Feed aggregator

The Arch Linux DevOps team has announced that adoption of orphaned packages in the Arch User Repository (AUR) has been disabled due to "the current influx of malicious package adoptions and follow-up commits made via the AUR". Michael Taggart has posted a brief analysis of the malware being added to a long list of packages in this round of attacks. The payload appears to be an remote-access trojan (RAT) that takes commands over the Tor network and attempts to upload a wide range of user data.

The project had suspended new account registration in June. That followed a campaign in which an attacker or attackers created new accounts to adopt orphaned packages and push malicious updates to them that would install malware on user systems. AUR registration was reopened on July 13 after the DevOps team added some minor, and apparently ineffective, restrictions on creating new accounts.

Security updates have been issued by AlmaLinux (kernel, nodejs-nodemon, nodejs22, nodejs24, openssh, and vim), Debian (gsasl and ruby-rack), Fedora (dokuwiki, lego, libnbd, nasm, pack, unbound, and valkey), Mageia (389-ds-base, libxfont2, nghttp2, and perl-DBI), SUSE (apptainer, bind, ffmpeg-7, freerdp, google-osconfig-agent, graphicsmagick, helm, ImageMagick, java-17-openjdk, java-25-openjdk, keybase-client, kubernetes1.34-apiserver, kubernetes1.35-apiserver, kubernetes1.36-apiserver, kubevirt1.8-container-disk, libarchive, logcli, net-tools, openssl-3, PackageKit, perl-Net-DNS, prometheus-ha_cluster_exporter, python-dulwich, python-sqlparse, python-urwid, python3-pyOpenSSL, python313, python3, runc, s2n, tomcat, tomcat10, tomcat11, and valkey), and Ubuntu (libinput, linux-intel-iot-realtime, linux-intel-iotg-5.15, openssl, python2.7, python3.5, and ruby-sinatra).

Linuxfx (also known as Winux or Wubuntu) is a Brazilian Linux distribution based on Ubuntu. It ships with an intuitive Cinnamon desktop user interface designed to facilitate migration of users from Windows. It includes a video management system called Sentinela, a computer vision software with video analytics and software for access control (facial recognition and automatic number plate recognition), object detection, gender, age and mood detection. Other features of the distribution include a new personal assistant, a WX theme for desktop and system applications, and compatibility with software written for Windows (.exe and .msi) through a Wine port. Following the release of Linuxfx 10.6 the distribution became a commercial offering.

Founded in 2014 by Oliver Pinter and Shawn Webb, HardenedBSD is a security-enhanced fork of FreeBSD. The HardenedBSD Project is implementing many exploit mitigation and security technologies on top of FreeBSD. The project started with Address Space Layout Randomization (ASLR) as an initial focal point and is now implementing further exploit mitigation techniques.

Version:next-20260730 (linux-next) Released:2026-07-30

Linux provides a system call (mkdir()) to create a directory, and a few variants of open() that can open a directory. There is, however, no system call in Linux that can create and open a directory in a single, race-free call. Jori Koolstra has been working on remedying that situation, most recently by repurposing a set of open() flags that currently return an error. There are, however, concerns that show just how hard it can be to create user-space interfaces that do not present traps for application developers.

Greg Kroah-Hartman has announced the release of the 6.18.41, 6.12.100, 6.6.147, 6.1.180, 5.15.213, and 5.10.262 stable kernels.

Each of these kernels contains a single fix for a use-after-free vulnerability (CVE-2026-64560). Users of these kernels are advised to upgrade.

Security updates have been issued by AlmaLinux (gstreamer1-plugins-bad-free, libtiff, libXfont2, nodejs:22, nodejs:24, and rest), Debian (expat and nss), Fedora (libssh, nginx, nginx-mod-brotli, nginx-mod-fancyindex, nginx-mod-headers-more, nginx-mod-modsecurity, nginx-mod-naxsi, nginx-mod-vts, nodejs24, perl-HTTP-Date, proftpd, squid, unbound, and wordpress), Oracle (c-ares, edk2, freerdp, go-fdo-server, libreswan, mariadb-connector-c, and nginx), SUSE (alloy, apache-commons-lang3, google-guice, maven, maven-resolver, xmvn, apache-sshd, apptainer, avahi, distribution, glib2, go1.26-openssl, go1.25-openssl, go1.24-openssl, go1.23-openssl, go1.22-openssl, go1.26, go1.25, go1.24, go1.23, go1.22, go1.21, gstreamer-plugins-bad, helm, ImageMagick, java-17-openjdk, java-25-openjdk, liboqs, oqs-provider, libssh, nginx, nm-configurator, nmap, openssl-3, openvpn, PackageKit, perl, perl-DBI, perl-HTTP-Date, perl-XML-Bare, python-msgpack-python, python-sh, python-ujson, python-urllib3, runc, samba, sssd, wget, wpa_supplicant, and xen), and Ubuntu (linux-nvidia, linux-nvidia-7.0 and linux-nvidia-6.17).

Version:6.18.41 (longterm) Released:2026-07-30 Source:linux-6.18.41.tar.xz PGP Signature:linux-6.18.41.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.18.41

Version:6.12.100 (longterm) Released:2026-07-30 Source:linux-6.12.100.tar.xz PGP Signature:linux-6.12.100.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.12.100

Version:6.6.147 (longterm) Released:2026-07-30 Source:linux-6.6.147.tar.xz PGP Signature:linux-6.6.147.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.147

Version:6.1.180 (longterm) Released:2026-07-30 Source:linux-6.1.180.tar.xz PGP Signature:linux-6.1.180.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.1.180

Version:5.15.213 (longterm) Released:2026-07-30 Source:linux-5.15.213.tar.xz PGP Signature:linux-5.15.213.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.15.213

Version:5.10.262 (longterm) Released:2026-07-30 Source:linux-5.10.262.tar.xz PGP Signature:linux-5.10.262.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.10.262

PCLinuxOS is a user-friendly Linux distribution with out-of-the-box support for many popular graphics and sound cards, as well as other peripheral devices. The bootable live DVD provides an easy-to-use graphical installer and the distribution sports a wide range of popular applications for the typical desktop user, including browser plugins and full multimedia playback. Addlocale to add support to many languages and Mylivecd to create a customised live ISO.

Inside this week's LWN.net Weekly Edition:

• Front: Hazard pointers; DFSG team; Swap devices; Netkit and BPF; BPF inlined functions; Fedora GRUB; gccrs.
• Briefs: RIP Dan Williams; Debian LLM resolution; Fedora 45 process; Codeberg LLM policy; GCC LLM policy; GNU Binutils 2.47; GNU C Library 2.44; Wayfire 0.11; Quotes; ...
• Announcements: Newsletters, conferences, security updates, patches, and more.

NethSecurity is a full-featured open-source Linux firewall that streamlines network security deployment in just a few clicks. NethSecurity is a spin-off of the

StratOS Linux is an Arch-based Linux distribution which uses scripts from Bedrock Linux to include various packages and repositories from other Linux distributions. It provides several desktop variants featuring the GNOME desktop as well as the Hyprland and the Niri Wayland compositors. The project also develops several custom tools, such as StratVIM (a fork of the Neovim text editor), Rockers (a custom package manager wrapper able to fetch and install binary and source packages from other Linux distributions and from Flatpaks), Stratmacs (a custom Emacs configuration), grab (a fetch script), and Maneki-Neko (a Welcome application).

AUSTRUMI (Austrum Latvijas Linukss) is a bootable live Linux distribution based on Slackware Linux. It requires limited system resources and can run on any Intel-compatible system with a CD-ROM installed. The entire operating system and all of the applications run from RAM, making AUSTRUMI a fast system and allowing the boot medium to be removed after the operating system starts.

Security Onion is a specialist, security-oriented Linux distribution based on Oracle Linux. It is a free and open platform for threat hunting, enterprise security monitoring and log management. It includes custom interfaces for alerting, dashboards, hunting, PCAP, detections and case management. It also includes other tools, such as osquery (a tool for exploring and monitoring operating system data with SQL queries), CyberChef (a web application for encryption, encoding, compression and data analysis), Elasticsearch (a data search engine), Logstash (a data collection and processing engine), Kibana (a data visualization plugin for Elasticsearch), Suricata (an intrusion detection and prevention system) and Zeek (a software network analysis framework).