Greg Kroah-Hartman has announced the release of the 5.4.302 stable kernel:
This is the LAST 5.4.y release. It is now end-of-life and should not
be used by anyone, anymore. As of this point in time, there are 1539
documented unfixed CVEs for this kernel branch, and that number will
only increase over time as more CVEs get assigned for kernel bugs.
For the curious, Kroah-Hartman has also provided
a list of the unfixed CVEs for 5.4.302.
Flora Linux-libre is a Linux distribution that uses the Linux-libre kernel, a modified version of the Linux kernel that contains no binary blobs, obfuscated code, or code released under proprietary licenses. It also excludes any non-free firmware. The project rebuilds Debian's "Stable" and some other Debian derivatives, such as MX Linux, and creates a "libre" flavour of those distributions with either MATE or Xfce desktops. Flora Linux-libre also comes with snapshot tools and installers that enable easy remastering of the distribution, as well as uim (short for universal input method), a multilingual input method framework.
Version:next-20251203 (linux-next)
Released:2025-12-03
Oracle Linux is an enterprise-class Linux distribution supported by Oracle and built from source packages for Red Hat Enterprise Linux (RHEL). Some of the special features of Oracle Linux include a custom-build and rigorously-tested Linux kernel called "Oracle Unbreakable Kernel", tight integration with Oracle's hardware and software products including most database applications, and "zero downtime patching" - a feature that enables administrators to update the kernel without a reboot.
Arkane Linux is an immutable, atomic, Arch-based distribution which aims to provide a GNOME-centered experienced with minimal, yet full-featured and non-intrusive defaults. It provides a stock GNOME Shell bundled exclusively with core applications required to offer a minimal GNOME desktop experience. Arkane Linux serves primarily as a reference implementation, development environment, and as the developer's personal configuration tool to aid with work on the project's immutable system management toolkit called "Arkdep".
Let's Encrypt has announced
that it will be reducing the validity period of its certificates from
90 days to 45 days by 2028:
Most users of Let's Encrypt who automatically issue certificates
will not have to make any changes. However, you should verify that
your automation is compatible with certificates that have shorter
validity periods.
To ensure your ACME client renews on time, we recommend using ACME
Renewal Information (ARI). ARI is a feature we've introduced to help
clients know when they need to renew their certificates. Consult your
ACME client's documentation on how to enable ARI, as it differs from
client to client. If you are a client developer, check out this
integration guide.
If your client doesn't support ARI yet, ensure it runs on a
schedule that is compatible with 45-day certificates. For example,
renewing at a hardcoded interval of 60 days will no longer be
sufficient. Acceptable behavior includes renewing certificates at
approximately two thirds of the way through the current certificate's
lifetime.
Manually renewing certificates is not recommended, as it will need
to be done more frequently with shorter certificate lifetimes.
The designers of the
Zig programming language have been working to find a
suitable design for asynchronous code for some time.
Zig is a carefully minimalist language, and its
initial design for
asynchronous I/O did not fit well with its other
features. Now, the project has
announced (in a Zig SHOWTIME video) a new approach to asynchronous I/O that
promises to solve the
function coloring problem, and allows writing code that will execute
correctly using either synchronous or asynchronous I/O.
Security updates have been issued by Fedora (gnutls, libpng, mingw-python3, python-spotipy, source-to-image, unbound, and webkitgtk), Mageia (libpng), SUSE (bash-git-prompt, gitea-tea, java-17-openjdk, java-21-openjdk, kernel, openssh, python, and shadowsocks-v2ray-plugin, v2ray-core), and Ubuntu (binutils, openjdk-17-crac, openjdk-21-crac, and openjdk-25-crac).
CentOS as a group is a community of open source contributors and users which started in 2003 and has been sponsored by Red Hat since 2014. CentOS Linux versions up to CentOS Linux 8 are 100% compatible rebuilds of Red Hat Enterprise Linux, in full compliance with Red Hat's redistribution requirements. In 2020 it was announced CentOS Linux is being discontinued and replaced with CentOS Stream, a developer-focused distribution which acts as a middle-stream between Fedora and Red Hat Enterprise Linux.
GNOME OS is an experimental, immutable Linux distribution that ships the latest in-development GNOME desktop, core applications and stack. It serves as a reference for developers and testers. It is designed around the modern systemd and GNU-based userland built from the Freedesktop SDK. Initially, GNOME OS used a library and set of utilities called OSTree to deploy the root filesystem and manage updates, but later migrated to "systemd-sysupdate" which offers enhanced immutability, auto-updating, adaptability, factory reset, uniformity and other modernised security properties. GNOME OS can be loaded as a live image in Boxes, VirtualBox, QEMU and other virtualisation software, but it can also be installed on a standard x86_64 hardware. The distribution does not support traditional package management; however, additional software applications can be installed via the Flatpak utility which is supported out of the box.
Version:next-20251202 (linux-next)
Released:2025-12-02
openmamba GNU/Linux is a distribution for personal computers that can be used on notebooks, desktops, servers and Raspberry Pi computers. It works as an installable live DVD/USB images, offering one of two desktop environments: KDE Plasma or LXQt. The distribution uses RPM packages managed through the DNF package manager. Software can also be fetched and installed from Flatpak repositories.
Voyager Live is an Xubuntu-based distribution and live DVD showcasing the Xfce desktop environment. Its features include the Avant Window Navigator or AWN (a dock-like navigation bar), Conky (a program which displays useful information on the desktop), and over 300 photographs and animations that can be used as desktop backgrounds. The project also develops several other editions of Voyager Live - a "GE" edition with GNOME Shell, a "GS" variant for Gamers, and a separately-maintained flavour based on Debian's "stable" branch.
LainOS is a lightweight, Arch Linux-based desktop distribution aimed at developers, tinkerers and hackers. As a choice of graphical environments, it offers the Hyprland Wayland compositor and the Openbox window manager. The distribution also features the Calamares system installer, personalised yet functional visual aesthetics, and a selection of useful software. LainOS is intended for users who share the admiration of Serial Experiments Lain, a Japanese anime television series.
HydraPWK GNU/Linux is a Debian-based distribution designed primarily for penetration testing. It contains a collection of penetration testing tools, including tools for information gathering, scanning, stress testing, exploitation, cracking, reversing engineering and forensics. Formerly known as BlackTrack, the distribution uses a real-time Linux kernel and features the Xfce desktop.
FreeBSD is a UNIX-like operating system for the i386, amd64, IA-64, arm, MIPS, powerpc, ppc64, PC-98 and UltraSPARC platforms based on U.C. Berkeley's "4.4BSD-Lite" release, with some "4.4BSD-Lite2" enhancements. It is also based indirectly on William Jolitz's port of U.C. Berkeley's "Net/2" to the i386, known as "386BSD", though very little of the 386BSD code remains. FreeBSD is used by companies, Internet Service Providers, researchers, computer professionals, students and home users all over the world in their work, education and recreation. FreeBSD comes with over 20,000 packages (pre-compiled software that is bundled for easy installation), covering a wide range of areas: from server software, databases and web servers, to desktop software, games, web browsers and business software - all free and easy to install.
d77void GNU/Linux is a Void-based Linux distribution created to demonstrate the capabilities of Void's tools, such as void-mklive and void-packages. Originally initiated as a Void respin with the Fluxbox window manager, the project has evolved to offer a wide range of window manager, Wayland compositor and desktop environment options, including Awesome, bspwm, Cosmic, dwm, Fluxbox, herbstluftwm, Hyprland, i3wm, JWM, labwc, LeftWM, LXQt, Niri, Openbox, Qtile, River, Sway, Wayfire and Xfce. The distribution can be installed to a hard disc with the text-mode d77void-installer.
There are many possible programmer mistakes that are not caught by the
minimal checks specified by the C language; among those is passing an array
of the wrong size to a function. A recent attempt to add some safety
around array parameters within the crypto layer involved the use of some
clever tricks, but it turns out that clever tricks are unnecessary in this
case. There is an obscure C feature that can cause this checking to
happen, and it is already in use in a few places within the kernel.
Pages
