Feed aggregator

Konstantin Ryabitsev has announced the release of version 0.16.0 of the b4 software-development tool. The biggest change is the addition of bug-tracking support:

The new "b4 bugs" command integrates with git-bug to let you track bug reports alongside your git repository. Bugs are stored as git objects inside the repo, so they travel with the code and can be shared via git push/pull without any external service.

There are also a lot of improvements to b4 review (which was covered here in March), better conflict resolution in b4 shazam, improved history rewriting, and more.

ML4W OS is an Arch Linux-based distribution featuring a heavily customised Hyprland tiling compositor. The project specialises primarily in creating advanced configuration for Hyprland, so called "dotfiles", which are available for installation on several other Arch-based distributions, as well as Fedora and openSUSE. However, the live ML4W OS ISO image is a standalone, full-featured Linux distribution with all Hyprland configuration files, applications, icons, themes and wallpapers included. It can be installed to a hard disk using a custom text-mode system installer. The project also provides extensive documentation about setting up and configuring Hyprland.

Jordan Rife's work involves writing BPF programs for Cilium that interface with Kubernetes networking. As part of that work, he wants to enable BPF programs with appropriate permissions to iterate through the sockets of a different network namespace. He led a session about the idea at the 2026 Linux Storage, Filesystem, Memory-Management, and BPF Summit where the BPF developers in attendance were quick to suggest a number of related alternatives.

Filesystem in Userspace (FUSE) maintainer Miklos Szeredi led a birds-of-a-feather (BoF) discussion about the subsystem at the 2026 Linux Storage, Filesystem, Memory Management, and BPF Summit. In it, he talked about maintenance challenges, proposed features and their status, and his plans for a new FUSE API. There is a lot of interest and activity in the FUSE community these days it seems.

Version:next-20260805 (linux-next) Released:2026-08-05

Jynn Nelson describes the Rust language team's new LLM policy on the Inside Rust blog.

No one except the author is required to read LLM output unless they choose to: LLM output isn't allowed in public docs, PR descriptions, or Github comments unless it's clearly marked; reviewers aren't required to look at LLM PRs if they don't want to.

No one is required to use LLMs to contribute to rust-lang/rust: policies must be written first for humans, and only summarized for machines; LLM reviews cannot substitute for human review or self-review.

You are allowed to generate LLM content that only you see, without disclosure, as long as you do not post it anywhere that you expect us to read or review.

Tribblix is a general-purpose operating system derived from OpenSolaris, OpenIndiana and illumos. The base kernel and commands come from illumos, with everything else rebuilt from scratch. It is a traditional system where software is distributed as SVR4 packages and lightweight window managers are preferred over heavy desktop environments. Xfce is the primary desktop option, with MATE, Enlightenment and various window managers also available for installation. While Tribblix inherits many of the key illumos technologies, such as ZFS, zones, DTrace and SMF, it uses its own build and packaging system.

Security updates have been issued by AlmaLinux (fence-agents, gstreamer1-plugins-good, kernel, kernel-rt, p11-kit, perl-Archive-Tar, perl-DBI, and thunderbird), Debian (aom, botan3, and kernel), Fedora (abrt, coreutils, doctl, kernel, open62541, perl, perl-Devel-Cover, perl-PAR-Packer, and polymake), Mageia (acl and php), Oracle (firefox, frr, kernel, libreswan, nodejs-nodemon, nodejs22, perl-Archive-Tar, php:7.4, php:8.2, rsync, and thunderbird), Red Hat (compat-libtiff3, libpq, libtiff, postgresql, postgresql16, postgresql18, postgresql:12, postgresql:13, postgresql:15, postgresql:16, and postgresql:18), Slackware (stunnel), and SUSE (alloy, alsa, bind, chromedriver, corepack24, ffmpeg-4, golang-github-prometheus-prometheus, google-guest-agent, google-osconfig-agent, kubevirt, libgcrypt, libpng16, multipath-tools, netty, netty-tcnative, nodejs26, openssl-1_1, openssl-3, perl-HTTP-Tiny, perl-YAML-Syck, podman, python-sh, python-ujson, rsyslog, spice-vdagent, thrift, valkey, wpa_supplicant, and xen).

AlterOS is a Russian, general-purpose Linux distribution based on Red Hat Enterprise Linux. It is developed by ALMI PARTNER, a Russian software development company, and available for personal and professional workstations and servers. Some of the features of AlterOS include optimisation of the Linux kernel and the core libraries for modern hardware, the Cinnamon desktop environment, and pre-installed certificates from the Russian Ministry of Digital Development to ensure integration with government systems and compliance with cybersecurity requirements.

Soplos Linux is a set of desktop-oriented Linux distributions based on Debian's "Testing" featuring several popular desktop environments. It offers rolling updates, up-to-date software, a relatively lightweight and customisable desktop, compatibility with older hardware, and various speed and performance optimisation features. The distribution ships with a number of custom applications, such as Soplos Theme Manager, Soplos Plymouth Manager, Soplos Docklike (for adding and removing applications in the dock) and Soplos GRUB Editor.

openKylin is a Chinese desktop Linux distribution which runs the Kylin and UKUI desktop environments. Both Wayland and X11 sessions are available out of the box. The project is a member of the Debian family and can use APT package management tools. It also features a custom package format which is combined with a software centre. openKylin is also a proving ground for custom utilities which assist the user in managing the operating system.

GNOME OS is an experimental, immutable Linux distribution that ships the latest in-development GNOME desktop, core applications and stack. It serves as a reference for developers and testers. It is designed around the modern systemd and GNU-based userland built from the Freedesktop SDK. Initially, GNOME OS used a library and set of utilities called OSTree to deploy the root filesystem and manage updates, but later migrated to "systemd-sysupdate" which offers enhanced immutability, auto-updating, adaptability, factory reset, uniformity and other modernised security properties. GNOME OS can be loaded as a live image in Boxes, VirtualBox, QEMU and other virtualisation software, but it can also be installed on a standard x86_64 hardware. The distribution does not support traditional package management; however, additional software applications can be installed via the Flatpak utility which is supported out of the box.

The AI Security Institute has released a detailed report on an security incident of its own making. The Institute set some LLM agents loose on the Internet with a security challenge; soon they were creating malware-laden pull requests and sock-puppet accounts to promote them.

The agent opened a malicious pull request (PR) to ⟨REPO_A⟩ and pursued a number of strategies to get it merged:

1. Repeatedly commented on the PR with sockpuppet accounts to manufacture consensus and pressure the maintainer into approving with minimal review.
2. Opened a GitHub Issue in another repository (also owned by ⟨PERSON_A⟩) containing a prompt injection for other coding agents. The malicious instructions were addressed to issue-triage AI coding agents and invisible to humans viewing the website.
3. Sent multiple emails to ⟨PERSON_A⟩ and ⟨PERSON_B⟩, with different pretexts to get them to run malicious code. Over the course of the sample, the agent sent five emails, some containing malware, others aimed at persuading a maintainer to accept the pull request.

It would be surprising if this were the only incident of this type; the only real difference here is that the people involved are documenting what happened.

The Amnesic Incognito Live System (Tails) is a Debian-based live DVD/USB with the goal of providing complete Internet anonymity for the user. The product ships with several Internet applications, including web browser, IRC client, mail client and instant messenger, all pre-configured with security in mind and with all traffic anonymised. To achieve this, Incognito uses the Tor network to make Internet traffic very hard to trace.

Version:next-20260804 (linux-next) Released:2026-08-04

The Fedora Council is considering a conflict-of-interest (COI) policy for its decision-making bodies, such as the Fedora Engineering Steering Committee (FESCo), special-interest groups (SIGs), and any other groups or individuals that report to the council and are responsible for decisions that impact the Fedora project. The current draft does not, however, apply to the council itself. The public discussion for the COI policy began on July 23 and seems to be nearing completion, with the council set to discuss the topic again during its meeting on August 13.

Talos is a specialist Linux-based operating system for running Kubernetes, an open-source system for automating deployment, scaling and management of containerised applications. Minimal, immutable and hardened, it does not offer any shell or interactive console; instead, all system management is done via remote Application Programming Interface (API) calls, where messages sent from a client application are protected with mutual Transport Layer Security TLS (mTLS) authentication. Talos also delivers atomic updates, thus maintaining the Linux and Kubernetes versions up-to-date. Talos is developed in the USA by Sidero Labs, Inc.

StepSecurity is reporting the emergence of a new worm affecting npm packages. The design of the worm is nothing new, but the rapidity with which it is exploiting captured npm packager credentials is noteworthy.

TL;DR: A self-propagating worm, which we are calling ChainDrop, is spreading rapidly through the npm ecosystem. So far 435 packages and more than 1,550 compromised versions have been flagged, starting with keyv@6.0.0. If you are using any of the packages listed below, assume your environment is compromised. We are still investigating the full scope; check back on this post for updates.

starkOS is an independently-developed GNU/Linux distribution designed for experienced Linux users. It uses a ports system and the stark package manager to install and update software from source code. The project provides a lightweight live image with Sway Wayland compositor and some basic software on it. The live system does not include an installer; however, starkOS can be installed to a hard disk using one of the rootfs filesystems (with a choice of runit, s6 or SysV init software) provided separately. The project's goal is to develop a Linux distribution that is simple, lightweight, up-to-date and extensible.

The recent discussion on "spawn templates" raised questions about whether it was time to provide an alternative to the classic Unix fork()/exec() pattern for process creation. One idea that was raised there was to shift the template pattern into an interface that could be used to efficiently assemble new processes from bare cloth, without duplicating the parent process. Preferably, that interface would be able to implement posix_spawn(). Li Chen, the author of the spawn-template work, has now responded with a patch series (written with significant LLM assistance) showing what a process-builder API for Linux might look like.