Feed aggregator

Seal Security launched Seal OS, a solution designed to automatically fix vulnerabilities in both Linux operating systems and application code. Seal OS delivers long-term support for a wide range of Linux distributions, encompassing Red Hat Enterprise Linux, CentOS, Oracle Linux, Debian, Ubuntu, Alpine and more. This support extends to various deployment models, including containers, virtual machines, and bare metal installations.

The post Seal OS Fixes Vulnerabilities in Linux Operating Systems appeared first on Linux Today.

DalFox is an open-source tool for automating the detection of XSS vulnerabilities. With powerful testing capabilities and a wide range of features, it makes scanning, analyzing parameters, and verifying vulnerabilities faster and easier.

The post Dalfox: Open-source XSS Scanner appeared first on Linux Today.

GNU Emacs is one of the oldest text editors. It was created by Richard Stallman, the founder of the Free Software movement and GNU project. He is also the creator of the GNU C compiler and Debugger.

Emacs is a versatile and highly configurable text editor with hundreds of keybindings and commands. With numerous configuration settings, it’s arguably one of the text editors with a steep learning curve, so most developers, system administrators, and regular Linux users prefer Nano or Vim editors.

Despite the complexity of learning the ins and outs of Emacs, it’s not entirely hostile to beginners, and with the right learning strategy and guidance, you’ll be comfortable in no time.

In this guide, we will hold your hand and walk you through the Emacs editor. By the end of this guide, you will have a decent amount of knowledge to get started with using the Emacs editor.

The post Emacs 30.1 Released: New Features, Installation, and Usage Guide appeared first on Linux Today.

Periodically new devices and technology coming out and it’s important to keep our Linux system kernel up-to-date if we want to get the most of out it.

Moreover, updating the system kernel will allow us to take advantage of new kernel functions, and also it helps us to protect ourselves from vulnerabilities that have been found in earlier versions.

The post How to Install Kernel 6.13 in Ubuntu, Debian and Mint appeared first on Linux Today.

The kernel project has usually been willing to make fundamental internal changes if they lead to a better kernel in the end. The project also, though, goes out of its way to avoid breaking interfaces that have been exposed to user space, even if programs come to rely on behavior that was never documented. Sometimes, those two principles come into conflict, leading to a situation where fixing problems within the kernel is either difficult or impossible. This sort of situation has been impeding performance improvements in the kernel's POSIX timers implementation for some time, but it appears that a solution has been found.

Security updates have been issued by Debian (firefox-esr), Fedora (firefox and vim), Red Hat (firefox), Slackware (mozilla), SUSE (firefox, firefox-esr, kernel, and podman), and Ubuntu (gpac, kernel, linux, linux-aws, linux-gcp, linux-gcp-5.15, linux-gke, linux-hwe-5.15, and redis).

Version:next-20250306 (linux-next) Released:2025-03-06

Inside this week's LWN.net Weekly Edition:

• Front: Firefox forks; Bend and Vine; FineIBT; Guard pages; Fedora's Flatpak packaging; Zotero.
• Briefs: LFS 12.3; FerretDB 2.0; Firefox; Fish 4.0; Incus 6.10; Thunderbird 136.0; Xen 4.20; Quotes; ...
• Announcements: Newsletters, conferences, security updates, patches, and more.

The Google Bug Hunters blog has a detailed description of how a vulnerability in AMD's microcode-patching functionality was discovered and exploited; the authors have also released a set of tools to assist with this kind of research in the future.

Secure hash functions are designed in such a way that there is no secret key, and there is no way to use knowledge of the intermediate state in order to generate a collision. However, CMAC was not designed as a hash function, and therefore it is a weak hash function against an adversary who has the key. Remember that every AMD Zen CPU has to have the same AES-CMAC key in order to successfully calculate the hash of the AMD public key and the microcode patch contents. Therefore, the key only needs to be revealed from a single CPU in order to compromise all other CPUs using the same key. This opens up the potential for hardware attacks (e.g., reading the key from ROM with a scanning electron microscope), side-channel attacks (e.g., using Correlation Power Analysis to leak the key during validation), or other software or hardware attacks that can somehow reveal the key. In summary, it is a safe assumption that such a key will not remain secret forever.

GNU Binutils (short for “Binary Utilities”) is a set of command-line tools for handling object files, executables, and binary data.

The post Introduction to GNU Binutils: A Beginner’s Guide appeared first on Linux Today.

Version 2.0.0 of FerretDB has been released. FerretDB is an open-source alternative to MongoDB, which switched to a non-open license in 2018, built on top of PostgreSQL. This release utilizes the DocumentDB PostgreSQL extension for better performance, adds vector search, and replication.

Functional programming languages have a long association with graphs. In the 1990s, it was even thought that parallel graph-reduction architectures could make functional programming languages much faster than their imperative counterparts. Alas, that prediction mostly failed to materialize. Even though graphs are still used as a theoretical formalism in order to define and optimize functional languages (such as Haskell's spineless tagless graph-machine), they are still mostly compiled down to the same old non-parallel assembly code that every other language uses. Now, two projects — Bend and Vine — have sprung up attempting to change that, and prove that parallel graph reduction can be a useful technique for real programs.

The Xen Project has announced the release of Xen 4.20. This release adds support for AMD Zen 5 CPUs, improved compliance with the MISRA C standard, work on PCI-passthrough on Arm, and more. Xen 4.20 also removes support for Xeon Phi CPUs, which were discontinued in 2018. See the feature list and release notes for more information.

Version 136.0 of the Thunderbird Desktop mail client has been released. The release includes a quick toggle for adapting messages to dark mode, and a new "Appearance" setting to control message threading and sorting order globally, as well as a number of bug fixes. See the security advisory for a full list of security vulnerabilities addressed in Thunderbird 136.0.

Version 12.3 of Linux From Scratch (LFS) has been released, along with Beyond Linux From Scratch (BLFS) 12.3. LFS provides step-by-step instructions on building a customized Linux system entirely from source, and BLFS helps to extend an LFS installation into a more usable system. Notable changes in this release include toolchain updates to GNU Binutils 2.44, GNU C Library (glibc) 2.41, and Linux 6.13.2. The Changelog has a full list of changes since the previous stable release.

Apache NetBeans is a powerful, open-source, and award-winning Integrated Development Environment (IDE) that supports a wide range of programming languages and frameworks.

It is widely used for developing Java-based web, mobile, and desktop applications, as well as for C/C++, PHP, and other languages. With its rich feature set, extensibility through plugins, and support for the latest technologies, NetBeans remains a top choice for developers across platforms like Windows, Linux, and macOS.

The latest release is Apache NetBeans 25, which brings improved performance, enhanced tools, and support for the latest Java and other technologies.

This article will guide you through the steps to install Apache NetBeans 25 on Debian, Ubuntu, and Linux Mint distributions.

The post Apache NetBeans 25: The Ultimate Open-Source IDE for Modern Development appeared first on Linux Today.

Let’s dive into what Docker and Podman are, compare their features, and decide which one is better for your specific use case.

The post Docker vs Podman: Which One Should You Use to Run Your App? appeared first on Linux Today.

Learn how to find and count the total number of file and directory occurrences in a specific directory using the find and wc commands.

The post Counting Number of Files and Directories in a Specific Directory appeared first on Linux Today.

Learn how to use wildcards in Linux, including *, ?, [], and {}, to match filenames efficiently and simplify file searching and management.

The post How to Use Wildcards to Match Filenames in Linux appeared first on Linux Today.

The Framework Desktop is a tiny 4.5L Mini-ITX machine powered by the AMD Ryzen AI Max “Strix Halo” processors with discrete-level Radeon 8060S graphics and 16 CPU cores at 5.1GHz boost clock, up to 128GB LPDDR5x RAM, up to 16TB of storage, and a semi-custom 400W power supply with FSP in a standard Flex ATX form factor.

The post Framework Announces Framework Desktop and 2-in-1 Framework Laptop 12 appeared first on Linux Today.