Guix System (formerly Guix System Distribution, or GuixSD) is a Linux-based, stateless operating system that is built around the GNU Guix package manager. The operating system provides advanced package management features such as transactional upgrades and roll-backs, reproducible build environments, unprivileged package management, and per-user profiles. It uses low-level mechanisms from the Nix package manager, but packages are defined as native Guile modules, using extensions to the Scheme language.
The
Linux Kernel Runtime Guard (LKRG) is a out-of-tree loadable kernel module that
attempts to detect and report violations of the kernel's internal invariants,
such as might be caused by an in-progress security exploit or a rootkit.
LKRG has been experimental since its
initial release in 2018. In September
2025, the project
announced
the 1.0 version. With the promises of stability that version brings, users might want more
information to decide whether to include it in their kernel.
OpenMediaVault is a Network-Attached Storage (NAS) solution based on Debian GNU/Linux. It contains services like SSH, (S)FTP, SMB/CIFS, DAAP media server, rsync, BitTorrent and many more. Thanks to a modular design it can be enhanced via plugins. OpenMediaVault is primarily designed to be used in home environments or small home offices, but is not limited to those scenarios. It is a simple and easy-to-use out-of-the-box solution that will allow everyone to install and administrate a Network-Attached Storage without deeper knowledge.
Version:next-20260122 (linux-next)
Released:2026-01-22
ReactOS, an open-source project
to develop an operating system that is compatible with Microsoft
Windows NT applications and drivers, is celebrating 30
years since the first commit to its source tree. In that time
there have been more than 88,000 commits from 301 contributors, for a
total of 14,929,578 lines of code. There is, of course, much left to
do.
It's been such a long journey that many of our contributors today,
including myself, were not alive during this event. Yet our mission to
deliver "your favorite Windows apps and drivers in an open-source
environment you can trust" continues to bring people together. [...]
We're continuing to move ReactOS forward. Behind the scenes there are
several out-of-tree projects in development. Some of these exciting
projects include a new build environment for developers (RosBE), a new
NTFS driver, a new ATA driver, multi-processor (SMP) support, support
for class 3 UEFI systems, kernel and usermode address space layout
randomization (ASLR), and support for modern GPU drivers built on
WDDM.
Version
1.93.0 of the Rust programming language has been released. Notable
changes include in updated version of the bundled musl library,
thread-local storage for the global allocator, some asm!
improvements, and a number of newly stabilized APIs.
Security updates have been issued by AlmaLinux (gpsd), Debian (inetutils and modsecurity-crs), Fedora (cpp-httplib, curl, mariadb11.8, mingw-libtasn1, mingw-libxslt, mingw-python3, rclone, and rpki-client), Oracle (gimp, glib2, go-toolset:rhel8, golang, kernel, mariadb-devel:10.3, and thunderbird), Red Hat (buildah, go-toolset:rhel8, golang, grafana, kernel, kernel-rt, multiple packages, openssl, osbuild-composer, podman, and skopeo), Slackware (bind), SUSE (ffmpeg-4, libsodium, libvirt, net-snmp, open-vm-tools, ovmf, postgresql17, postgresql18, python-FontTools, python-weasyprint, and webkit2gtk3), and Ubuntu (glib2.0 and opencc).
SmartOS is an open-source UNIX-like operating system based on illumos, a community fork of OpenSolaris. It features four technologies - ZFS (a combined file system and logical volume manager), DTrace (a dynamic tracing framework for troubleshooting kernel and application problems), Zones (a lightweight virtualisation solution), KVM and bhyve (two full virtualisation solutions for running a variety of guest operating systems, including Linux, Windows, BSD and Plan9). SmartOS is designed to be particularly suitable for building clouds and generating appliances.
KDE neon is a Ubuntu-based Linux distribution and live DVD featuring the latest KDE Plasma desktop and other KDE community software. Besides the installable DVD image, the project provides a rapidly-evolving software repository with all the latest KDE software. Two editions of the product are available - a "User" edition, designed for those interested in checking out the latest KDE software as it gets released, and a "Developer's" edition, created as a platform for testing cutting-edge KDE applications.
Talos is a specialist Linux-based operating system for running Kubernetes, an open-source system for automating deployment, scaling and management of containerised applications. Minimal, immutable and hardened, it does not offer any shell or interactive console; instead, all system management is done via remote Application Programming Interface (API) calls, where messages sent from a client application are protected with mutual Transport Layer Security TLS (mTLS) authentication. Talos also delivers atomic updates, thus maintaining the Linux and Kubernetes versions up-to-date. Talos is developed in the USA by Sidero Labs, Inc.
EcoOS is an Arch-based Linux distribution featuring a highly customised Xfce desktop with an ability to arrange open windows in a tiling layout. It comes with custom-built AGES EcoOS system installer and application launcher, as well as various "enhanced" versions of popular utilities, including the file manager (Eco File Manager) and the terminal emulator (Eco Terminal). The distribution's package manager is pre-configured to provide additional software from the StormOS project, as well as its own application repository.
Inside this week's LWN.net Weekly Edition:
- Front: Singularity; fsconfig(); io_uring restrictions; GPG vulnerabilities; slab allocator; AshOS.
- Briefs: Pixel exploit; telnetd exploit; OzLabs; korgalore; Firefox Nightly RPMs; Forgejo 14.0; Pandas 3.0; Wine 11.0; Quotes; ...
- Announcements: Newsletters, conferences, security updates, patches, and more.
As part of the process of writing man pages for the
"new" mount API, which has been available in the
kernel since 2019, Aleksa Sarai encountered a number of places where the
fsconfig()
system call—for configuring filesystems before mounting—needs to be cleaned up. In the 2025 Linux Plumbers Conference
(LPC)
session
that he led, Sarai wanted to discuss some of the problems he found,
including at least one with security implications. The idea of the session
was for him to describe the various bugs and ambiguities that he had found,
but he also wanted attendees to raise other problems they had with the
system call.
Version
3.0.0 of the pandas data
analysis and manipulation library for Python has been
released. Notable changes include a dedicated
string type (str), new "copy-on-write" behavior, and much more. This release also removes
a number of features that were deprecated in prior versions of pandas;
developers are advised to upgrade to pandas 2.3 and ensure code is
working without warnings before moving to 3.0. See the release
notes for the full changelog.
Version:next-20260121 (linux-next)
Released:2026-01-21
At the 39th
Chaos Communication Congress (39C3) in December, researchers Lexi
Groves ("49016") and Liam Wachter said that they had discovered a
number of flaws in popular implementations of OpenPGP email-encryption standard. They also released an
accompanying web site, gpg.fail, with
descriptions of the discoveries. Most of those
presented were found in GNU Privacy
Guard (GPG), though the pair also discussed problems in age,
Minisign, Sequoia, and the OpenPGP
standard (RFC 9580) itself. The discoveries have spurred some interesting
discussions and as well as responses from GPG and Sequoia
developers.
Security updates have been issued by AlmaLinux (brotli and container-tools:rhel8), Debian (python-keystonemiddleware and python3.9), Fedora (cef, freerdp, golang-github-tetratelabs-wazero, and libpcap), Oracle (brotli, gpsd, kernel, and transfig), Red Hat (freerdp, golang, java-11-openjdk with Extended Lifecycle Support, libpng, libssh, mingw-libpng, and runc), SUSE (abseil-cpp, alloy, apache2, bind, cpp-httplib, curl, erlang, firefox, gpg2, grafana, haproxy, hauler, hawk2, libblkid-devel, libpng16, libraylib550, python-keystonemiddleware-doc, python-uv, python-weasyprint, squid, and tomcat), and Ubuntu (crawl and iperf3).
Konstantin Ryabitsev has put up
a
blog post about korgalore, a tool he has written to circumvent delivery
problems experienced by kernel developers using the large, centralized
email systems.
We cannot fix email delivery, but we can sidestep it
entirely. Public-inbox archives like lore.kernel.org store all
mailing list traffic in git repositories. In its simplest
configuration, korgalore can shallow-clone these repositories
directly and upload any new messages straight to your mailbox using
the provider's API.
Pages
