Showing headlines posted by bob

A shell injection hidden in an email address gave us code execution on GNU Savannah, then root, then the ability to push to the upstream Bash repository. We reported it, kept auditing, and helped the FSF fix 26 vulnerabilities in the forge that hosts GNU.

Linux Mint is out with their October 2026 status report to outline various initiatives they have underway in their lead-up to the Linux Mint 27 stable release happening on/around Christmas…

Collabora says a ministry merger paused the test, while the ministry says it was interrupted when the election was called.

NVIDIA software engineers released CUDA Oxide 0.3 for closing out October. CUDA Oxide as a reminder is their experimental Rust to CUDA compiler that has been seeing a lot of activity in recent months…

Adjusting active noise cancellation (ANC) on Nothing or CMF earbuds means taking out your phone to use the official mobile app. EarA, a new open-source tool, that. It’s a GTK4 app (with a CLI for those who prefer the terminal), and it controls settings on earbuds like the Nothing Ear (a) and CMF Buds 2, from your Linux desktop. Noise control/ANC levels can be switched with a click. There are…

On October 27, LLM provider Anthropic reported on a remotely exploitable use-after-free bug affecting systems with multipath TCP listeners open. The bug works by triggering a response to a retransmitted SYN packet at the same moment that the TCP connection is established in another thread, causing the first thread to access the connection's options structure after the second thread has freed it.…

The RISC-V architecture changes were merged today for the Linux 7.4 kernel with one nice optimization standing out…

Even before a bug received its CVE identifier or an upstream fix, the local privilege escalation vulnerability exploit found its way into the wild.

Development on Ubuntu 27.04, codenamed ‘Tenacious T-Rex’, has officially begun. The tenacious archive is now open (30 October 2026), with auto-sync from Debian set to pull in a tranche of updated packages since the Ubuntu 26.10 release. Over the course of the next six months, those will be tested, set and form the basis of the final, stable release. Ubuntu 27.04 is scheduled for release on 22…

The de facto subreddit for all things open source has not only banned AI-related projects but also users who "don't speak English."

Over the past decade, the timing of PostgreSQL major releases has become very predictable: no earlier than the middle of September, and no later than the middle of October. This year is going to be different. PostgreSQL 19 most likely won’t be released until November, and it’s not impossible that the project could decide to postpone the release further.

This is a roundup of articles from the openSUSE community listed on planet.opensuse.org. This community blog feed aggregator lists the featured highlights below from Oct. 23 - 29. This week highlights five Tumbleweed snapshots for week 43 headlined by KDE Plasma 6.8.0, Qt 6.12.0, Linux Kernel 7.2.11 and PHP 8.5.12,…

With today's AI/LLM capabilities, there is almost a new operating system heard about each week "coded from scratch" predominantly via AI agents. This week was no exception with another project hitting our email inbox. Though most of them are open-source, this one is closed-source in the name of security…

Spooky season is officially upon us. Check out this self-playing Ouija board built by one of our colleagues.

If you run your own music streaming server via Jellyfin or Navidrome/Subsonic, you’ll want a decent desktop player – Gelly is a solid choice for GNOME. It bills itself as “native, lightweight music player” for the aforementioned streaming servers (and compatible ones). It’s written in Rust and GTK4/libadwaita and, as a good players should, it lets you browse, play and control music playback.…

A change merged for Linux 7.4 is showing some mighty big speed-ups for the FAT32 file-system…

For those curious how NVIDIA Vera is scaling between single and dual socket deployments, here are some benchmarks I carried out a while back exploring the power and performance from one to two Vera CPUs.

Core Desktop could run apps that can’t run natively in a sandbox, while linux-firmware-hwe is proposed as a safeguard against newer firmware causing problems.

Fedora 45 is ready to ship! It will be formally released on Tuesday, 3 November…

The Nano Pro Gen15 is a compact Linux mini PC powered by Intel’s Core Ultra X7 358H processor with integrated Arc B390 graphics. Developed by TUXEDO Computers, the system supports up to 128GB of DDR5 memory, dual NVMe SSDs, four 4K displays, and dual 2.5GbE connectivity. It can be used for software development, local AI…