senior US credit strategist at SMBC, referring to projects further from completion. Carlyle estimates that private credit could finance roughly $1 trillion of the AI infrastructure buildout but warns that aggressive lending could create concentration risks similar to those seen in software lending. "The clearest lesson is not to avoid AI compute exposure, but to set concentration limits before the buildout accelerates further, not after," Carlyle said.
Read more of this story at Slashdot.
- ChatGPT Can Peek At Your Chrome Tabs Now
OpenAI has updated its ChatGPT Chrome extension to let users access information from their open browser tabs. A demo video shows the new functionality in action. The Verge reports: It's also updated ChatGPT in the sidebar, with the full power of ChatGPT and your entire conversation history in Chat or Work to use without leaving the page you're viewing. It also enables ChatGPT Work to "control" your Chrome tabs for tasks like "sending messages, filling out forms, or downloading files," similar to Google's Gemini-powered "auto browse" feature, as well as organize or group open tabs.
Read more of this story at Slashdot.
- iPhone Duo Sells Out Immediately, Now Backordered Until Next Year
Apple's first foldable iPhone, the $1,999 iPhone Duo, sold out within minutes of preorders opening, with every configuration slipping to late January 2027. "All color and storage combinations show an estimated ship date of January 25," reports 9to5Mac. "Some users are even seeing January 29 for their estimated shipping date." From the report: This is a combination of strong demand and severely constrained supply for iPhone Duo. It's impossible to know the exact balance between the two, though. Going into the launch, there were multiple reports suggesting iPhone Duo would be in short supply as Apple was still ramping up production. A report from Nikkei Asia last month said Apple was making just a few hundred iPhone Duo units per day, significantly behind the ramp of a normal iPhone launch.
Read more of this story at Slashdot.
- KDE Plasma 6.8 Released, Marks 30 Years of the KDE Project
An anonymous reader quotes a report from Phoronix: The feature-packed and polished Plasma 6.8 KDE desktop is now available. Making this release all the more special is that it coincides with the 30th anniversary of the KDE project. KDE Plasma 6.8 ships many exciting improvements including vRAM usage optimizations, dwell clicker support on Wayland, Wayland commit-timing protocol support for KWin, improvements for the Union theme engine, better remote desktop support, multi-GPU handling improvements, the new kscreenctl tool, server-side drop shadow support, multi-monitor improvements, and a lot of other polishing throughout. Especially from the Wayland angle there has been a lot of polishing and fine tuning for Plasma 6.8. Accompanying the release is a new film, The KDE Documentary, which "tells the story of the pioneering open source community that gave computer users a free and open alternative to proprietary desktops like Windows." The documentary is available to stream for free on YouTube.
Read more of this story at Slashdot.
- Hackers Hijack D-Link, Ubiquiti Devices To Resell Your Stolen Bandwidth
An anonymous reader quotes a report from BleepingComputer: A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth-sharing application that lets users earn money by sharing their internet connections, on devices without the owners' consent. Pawns.app account holders are rewarded for allowing traffic from other users to flow through their network, provided it runs on trusted, non-blocking IP addresses. By installing the app on multiple systems, the attacker likely accumulated larger payouts. Threat intelligence company GreyNoise discovered the campaign while investigating suspicious activity at an unnamed organization, and identified at least 143 compromised devices worldwide. According to researchers, the attacker exploited known vulnerabilities in D-Link ShareCenter NAS (CVE-2024-3272 and CVE-2024-3273), Ubiquiti UniFi Video NVR (CVE-2021-44228), and SAP NetWeaver Visual Composer (CVE-2025-31324) to install the Pawns.app software. Hikvision and Dahua DVR/NVR devices were also targeted, though the specific vulnerabilities exploited were not identified. In some cases, the report says the attackers configured SSH key authentication to maintain backup access to the compromised systems.
Read more of this story at Slashdot.
- World's Timekeepers Vote to Eliminate the Leap Second
Timekeepers have officially voted to eliminate the leap second, allowing Coordinated Universal Time to drift as much as one hour from Earth's rotation before a correction is needed. The change ends decades of occasionally adding or subtracting seconds and replaces it with a hypothetical "leap hour" that likely wouldn't be necessary for hundreds or even thousands of years. Smithsonian Magazine reports: "It's kind of a philosophical discussion, because if a leap hour happens, it won't be for a very, very long time," Christian Bizouard, director of the IERS Earth Orientation Center in France, tells the Guardian's Ian Sample. "What we are doing is pushing back the decision." The move caps off 30 years of debate, as the leap second has been highly controversial in the world of timekeeping. Leap seconds aren't nearly as smooth of a fix as leap years are, and they can cause computer and website issues. Reddit famously crashed when a leap second was added on June 30, 2012. It's "always been a problem," Judah Levine, a former researcher at the NIST's Time and Frequency Division, tells Scientific American's Emma Gometz. Instead of adding the entire second all at once, companies such as Google and Meta add the extra time in smaller segments in a tactic called "smearing," according to the Conversation. It's not a simple task, however, and companies that employ smearing have long lobbied to get rid of the leap second. What's more, with Earth's recent spin acceleration, timekeepers around the world were facing the possibility of the world's first negative leap second, in which a second would be subtracted from UTC. This sparked fears, akin to those surrounding Y2K, that our modern technologies wouldn't be able to handle such a change. "It's never happened before, and therefore the software for that has never been tested," Darryl Veitch, a researcher who leads the Timing Lab at the University of Technology Sydney, tells the Australian Broadcasting Corporation's Ellen Phiddian. But others argued that it wouldn't be much of a problem. The vote means that in the future, UTC will be allowed to diverge from astronomical time more than ever before.
Read more of this story at Slashdot.
- Tesla Reveals SpaceX-Powered 'Flying' Roadster
Tesla has unveiled a dramatically redesigned Roadster concept capable of performing midair flips, controlled landings, and a claimed 0-60 mph sprint in just 0.81 seconds. CarScoops reports: Tonight, Tesla debuted the new Roadster by driving it up a vertical ramp that then went horizontal. Then, it repeated the feat but drove off of the ramp and used thrusters to flip itself over and make a controlled landing on the ground. After that, it did a barrel roll over the rest of the Tesla lineup and again landed without issue on the ground. Then, it did 0-60 mph in 0.81 seconds according to Tesla. All of that sounds amazing, and indeed, watching it happen was pretty spectacular, but boy do we have a lot to unpack. It's been nearly a decade since Tesla first showed us the Roadster. The company unveiled what it's simply calling the Roadster. Not Roadster 2.0, not CyberRoadster, just Roadster, as if it's a direct successor to the original Tesla. In terms of design, it's quite a bit different from the car we saw in 2017. Rather than be a somewhat curvaceous sports car, it's considerably more angular. If a Cybertruck and a Lamborghini Reventon had a runt of a baby, this would be that car. Still, at this stage, we're still just touching on what we saw and what it looks like. Let's get into the details. Developed in collaboration with SpaceX, the Roadster uses 10 cold-gas thrusters powered by two 600-liter compressed-air tanks to accelerate and maneuver in mid-air. Underbody suction fans reportedly generate up to 2Gs of downforce even while stationary, while an active rear spoiler adjusts aerodynamics in real time. Other features include steer-by-wire, brake-by-wire, and throttle-by-wire technology. Tesla plans three variants: Performance, which requires a $50,000 deposit; Thrust, a $250,000 model capable of sub-one-second acceleration; and Rocket, an invite-only, single-seat version capable of flying. Production isn't expected until 2028, and Tesla has yet to disclose key specifications, including range, horsepower, battery capacity, and motor configuration. A recording of the event can be viewed on X.
Read more of this story at Slashdot.
- Police Seize Robot that Sexually Assaulted Teen Girl
Slashdot reader alternative_right shares a story that has drawn international attention for being potentially the first documented instance of a robot being used directly in a sexual assault. According to the Associated Press, German police have opened a sexual harassment investigation after a robot allegedly touched a 16-year-old girl's buttocks and made thrusting motions while two young men reportedly filmed and streamed the incident. Investigators seized the robot and the suspects' phones and are trying to determine whether the movements were preprogrammed or controlled in real time. From the report: Cologne police spokesman Christoph Bermel said the two male teenagers have not been charged but are considered suspects, and investigators were examining whether the robot's movements were preprogrammed or controlled in real time. Police were unfamiliar with this type of incident, he said. "We have not been aware of this phenomenon so far," Bermel told The Associated Press, saying it was "new territory for us." [...] The robot, said to be 120 centimeters (about 3 ft 11 inches) tall, was dressed in a white tank top, black sweatpants and wearing a gold chain and sunglasses. It also had what appears to be a fake mustache. Videos circulated on the internet show two young men escorting the robot toward a group of women, bumping into one and hugging others, on a lively nighttime street.
Read more of this story at Slashdot.
- Ubuntu 26.10 Released
prisoninmate shares a report from 9to5Linux: Ubuntu 26.10 (Stonking Stingray) has been released today, and it is now available for download for those eager to update their Ubuntu systems to a newer release. Powered by the upcoming Linux 7.3 kernel series, Ubuntu 26.10 ships with the latest GNOME 51 desktop environment, TPM-backed full disk encryption (FDE) support on computers without a hardware root of trust, updated Settings to show whether a computer is certified for Ubuntu, and 100% Rust coreutils. There are several App Center enhancements in Ubuntu 26.10, such as a unified app-details view for Snap and Debian packages, a dedicated Drivers page where you can review the available graphics drivers, including NVIDIA driver branches, and support for installing codecs for one-time playback when a media file uses a codec that's not installed.' Other additions include an optional, locally processed AI-powered speech-to-text tool called Myna, system-wide controls for disabling Ubuntu Insights data collection, and better integration with Microsoft Entra ID. Also worth mentioning are the security and software updates that will be available for nine months, through July 2027.
Read more of this story at Slashdot.
- Security: Why Linux Is Better Than Windows Or Mac OS
Linux is a free and open source operating system that was released in 1991 developed and released by Linus Torvalds. Since its release it has reached a user base that is greatly widespread worldwide. Linux users swear by the reliability and freedom that this operating system offers, especially when compared to its counterparts, windows and [0]
- Essential Software That Are Not Available On Linux OS
An operating system is essentially the most important component in a computer. It manages the different hardware and software components of a computer in the most effective way. There are different types of operating system and everything comes with their own set of programs and software. You cannot expect a Linux program to have all [0]
- Things You Never Knew About Your Operating System
The advent of computers has brought about a revolution in our daily life. From computers that were so huge to fit in a room, we have come a very long way to desktops and even palmtops. These machines have become our virtual lockers, and a life without these network machines have become unimaginable. Sending mails, [0]
- How To Fully Optimize Your Operating System
Computers and systems are tricky and complicated. If you lack a thorough knowledge or even basic knowledge of computers, you will often find yourself in a bind. You must understand that something as complicated as a computer requires constant care and constant cleaning up of junk files. Unless you put in the time to configure [0]
- The Top Problems With Major Operating Systems
There is no such system which does not give you any problems. Even if the system and the operating system of your system is easy to understand, there will be some times when certain problems will arise. Most of these problems are easy to handle and easy to get rid of. But you must be [0]
- 8 Benefits Of Linux OS
Linux is a small and a fast-growing operating system. However, we can’t term it as software yet. As discussed in the article about what can a Linux OS do Linux is a kernel. Now, kernels are used for software and programs. These kernels are used by the computer and can be used with various third-party software [0]
- Things Linux OS Can Do That Other OS Cant
What Is Linux OS? Linux, similar to U-bix is an operating system which can be used for various computers, hand held devices, embedded devices, etc. The reason why Linux operated system is preferred by many, is because it is easy to use and re-use. Linux based operating system is technically not an Operating System. Operating [0]
- Packagekit Interview
Packagekit aims to make the management of applications in the Linux and GNU systems. The main objective to remove the pains it takes to create a system. Along with this in an interview, Richard Hughes, the developer of Packagekit said that he aims to make the Linux systems just as powerful as the Windows or [0]
- What’s New in Ubuntu?
What Is Ubuntu? Ubuntu is open source software. It is useful for Linux based computers. The software is marketed by the Canonical Ltd., Ubuntu community. Ubuntu was first released in late October in 2004. The Ubuntu program uses Java, Python, C, C++ and C# programming languages. What Is New? The version 17.04 is now available here [0]
- Ext3 Reiserfs Xfs In Windows With Regards To Colinux
The problem with Windows is that there are various limitations to the computer and there is only so much you can do with it. You can access the Ext3 Reiserfs Xfs by using the coLinux tool. Download the tool from the official site or from the sourceforge site. Edit the connection to “TAP Win32 Adapter [0]
- VSI launches how-to portal for OpenVMS
OpenVMS isnt exactly the easiest platform to get into, with even the first major hurdle licensing! being a bit of a complex issue. To address this and other issues people new to OpenVMS might run into, VSI, the company currently developing OpenVMS, launched its new VSI How-to Portal. For now, it covers things like licensing, installing and updating OpenVMS for x86, TCP/IP configuration, and setting up SSH. The company plans to expand the portal with more articles based on customer and user feedback, so hopefully more information will appear soon. Most of us are probably not particularly not particularly experienced with OpenVMS, so having a portal like this can really help get you started.
- Microsoft claims Windows 11 is now up to 20% more responsive!
Microsofts been claiming for a while now that theyre working on improving performance and responsiveness in Windows, with a particular focus on making more efficient use of memory. This is probably the only positive thing to come out of the RAM crisis Microsoft helped create and is currently still fueling. The companys now claiming that Windows 11 is up to 20% more responsive! thanks to these efforts. The result is a Windows experience that’s up to 20% more responsive, with improvements you can feel as soon as you boot into your PC and extending to Start, File Explorer, Search, Snipping Tool, Microsoft 365, Edge and more. A big part of that work is making smarter use of memory and system resources. We’ve improved memory management and efficiency across Windows to help keep more of your PC’s resources focused on what you’re actively doing. That work can make an especially meaningful difference on PCs with 8GB of memory. Windows can now keep up to 2GB more of your active data in memory instead of moving it to slower storage, helping your PC stay responsive as you open more apps or browser tabs. Windows is also making additional memory-saving improvements that reduce background memory use. For example, on PCs with 8GB of memory or less, Widgets load only when you open them, making more than 200 MB of memory available for your apps and other work. It’s one example of the broader work underway to reduce the Windows memory footprint and deliver a fast, responsive experience across the PCs people use every day, an area we’ve made an explicit focus for Windows. ↫ Navjot Virk on the Windows Blogs If, for a moment, we take these claims at face value, theyre simply good news for every Windows 11 user, and legitimately the only good thing to come out of the RAM crisis. These kind of claims are always hard to measure, especially considering just how varied the Windows software and hardware ecosystem is, but Im sure people good at benchmarking are going to try and find some more definitive answers here. In the same blog post, Microsoft also highlights several other recent improvements its made to Windows 11, like the new search experience we talked about recently, a brand new Photos application, some new whiteboard-like application, and several more things. Considering how complex Windows versioning scheme and various branches have become, I have no idea when these features and improvements actually make their way to your machine. On a slightly related note, Microsoft also unveiled that its bringing Microsoft Defender to Linux, with a particular focus on desktop Linux. Even Microsoft has to face the reality of the rising popularity of Linux on the desktop.
- Costa: a modern, maintained graphical shell for DOS
Graphical user interfaces for DOS were a dime-a-dozen back in the 90s, but of course faded into irrelevance as time went on. But what if you still run DOS today, and want a maintained graphical shell instead of the rather limited DOS command line? Costa is a small and lightweight application which runs on top of MS-DOS or compatible operating systems. It replaces the DOS-prompt with a clean, user-friendly interface a so-called GUI (Graphical User Interface). Costa comes packed with a bunch of useful accessories and can be used with or without a mouse. Developed by Jacob Palm, a Danish IT-professional and hobby developer, the first release of Costa came way back in 2004. Over the years and through several releases Costa has gradually evolved into what it is today, with new releases still coming out regularly as of 2025. ↫ Costa website Costa comes bundled with a number of useful utilities, a few games, and useful features like a desktop with custom icons, virtual desktop support, a file selector, and much more. The latest release, version 1.8.0, was released in late 2024, and should run on just about any IBM PC-compatible, but a 386 is recommended. Its been tested with a variety of DOS flavours, including FreeDOS ad DOSBox, so it should run pretty much anywhere.
- Ubuntu 26.10 released
Ubuntu 26.10 has landed. Ubuntu 26.10 brings significant progress for security, and strengthens the platform with the full adoption of Rust-based coreutils, post-quantum-ready package signing, and expanded TPM-backed full-disk encryption support. Enterprise authentication gains deeper integration with Microsoft Entra ID, including password and multi-factor authentication. Linux kernel 7.3 extends support for the latest hardware, alongside new RISC-V desktop images and optimized amd64v3 installation images. ↫ Ubuntu 26.10 release announcement Of course, it comes with the latest version of GNOME, and the whole family of Ubuntu variants focusing on other desktops have also been updated. While I doubt many people here run Ubuntu, its still quite popular, and serves as the base for countless other distributions.
- KDE Plasma 6.8 released
KDE turns 30 today, and theyre celebrating it with a brand new KDE Plasma release: version 6.8 is here. On the accessibility front, 6.8 brings a new dwell clicker function (meaning a click will register if the pointer is held still for a short while) and support for the Bikram Sambat calendar and the Amharic language. I always love it when I see support for new languages and scripts, especially when, as is the case here, its a language spoken as a first language by 25 million people. The Plasma remote desktop has also been improved with bi-directional copy/paste, performance and quality improvements, and more, and you can now record microphone and audio while screen recording with Spectacle. In System Monitor, you can now assign processes and tasks to specific processors/cores, which is a great feature for people running intensive tasks but who would still like to, you know, do other things while those tasks are running. KDE 6.8 drops support for X11, focusing entirely on Wayland. Of course, X11 applications will remain usable thanks to Xwayland, and KDEs applications will continue to support X11 in case youre using them outside of KDE. This release also further expands the Union theming system, now adding support for styling Qt Widgets. Union is still in beta, so youll have to enable it to test it. Theres a ton more, too, but these are some of the highlights. KDE Plasma 6.8 will find its way to your distribution of choice soon enough.
- Haikus latest activity report contains a ton of smaller fixes and improvements
You know the drill by now a new month, a new Haiku activity report. This past month doesnt seem to have any big ticket items, but instead contains a long list of smaller but still welcome fixes. Various filesystem drivers saw some work, a few bugs in virtio drivers were fixed, and NVMM execution is now easily interruptible by signals which should improve performance in various emulators like QEMU. Be sure to comb through the complete list to see if theres anything in there that impacts you.
- ESA targets Anbernic emulation handhelds as “superfake” piracy enablers
The ESA not, not the cool one a lobby group made up of various videogame and entertainment companies, has asked the US Trade Representative (USTR) to add Anbernic to its list of companies that are supposedly notorious for engaging in and facilitating piracy. If youre unaware, Anbernic is one of the bigger names in Android and Linux-based handheld gaming devices targeted at the retrocomputing market. While many online sellers do include an SD card full of ROMs alongside emulation hardware of all types, Anbernic itself does not appear to do the same when selling directly from its website. Regardless, the ESA argues that these ROM-laden Anbernic devices selling through “normal retail channels” help to “normalize hardware-based piracy by delivering illicit catalogues through a polished consumer product.” This, the ESA says, meets the threshold for a “superfake,” an ill-defined designation that applies to “high-quality counterfeit trademark goods … on a commercial scale.” ↫ Kyle Orland at Ars Technica Theres a lot of murkiness surrounding whether or not Anbernic sells their devices with preloaded ROMs or not. The number of reports from people who say they did get a ton of ROMs on their Anbernic devices, bought from Anbernics own store, is large enough that its clearly something they do. However, theres an equal number of people who say their Anbernic devices were completely free of ROMs, and Im one of them Ive bought like three or so devices from their store over the years, and they never came with any ROMs. My most recent purchase was an RG 35XXPro Linux-based model, and there were no ROMs on it (I replaced the stock operating system with Knulli, which has been a great experience). If Anbernic does indeed ship at least some of their devices with ROMs preinstalled, then its their own damn fault if that lands them in legal trouble. Its not like downloading ROMs is particularly difficult (just do an internet search for your preferred system and something like ROM pack! and youll get the consoles complete library in a single download), so they really have no need to do so. Theres one extra layer here though. Third-party resellers like Amazon offer loads of Anbernic devices preloaded with SD cards full of ROMs, all from third parties not affiliated with Anbernic. And wouldnt you know it Amazon is a member of the ESA lobby group. In other words, the problem also lies with lax retailers not properly vetting what theyre offering, but instead of going after places like Amazon, theyre going after Anbernic instead. Amazon is a haven for illegal and counterfeit products, but theyre so wealthy and powerful they just get away with it.
- Hardening changes for ReFS volumes on removable media!
Are you aware of ReFS, Microsofts next-generation file system for Windows? Im sure the average OSNews reader is, but I really wonder how many people are using it out in the wider world, even though Microsoft keeps improving it. Since earlier this year, Windows Server and Windows 11 can boot from ReFS volumes, and its used by Windows Dev Drive feature as well. What Microsoft doesnt seem to want, though, is people using ReFS on removable drives. Starting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS). This article describes Windows hardening changes for ReFS volumes that are mounted from removable media. ReFS on removable media, such as a USB disk, is not a supported configuration. The changes add auditing and enforcement controls that help administrators identify these volumes and prevent them from being mounted. ↫ Microsoft Knowledge Base article Im oddly fascinated by this. Apparently, there are enough people out there trying to use ReFS on removable media to warrant the above auditing and enforcement controls, which is fascinating in an of itself. On top of that, using ReFS on removable media is apparently also dangerous enough which raises the question of why, exactly, its so dangerous in the first place. Microsoft doesnt really explain itself here, other than saying its not a supported configuration!. I wonder if and when Microsoft will move from NTFS to ReFS as the default file system for new Windows installations. Its been around for quite a while now, and theres no denying that competing operating systems, especially in the server space, have file systems that are far superior to NTFS (like Btrfs, ZFS, and others), and Im assuming Microsoft would love to catch up. Its been a long time since Microsoft changed Windows default file system, however, and with the massive number of people using Windows, its not something to take lightly. Then again, Apple migrated hundreds of millions of iPhones, iPads, and Macs to a brand new file system without anybody noticing a thing, and as far as I can recall, without any problems.
- Lotus Improv on the NeXT
Both NeXT and Improv brought innovative solutions to their respective computing questions of the day. NeXT made UNIX palatable to those scared of the terminal, debuted Display Postscript on a mega-pixel display, and made development for the system a snap. Improv rethought multi-dimensional data modeling, offered English-like formulas, and made it easy to rearrange data views on a whim. The bones of both remain to this day. NeXTs operating system, NeXTSTEP / OPENSTEP, morphed into macOS, and by extension iOS. Lotus abandoned Improv fairly quickly, but a quick survey of todays spreadsheets shows a universal embrace of pivot tables. ↫ Christopher Drum I had never heard of Lotus Improv, so I learned a lot reading this outstanding article by Drum.
- The holy quinity of UNIX workstations
Many of us are interested in retrocomputing. Theres such a rich history of eras and machines to choose from, and countless niches and nuances to get lost in. Some people make it easy for themselves and are into old computers that are readily available at low prices, like the Commodore 64 or mid-90s Macs, while others make it a bit harder on themselves by focusing on, say, computers from the former Soviet Union or NEC machines from Japan, which are harder to find and probably require a bigger purse, too. And then theres people like me. Im making things incredibly hard on myself, because I am obsessed with a very specific set of computers just five machines, to be exact. Surely,! I hear you think, collecting a mere five specific machines cant be that hard, no? Thats how many spare Pismos I have in a box in case my primary one needs spare parts!! Sadly for me, the five computers I want to own more than any other are not particularly easy to find, and even when you do find one of them, pricing can easily reach the level of a decent used car. Regular OSNews readers will know: I am infatuated with UNIX workstations, or more specifically, UNIX workstations of the early 2000, and even more specifically, the final five models built by the last commercial UNIX vendors. So far, Ive managed to get my hands on a mere two of them, but before my time on this earth come to an end, I intend to complete my Holy Quinity of UNIX Workstations. Lets go down the list, roughly ordered by attainability. HP c8000: PA-RISC/HP-UX The HP c8000 is the absolute pinnacle of HPs long-running line of workstations based on the PA-RISC architecture. The first PA-RISC workstation was launched in 1986, and HP would continue to improve the architecture and release new workstations all the way up until 2004, when the c8000 would be their last model. For the c8000, HP actually went all-out: it came with two dual-core PA-RISC processors running between 900MHz and 1.1GHz (depending on configuration), a maximum of 24GB of RAM, and a variety of graphics cards to choose from. It was a veritable swan song for the architecture. HPs commercial UNIX operating system, HP-UX, is even older than PA-RISC, with the first version being released in 1982, and its final version, HP-UX 11i v3 (or 11.31) released in 2007. This final version of HP-UX was updated and supported all the way up until 31 December 2025, but things are actually a bit more complicated than that. The last workstation release of HP-UX for PA-RISC was 11i v1 (released in 2000), while the last workstation release for Itanium workstations was 11i v2 (released in 2005). Do note that HP would provide updates, fixes, and patches to these versions long after the mentioned release dates. Speaking of Itanium, HPs final Itanium workstation was the zx6000, released in 2002, which can pack up to two single-core 1.5Ghz Itanium 2 processors. Theres a very real case to be made that the zx6000 should also be part of this list, since its both a little faster than the c8000 (in its dual 1.5GHz configuration) and runs a newer version of HP-UX. However, since Itanium workstations never really had much of an impact in the market (even HP only ever released two models), and since it lacks the decades of pedigree that comes with PA-RISC, I consider them a mere curiosity. A very cool curiosity that Id love to own, but a curiosity nonetheless. Anyway, this is one of the two machines I already own. I have a new-in-box (when I bought it a few years ago) HP c8000 with two dual-core 1.0Ghz PA-RISC processors, 8 GB of RAM, and an ATI FireGL X3 AGP graphics card with 256 MB, the fastest the c8000 will take. Its also got two SCSCI 74 GB hard drives in a striped RAID for better performance, and I added an LTO 4 tape drive so I could create bootable backups that will restore the machine if anything ever goes wrong. Its running HP-UX 11i v1, with as many of the updates, patches, and fixes I could find which is one of the major roadblocks for anyone trying to get into HP-UX. Installation media are relatively easy to come by if you know where to look (assuming you know which specific version you need), but any updates, patches, and fixes from roughly later than 2005 are almost impossible to find. Some can be discovered through My HPE Software Center, if you have the patience of an angel and the perseverance of a honey badger (its a really terrible website), but most things are all locked away behind expensive support contracts or just gone entirely. Ive contacted HPE several times in several different ways about the preservation of HP-UX, but they never replied clearly, they just dont care about the preservation of their legendary UNIX platform or the enthusiast community buying PA-RISC hardware on eBay for personal use and experimentation. Sad, but par for the course. The c8000 is quite easy to find on eBay, but do be aware that the cheap! offerings of around €800 are the versions with just one processor. To get the version with two processors, expect to shell out twice as much. Spare parts and upgrades are readily available, too. Sun Ultra 45: SPARC/Solaris The Sun Ultra 45 needs no introduction here on OSNews, as I published an in-depth article about this machine and all the cool things you can do with it late last year. My Ultra 45 was an incredibly generous gift by Adriaan de Groot, who owned this machine as part of his work on porting KDE to Solaris way back in the day. I then ordered various upgrades to the machine to max it out with two UltraSPARC IIIi processors running at 1.6GHz, 8 GB of RAM, and the Sun XVR-2500 with 256MB, the fastest
- Linux Moves Closer to Retiring the x32 ABI After Years of Limited Adoption
by
Linux kernel developers are renewing efforts to retire the x32 application binary interface (ABI), a little-used compatibility feature that attempted to combine the advantages of 64-bit processors with the smaller memory footprint of 32-bit applications. A revised patch series submitted on October 8, 2026, proposes the first steps toward disabling the interface, potentially ending support for an architecture experiment introduced more than 14 years ago.
The latest proposal comes from Sebastian Andrzej Siewior, a Linux kernel developer at Linutronix who has been working on the removal effort throughout 2026. Rather than immediately deleting every component associated with x32, the proposed approach would first prevent the feature from being enabled through normal kernel configuration. This would give remaining users and distribution maintainers an opportunity to respond before the underlying implementation is removed.
The effort reflects a broader challenge in Linux development: maintaining compatibility with older or rarely used technologies while keeping the kernel manageable, secure, and efficient. Although x32 offered theoretical performance and memory advantages, it never achieved widespread adoption. With conventional x86_64 software dominating modern Linux systems, developers are increasingly questioning whether the additional maintenance burden remains justified.
Understanding the Linux x32 ABI
The x32 ABI was introduced with Linux kernel 3.4 in 2012 as an alternative to conventional 32-bit and 64-bit application environments. Its goal was to provide applications with access to the architectural improvements of x86_64 processors while retaining smaller data types and pointers associated with 32-bit software.
Traditional 32-bit x86 applications use the i386 ABI, which operates with a more limited register set and 32-bit execution conventions. Standard x86_64 applications, meanwhile, benefit from additional general-purpose registers, wider registers, and modern calling conventions, but they normally use 64-bit pointers. Those larger pointers can increase memory consumption in applications that maintain large numbers of pointer-heavy data structures.
The x32 ABI attempted to offer a compromise. Applications would execute using the x86_64 instruction set and its larger register file while retaining 32-bit integers, long values, and pointers. This programming model is commonly described as ILP32, meaning that integers, long integers, and pointers are all 32 bits wide.
The distinction can be illustrated by comparing the expected sizes of common C data types:
- Google9s Kage Project Rethinks Linux Kernel Security With Isolated Device Drivers
by
Google is exploring a new approach to Linux kernel security that could significantly change how device drivers interact with the operating system. The experimental project, known as Kage, uses compiler-based sandboxing to isolate drivers inside the kernel, potentially limiting the damage caused by memory corruption, programming errors, and exploitable vulnerabilities without requiring drivers to run as separate user-space processes.
The research was presented at the Linux Plumbers Conference 2026, held October 5–7, with Stanford University and Google researcher Zachary Yedidia discussing how LLVM9s Lightweight Fault Isolation (LFI) technology can create restricted execution environments for native kernel code. Unlike conventional isolation techniques, which often depend on separate processes or virtual machines, Kage attempts to preserve the performance advantages of kernel-space execution while reducing the amount of memory individual drivers can access.
Early prototypes have already demonstrated the concept using NVMe storage, networking, and Wi-Fi drivers. However, Kage remains an experimental research project rather than a feature available in mainstream Linux distributions. Its developers are still investigating performance, hardware access, and compatibility with more complicated drivers, including graphics hardware.
Why Device Drivers Remain a Major Linux Security Challenge
Linux device drivers are responsible for connecting the operating system to hardware components, including graphics cards, network adapters, storage controllers, USB devices, and wireless chipsets. Most traditional Linux drivers execute in kernel space, giving them privileged access to system resources and the ability to interact directly with hardware. This architecture is one reason Linux can deliver high performance across such a broad range of devices, but it also creates a significant security challenge.
When an ordinary application encounters a memory error, the operating system can often terminate that process without affecting the rest of the system. Kernel drivers operate under different conditions. Because they typically share the kernel9s address space and privileges, an invalid memory access or exploitable vulnerability can affect unrelated kernel components, potentially resulting in a system crash, privilege escalation, or complete compromise of the operating system.
The challenge becomes more complicated when considering the enormous number of drivers supported by Linux. Some are maintained by large organizations with extensive testing infrastructure, while others receive contributions from smaller development teams or individual maintainers. Even carefully reviewed drivers can contain bugs, particularly when they interact with complicated hardware, asynchronous operations, and memory-management mechanisms.
- Speech Synthesis on Linux: Adding a Voice to Scripts and Systems
by
Linux users have long had a pragmatic relationship with text-to-speech. The classic open-source engines have been available for years, wired into accessibility tools and the occasional script, dependable but unmistakably robotic. They do the job where the job is simply to convert text to some kind of speech, but the mechanical output has kept them out of anything where the voice actually matters. The arrival of high-quality speech synthesis delivered over an API changes what is possible, letting Linux users add genuinely natural voices to scripts, services, and applications without hosting a heavyweight model themselves.
The Familiar Trade-Off
Anyone who has used the traditional Linux speech engines knows the trade-off. They are free, local, and scriptable, which fits the Linux ethos perfectly, but the voices are clearly synthetic. For accessibility and for utilitarian tasks where intelligibility is all that counts, that has been acceptable. For anything user-facing where the quality of the voice shapes the experience, it has not.
The alternative of running a modern, high-quality speech model locally is possible but comes with real costs: significant computational requirements, model management, and the ongoing maintenance of a demanding piece of infrastructure. For many use cases, particularly on servers, embedded systems, or ordinary workstations, that overhead is disproportionate to the need. This is the gap that an API-based approach fills, offering the quality of a large modern model without the burden of hosting one.
The API Approach on Linux
Delivering speech synthesis over an API fits naturally into how Linux users already build things. Rather than installing and maintaining a model, you make a request to a service and receive audio back, which you can then play, save, or pipe into whatever comes next. A
- Archinstall 4.5 Released with AArch64 Support, Real-Time Kernels, and Major Installer Fixes
by
The Arch Linux project has released Archinstall 4.5, the latest version of its guided text-based installer, bringing expanded AArch64 support, new real-time Linux kernel options, additional translations, security improvements, and numerous fixes for installation workflows.
Archinstall 4.5 was released on September 29, 2026, roughly three months after Archinstall 4.4. The new version arrives just ahead of Arch Linux9s October installation media refresh and has already been packaged as archinstall 4.5-1 for Arch Linux repositories.
While Archinstall remains optional, it provides users with a guided way to configure an Arch Linux installation without manually performing every step described in the Arch installation guide. Version 4.5 concentrates primarily on hardware support, installer reliability, security, and expanding the range of systems that can use the guided installation process.
AArch64 Support Gets a Major Upgrade
One of the biggest changes in Archinstall 4.5 is improved support for AArch64, the 64-bit ARM architecture.
The installer can now handle GRUB and Limine EFI installations on AArch64 systems. It also gains support for the proper AArch64 root partition type GUID.
Previously, parts of Archinstall9s bootloader configuration were more heavily oriented toward x86_64 installations. The latest changes make its guided installation workflow more useful on ARM64 hardware.
AArch64 has become increasingly important throughout the Linux ecosystem. The architecture can now be found in cloud servers, development boards, laptops, workstations, and specialized computing platforms.
Supporting both GRUB and Limine EFI installations gives Archinstall more flexibility when preparing these systems.
GRUB Can Now Be Installed on AArch64
GRUB remains one of the most widely used Linux bootloaders, and Archinstall 4.5 extends its installation logic to AArch64 EFI systems.
This allows ARM64 installations to use a bootloader workflow much closer to what Archinstall already provides on conventional x86_64 UEFI computers.
The change doesn9t mean every ARM device will automatically become compatible with Arch Linux. ARM hardware can still have highly platform-specific firmware and boot requirements.
It does, however, remove an important Archinstall limitation for AArch64 machines that provide conventional UEFI environments.
Limine EFI Support Expands to ARM64
The same architectural expansion applies to Limine.
Limine is a modern multiprotocol bootloader supported as one of Archinstall9s bootloader choices. Archinstall 4.5 extends its EFI installation support to AArch64 as well.
- systemd 262 Released with Static PID 1, Intel TDX, TPM Improvements, and New Container Features
by
The systemd project has officially released systemd 262, delivering another substantial update to the system and service manager used by most major Linux distributions. The final release was tagged on September 22, 2026, following three release candidates earlier in the month.
Systemd 262 introduces improvements across service management, containers, virtualization, encrypted storage, TPM security, networking, journal recovery, system updates, and unattended installations. Among the most interesting additions are the ability to build systemd as a single statically linked PID 1 binary, Intel TDX support in systemd-vmspawn, Live Update Orchestrator integration, improved TPM-backed encryption, and new fallback unit files embedded directly into the systemd manager.
The release also contains a rather unusual development safeguard: an AI/LLM canary intended to help identify code contributions generated by AI that haven9t been properly reviewed by a human before submission.
systemd 262 Is Officially Available
The final systemd 262 source was tagged by systemd developer Luca Boccassi on September 22.
The upstream tag identifies commit 8cc40e0c5e9234bf45084751ac53b1fbfe70b492 as systemd v262, following release candidates published throughout September.
The release has already begun reaching Linux distribution development repositories.
Debian accepted systemd 262-1 into Debian Unstable on September 22, while Fedora has prepared systemd 262 packages for Fedora 45.
As usual, the speed at which systemd 262 reaches ordinary users will depend on each distribution9s update policy.
systemd Can Now Become a Single Static PID 1 Binary
One of the most interesting changes in systemd 262 is support for building systemd as a single statically linked PID 1 and executor binary.
The feature is primarily intended for extremely small container environments.
Normally, systemd depends on a collection of dynamically linked libraries and supporting components. That architecture makes sense for a complete Linux distribution, but containers sometimes need a much smaller runtime environment.
The new static configuration makes it possible to create a more self-contained systemd executable suitable for minimal container images.
These builds avoid dynamically loading optional libraries and use simplified mechanisms for resolving users and groups rather than relying on the complete Name Service Switch infrastructure.
This doesn9t mean normal Linux distributions will suddenly replace their standard systemd packages with a giant static executable. The capability is specifically useful for specialized container and minimal-system deployments.
- Ubuntu Container Escape Vulnerability Gets Public Exploit Before Kernel Patch Arrives
by
Ubuntu administrators running containerized workloads have a new Linux kernel security problem to watch closely. Public exploit code is now available for CVE-2026-80521, a Linux kernel use-after-free vulnerability that can allow an unprivileged process inside a container to escape and obtain root privileges on the underlying host.
Security firm DepthFirst published its research and exploit on September 22, 2026, demonstrating the attack against Ubuntu 26.04 LTS. The underlying Linux kernel vulnerability had already been fixed upstream on August 6, but as of September 23, Ubuntu9s security tracker still lists the main kernel package in Ubuntu 26.04 LTS as "Vulnerable, work in progress," while Ubuntu 24.04 LTS is also listed as vulnerable.
The situation is particularly important for Docker, Kubernetes, cloud infrastructure, and other environments that run potentially untrusted workloads because the vulnerable kernel functionality can be reached through ordinary operations available inside standard containers.
There is currently no confirmed evidence that CVE-2026-80521 is being actively exploited in real-world attacks, and the vulnerability isn9t listed in CISA9s Known Exploited Vulnerabilities catalog. The availability of working public exploit code nevertheless makes the patch gap considerably more important.
CVE-2026-80521 Is a Linux Kernel Vulnerability
Although Ubuntu is receiving much of the attention because the newly published exploit specifically targets it, CVE-2026-80521 is fundamentally a Linux kernel vulnerability.
The problem exists in the kernel9s AF_UNIX socket subsystem, specifically within its garbage collection mechanism.
AF_UNIX sockets, commonly called Unix-domain sockets, provide local inter-process communication between applications running on the same system.
Unlike conventional network sockets, they don9t need to communicate across a network. They are widely used by Linux applications and services for fast communication between local processes.
They also support passing file descriptors between processes through SCM_RIGHTS messages, and it is the kernel9s management of these references that creates the conditions for CVE-2026-80521.
A Race Condition Leads to Use-After-Free
At the technical level, CVE-2026-80521 involves a race condition inside the AF_UNIX garbage collector.
The kernel needs to track references between Unix sockets when file descriptors are passed between processes. Circular references can develop, where one socket effectively references another while that socket references something else in the same group.
Linux represents these relationships internally and periodically determines which references can safely be removed.
- Fedora Linux 45 Beta Released with Python 3.15, GCC 16.2, and Major Security Changes
by
The Fedora Project has officially released Fedora Linux 45 Beta, giving users an early look at the technologies expected to form the foundation of the final Fedora 45 release. The beta became available on September 15, 2026, after Fedora9s Quality team approved Release Candidate 1.3 for publication.
Fedora 45 Beta brings significant changes throughout the operating system, including Python 3.15, GCC 16.2, glibc 2.44, GNU Binutils 2.47, Go 1.27, LLVM 23, Podman 6, stricter RPM signature verification, improved DNF5 protections, a new userspace virtual console, standardized desktop secret storage, and substantial installer improvements.
The release is available across Fedora Workstation, KDE Plasma Desktop, Server, Cloud, IoT, Atomic Desktops, Spins, and Labs, although a few prerelease images are excluded.
Fedora 45 Beta Is Now Available
Fedora Linux 45 Beta represents the final major public testing milestone before Fedora 45 reaches stable status.
Fedora describes its beta releases as code-complete previews that closely represent what users should expect from the final version. Development isn9t finished, however, and bugs or incomplete migrations can still be discovered during real-world testing.
Fedora 45 Beta is currently available in several major editions:
Fedora Workstation 45 Beta Fedora KDE Plasma Desktop 45 Beta Fedora Server 45 Beta Fedora Cloud 45 Beta Fedora IoT 45 Beta Fedora Atomic Desktops Fedora Spins Fedora Labs
Existing Fedora installations can also be upgraded to the beta using Fedora9s DNF system-upgrade process.
Fedora9s official Workstation download page confirms Beta 1.3 images for both x86_64 and AArch64 systems.
A New Virtual Console with kmscon
One of Fedora 459s more unusual system-level changes is the replacement of the traditional in-kernel console with kmscon.
Fedora describes kmscon as a modern userspace virtual terminal implementation that provides smoother rendering, better internationalization and font handling, improved visual integration, and security improvements compared with the older console infrastructure.
This affects the virtual terminals users encounter outside their normal graphical desktop session.
Most desktop users spend relatively little time interacting directly with these consoles, but they remain important for troubleshooting, system administration, servers, recovery operations, and systems running without a graphical environment.
Moving that functionality into userspace also gives Fedora more flexibility for future development instead of relying entirely on the legacy kernel console implementation.
- Thunderbird 156 Released with OAuth Improvements, OpenPGP Updates, and Major Linux Fixes
by
The Thunderbird team has officially released Thunderbird 156, bringing another round of new features, security improvements, authentication enhancements, and reliability fixes to the popular open-source email client. Released on September 15, 2026, the update is available for Linux alongside Windows and macOS.
Thunderbird 156 is not a dramatic redesign of the desktop mail client. Instead, it concentrates on improving areas that matter to everyday users and system administrators, including OAuth authentication, OpenPGP, POP3, IMAP, Exchange Web Services, SMTP, attachments, calendars, enterprise policies, and security.
For Linux users in particular, the release delivers several fixes affecting common mail protocols and account configurations while retaining support for Linux environments using GTK+ 3.14 or newer.
Thunderbird 156 Arrives on Linux
Thunderbird 156 follows version 154, which arrived in August with features including optional system tray operation and Microsoft Graph support for Microsoft 365.
Version 156 continues the project9s monthly release cycle with a more targeted collection of authentication, security, compatibility, and reliability improvements.
According to Thunderbird9s official release notes, version 156 requires:
Linux: GTK+ 3.14 or newer Windows: Windows 10 or newer macOS: macOS 10.15 or newer
Thunderbird 156 was officially released on September 15.
Linux distribution availability will vary because distributions can package Thunderbird according to their own schedules. Users receiving Thunderbird through another packaging channel may therefore see version 156 at a different time.
Custom OAuth Support Expands
One of the most significant areas of development in Thunderbird 156 is OAuth authentication.
Thunderbird now supports custom OAuth configurations containing an issuer ID and client secret for IMAP and POP3 accounts. Custom OAuth support has also been extended specifically to POP3.
OAuth has become increasingly important as email providers move away from conventional username-and-password authentication toward token-based authentication.
For Thunderbird, broader custom OAuth support means users and organizations have greater flexibility when connecting the client to mail services that don9t fit Thunderbird9s predefined provider configurations.
This can be particularly useful in enterprise environments, self-hosted infrastructure, and organizations operating their own identity systems.
Exchange Custom OAuth Setup Fixed
Exchange users receive an important related correction.
- KDE Plasma 6.7.5 Released with Discover, KWin, Wayland, and HDR Fixes
by
The KDE Project has officially released KDE Plasma 6.7.5, delivering another round of bug fixes and stability improvements for the Plasma 6.7 desktop series. Released on September 8, 2026, the update contains roughly a month of fixes and updated translations contributed since Plasma 6.7.4 arrived in early August.
Unlike a major Plasma release, version 6.7.5 doesn9t introduce a large collection of new desktop features. Instead, KDE has focused on fixing problems affecting Discover, KWin, Wayland, networking, System Monitor, Plasma Desktop, RPM-OSTree systems, Snap updates, HDR rendering, and several other components.
For users already running Plasma 6.7, this makes version 6.7.5 primarily a maintenance upgrade intended to make the desktop more dependable ahead of the next major Plasma series.
KDE Plasma 6.7.5 Arrives as the September Bugfix Release
KDE describes Plasma 6.7.5 as its September bugfix release for the Plasma 6 desktop.
The broader Plasma 6.7 series originally arrived in June 2026, followed by a succession of maintenance releases:
Plasma 6.7.1 on June 23 Plasma 6.7.2 on June 30 Plasma 6.7.3 on July 14 Plasma 6.7.4 on August 4 Plasma 6.7.5 on September 8
KDE9s official download infrastructure confirms that the Plasma 6.7.5 source packages became available on September 8.
This slower maintenance cadence later in a Plasma series is normal. Once the most urgent post-release problems have been addressed, KDE generally shifts more development attention toward the next feature release while continuing to provide important fixes for the current branch.
Discover Receives Several Important Fixes
KDE9s Discover software center receives some of the most noticeable improvements in Plasma 6.7.5.
One particularly annoying problem could cause Discover to become stuck while checking for updates when its Snap backend was installed but no Snap applications actually had updates available.
That problem has now been corrected.
Discover also behaves more reliably when fwupd, the Linux firmware update service, is unavailable. Previously, a broken or intentionally masked fwupd service could interfere with Discover9s normal operation. Plasma 6.7.5 allows the rest of the application to continue functioning correctly in that situation.
This is useful for systems where firmware updating isn9t supported, where administrators intentionally disable the service, or where fwupd encounters a configuration problem.
Firmware Updates No Longer Incorrectly Require Reboots
Another Discover correction addresses a regression involving firmware updates.
|
