Category: Blog

Zapscape is a vulnerability in the KVM hypervisor that allows root access to the host system.

Information has been disclosed about a vulnerability (CVE-2026-64561) in the KVM hypervisor that allows root access to the host environment while also having root access in the guest system. The issue can also be exploited for local privilege escalation with access to the /dev/kvm device (for example, in RHEL, such access is granted to all users). A prototype exploit is available for download. The issue has been assigned […]

Disabled acceptance of AI patches in the kernel's drivers/staging section Linux

Greg Kroah-Hartman, responsible for maintaining the stable and staging branches of the kernel Linux, announced that it would no longer accept patches prepared using AI tools into the drivers/staging section. It is noted that such automatically generated patches contradict the core idea of ​​using the drivers/staging subsystem as a training ground for new kernel developers. Code in drivers/staging is initially classified as problematic (TAINT_CRAP), and maintainers intentionally […]

LightDM 1.33.0 display manager has been released.

Developers Ubuntu published the release of the LightDM 1.33.0 display manager, which is used in Linux Mint, Lubuntu, Xubuntu и Ubuntu MATE. LightDM provides a background process for running display servers and GUI modules for login, as well as for user authentication via PAM and remote desktop connections. The project is not tied to specific desktop environments […]

Published mount-tui, an interface for mounting disks and SMB resources in Linux

The mount-tui project has been published. It develops an interactive text interface for viewing and mounting local block devices, as well as connecting network resources via the SMB/CIFS protocol. The program is written in Rust using the Ratatui and Crossterm libraries and is distributed under the Apache 2.0 license. mount-tui lists disks and partitions with file system, size, mount point, and additional information […]

Cloudflare OS, a platform for AI-powered apps, is open source.

Cloudflare has open-sourced its Cloudflare OS platform, designed for building personal apps using vibe coding and for securely running these apps and AI agents. The code is written in TypeScript and distributed under the Apache 2.0 license. Cloudflare OS is billed as an operating system for AI-powered apps, with the workshop-backend package serving as the core […]

Release of uutils 0.10, the Rust variant of GNU Coreutils

The uutils coreutils 0.10.0 (Rust Coreutils) project, a development of the GNU Coreutils package, written in Rust, has been released. coreutils includes over 100 utilities, including sort, cat, chmod, chown, chroot, cp, date, dd, echo, hostname, id, ln, and ls. The project's goal is to create a cross-platform alternative to Coreutils, capable of running on platforms including Windows, Redox […]

Northstar 1.0.6 is a minimalist browser powered by its own engine.

A new version of the Northstar browser has been released. LORE previously reported on the Nordstjernen browser, also developed by the same author. The projects are developing in parallel. Northstar is a simple open-source web browser licensed under the GPL. Nordstjernen is a more complex browser whose source code is available, but the license restricts the creation of a competing browser based on that source code. Northstar is focused […]

Wild 0.10

On August 4th, Wild 0.10 was released - a free linker written in Rust and designed primarily for quickly building programs in LinuxThe linker performs the final stage of the build process: combining object files and libraries into a final executable or shared library. Wild can be used as a replacement for GNU ld, LLD, and Mold, although the developers' stated ultimate goal is […]

In kernel drivers/staging Linux will stop accepting patches created by LLM

August 3, 2026, stable branch maintainer Linux Greg Kroah-Hartman announced new rules for accepting changes to the drivers/staging directory. The reason for this was the recent "invasion of LLM-generated patches." Now, patches prepared by language models for this part of the kernel will be automatically rejected, with the exception of confirmed fixes for real vulnerabilities. The drivers/staging directory is used to host […]

The new ChainDrop worm has infected over 400 NPM packages.

A massive attack on packages in the NPM repository was detected, using a new self-propagating worm called ChainDrop, which injects malware into dependencies. The attack resulted in 2212 malicious releases for 444 packages. The most popular of the compromised packages—keyv, flat-cache, and file-entry-cache—were downloaded 154, 149.9, and 147.6 million times per week, respectively. The worm's downloader was located in setup.mjs files […]

GNOME Calendar developer accuses Linux Mint ignoring outdated package issue

One of the GNOME Calendar developers (Hari Rana) has made public a conflict with the package maintainer in the distribution. Linux Mint. The conflict is due to the fact that in Linux Mint ships with a modified, outdated version of GNOME Calendar. Despite the specific changes, the application is packaged under the name GNOME Calendar, giving users the impression that it's the original project. In […]

Collabora unveiled Holo Core, a port of Arch Linux for the AArch64 architecture

Collabora has unveiled the Holo Core project, which it developed in collaboration with Valve to develop a version of the Arch distribution. Linux for the AArch64 platform. Holo Core was created to run SteamOS on the Steam Frame, a device that combines a personal computer, a 3D headset, and two 3D controllers. The development of Holo Core was necessary because the Arch distribution Linux, which underlies SteamOS, is only available for the […]

Buy reliable hosting for sites with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster