Security updates have been issued by Debian (firefox-esr, flatpak, ngtcp2, ntfs-3g, packagekit, python-geopandas, simpleeval, strongswan, and xdg-dbus-proxy), Fedora (chromium, cups, curl, jq, opkssh, perl-Net-CIDR-Lite, python-cbor2, python-pillow, tinyproxy, xdg-dbus-proxy, and xorg-x11-server-Xwayland), Slackware (libXpm and mozilla), SUSE (botan, chromium, clamav, cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-subscriptions, dovecot24, firefox, flatpak, freeipmi, gdk-pixbuf, glibc, gnome-remote-desktop, go1.25, go1.26, go1.26-openssl, google-cloud-sap-agent, gosec, graphicsmagick, haproxy, kernel, libpng16, libraw, libtasn1, libvncserver, ncurses, nebula, nodejs24, openssl-3, ovmf, pam, pcre2, perl-Authen-SASL, pgvector, plexus-utils, podman, python-cbor2, python-cryptography, python-django, python-gi-docgen, python-pypdf2, python-python-multipart, python311, python311-PyPDF2, python313, qemu, roundcubemail, rust1.94, sqlite3, strongswan, systemd, tar, tigervnc, util-linux, vim, webkit2gtk3, xorg-x11-server, xwayland, and zlib), and Ubuntu (commons-io, libcap2, ntfs-3g, and rapidjson).
Version:next-20260422 (linux-next)
Released:2026-04-22
Redcore Linux explores the idea of bringing the power of Gentoo Linux to the masses. It aims to be a very quick way to install a pure Gentoo Linux system without spending hours or days compiling from source code, and reading documentation. To achieve this goal, Redcore provides a repository with pre-built binary packages which receives continuous updates, following a rolling release model.
There are a number of ongoing efforts to remove kernel code, mostly from
the networking subsystem, as an alternative to dealing with the increase in
security-bug reports from large language models. The proposed removals
include
ISA
and PCMCIA Ethernet drivers, a
pair
of PCI drivers, the
ax25 and amateur
radio subsystem, the
ATM protocols and drivers,
and the
ISDN
subsystem.
Remove the amateur radio (AX.25, NET/ROM, ROSE) protocol
implementation and all associated hamradio device drivers from the
kernel tree. This set of protocols has long been a huge bug/syzbot
magnet, and since nobody stepped up to help us deal with the influx
of the AI-generated bug reports we need to move it out of tree to
protect our sanity.
This
Firefox blog post reports that the Firefox 150 release includes
fixes for 271 vulnerabilities found by the Claude Mythos preview.
Elite security researchers find bugs that fuzzers can't largely by
reasoning through the source code. This is effective, but
time-consuming and bottlenecked on scarce human
expertise. Computers were completely incapable of doing this a few
months ago, and now they excel at it. We have many years of
experience picking apart the work of the world's best security
researchers, and Mythos Preview is every bit as capable. So far
we've found no category or complexity of vulnerability that humans
can find that this model can't.
This can feel terrifying in the immediate term, but it's ultimately
great news for defenders. A gap between machine-discoverable and
human-discoverable bugs favors the attacker, who can concentrate
many months of costly human effort to find a single bug. Closing
this gap erodes the attacker's long-term advantage by making all
discoveries cheap.
CentOS as a group is a community of open source contributors and users which started in 2003 and has been sponsored by Red Hat since 2014. CentOS Linux versions up to CentOS Linux 8 are 100% compatible rebuilds of Red Hat Enterprise Linux, in full compliance with Red Hat's redistribution requirements. In 2020 it was announced CentOS Linux is being discontinued and replaced with CentOS Stream, a developer-focused distribution which acts as a middle-stream between Fedora and Red Hat Enterprise Linux.
The Fedora Project has been wrestling with the question of who should be able to vote in
Fedora elections recently, with project membership being a major topic at
the Fedora Council face-to-face held in early February. Now the
project is considering a new contributor status, "Fedora Verified",
and is looking
to get input on the idea from the community.
What are the proposed benefits? The primary motivation behind
"Fedora Verified" is to build trust-based recognition that grants
elevated, privileged rights within the project. Most notably, this
status would determine eligibility for strategic governance
activities, such as:
- Voting in Fedora community elections.
- Running for leadership or decision-making roles within the project
(i.e., Fedora Council, FESCo, Mindshare Committee, EPEL Steering
Committee).
- (Potential, unplanned) Accessing specific shared project resources
or educational opportunities (e.g., Red Hat training credits).
The blog post includes a list of proposed baseline metrics for
"Verified" status as well as open questions to be decided. A survey
on the topic will be open until May 5.
TUXEDO OS is an Ubuntu-based distribution developed in Germany by TUXEDO Computers GmbH, designed and optimised for the company's own range of Linux-friendly personal computers and notebooks. The distribution uses KDE Plasma as the preferred desktop. Some of the differences between Ubuntu and TUXEDO OS include custom boot menu, the TUXEDO Control Centre, Calamares installer, availability of the Lutris open gaming platform, preference for the PipeWire audio daemon (over PulseAudio), removal of Ubuntu's snap daemon and snap packages, and various other tweaks and enhancements.
GNU/Linux KDu is a Brazilian desktop Linux distribution based on Ubuntu and KDE neon. It features a customised KDE Plasma desktop and a large collection of software applications for daily and technical use, including office and productivity suites, various maintenance, data recovery and hardware diagnostic utilities, as well as tools for remote access and virtualisation. The distribution is localised into Brazilian Portuguese, inclusive of Brazilian data formats, and is suitable for both new and advanced Linux users.
StormOS is a desktop-oriented Linux distribution based on Arch Linux. The project's goal is to build an operating system which is easy-to-install, beginner-friendly and usable out of the box in order to attract new users over to the world of Arch Linux.
Version:next-20260421 (linux-next)
Released:2026-04-21
The open-source world is currently
awash in
reports of LLM-discovered bugs and vulnerabilities, which makes for a lot more
work for maintainers, but many of the current crop are being reported
responsibly with an eye toward minimizing that impact. A recent
report
on an effort to systematically find bugs in
Python extensions
written in C has followed that approach. Hobbyist Daniel Diniz used Claude
Code to find more than 500 bugs of various sorts across nearly a million
lines of code in 44 extensions; he has been working with maintainers to get
fixes upstream and his methodology serves as a great example of how to keep
the human in the loop—and the maintainers out of burnout—when employing LLMs.
umbrelOS is a Debian-based Linux distribution for home servers. It is available for standard 64-bit and Raspberry Pi computers. The distribution features a web-based user interface and an online app store with a large range of applications, anything from web hosting, productivity and finance to media streaming, networking, automation, artificial intelligence, development and Bitcoin mining. umbrelOS is developed by the US-based Umbrel, Inc., which also sells palm-sized personal home computers with up to 4 terabytes of storage.
Security updates have been issued by AlmaLinux (freerdp, kernel, and kernel-rt), Debian (mupdf, opam, simpleeval, and xdg-dbus-proxy), Mageia (firefox, thunderbird and libtiff), Red Hat (containernetworking-plugins, gvisor-tap-vsock, nodejs22, nodejs:20, nodejs:22, perl-XML-Parser, python3.11, python3.9, runc, and skopeo), and SUSE (bind, buildah, cockpit-subscriptions, container-suseconnect, containerd, corosync, cosign, docker, dovecot24, flatpak, freeipmi, gegl, GraphicsMagick, helm, ImageMagick, kubernetes, kubernetes-old, libpng15, LibVNCServer, ncurses, nodejs22, opensc, openvswitch, patterns-glibc-hwcaps, podman, python, python310, python312, python315, rekor, rootlesskit, roundcubemail, and runc).
Artix Linux is a fork (or continuation as an autonomous project) of the Arch-OpenRC and Manjaro-OpenRC projects. Artix Linux offers a lightweight, rolling-release operating system featuring the OpenRC init software. (Alternative spins feature the runit and s6 init software.) Several editions of Artix Linux are available, featuring either a plain command line or one of several desktop environments.
Pages
