LWN.net
Security updates for Monday
More than 9,000 patches total in the seven stable kernels for Monday
Reminder: subscription price change coming
Kernel prepatch 7.3-rc3
EuroPython 2026 videos published
[$] Accelerating the kernel's build process
Two stable kernel updates for Friday
Security updates for Friday
Forgejo 16.0.4 and 15.0.8 address critical security vulnerability
[$] PostgreSQL 19's "scary patch contest"
Julia 1.13 released
Security updates for Thursday
[$] LWN.net Weekly Edition for September 10, 2026
A decade of Rustls
LibreOffice Base survey results
[$] Typst makes big strides
Security updates for Wednesday
[$] Stabilizing Rust's never type
Jellyfin 12.0 released
Security updates for Tuesday
[$] CERN's migration path from CentOS Linux to Debian
Three stable kernels for Monday
[$] Fixing the TCMalloc regression with RSEQ operations
Buildroot 2026.08 released
Security updates for Monday
Asahi Linux now supports M3-series Macs
Kernel prepatch 7.3-rc2
[$] Deterministic testing for multithreaded Python
Grml 2026.09 released
Security updates for Friday
[$] Recent work in memory tiering
Audacity 4.0 released
Security updates for Thursday
[$] LWN.net Weekly Edition for September 3, 2026
[$] Securely suspending LUKS-encrypted disks
[$] Governing GNOMEs: how the project's technical decision-making is evolving
Incus 7.4 released
Eight stable kernels for Wednesday
Security updates for Wednesday
A note from LWN
[$] A pause for the Python JIT
Firefox 155 released
Security updates for Tuesday
OpenShot 4.0 released
Netdev 0x1A videos and slides are now live
[$] The rest of the 7.3 merge window
Security updates for Monday
Kernel prepatch 7.3-rc1
Debian votes to allow "responsible use of generative AI"
Ryabitsev: Creepy crawlies
Car: Dolphin 26.08 and KIO performance improvements
[$] The "rnull" Rust block driver
Eight stable kernels with fix for a single vulnerability
Security updates for Friday
[$] Using steal time to moderate CPU demands
Eight stable kernels for Thursday
Security updates for Thursday
[$] LWN.net Weekly Edition for August 27, 2026
[$] An ongoing 3D-printer AGPL violation
Armbian 26.8 released
Security updates for Wednesday
LibreOffice 26.8 released
mklinux-v7.0-mk2 released
[$] Old-school calendaring at the command line with Remind
Vanilla OS 3 released
Security updates for Tuesday
[$] How to be safe from quantum computing
Emacs 31.1 released
Security updates for Monday
Sunday's stable kernel set
Mourning Steve French
[$] Considering the OpenMDW license
Security updates for Friday
[$] A look at the Quickshell desktop-component toolkit
KDE Gear 26.08 released
Supply chain attack on arrayref (Rust blog)
RPM 6.1.0 released
[$] The beginning of the 7.3 merge window
Security updates for Thursday
[$] LWN.net Weekly Edition for August 20, 2026
Go 1.27 released
Seven stable kernels for Wednesday
[$] Debian weighs eight options in vote on LLM usage
Tuba 0.11 released
[$] Representing Python paths using pathlib
Security updates for Wednesday
Firefox 154.0 released
[$] Fedora prepares for the end of AF_ALG
Security updates for Tuesday
[$] Development statistics for the 7.2 kernel
[$] Bootstrappable builds: how and why
GNU poke 5.0 released
Mark J. Wielaard receives Distinguished Service Award in Software Freedom
Security updates for Monday
The 7.2 kernel has been released
[$] BPF, continuous testing, and stable kernels
Python packaging council candidates announced
Security updates for Friday
Domas: Bypassing memory protection with AMD's memory controllers
rsync 3.5.0 released
[$] 128-Bit page tables for Arm
Security updates for Thursday
[$] LWN.net Weekly Edition for August 13, 2026
[$] Block-layer error injection
[$] A look at CrossPoint e-reader firmware
QEMU 11.1 released
Security updates for Wednesday
[$] KVM planes head for takeoff
Bernard: GNOME Shell design dreams
Security updates for Tuesday
[$] Even more formal verification for BPF
Django moves to an annual release cycle
Security updates for Monday
Kernel prepatch 7.2-rc7
Four weekend stable kernel updates
[$] Changes in shadow-utils password-expiration features
The Software Stewardship Lab launches
LightDM lives: version 1.33.0 released
Stable kernel releases for Friday with a single bug fix
Security updates for Friday
Six stable kernels with a security fix
[$] Bringing BPF to binfmt_misc
Rust Coreutils 0.10 released
Security updates for Thursday
[$] LWN.net Weekly Edition for August 6, 2026
b4 0.16.0 released
[$] Examining other network namespaces using BPF
[$] FUSE status and plans
Nelson: rust-lang/rust is adopting an LLM policy
Security updates for Wednesday
An LLM agent attempts to compromise a project on GitHub
[$] Fedora considers conflict-of-interest policy
Another npm worm
[$] The beginning of a process-builder API
Security updates for Tuesday
Twenty years of Pandoc
C-Kermit 11 released
[$] Buffer sizes for FUSE io_uring
SQLite Critical CVEs or LLM Slop? (JFrog blog)
Four stable kernels for Monday
NetBSD 11.0 released
Security updates for Monday
Kernel prepatch 7.2-rc6
Servo 0.4.0 released
[$] The future of libraries in BPF
Arch Linux disables AUR package adoption
Security updates for Friday
[$] Reconsidering O_CREAT|O_DIRECTORY
Another batch of single-fix stable kernels
Security updates for Thursday
[$] LWN.net Weekly Edition for July 30, 2026
[$] Debugging information for inlined functions
Three stable kernels for Wednesday fix a single regression
[$] Fedora approves a smaller GRUB
GCC steering committee announces AI policy
Security updates for Wednesday
[$] Progress toward compiling Linux with gccrs
Wayfire 0.11 released
[$] A report from Debian's new DFSG team
Security updates for Tuesday
[$] Hazard pointers for the kernel
GNU Binutils 2.47 released
Security updates for Monday
Kernel prepatch 7.2-rc5
A Debian general resolution on LLM usage
In remembrance of Dan Williams
Security updates for Saturday
GNU C Library 2.44 released
New stable kernel for ext4 users
Hefty stable kernel updates for Friday
Linux Plumbers Conference 2026 registration open
De Vlieger: The Fedora 45 sausage factory
[$] An update on netkit and the use of BPF in user space
Home Assistant Device Database public preview
Security updates for Friday
Mourning Dan Williams
[$] An operations structure for swap devices
Codeberg: Protecting our FLOSS commons from LLMs
Security updates for Thursday
[$] LWN.net Weekly Edition for July 23, 2026
[$] Save and restore may be coming to GNOME
PyPI now rejects new files after 14 days
[$] Attaching programs to multiple tracepoints
Security updates for Wednesday
Firefox 153 released
[$] Debating the role of large language models in the kernel community
Security updates for Tuesday
[$] Fedora grapples with change
Catanzaro: Some changes to GNOME security tracking
[$] Merging famfs?
Security updates for Monday
Kernel prepatch 7.2-rc4
"Half a Second" — a book on the XZ backdoor
Three stable kernel updates
Building an Arch Linux aarch64 port for Holo Core (Collabora blog)
[$] Securing BPF LSMs against tampering
Security updates for Friday
[$] Sched-ext: enqueue() for sub-schedulers and proxy-execution support
Security updates for Thursday
[$] LWN.net Weekly Edition for July 16, 2026
[$] Topics in filesystem testing
Local DoS attack vectors in seunshare 3.10 (SUSE Security Team Blog)
[$] Lockless MPSC FIFO queues for io_uring
Security updates for Wednesday
Many old shim versions are still accepted by secure boot
The Linux.org story
Call for topics for the 2026 Maintainers Summit
[$] Sending packets directly from BPF
Security updates for Tuesday
[$] Shielding running kernels against exploits with BPF
Final normal Debian bookworm release
Security updates for Monday
Kernel prepatch 7.2-rc3
[$] An update on the scraper situation
[$] QBE 1.3: metaprogramming, performance, and cross-platform support
Security updates for Friday
[$] Kitty chases the mouse
Rust 1.97.0 released
Security updates for Thursday
[$] LWN.net Weekly Edition for July 9, 2026
OpenMandriva: Statement regarding attempted distribution sabotage
[$] Progress in modernizing kernel cryptography
Security updates for Wednesday
Woodruff: You shouldn't trust trusted publishing
[$] Faster RCUs and lockless memory allocation
Security updates for Tuesday
OpenSSH 10.4 released
[$] The kernel's iomap layer
Security updates for Monday
Kernel prepatch 7.2-rc2
Seven stable kernels for Saturday including two security fixes
Four vulnerabilities in Guix
[$] Limiting negative dentries
Security updates for Friday
CalyxOS is back
Kernel archive /pub tree restoring
Spoofed email from LWN
Fedora Council proposes pausing Community Initiatives
[$] Two LLM-assisted memory-management patch sets
Security updates for Thursday
[$] LWN.net Weekly Edition for July 2, 2026
[$] Efficient access to local storage for BPF programs
[$] Secure Boot certificate expiration is here
Security updates for Wednesday
Creative Commons founders' fireside chat (Creative Commons blog)
[$] Flexible metaprogramming with Rhombus
Security updates for Tuesday
Git 2.55.0 released
[$] The rest of the 7.2 merge window
[$] Xsnow "protestware" in Debian
Open source maintainership in the age of AI (Kubernetes blog)
Mageia 10 released
Security updates for Monday
Kernel prepatch 7.2-rc1
Three stable kernel updates
[$] Reports from OSPM 2026, day three
[$] Initiating writeback earlier
Lots of stories about systemd v261
[$] What's coming in Git 2.55
Security updates for Friday
The "Akrites" vulnerability-mitigation project launches
[$] A look at MinIO alternatives: Ceph and Garage
Podman 6.0 released
[$] Hardening the kernel with allocation tokens and bootpatch-SLR
Security updates for Thursday
[$] LWN.net Weekly Edition for June 25, 2026
[$] Fedora: 2FA, or not 2FA, that is the question
[$] A helper library for BPF arenas
[$] Reports from OSPM 2026, day two
Security updates for Wednesday
[$] KASAN for JIT-compiled BPF code
Sunsetting Tor 0.4.8
Security updates for Tuesday
GIMP 0.54.1 in a Flatpak
[$] Free-threaded Python: past, present, and future
First preview release of Xfce's Wayland compositor
[$] Reports from OSPM 2026, day one
Security updates for Monday
Systemd v261 released
[$] Suspending and resuming BPF programs
[$] AURpocalypse now: a look at the recent AUR attacks
Security updates for Friday
Eight new stable kernels for Friday
The Software Freedom Conservancy's LLM-backed generative AI recommendations
[$] The first half of the 7.2 merge window
Mastodon 4.6 released
[$] Single-hop block replication with RMR and BRMR
Security updates for Thursday
[$] LWN.net Weekly Edition for June 18, 2026
Fedora F44 election results
Everything security at PyCon US 2026
[$] Some buffer-heads cleanup work
FairScan 2.0 released
Security updates for Wednesday
The LWN public topics list
[$] The state of Fedora in 2026
Firefox 152.0 released
KDE Plasma 6.7 released
Security updates for Tuesday
[$] Development statistics for the 7.1 kernel
Stenberg: curl summer of bliss
Security updates for Monday
The 7.1 kernel has been released
[$] An overlayfs update
Hundreds of AUR packages compromised
Security updates for Friday
Homebrew 6.0.0 released
[$] Automatic mTHP creation in 7.2
Security updates for Thursday
[$] LWN.net Weekly Edition for June 11, 2026
Larson: Are insecure code completions a vulnerability?
[$] AI agent runs amok in Fedora and elsewhere
Buildroot 2026.05 released
Security updates for Wednesday
Future of Ubuntu MATE
[$] Eliminating long-lived credentials with trusted publishing
Asahi Linux warns users not to upgrade to macOS 27 beta
[$] BPF loop verification with scalar evolution
Security updates for Tuesday
Linux App Summit 2026 (Heise)
Three stable kernels for Tuesday
[$] An update on fanotify
rsync 3.4.4 released with regression fixes
Security updates for Monday
Kernel prepatch 7.1-rc7
[$] Moving beyond fork() + exec()
Ruby's Bundler adds a cooldown feature
Security updates for Friday
Dave Airlie on Linux Kernel Maintenance (SE Radio)
[$] Splicing out vmsplice()
One step forward, two steps back on CA age bill (EFF Deeplinks Blog)
Security updates for Thursday
[$] LWN.net Weekly Edition for June 4, 2026
[$] Open-source security is not a solo activity
[$] BPF in the agentic era
Tridgell: rsync and outrage
Security updates for Wednesday
[$] Caching for extended attributes
[$] Trying to make sense of package-manager metadata
Vim Classic 8.3 released
Security updates for Tuesday
Ombredanne: An AI agent ported our codebase from Python to Rust
[$] Representing the true signatures of kernel functions
Seven stable kernels for the first day of June
DistroWatch turns 25
[$] Reconsidering x32 — again
Multiple redhat-cloud-services npm packages compromised (StepSecurity Blog)
Fedora F44 election interviews published
Security updates for Monday
Kernel prepatch 7.1-rc6
[$] A trademark dispute over MeshCore
[$] A loadable crypto module for FIPS certification
Nesbitt: Protestware for coding agents
Security updates for Friday
Rust 1.96.0 released
Górny: why Gentoo?
[$] Policies for merging new filesystems
IBM's "Project Lightwell"
[$] Separating memory descriptors from struct page
Security updates for Thursday
[$] LWN.net Weekly Edition for May 28, 2026
Interview session with Jonathan Corbet
[$] MOT: a tool to fight openwashing in AI
Andrew Morton's 2004 OLS keynote
[$] Further progress toward removing the page map count
Security updates for Wednesday
Arias: Human proof for FOSS contributions
Stenberg: The pressure
[$] Better automatic management of transparent huge pages
Security updates for Tuesday
[$] Reviewing kernel patches with LLMs
Comprehensive Response to Bambu's AGPLv3 Violations (Software Freedom Conservancy)
[$] Tier-aware memory-controller limits
Security updates for Monday
[$] Dirk and Linus discuss AI and kernel development
Kernel prepatch 7.1-rc5
A large set of stable kernel updates
[$] Custom page-cache policies with BPF
[$] Toward better handling of major page faults
Security updates for Friday
Vulnerabilities in various GTK-based PDF readers
[$] BPF support in GCC 16 and beyond
OpenBSD 7.9 released
[$] Support for private memory nodes
Security updates for Thursday
[$] LWN.net Weekly Edition for May 21, 2026
[$] What is to be done about MGLRU?
Security updates for Wednesday
[$] The tenth OpenPGP email summit
Firefox 151.0 released
[$] openSUSE "terms of site" raise complaints about age restrictions
[$] In search of faster this_cpu operations
[$] What's brewing in CXL
[$] Improving the per-CPU memory allocator
Security updates for Tuesday
pgBackRest will continue
[$] Swap tables, flash-friendly swap, swap_ops, and more
Security updates for Monday
Kernel prepatch 7.1-rc4
RIP Peter G. Neumann
Some weekend stable kernel updates
[$] Controlling memory-management with BPF
Seven new stable kernels with patches for CVE-2026-46333
[$] HugeTLB preservation over live update
Security updates for Friday
[$] Policy groups for memory management
[$] Buffered atomic writes, writethrough, and more
Three stable kernels for Thursday
[$] Keeping COWs in context (a.k.a. anonymous reverse mapping)
Security updates for Thursday
[$] LWN.net Weekly Edition for May 14, 2026
[$] Friction in Fedora over AI developer desktop initiative
Yet another Dirty Frag type vulnerability: Fragnesia
[$] Managing pages outside of the direct map
[$] Revisiting mshare
Security updates for Wednesday
Sovereign Tech Fund invests in KDE
[$] Using dma-bufs for read and write operations
[$] Scaling transparent huge pages to 1GB
Security updates for Tuesday
Stenberg: Mythos finds a curl vulnerability
Two stable kernels with Dirty Frag fixes
[$] Providing 64KB base pages with 4KB kernels, two different ways
Debian to require reproducible builds
Security updates for Monday
Kernel prepatch 7.1-rc3
More stable kernels with partial Dirty Frag fixes
[$] Forgejo "carrot disclosure" raises security questions
killswitch for short-term emergency vulnerability mitigation
[$] A 2026 DAMON update
Security updates for Friday
Four stable kernels with partial fixes for Dirty Frag
Dirty Frag: a zero-day universal Linux LPE
[$] A new era for memory-management maintainership
An update on KDE's Union style engine
Security updates for Thursday
Three stable kernel updates
[$] LWN.net Weekly Edition for May 7, 2026
[$] LLM-driven security reports disrupt coordinated disclosure
Incus 7.0 LTS released
Distributions quote of the week
Security updates for Wednesday
[$] Hardware-assisted Arm VMs for s390
Security updates for Tuesday
The retirement of the PHP license
Alpine Linux systems currently offline
[$] Bug-monitoring expectations and Fedora GNOME packages
NetHack 5.0.0 released
Security updates for Monday
Kernel prepatch 7.1-rc2
Eden: NHS goes to war against open source
[$] Version-controlled databases using Prolly trees
Security updates for Friday
[$] Restartable sequences, TCMalloc, and Hyrum's Law
GCC 16.1 released
Seven new stable kernels for Thursday
Security updates for Thursday
[$] LWN.net Weekly Edition for April 30, 2026
A security bug in AEAD sockets
[$] Python packaging council approved
Security review of Plasma Login Manager (SUSE Security Team Blog)
Security updates for Wednesday
Remembering Seth Nickell
Fedora Linux 44 has been released
[$] Strawberry is ripe for managing music collections
In Memoriam: Tomáš Kalibera
All FOSDEM 2026 videos are online
Security updates for Tuesday
pip 26.1 released
[$] The rest of the 7.1 merge window
Four new stable kernels for Monday
pgBackRest is no longer maintained
[$] Zig explores structured concurrency
The future of AI in Ubuntu
Niri 26.04 released
Security updates for Monday
Kernel prepatch 7.1-rc1
GnuPG 2.5.19 released
[$] On pages and folios
Security updates for Friday
Ubuntu 26.04 LTS released
[$] Famfs, FUSE, and BPF
Security updates for Thursday
[$] LWN.net Weekly Edition for April 23, 2026
[$] Dependency-cooldown discussions warm up
[$] One Sized trait does not fit all
LilyPond 2.26.0 released
Four stable kernels for Wednesday
Security updates for Wednesday
Kernel code removals driven by LLM-created security reports
Firefox: The zero-days are numbered
Fedora Verified: a proposal to recognize Fedora contributor status
[$] Using LLMs to find Python C-extension bugs
Firefox 150 released
Security updates for Tuesday
Git 2.54.0 released
Arch Linux now has a reproducible container image
[$] Digging into drama at The Document Foundation
Debian Project Leader Election 2026 results
Security updates for Monday
Seven stable kernels for Saturday
[$] A more efficient implementation of Shor's algorithm
[$] The 7.0 scheduler regression that wasn't
Security updates for Friday
Rust 1.95.0 released
Forgejo 15.0 released
[$] The first half of the 7.1 merge window
KDE Gear 26.04 released
Security updates for Thursday
[$] LWN.net Weekly Edition for April 16, 2026
FSF clarifies its stance on AGPLv3 additional terms
[$] Forking Vim to avoid LLM-generated code
Security updates for Wednesday
Zig 0.16.0 released
[$] Tagging music with MusicBrainz Picard
OpenSSL 4.0.0 released
Security updates for Tuesday
[$] Development statistics for the 7.0 kernel
[$] A build system aimed at license compliance
Servo now on crates.io
Security updates for Monday
The 7.0 kernel has been released
A set of Saturday stable kernel updates
[$] Removing read-only transparent huge pages for the page cache
Security updates for Friday
[$] A flood of useful security reports
Relicensing versus license compatibility (FSF Blog)
Security updates for Thursday
[$] LWN.net Weekly Edition for April 9, 2026
[$] Ripping CDs and converting audio with fre:ac
[$] An API for handling arithmetic overflow
Nix privilege escalation security advisory
Security updates for Wednesday
[$] Sharing stories on Scuttlebutt
Security updates for Tuesday
Introducing the FreeBSD laptop integration testing project
[$] Protecting against TPM interposer attacks
6.6.133 stable kernel released
Security updates for Monday
Kernel prepatch 7.0-rc7
Hackers breached the European Commission (The Next Web)
[$] Ubuntu's GRUBby plans
No kidding: Gentoo GNU/Hurd
Security updates for Friday
What the FCC router ban means for FOSS
[$] IPC medley: message-queue peeking, io_uring, and bus1
Exelbierd: What's actually in a Sashiko review?
OpenSSH 10.3 released
Security updates for Thursday
New stable kernels for Thursday
[$] LWN.net Weekly Edition for April 2, 2026
Turbulence at the Documentation Foundation
[$] Pandoc: a workhorse for document conversion
Servo 0.0.6 released
Security updates for Wednesday
[$] The role of LLMs in patch review
[$] Objections to systemd age-attestation changes go overboard
Vulnerability Research Is Cooked (sockpuppet.org)
Security updates for Tuesday
SystemRescue 13.00 released
Rspamd version 4.0.0 released
[$] Rust's next-generation trait solver
Security updates for Monday
Kernel prepatch 7.0-rc6
[$] The many failures leading to the LiteLLM compromise
The telnyx packages on PyPI have been compromised
Stable kernel update to fix regression on LoongArch platform
Security updates for Friday
The forge is our new home (Fedora Community Blog)
[$] Vibe-coded ext4 for OpenBSD
Security updates for Thursday
[$] LWN.net Weekly Edition for March 26, 2026
[$] Collaboration for battling security incidents
Setting up a Tor Relay at National Taiwan Normal University (Tor Blog)
LibreQoS v2.0 released
[$] More efficient removal of pages from the direct map
Five new stable kernels
Security updates for Wednesday
Firefox 149.0 released
[$] A PHP license change is imminent
LiteLLM on PyPI is compromised
Down: Debunking zswap and zram myths
Krita 5.3.0 and 6.0.0 released
Security updates for Tuesday
[$] Tracking when BPF programs may sleep
Kernel prepatch 7.0-rc5
Security updates for Monday
b4 v0.15.0 released
Agama 19 released
[$] A truce in the Manjaro governance struggle
Security updates for Friday
Google details new 24-hour process to sideload unverified Android apps (Ars
Technica)
Two new stable kernels
Radicle 1.7.0 released
[$] Development tools: Sashiko, b4 review, and API specification
Security updates for Thursday
[$] LWN.net Weekly Edition for March 19, 2026
[$] Cindy Cohn on privacy battles old and new
Samba 4.24.0 released
GNOME 50 released
Local-privilege escalation in snapd
Fedora Asahi Remix 43 released
[$] BPF comes to io_uring at last
Security updates for Wednesday
The Sashiko patch-review system
FSFE reports trouble with payment provider
[$] Fedora ponders a "sandbox" technology lifecycle
Security updates for Tuesday
Marknote 1.5 released
Debian Project Leader election underway
GIMP 3.2 released
[$] A safer kmalloc() for 7.0
Security updates for Monday
Kernel prepatch 7.0-rc4
Stable kernels for Friday the 13th
An investigation of the forces behind the age-verification bills
A set of AppArmor vulnerabilities
[$] More timing side-channels for the page cache
Security updates for Friday
[$] Practical uses for a null filesystem
Two stable kernels for Thursday
Security updates for Thursday
[$] LWN.net Weekly Edition for March 12, 2026
[$] California's Digital Age Assurance Act and Linux distributions
Introducing Moonforge: a Yocto-based Linux OS (Igalia Blog)
[$] HTTPS certificates in the age of quantum computing
Security updates for Wednesday
[$] Disabling Python's lazy imports from the command line
SUSE may be for sale, again
[$] Debian decides not to decide on AI-generated contributions
Security updates for Tuesday
[$] Inspecting and modifying Python types during type checking
digiKam 9.0.0 released
Security updates for Monday
Kernel prepatch 7.0-rc3
Huston: Revisiting time
[$] Fedora shares strategy updates and "weird research university" model
OpenWrt 25.12.0 released
Security updates for Friday
Rust 1.94.0 released
A GitHub Issue Title Compromised 4,000 Developer Machines (grith.ai)
[$] The relicensing of chardet
Buildroot 2026.02 released
New stable kernels to address build failures
[$] Reconsidering the multi-generational LRU
Security updates for Thursday
[$] LWN.net Weekly Edition for March 5, 2026
Seven new stable Linux kernels
Security updates for Wednesday
[$] Magit and Majutsu: discoverable version-control
CBP Tapped Into the Online Advertising Ecosystem To Track Peoples’ Movements
(404 Media)
[$] Free software needs free tools
Garrett: To update blobs or not to update blobs
Security updates for Tuesday
[$] The ongoing quest for atomic buffered writes
Høiland-Jørgensen: The inner workings of TCP zero-copy
Texinfo 7.3 released
[$] The exploitation paradox in open source
Motorola announces a partnership with the GrapheneOS Foundation
Gram 1.0 released
Security updates for Monday
Kernel prepatch 7.0-rc2
groff 1.24.0 released
[$] The troubles with Boolean inversion in Python
Two new stable kernels, possible regression
Security updates for Friday
[$] IIIF: images and visual presentations for the web
Security updates for Thursday
[$] LWN.net Weekly Edition for February 26, 2026
Support period lengthened for the 6.6, 6.12, and 6.18 kernels
[$] No hardware memory isolation for BPF programs
[$] An effort to secure the Network Time Protocol
MetaBrainz mourns the loss of Robert Kaye
Security updates for Wednesday
Restarting LibreOffice Online
GNU Awk 5.4.0 released
Firefox 148.0 released
[$] As ye clone(), so shall ye AUTOREAP
Security updates for Tuesday
GNU Octave 11.1.0 released
[$] The second half of the 7.0 merge window
Vlad: Weston 15.0 is here: Lua shells, Vulkan rendering, and a smoother display stack
Security updates for Monday
The Ladybird browser project shifts to Rust
[$] Lessons on attracting new contributors from 30 years of PostgreSQL
Kernel prepatch 7.0-rc1
[$] Open-source Discord alternatives
The Book of Remind
Security updates for Friday
Seven stable kernels for Thursday
[$] Modernizing swapping: virtual swap spaces
openSUSE governance proposal advances
Security updates for Thursday
[$] LWN.net Weekly Edition for February 19, 2026
[$] More accurate congestion notification for TCP
Fedora now available in Syria
An Asahi Linux progress report
An update to the malicious crate notification policy (Rust Blog)
Security updates for Wednesday
[$] Do androids dream of accepted pull requests?
Plasma 6.6.0 released
An update on upki
Security updates for Tuesday
[$] Open source security in spite of AI
Four stable kernels to fix problematic commit
[$] Compact formats for debugging—and more
Four stable kernels for Monday
Security updates for Monday
Vim 9.2 released
New delegation for Debian's data protection team
[$] The first half of the 7.0 merge window
[$] Open-source mapping for disaster response
Security updates for Friday
[$] Poisoning scraperbots with iocaine
[$] The reverting of revocable
Debian DFSG Team announces new dashboard and queue processes
A single stable kernel for Thursday
Security updates for Thursday
[$] LWN.net Weekly Edition for February 12, 2026
Linux man pages 6.17 released
[$] Evolving Git for the next decade
postmarketOS FOSDEM 2026 and hackathon recap
Stable kernels for Wednesday
Security updates for Wednesday
Dave Farber RIP
GTK hackfest, 2026 edition (GTK Development Blog)
[$] FOSS in times of war, scarcity, and AI
Security updates for Tuesday
[$] Development statistics for 6.19
Offpunk 3.0 released
Debian's tag2upload considered stable
Security updates for Monday
The 6.19 kernel has been released
An in-kernel machine-learning library
Six stable kernels for Friday
Ardour 9.0 released
[$] Kernel control-flow-integrity support comes to GCC
Linux from Scratch to drop System V versions
Security updates for Friday
[$] Modernizing swapping: the end of the swap map
Security updates for Thursday
[$] LWN.net Weekly Edition for February 5, 2026
[$] API changes for the futex robust list
[$] Sigil simplifies creating and editing EPUBs
LibreOffice 26.2 released
Security updates for Wednesday
[$] The future for Tyr
Security updates for Tuesday
Git 2.53.0 released
[$] Modernizing swapping: introducing the swap table
Security updates for Monday
Kernel prepatch 6.19-rc8
[$] Compiling Rust to readable C with Eurydice
The Award for Excellence in Open Source goes to Greg Kroah-Hartman
Three stable kernel updates
Security updates for Friday
A proposed governance structure for openSUSE
[$] Sub-schedulers for sched_ext
Security updates for Thursday
[$] LWN.net Weekly Edition for January 29, 2026
Mourning Didier Spaier
OSI pauses 2026 board election cycle
[$] Open source for phones: postmarketOS
PC Gamer on the scx_horoscope scheduler
[$] Who should vote in Fedora elections?
Security updates for Wednesday
A critical GnuPG security update
The GNU C Library is moving from Sourceware
[$] Implicit arguments for BPF kfuncs
Xfwl4: the roadmap for a Xfce Wayland compositor
Security updates for Tuesday
[$] Fedora and GPG 2.5
Stenberg: The end of the curl bug-bounty program
Security updates for Monday
Kernel prepatch 6.19-rc7
GNU C Library 2.43 released
[$] Filesystem medley: EROFS, NTFS, and XFS
GNU Guix 1.5.0 released
Two new stable kernels for Friday
Security updates for Friday
[$] Linux Kernel Runtime Guard reaches its 1.0 release
30 years of ReactOS
Rust 1.93.0 released
Security updates for Thursday
[$] LWN.net Weekly Edition for January 22, 2026
[$] Cleanup on aisle fsconfig()
Pandas 3.0 released
[$] Responses to gpg.fail
Security updates for Wednesday
Ryabitsev: Tracking kernel development with korgalore
Remote authentication bypass in telnetd
Mozilla introduces Firefox Nightly RPM package repository
[$] An alternate path for immutable distributions
Security updates for Tuesday
The end of OzLabs
Haas: Who contributed to PostgreSQL development in 2025?
[$] Task-level io_uring restrictions
Wine 11.0 released
Two new stable kernels for Monday
Security updates for Monday
Kernel prepatch 6.19-rc6
Four stable kernels for the weekend
[$] A free and open-source rootkit for Linux
Security updates for Friday
A 0-click exploit chain for the Pixel 9 (Project Zero)
Running Debian on the OpenWrt One (Collabora Blog)
Forgejo 14.0 released
[$] Removing a pointer dereference from slab allocations
A note for MXroute users
Security updates for Thursday
[$] LWN.net Weekly Edition for January 15, 2026
The State of OpenSSL for pyca/cryptography
[$] Format-specific compression with OpenZL
[$] Debian discusses removing GTK 2 for forky
Radicle 1.6.0 released
Security updates for Wednesday
[$] A high-level quality-of-service interface
Firefox 147 released
Security updates for Tuesday
[$] Asciinema: making movies at the command-line
Security updates for Monday
The LSFMM+BPF 2026 call for proposals is out
Four stable kernel updates
Evans: A data model for Git (and other docs updates)
[$] READ_ONCE(), WRITE_ONCE(), but not for Rust
Security updates for Friday
Fedora Linux 43 election results
Gentoo looks back on 2025
[$] SFC v. VIZIO: who can enforce the GPL?
[$] GPLv2 and installation requirements
Two new stable kernels
Security updates for Thursday
[$] LWN.net Weekly Edition for January 8, 2026
European Commission issues call for evidence on open source
[$] Lessons from creating a gaming-oriented scheduler
[$] 2025 Linux and free software timeline
IPFire 2.29 Core Update 199 released
Google will now only release Android source code twice a year (Android Authority)
Security updates for Wednesday
[$] Questions for the Technical Advisory Board
[$] The difficulty of safe path traversal
Manjaro 26.0 released
Security updates for Tuesday
[$] Predictions for the new year
GNU ddrescue 1.30 released
Security updates for Monday
Kernel prepatch 6.19-rc4
Kroah-Hartman: Linux kernel security work
6.18.3 stable kernel released
Security updates for Friday
Security updates for Thursday
Shadow-utils 4.19.0 released
Security updates for Wednesday
Stenberg: No strcpy either
Security updates for Tuesday
Graham: [KDE] Highlights from 2025
Security updates for Monday
Kernel prepatch 6.19-rc3
[$] An early look at the Graphite 2D graphics editor
Security updates for Friday
A partial ruling in the Vizio GPL suit
Ruby 4.0 released
Security updates for Thursday
[$] LWN.net Weekly Edition for December 25, 2025
[$] A 2025 retrospective
[$] What's new in systemd v259
Security updates for Wednesday
Elementary OS 8.1 released
[$] A high-memory elimination timeline for the kernel
[$] Verifier-state pruning in BPF
Security updates for Tuesday
Incus 6.20 released
GDB 17.1 released
Qubes OS 4.3.0 released
Jackson: Debian’s git transition
[$] Tools for successful documentation projects
Loong64 is now an official Debian architecture
Security updates for Monday
Kernel prepatch 6.19-rc2
Results from the 2025 TAB election
FreeBSD laptop progress
[$] A visualizer for BPF program state
Security updates for Friday
A change of maintainership for linux-next
[$] Episode 29 of the Dirk and Linus show
Systemd v259 released
Three stable kernels for Thursday
Security updates for Thursday
[$] LWN.net Weekly Edition for December 18, 2025
[$] Going boldly into the COSMIC desktop environment
Asahi Linux 6.18 progress report
[$] The Civil Infrastructure Platform after (nearly) ten years
Security updates for Wednesday
Mozilla gets a new CEO: Anthony Enzor-DeMeo
[$] 2025 Maintainers Summit development process discussions
Security updates for Tuesday
[$] Calibre adds AI "discussion" feature
Announcing Vojtux: a Fedora-based accessible Linux distribution
[$] Better development tools for the kernel
Security updates for Monday
[$] The rest of the 6.19 merge window
Kernel prepatch 6.19-rc1
Conill: Rethinking sudo with object capabilities
[$] The state of the kernel Rust experiment
Three new stable kernels
[$] Best practices for linux-next
KDE Gear 25.12 released
Security updates for Friday
Pop!_OS 24.04 LTS released
Rust 1.92.0 released
[$] Toward a policy for machine-learning tools in kernel development
Security updates for Thursday
[$] LWN.net Weekly Edition for December 11, 2025
10 Years of Let's Encrypt Certificates
Kroah-Hartman: Linux CVEs, more than you ever wanted to know
[$] Mix and match Linux distributions with Distrobox
Security updates for Wednesday
The end of the kernel Rust experiment
The 2024 Free Software Awards winners
[$] Bazzite: a gem for Linux gamers
Firefox 146 released
Security updates for Tuesday
[$] Disagreements over post-quantum encryption for TLS
Addressing Linux's missing PKI infrastructure
Security updates for Monday
[$] An open seat on the TAB
Six stable kernels for the weekend
[$] Eventual Rust in CPython
Security updates for Friday
Alpine Linux 3.23.0 released
[$] The beginning of the 6.19 merge window
[$] A "frozen" dictionary for Python
cmocka 2.0 released
Security updates for Thursday
Cro provides commentary on LWN's Zig asynchronicity article
[$] LWN.net Weekly Edition for December 4, 2025
Home Assistant 2025.12 released
Django 6.0 released
[$] Just: a command runner
Security updates for Wednesday
A final stable kernel update for 5.4
Let's Encrypt to reduce certificate lifetimes
FreeBSD 15.0 released
[$] Zig's new plan for asynchronous programs
Security updates for Tuesday
[$] Checked-size array parameters in C
[$] Some 6.18 development statistics
Security updates for Monday
Three stable kernels for Monday
The 6.18 kernel has been released
NixOS 25.11 released
Landlock-ing Linux (prizrak.me)
Security updates for Friday
Security updates for Thursday
KDE Plasma 6.8 will be Wayland-only
Security updates for Wednesday
Security updates for Tuesday
AlmaLinux 10.1 released
[$] APT Rust requirement raises questions
Three stable kernel updates, two french hens, ...
Security updates for Monday
Kernel prepatch 6.18-rc7
Racket 9.0 released
Improving GCC Buffer Overflow Detection for C Flexible Array Members (Oracle)
The 2025 Linux Foundation Technical Advisory Board election
[$] Unpacking for Python comprehensions
PHP 8.5.0 released
Security updates for Friday
Racing karts on a Rust GPU kernel driver (Collabora blog)
[$] BPF and io_uring, two different ways
Security updates for Thursday
[$] LWN.net Weekly Edition for November 20, 2025
[$] Debian debates amending architecture support stratagem
Postmortem of the Xubuntu.org download site compromise
GStreamer Conference 2025 video recordings now available
Security updates for Wednesday
Blender 5.0 released
[$] The current state of Linux architecture support
[$] Pouring packages with Homebrew
Security updates for Tuesday
Git 2.52.0 released
[$] Hot-page migration and specific-purpose NUMA nodes
Josefsson: Introducing the Debian Libre Live Images
Security updates for Monday
Kernel prepatch 6.18-rc6
[$] A struct sockaddr sequel
Security updates for Friday
Two new stable kernels
Rust in Android: move fast and fix things (Google Security Blog)
Privilege escalation in LightDM Greeter by KDE (SUSE Security Team Blog)
Thunderbird 145 released
[$] Another Fedora Flatpak discussion
Security updates for Thursday
[$] LWN.net Weekly Edition for November 13, 2025
Homebrew 5.0.0 released
[$] The intersection of unstable pages and direct I/O
Security updates for Wednesday
Firefox 145 released
[$] Protecting privacy with Tails
Security updates for Tuesday
Public-inbox 2.0.0 released
[$] Magic kernel functions for BPF
Pytest 9.0.0 released
Security updates for Monday
Kernel prepatch 6.18-rc5
About KeePassXC's code quality control (KeePassXC blog)
A proposed kernel policy for LLM-generated contributions
[$] Bootc for workstation use
Security updates for Friday
Mastodon 4.5 released
Freedesktop.org now hosts the Filesystem Hierarchy Standard
[$] Toward fast, containerized, user-space filesystems
Security updates for Thursday
[$] LWN.net Weekly Edition for November 6, 2025
Removing XSLT from Chromium
LXQt 2.3.0 released
[$] A security model for systemd
OCI Runtime Specification 1.3 adds FreeBSD
Security updates for Wednesday
Incus 6.18 released
[$] Julia 1.12 brings progress on standalone binaries and more
Security updates for Tuesday
CHERIoT 1.0 released
Defeating KASLR by Doing Nothing at All (Project Zero)
Python steering council accepts lazy imports
[$] An explicit thread-safety proposal for Python
Devuan 6.0 released
[$] Namespace reference counting and listns()
A new kernel port — to WebAssembly
Security updates for Monday
Kernel prepatch 6.18-rc4
Three stable kernel updates
Debian to require Rust as of May 2026
[$] Mergiraf: syntax-aware merging for Git
Ubuntu introduces architecture variants
Security updates for Friday
Rust 1.91.0 released
[$] The long path toward optimizing short reads
Bazzite fall update released
Security updates for Thursday
[$] LWN.net Weekly Edition for October 30, 2025
GNU/Linux man pages 6.16 released
ICANN report: DNS runs on FOSS
[$] Retrieving pixels from Android phones with Pixnapping
Tor Browser 15.0 released
[$] Debian splits ftpmaster team
Seven stable kernels for Wednesday
Security updates for Wednesday
[$] Fil-C: A memory-safe C implementation
Fedora Linux 43 released (Fedora Magazine)
Security updates for Tuesday
[$] BPF signing LSM hook change rejected
Python Software Foundation withdraws security-related grant proposal
Rust Coreutils 0.3.0 released
Security updates for Monday
Valgrind 3.26.0 released
Kernel prepatch 6.18-rc3
Typst 0.14 released
Security updates for Friday
[$] GoFundMe to delete unwanted open-source foundation pages
Date bug affects Ubuntu 25.10 automatic updates
Three new stable kernels for Thursday
[$] Safer speculation-free user-space access
Btrfs support coming to AlmaLinux 10.1
Security updates for Thursday
[$] LWN.net Weekly Edition for October 23, 2025
Fedora Council approves AI-assisted contributions policy
KDE Plasma 6.5 released
[$] DebugFS on Rust
OpenBSD 7.8 released
Security updates for Wednesday
Valkey 9.0.0 released
[$] Git considers SHA-256, Rust, LLMs, and more
DigiKam 8.8.0 released
Security updates for Tuesday
[$] The RubyGems.org takeover
[$] Explicit lazy imports for Python
Security updates for Monday
Kernel prepatch 6.18-rc2
Sunday stable kernels
Transition of RubyGems Repository Ownership
[$] A brief history of RubyGems.org
Security updates for Friday
[$] Large language models for patch review
Security updates for Thursday
Forgejo 13.0 released
[$] LWN.net Weekly Edition for October 16, 2025
[$] A new API for interrupt-aware spinlocks
Linux Mint Debian Edition (LMDE) 7 released
Security updates for Wednesday
Four new stable kernels released
The FSF's Librephone project
[$] The end of the 6.18 merge window
Julia 1.12 released
Firefox 144.0 released
[$] The FSF considers large language models
Security updates for Tuesday
[$] Debian Technical Committee overrides systemd change
Four new stable kernels
Security updates for Monday
Kernel prepatch 6.18-rc1
[$] Enhancing FineIBT
Security updates for Friday
[$] Gccrs after libcore
[$] Last-minute /boot boost for Fedora 43
Ubuntu 25.10 released
Security updates for Thursday
[$] LWN.net Weekly Edition for October 9, 2025
Better profile management coming to Firefox
[$] Upcoming Rust language features for kernel development
Security updates for Wednesday
Python 3.14.0 released
[$] Progress on defeating lifetime-end pointer zapping
[$] Highlights from systemd v258: part two
Notes from the 2025 Git Contributor's Summit
Security updates for Tuesday
U-Boot v2025.10 released
[$] 6.18 merge window, part 1
[$] Next steps for BPF support in the GNU toolchain
Four new stable kernels
Security updates for Monday
OpenSSH 10.1 released
[$] A look at the Robot Operating System
Security updates for Friday
Ian Kelling is the new FSF president
[$] Kernel hackers at Cauldron, 2025 edition
Seven new stable kernels
Security updates for Thursday
[$] LWN.net Weekly Edition for October 2, 2025
Alpine Linux plans /usr merge
[$] Fedora floats AI-assisted contributions policy
Security updates for Wednesday
OpenSUSE Leap 16 released
Radicle 1.5.0 released
[$] Linting Rust code in the kernel
Security updates for Tuesday
Bcachefs removed from the mainline kernel