Feed aggregator

This week, we got new releases of the Firefox web browser, Tails amnesic incognito live system, Zorin OS distribution, Thunderbird email client, GStreamer multimedia framework, GNOME desktop environment, Calibre e-book manager, PeaZip archive manager, digiKam photo manager, and PipeWire multimedia server.

On top of that, I show you how to easily upgrade your LMDE 6 installations to LMDE 7 and tell you all about the new laptop from TUXEDO Computers. Below, you can check out this week’s hottest news and access all the distro and package downloads released this past week in the 9to5Linux weekly roundup for October 19th, 2025.

The post 9to5Linux Weekly Roundup: October 19th, 2025 appeared first on Linux Today.

Catch up on the latest Linux news: LMDE 7, Zorin OS 18, Mobian 13, Alacritty 0.16, GNOME 49.1, Firefox 144, a possible malware incident on Xubuntu, GIMP’s new official Snap package, and more.

The post Linuxiac Weekly Wrap-Up: Week 42 (Oct 13 – 19, 2025) appeared first on Linux Today.

Node.js 25 ships with V8 14.1, faster JSON.stringify, new permission flags, and built-in base64/hex conversion support.

The post Node.js 25 Released with V8 14.1, New Permissions appeared first on Linux Today.

A Reddit user reports that Xubuntu.org may have been compromised, serving a ZIP file containing a Trojan instead of the real installer.

The post User Flags Possible Malware Incident on Xubuntu.org appeared first on Linux Today.

Coming almost four months after digiKam 8.7, the digiKam 8.8 release introduces a new feature that lets users import or export tag hierarchies to and from text files, support for focus point visualization for FujiFilm and Olympus/OM Systems cameras in the Preview module, and support for automatically using monitor color profiles on Wayland.

The post digiKam 8.8 Adds Support to Automatically Use Monitor Color Profiles on Wayland appeared first on Linux Today.

Alacritty 0.16, a GPU-accelerated terminal emulator, adds support for Unicode 17, new Vi motions, and system-wide configuration options.

The post Alacritty 0.16 Terminal Emulator Released with Unicode 17 Support appeared first on Linux Today.

Julia is a modern programming language that is of particular interest to scientists due to its high performance combined with language features such as Lisp-style macros, an advanced type system, and multiple dispatch. We last looked at Julia in January on the occasion of its 1.11 release. Early in October Julia 1.12 appeared, bringing a handful of quality-of-life improvements for Julia programmers, most notably support, though still experimental and limited, for the creation of binaries.

Security updates have been issued by Debian (dcmtk, geographiclib, gimp, pure-ftpd, and ruby-rack), Fedora (dotnet9.0), Oracle (expat, kernel, tigervnc, xorg-x11-server, and xorg-x11-server-Xwayland), Red Hat (git, mariadb:10.5, multiple packages, osbuild-composer, pcs, sssd, and tigervnc), SUSE (kernel and redis), and Ubuntu (google-guest-agent).

Version 1.0 of the Capability Hardware Extension to RISC-V for IoT (CHERIoT) specification has been released. CHERIoT is a hardware-software system for secure embedded devices, and the specification provides a full description of the ISA and its intended use by CHERIoT RTOS. David Chisnall has written a blog post about the release that explains its significance as well as plans for CHERIoT 2.0 and beyond:

The last change that we made to the ISA was in December 2024, so we are confident that this is a stable release that we can support in hardware for a long time. This specification was implemented by the 1.0 release of CHERIoT Ibex and by CHERIoT Kudu (which has not yet had an official release). These two implementations demonstrate that the ISA scales from three-stage single-issue pipelines to six-stage dual-issue pipelines, roughly the same range of microarchitectures supported by Arm's M profile.

We at SCI have the first of our ICENI chips, which use the CHERIoT Ibex core, on the way back from the fab now and will be scaling up to mass production in the new year. I am not allowed to speak for other folks building CHERIoT silicon, but I expect 2026 to be an exciting year for the CHERIoT project!

Version:next-20251104 (linux-next) Released:2025-11-04

LinuxHub Prime is an Arch-based Linux distribution with a customised Openbox window manager as the default desktop environment. Its main feature is a unique installer that provides one-click installation options for several popular window managers and desktop environments, including Awesome, bspwm, Budgie, Cinnamon, Deepin, GNOME, Hyprland, KDE Plasma, MATE, Qtile and Xfce. The installer also includes "Prime Builder", a tool for creating a custom respin of the distribution.

The Project Zero blog explains that, on 64-bit Arm systems, the kernel's direct map is always placed at the same virtual location, regardless of whether kernel address-space layout randomization (KASLR) is enabled.

While it remains true that KASLR should not be trusted to prevent exploitation, particularly in local contexts, it is regrettable that the attitude around Linux KASLR is so fatalistic that putting in the engineering effort to preserve its remaining integrity is not considered to be worthwhile. The joint effect of these two issues dramatically simplified what might otherwise have been a more complicated and likely less reliable exploit.

Omarchy is an Arch-based Linux distribution featuring the Hyprland tiling window manager. It ships with what a modern software developer would need to be productive immediately, including Neovim, Spotify, Chromium, Typora, Alacritty, LibreOffice and Zoom. The distribution boots into a text-mode system installer that downloads the latest packages from the Arch Linux repositories during installation to build a complete Hyprland desktop.

LibreELEC is "just enough OS" to run the Kodi media centre. LibreELEC is a Linux distribution built to run Kodi on current and popular hardware. The project is an evolution of the OpenELEC project. LibreELEC software will be familiar to OpenELEC users. The distribution runs on x86 desktop computers, Raspberry Pi devices and ODroid and WeTek computers.

Barry Warsaw, writing for the Python steering council, has announced that PEP 810 ("Explicit lazy imports") has been approved, unanimously, by the four who could vote. Since Pablo Galindo Salgado was one of the PEP authors, he did not vote. The PEP provides a way to defer importing modules until the names defined in a module are needed by other parts of the program. We covered the PEP and the discussion around it a few weeks back. The council also had "recommendations about some of the PEP's details, a few suggestions for filling a couple of small gaps", including: Use lazy as the keyword. We debated many of the given alternatives (and some we came up with ourselves), and ultimately agreed with the PEP's choice of the lazy keyword. The closest challenger was defer, but once we tried to use that in all the places where the term is visible, we ultimately didn't think it was as good an overall fit. The same was true with all the other alternative keywords we could come up with, so... lazy it is!

What about from foo lazy import bar? Nope! We like that in both module imports and from-imports that the lazy keyword is the first thing on the line. It helps to visually recognize lazy imports of both varieties.

Python already has several ways to run programs concurrently — including asynchronous functions, threads, subinterpreters, and multiprocessing — but all of those options have drawbacks of one kind or another. PEP 703 ("Making the Global Interpreter Lock Optional in CPython") removed a major barrier to running Python threads in parallel, but also exposed Python programmers to the same tricky synchronization problems found in other languages supporting multithreaded programs. A new draft proposal by Mark Shannon, PEP 805 ("Safe Parallel Python"), suggests a way for the CPython runtime to cut down on concurrency bugs, making it more practical for Python programmers to use versions of the language without the global interpreter lock (GIL).

Version 6.0 ("Excalibur") of the systemd-averse Devuan distribution has been released. It is based on Debian 13 ("trixie"), and includes some of the significant changes from that release, including the merged /usr hierarchy. See the release notes for details.

OpenAPI is an industry standard to describe HTTP APIs. When using OpenAPI in your project, you can leverage other tools to help you generate documentation, code, tests, mock results, or even deploy your API. This article picks some useful tools to help you validate OpenAPI in your project.

The post 11 Best Free and Open Source OpenAPI Linter Tools appeared first on Linux Today.

The kernel's namespaces feature is, among other things, a key part of the implementation of containers. Like much in the kernel, though, the namespace API evolved over time; there was no design at the outset. As a result, this API has some rough edges and missing features. Christian Brauner is working to straighten out the namespace situation somewhat with this daunting 72-part patch series that, among other things, adds a new system call to allow user space to query the namespaces present on the system.

This roundup focuses on the finest web-based food and drink software for Linux. Only free and open source software is eligible for inclusion

The post 10 Best Free and Open Source Web-Based Food and Drink Software appeared first on Linux Today.