Security updates have been issued by AlmaLinux (glibc, java-21-openjdk, kernel, and libpq), Debian (imagemagick, spice-vdagent, and webkit2gtk), Fedora (cryptlib, dotnet8.0, dotnet9.0, firefox, python-black, python-lsp-black, and python-pytokens), Mageia (apache, cifs-utils, dnsmasq, lrzip, and socat), Oracle (.NET 10.0, .NET 9.0, 389-ds-base, cups, edk2, fence-agents, firefox, freeipmi, freerdp, git-lfs, glib2, gnutls, golang, gstreamer1-plugins-bad-free, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, hplip, libinput, libvirt, libxml2, memcached, nginx, openexr, perl-DBI, perl-XML-LibXML, php, php8.4, plexus-utils, postgresql16, python3.12, python3.14, sssd, tomcat, tomcat9, unbound, vim, xorg-x11-server-Xwayland, yggdrasil, and yggdrasil-worker-package-manager), Red Hat (container-tools:rhel8, git-lfs, go-toolset:rhel8, golang, golang-github-openprinting-ipp-usb, grafana, grafana-pcp, host-metering, java-1.8.0-openjdk, java-11-openjdk with Extended Lifecycle Support, java-17-openjdk, java-21-openjdk, oci-seccomp-bpf-hook, rhc, rhc-worker-playbook, skopeo, xorg-x11-server, xorg-x11-server-Xwayland, and yggdrasil), Slackware (mozilla-thunderbird), SUSE (afterburn, alloy, apache-sshd, apache2, avahi, chromium, clamav, curl, dhcpcd, dnsmasq, docker-compose, ffmpeg-7, firefox-esr, gawk, glibc, gnutls, go1.26-openssl, google-osconfig-agent, gpg2, haproxy, ImageMagick, imagemagick, jline3, jq, kernel, libgcrypt, libgnt, meson, pidgin, nmap, nodejs24, pacemaker, patch, perl-HTML-Parser, perl-libwww-perl, perl-List-SomeUtils-XS, python-aiohttp, python-WebOb, qemu, rust-keylime, SVT-AV1, libyuv0, libaom3, trivy, ucode-intel, and wireshark), and Ubuntu (libhttp-date-perl, libxpm, linux-azure, linux-azure-fde, pam, and rsyslog).
AnduinOS is an Ubuntu-based distribution which provides a GNOME desktop which has been themed and styled to resemble Windows 11. The project provides a smaller ISO file than its parent with each supported language split into a separate ISO. Snap support, which is included in Ubuntu, has been removed from AnduinOS.
Helwan Linux is an Arch-based Linux distribution designed for home, education and development use. Its "Home" flavour comes with the GNOME desktop, the "Edu" variant ships with Xfce and the "Dev" edition features the Cinnamon desktop together with a range of compilers and interpreters, including PHP and Rust. The project also produces a comprehensive "Distro Building" manual with a guide to the Archiso tool (for building custom Arch-based ISO images) and the Calamares system installer.
Manjaro Linux is a fast, user-friendly, desktop-oriented operating system based on Arch Linux. Key features include intuitive installation process, automatic hardware detection, stable rolling-release model, ability to install multiple kernels, special Bash scripts for managing graphics drivers and extensive desktop configurability. Manjaro Linux offers Xfce as the core desktop options, as well as KDE, GNOME and a minimalist Net edition for more advanced users. Community-supported desktop flavours are also available.
TrueNAS CORE (previously known as FreeNAS) is a free and Open Source Network-Attached Storage (NAS) operating system that supports file, block and object storage. TrueNAS CORE is FreeBSD based and is a community-supported branch of the TrueNAS project, sponsored by iXsystems. It also has a commercial branch called TrueNAS Enterprise and a free and HyperConverged storage solution called TrueNAS SCALE. The TrueNAS SCALE branch is based on the Debian Linux distribution.
I have just received the shocking news that Dan Williams, a longtime,
high-profile kernel developer, has passed away. I knew him primarily
through his long service on the Linux Foundation Technical Advisory Board;
he was always a strong, thoughtful, and intelligent presence. Dan will be
deeply missed.
There is a support
effort underway for Dan's family as they come to terms with this loss.
Version:next-20260723 (linux-next)
Released:2026-07-23
Soplos Linux is a set of desktop-oriented Linux distributions based on Debian's "Testing" featuring several popular desktop environments. It offers rolling updates, up-to-date software, a relatively lightweight and customisable desktop, compatibility with older hardware, and various speed and performance optimisation features. The distribution ships with a number of custom applications, such as Soplos Theme Manager, Soplos Plymouth Manager, Soplos Docklike (for adding and removing applications in the dock) and Soplos GRUB Editor.
One of the ideas raised at the
2026 Linux
Storage, Filesystem, Memory Management, and BPF Summit (LSFMM+BPF) was
the creation of
an
operations structure for the swap subsystem. Like many parts of the
kernel, the swap layer evolved over time, with pieces being added as
needed; the end result of this evolution is rarely what one would expect
had the subsystem been designed today. The interface between the swap
layer and the devices it uses is just one example. It appears that one
result of the swap subsystem's evolution — the lack of an abstraction layer
to interface with underlying storage — will soon be addressed, but in a
different way than was initially envisioned.
The Codeberg forge has adopted a pair of new policies, promising not to use
hosted projects to train LLMs and, more controversially, banning the
hosting of LLM-generated software. The site's blog
describes
and justifies these policies.
Although often well intentioned, sharing the result of a prompt
and calling it "libre software" does not make the world a better
place. Codeberg is not and does not want to be a place to dump such
generated single-use software that no one else will ever look
at. We are a place for people to collaborate and improve software
together. Within this context, the recent votes can be understood
as a reconfirmation of those principles: As we want to center on
human collaboration, we will not actively support or engage in the
creation of LLMs and will not put our limited resources to use for
storing single-use software that would pollute our FLOSS commons.
Bicom Systems' SERVERware is a commercial, Gentoo-based, purpose-built virtualization platform designed specifically for telephony and cloud-based Unified Communications (UC) environments. Its goal is to deliver high performance, reliability and scalability in a modern, intuitive user interface. The distribution's main features include built-in data integrity and resilience, geo-redundancy for disaster preparedness, user-friendly management, and support for modern virtualization technologies. Bicom SERVERware can be used as a standalone server, as a mirror for enhanced redundancy via real-time mirrored storage, or as a cluster.
Security updates have been issued by AlmaLinux (acl, dogtag-pki, dovecot, glibc, go-toolset:rhel8, golang-github-openprinting-ipp-usb, grafana, grafana-pcp, httpd:2.4, javapackages-tools:201801, libtiff, mariadb-connector-c, perl-HTTP-Daemon, pki-deps:10.6, and sssd), Debian (bind9, chromium, firefox-esr, and pdns-recursor), Fedora (chromium, collectl, fractal, kernel, libssh, llvm, nginx, nginx-mod-brotli, nginx-mod-fancyindex, nginx-mod-headers-more, nginx-mod-js-challenge, nginx-mod-modsecurity, nginx-mod-naxsi, nginx-mod-vts, perl-DBI, perl-YAML-Syck, and srt), SUSE (7zip, GraphicsMagick, ImageMagick, multipath-tools, perl-YAML, python-sqlparse, python3-sqlparse, python313-bleach, and sssd), and Ubuntu (apache2, commons-beanutils, exim4, gawk, giflib, gst-plugins-good1.0, krb5, libapache-mod-jk, libarchive, libgphoto2, libhtml-parser-perl, linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-ibm, linux-nvidia, linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-ibm, linux-oracle, linux-ibm-5.15, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-6.17, linux-oracle-6.8, python-aiohttp, and tar).
Inside this week's LWN.net Weekly Edition:
- Front: LLMs in the kernel; GNOME save and restore; Fedora changes; BPF and tracepoints; BPF and LSMs; famfs; sched_ext.
- Briefs: GNOME security; PyPI policy; Arch on aarch64; Firefox 153; Quotes; ...
- Announcements: Newsletters, conferences, security updates, patches, and more.
AnuBitux is a Debian-based Linux distribution focused on managing cryptocurrencies. It is designed to work as a live environment and aims to provide a safe and simple solution to use and manage cryptocurrency wallets, to run tools and scripts to create secure wallets, and to recover access to lost funds. It also includes extensive documentation and tutorials, as well as examples of use cases. All the tools included have been downloaded from trusted sources, such as official Debian repositories, GitHub and official websites. AnuBitux uses the Cinnamon desktop environments with customised, intuitive menus.
NetBSD is a free, secure, and highly portable UNIX-like Open Source operating system available for many platforms, from 64-bit AlphaServers and desktop systems to handheld and embedded devices. Its clean design and advanced features make it excellent in both production and research environments, and it is user-supported with complete source. Many applications are easily available through The NetBSD Packages Collection.
One of the features that users often miss when moving from X11 to Wayland is
the ability to save and restore the position of windows between sessions. At GUADEC 2026, held in
A Coruña, Spain, Adrian Vovk provided an overview of work that has gone
into providing a platform-wide save and restore framework for GNOME. After two
failed attempts at landing an API, he believes that the third try will be the
one to succeed—though not in time for the upcoming GNOME 51 release
due in October.
Python Software Foundation security developer-in-residence Seth
Larson has announced
that the Python Package Index (PyPI) will now reject new files that
are uploaded to releases older than 14 days. The restriction is to
prevent the poisoning of old releases if publishing tokens or
workflows of PyPI projects are compromised.
The discussion
of this behavior began during PEP 740 (Digital Attestations) back in January
2024. The discussion was restarted
in March 2026 after the popular packages LiteLLM
and Telnyx were compromised. These packages were compromised due to a "mutable
reference" in these projects' usage of the Trivy GitHub Action.
Originally the discussion stalled due to some projects depending on this behavior
to add support for new Python versions to already-published releases. To quantify how
disruptive this change would be to existing workflows, the PyPI database was queried
for projects
that have published new files to old releases (bucketed by number of days since
the release). Later, specifically cp314 wheels were queried for the top
15,000 packages, revealing that only
56 projects of 15,000 had published a 3.14-compatible wheel more than 14 days
after a release was available.
LWN covered the LiteLLM compromise
in March.
Version:next-20260722 (linux-next)
Released:2026-07-22
Tracepoints in the kernel are useful for a variety of purposes: debugging,
active monitoring, and performance measurements, among other things. Previously,
any given BPF program could only be attached to a single tracepoint.
Jiri Olsa has been working to change that, and led a discussion about
his progress at the 2026
Linux Storage, Filesystem, Memory-Management, and BPF
Summit. That work has since been
merged, and can be expected as part of the 7.2
kernel.
Security updates have been issued by AlmaLinux (389-ds-base, c-ares, dovecot, freerdp, glib2, gstreamer1-plugins-good, gstreamer1-plugins-ugly-free, hplip, kernel, kernel-rt, nodejs:22, perl-XML-LibXML, webkit2gtk3, and yggdrasil), Debian (kernel, nss, roundcube, rtpengine, and xz-utils), Fedora (btrbk, kernel, mupdf, nuclei, perl-Crypt-OpenSSL-X509, rust-fern, rust-ifcfg-devname, rust-routinator, rust-rpki, and rust-syslog), Mageia (tig), Oracle (.NET 10.0, .NET 8.0, .NET 9.0, acl, dovecot, glib2, httpd, libtiff, pacemaker, perl-IO-Compress, plexus-utils, python3, and webkit2gtk3), Slackware (libssh and mozilla-firefox), SUSE (acl, avahi, aws-nitro-enclaves-cli, beets, chromium, firefox, go1.25-openssl, ImageMagick, iscsiuio, kernel, kubevirt1.8-container-disk, libgit2-1_9, libkrun, libsoup-3_0-0, nghttp2, opam, php7, python-aiohttp, python-tornado6, and vim), and Ubuntu (accountsservice, CUPS, imagemagick, jbig2dec, openssh, and snapd).
Pages
