Security updates have been issued by AlmaLinux (frr, ldns, mingw-glib2, and perl-Archive-Tar), Debian (ruby2.7), Fedora (borgbackup, nebula, python-nh3, rust-ammonia, and seamonkey), Mageia (librabbitmq, libvncserver, packages, perl, perl-GD, perl-Unicode-LineBreak, squid, and unbound), Oracle (compat-libtiff3, frr, gstreamer1-plugins-good, javapackages-tools:201801, libreswan, nodejs:22, nodejs:24, p11-kit, perl-Archive-Tar, perl-DBI, php, pki-deps:10.6, and python-tornado), and SUSE (aws-iam-authenticator, bind, containerd, gawk, google-cloud-sap-agent, ignition, ImageMagick, java-11-openjdk, libpng16, libssh, mcphost, nginx, openssh, openssl-1_1, perl-DBI, perl-HTTP-Date, perl-Net-DNS, python-urwid, python3-dulwich, python312, python313, python3, python313-pydantic, python313-sentry-sdk, rrdtool, s390-tools, samba, spice-vdagent, vim, and xen).
Exton Linux is a set of over 15 Linux distributions based on Arch Linux, CRUX, Debian, deepin, Fedora, openSUSE, Puppy Linux and Slackware Linux. They are designed to be lightweight, fast and easy to use. Exton Linux comes with popular pre-configured desktop environments and a set of pre-installed software packages, including web browsers, office suites, multimedia players and development tools. It also includes various customization options, such as the ability to change the appearance of the desktop and install additional software packages. Exton Linux is available in several editions, each tailored to a specific use case, such as general-purpose computing, gaming, multimedia or servers.
OmegaLinux is an Arch-based, rolling-release Linux distribution featuring the lightweight LXDE desktop. It is suitable for installation on older computers with as little as 1 GB of memory. OmegaLinux was originally based on Lubuntu, but it was rebuilt on top of an Arch Linux base in February 2026.
ShrikeLinux is an Arch Linux-based distribution featuring a customised Xfce desktop. It offers three separate edition with different Linux kernels: a long-term supported Linux kernel for servers and workstations that require rock-solid stability, the latest stable Linux kernel as provided upstream by Arch Linux, and a "Zen" Linux kernel optimised for performance, gaming and power use. The distribution is developed by Free and Open Source Software Community in Uganda.
Lilidog is a lightweight desktop Linux distribution based on Debian "Stable" and featuring a customised Openbox window manager. It incorporates the tint2 desktop panel, the Thunar file manager and the xfce4-terminal terminal emulator. Other window managers, including Awesome, dwm, i3, JWM and sowm, are also available for installation. Besides the standard Lilidog, the project provides two other editions of the distribution - the "Beardog" variant which starts without a display manager on login, and the "Waydog" flavour which uses the Wayland display server and offers a choice between the labwc and Sway Wayland compositors.
TUXEDO OS is an Ubuntu-based distribution developed in Germany by TUXEDO Computers GmbH, designed and optimised for the company's own range of Linux-friendly personal computers and notebooks. The distribution uses KDE Plasma as the preferred desktop. Some of the differences between Ubuntu and TUXEDO OS include custom boot menu, the TUXEDO Control Centre, Calamares installer, availability of the Lutris open gaming platform, preference for the PipeWire audio daemon (over PulseAudio), removal of Ubuntu's snap daemon and snap packages, and various other tweaks and enhancements.
CentOS as a group is a community of open source contributors and users which started in 2003 and has been sponsored by Red Hat since 2014. CentOS Linux versions up to CentOS Linux 8 are 100% compatible rebuilds of Red Hat Enterprise Linux, in full compliance with Red Hat's redistribution requirements. In 2020 it was announced CentOS Linux is being discontinued and replaced with CentOS Stream, a developer-focused distribution which acts as a middle-stream between Fedora and Red Hat Enterprise Linux.
John MacFarlane has published a lengthy
retrospective to commemorate twenty years of the Pandoc document converter.
On August 3, 2006, I uploaded the first version of pandoc to my
website, releasing it under the free GPL license. Pandoc 0.1 consisted
of about 3000 lines of Haskell code, with no dependencies aside from
GHC's standard library. It could convert Markdown, reStructuredText,
HTML, and LaTeX documents into any of these formats, plus RTF or S5. I
had no idea at the time that this would just be the first of over two
hundred releases over the next twenty years; that the project would
become the most
popular program written in Haskell; that I would spend countless
hours on bug-fixes, improvement, and project management; that I would
collaborate with programmers in many other countries; that pandoc
would come to support over fifty document formats; that it would allow
automatic generation of citations and bibliographies; that it would
become integrated into academic writing tools like Quarto and Jupyter Notebook; that it would be
installed on millions of computers around the world.
How did this happen? I want to take advantage of pandoc's birthday
to tell the story of the project, as best I can remember it.
Aeon is an immutable desktop Linux distribution based on openSUSE. It is a relatively small, low-maintenance system with automated daily updates, thus recommended for Linux beginners or "lazy developers". Some of the distribution's other features include a custom system installer called Transactional Installation Kit (TIK), a pre-configured GNOME desktop, out-of-the-box support for Flatpak packages, Distrobox configured to launch Tumbleweed containers, and automatic rollbacks to its last working state.
For those of us with a long memory: John Goerzen has
announced
the release of C-Kermit 11, the first release of this file-transfer
utility in 15 years.
As Debian maintainer of Kermit, I noticed some areas where it
wasn't matching modern expectations. One area was, not surprising
for a project of its age, security. Another area was that its
character set or line-ending conversions are usually not desired
now; we are used to byte-identical binary transfers, and the
defaults caused confusion and even some rare instances of data
corruption. So I started making a few patches last year.
See the
changelog for details on the work that has been done.
Most of us probably haven't thought about C-Kermit in years (if ever), but
there was a time when it was an essential tool for moving files between
machines.
Version:next-20260803 (linux-next)
Released:2026-08-03
The
Filesystem in
Userspace (FUSE) subsystem provides a way to service filesystem
requests from a user-space server, which moves the format-handling code out
of the kernel. The FUSE server can
use the
io_uring
facility for better performance, but Bernd Schubert is concerned that
memory is being wasted because the current implementation has a single,
large buffer size that is excessive for small I/O operations. He led a discussion on that topic
in the filesystem track of the 2026
Linux Storage,
Filesystem, Memory Management, and BPF Summit in Zagreb, Croatia.
The JFrog blog
examines
some reported vulnerabilities in SQLite, some of which made their way
into high-profile vulnerability databases, that turned out to be entirely
fabricated by LLMs.
These LLM slop CVEs can cause organizations to waste time
investigating and patching vulnerabilities that do not actually
exist, as well as polluting vulnerability databases. In
environments where Critical vulnerabilities are automatically
prioritized or tickets are opened based on vulnerability scores,
such fabricated CVEs can turn into a real burden.
In environments where AI is used to automate vulnerability triage
and remediation this becomes even more concerning. An AI agent that
encounters a fabricated CVE may attempt to locate the vulnerable
function, generate a patch, or recommend changes based on code that
does not even exist. Instead of helping security teams remediate
real vulnerabilities, it can lead them down a completely wrong
path, potentially introducing unnecessary changes and wasting time.
Calculate Linux is a Gentoo-based family of three distinguished distributions. Calculate Directory Server (CDS) is a solution that supports Windows and Linux clients via LDAP + SAMBA, providing proxy, mail and Jabbers servers with streamlined user management. Calculate Linux Desktop (CLD) is a workstation and client distribution (with a choice of Cinnamon, KDE Plasma, LXQt, MATE or Xfce desktops) that includes a wizard to configure a connection to Calculate Directory Server. Calculate Linux Scratch (CLS) is a live CD with a build framework for creating a custom distribution.
Greg Kroah-Hartman has announced the release of the 7.1.6, 6.18.42, 6.12.101, and 6.6.148 stable kernels. Each contains
hundreds of patches—the 7.1.6 kernel has more than
700—with fixes throughout the tree. Users are advised to
upgrade.
The release of NetBSD 11.0, the 19th major version of the operating
system, has been announced. There are
many changes and enhancements since the 10.1 release, including a new
port to RISC-V, better support for Linux system calls in compat_linux(),
as well as improvements to the NPF
firewall.
As you are probably aware, the number of security issues found or
suspected everywhere has massively increased with the advent of AI
tools. As a consequence, we can't publish a release without open
issues. Instead of delaying the release further to fix them (new ones
are being reported all the time), we've instead chosen to be
transparent about this.
See the full release
notes for links to the binary distributions and links to the full
change logs.
T4n OS is a lightweight, fast and minimalist Linux distribution based on Void Linux. It uses a vanilla Xfce desktop. Besides some of the standard characteristics inherited from upstream, such as rolling release model, XBPS package manager, and runit init system, the project also features VUR (Void User Repository), a software repository concept inspired by Arch's AUR (Arch User Repository).
Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, fence-agents, kernel, kernel-rt, openssh, osbuild-composer, perl-Archive-Tar, perl-DBI, perl:5.32, pipewire, python-pillow, qemu-kvm, unbound, and vim), Debian (chromium, incus, kernel, kissfft, libgd2, libmodbus, libssh, node-tar, php8.4, poppler, python-authlib, sslh, and starlette), Fedora (borgbackup, coturn, curl, exim, fuse-overlayfs, gh, GitPython, goaccess, lemonldap-ng, libgit2, nextcloud, nsd, php, postgresql16, python3.12, rabbitmq-server, rust-libgit2-sys, and xen), Mageia (bluez, firmware, kernel, kmod, wireless-regdb), Oracle (buildah, compat-libtiff3, dovecot, fence-agents, firefox, gimp, glibc, grafana, gstreamer1-plugins-bad-free, java-25-openjdk, kernel, libgcrypt, libtiff, libXfont2, nodejs24, nodejs:22, nodejs:24, openssh, openssl, PackageKit, pipewire, python-pillow, rest, sssd, vim, and yelp), SUSE (bind, chromium, dnsdist, gdk-pixbuf-loader-libheif, gio-branding-upstream, google-guest-agent, govulncheck-vulndb, GraphicsMagick, ignition, ImageMagick, keybase-client, kronosnet, libblkid-devel, libntpc1, libpng16, nano, openssh, openssl-1_0_0, openssl-3, openvpn, PackageKit, perl-mojolicious, php8, python-nltk, python313-asteval, python313-certifi, python313-GitPython, python313-huggingface-hub, rsyslog, tomcat, tomcat10, tomcat11, traefik2, valkey, warewulf4, webkit2gtk3, and yq), and Ubuntu (linux-intel-iotg).
Linux Q83 is a desktop Linux distribution based on Debian's "Stable" branch. Depending on the edition, it comes either with the Cinnamon desktop environment (a fork of GNOME created by Linux Mint), or COSMIC (a modern graphical desktop interface written in the Rust programming language, developed by System76). The distribution is available for Raspberry Pi and Radxa Orion O6 single-board computers, as well as standard desktops and workstations. Linux Q83 also comes with its own lightweight and resource-efficient web browser called W3.
RakuOS is an immutable Linux distribution based on Fedora, with a choice of KDE Plasma, GNOME, niri, and COSMIC desktops. It combines an immutable, read-only base system with the full package flexibility of a traditional Linux distribution. While the core system updates atomically and can be instantly rolled back, the system's persistent overlay lets the user install any package, either through the dnf package manager or the distribution's own software center called RakuOS Software. Installation of Flatpak packages is also supported. RakuOS uses the performance-optimised p03 Linux kernel and also includes a graphical CPU scheduling utility to fine-tune the system for gaming, workloads or power efficiency use cases.
Pages