Linux Weekly News: Key Stories Ahead of This Week

[hydn (Hayden James)]

Welcome to the Weekly Linux News digest! Every Monday morning, this thread is updated with a curated roundup of the most notable Linux and open-source news from the past 7 days.

Each weekly update pulls from across the Linux world:

• Top stories — the biggest news of the week from sites like LWN, Phoronix, OMG Ubuntu, The Register, and It’s FOSS
• Releases & updates — distros, kernels, major software releases
• Worth reading — tutorials, deep-dives, opinion pieces
• From LinuxBlog.io — any new posts from the blog that week

Want to contribute?

Spotted something we missed? Reply below with the link. The thread doubles as a community-curated index of the week’s Linux news.

Discuss any story by replying with your take. Every story in these digests is fair game for discussion.

New digest every Monday at 7:00 AM EST.

(First post early for testing)

[system]

Security dominated the week as AI-driven bug reports strained kernel workflows, while Ubuntu Core 26 and several upstream releases shipped meaningful updates.

Top Stories

• Linus Torvalds: AI bug reports are overwhelming Linux’s private security list — In his 7.1-rc4 notes, Torvalds said the flood of AI-found issues has made the list “almost entirely unmanageable,” urging reporters to “add some real value on top of what the AI did.” The Register summarized the guidance and quotes.^[1]
• RCE flaw disclosed in GTK-based PDF viewers (Evince/Atril/Xreader) — A command-injection issue allows a malicious “polyglot” PDF to load itself as a GTK module via the “–gtk-module” flag, enabling code execution; GTK 4 removed that flag, mitigating impact for newer apps.^[2]
• Ubuntu Core 26 released: smaller OTA updates, ARM64 Livepatch — Canonical’s immutable, snap-based OS cuts download size “by up to 90%” for most snaps (Core base snap updates: “16 MB to 1.5 MB”) and enables live kernel patching on ARM64 devices.^[3]
• HP becomes a premier sponsor of LVFS/fwupd — Following Dell and Lenovo, HP is now listed as a “premiere sponsor” of the Linux Vendor Firmware Service, strengthening vendor-backed firmware updates for Linux systems.^[4]
• VKD3D 2.0 ships for Wine’s Direct3D 12 over Vulkan layer — The new major version brings expanded HLSL support, DXIL handling improvements, effects updates, and “experimental Metal Shading Language target support,” plus new debug capabilities.^[5]

Releases & Updates

• Large batch of stable kernel updates (7.0.10, 6.18.33, 6.12.91, 6.6.141, 6.1.174, 5.15.208, 5.10.257) — LWN notes the first four are “huge” and that 6.1.174, 5.15.208, and 5.10.257 are “small updates for the ‘Fragnesia’ vulnerability.”^[6]
• Firefox 151 — Adds a one-click “session clearing” button in Private Browsing, built-in PDF merging, a refreshed “Firefox Home” new-tab page, and a compact Settings layout.^[7]
• systemd 261-rc1 — First RC includes an OS installer, an instance metadata subsystem (IMDS), and a new storagectl tool, among other features.^[8]
• GNOME Commander 2.0 — Orthodox file manager rewritten in Rust and ported to GTK4.^[9]
• OpenBSD 7.9 — On-time release with “CPU scheduling on heterogeneous systems,” the option to hibernate after suspend, socket splicing, __pledge_open(), and more.^[10]

Worth Reading

• BPF support in GCC 16 and beyond by LWN — Status check on GCC’s BPF backend edging toward LLVM feature parity (slides linked in the article).^[11]
• Custom page-cache policies with BPF by LWN — Summit session on tailoring page-cache eviction with BPF for workload-specific behavior.^[12]
• The tenth OpenPGP email summit minutes by LWN — Notes on PQC plans “within this year,” default signed email ambitions, and new “reliable deletion” draft work.^[13]
• Deutsche Bahn’s website briefly locked out Linux users by It’s FOSS — DB says the Linux block “was not intentional” and has been fixed.^[14]

From LinuxBlog.io

• Linux Log Files: Guide to Reading, Searching, and Managing Logs — Practical guide to reading, searching, and managing logs on Linux systems.

Discuss the week’s news in the comments.

---

1. Linus Torvalds says AI-powered bug hunters have made Linux security mailing list ‘almost entirely unmanageable’ ↩︎

2. Vulnerabilities in various GTK-based PDF readers [LWN.net] ↩︎

3. Ubuntu Core 26 cuts OTA update size, enables ARM64 Livepatch - OMG! Ubuntu
   “download sizes reduced by up to 90%”; “drop from 16 MB to 1.5 MB”; “enables live kernel patching on ARM64 devices.” ↩︎

4. https://www.phoronix.com/news/HP-Sponsoring-LVFS-Fwupd ↩︎

5. https://www.phoronix.com/news/VKD3D-2.0-Released ↩︎

6. A large set of stable kernel updates [LWN.net] ↩︎

7. Firefox 151 brings New Tab design changes, PDF merging + more ↩︎

8. https://www.phoronix.com/news/systemd-261-rc1 ↩︎

9. https://www.phoronix.com/news/GNOME-Commander-2.0 ↩︎

10. OpenBSD 7.9 released [LWN.net] ↩︎

11. https://lwn.net/Articles/1071973/ ↩︎

12. https://lwn.net/Articles/1073103/ ↩︎

13. https://lwn.net/Articles/1072870/ ↩︎

14. In a Weird Case, German Deutsche Bahn's Website Was Locking Out Linux Users ↩︎

[system]

A week of policy and platform moves impacted Linux users, while upstream work and distro milestones kept things moving.

Top Stories

• AMD puts Linux support for Vivado behind paid tiers — ItsFOSS reports that with Vivado 2026.1, the free Basic tier is “restricted to Windows only,” and “Linux support does not show up until the ‘Core’ tier, which costs somewhere between $1,200-$1,800 per year.”^[1]
  “Only BASIC tier limited to Windows ONLY platform support.”^[1:1]

• Linux and other open source software set to be exempted from US state age-verification laws — Coverage at ItsFOSS notes that California and Colorado are carving out OSS, with Colorado “explicitly excluding code repositories and container platforms.”^[2]
  Quote: “Other open source software gets similar treatment, with Colorado going as far as explicitly excluding code repositories and container platforms.”^[2:1]

• Canonical takes over Flutter desktop maintenance on Linux — OMG! Ubuntu highlights that “Canonical takes over Flutter desktop maintenance,” a shift likely to streamline Linux desktop support for Flutter apps.^[3]
  “Canonical takes over Flutter desktop maintenance.”^[3:1]

• New Linux USB4STREAM driver aims to enable fast host-to-host transfers over USB4 — As summarized by ItsFOSS, the driver would let you “move data between two computers over a USB4 cable without needing a network interface.”^[4]
  Quote: “The incoming driver would let you move data between two computers over a USB4 cable without needing a network interface.”^[4:1]

Releases & Updates

• Ubuntu 26.10 Snapshot 1 — Early milestone builds for Ubuntu 26.10 are available; “Snapshot 1 is now available to download.”^[5]

Worth Reading

• Google, Canonical team up to certify Ubuntu images for TPU VMs by The Register — “Chocolate Factory shifts Tensor Processing Unit Ubuntu support back upstream,” a notable cloud+Linux integration update.^[6]

• Steam Deck OLED is Absurdly Overpriced Now, Yet It Sold Out in North America Overnight by ItsFOSS — “The handheld returned at $789 and $949, sold out in North America within 24 hours,” and availability remains uneven.^[7]

• Canonical’s Workshop: sandboxed, reproducible dev environments by OMG! Ubuntu — A look at “sandboxed, reproducible dev environments,” a timely read for developers working across Ubuntu systems.^[8]

From LinuxBlog.io

• Fail2ban on Linux: Protect Your Server from Brute-Force Attacks — Practical guidance on installation, tuning, and operations, including longer bantimes, enabling recidive, nftables/firewalld actions, and “what Fail2ban doesn’t do” for layered defense.^[9]

Share what you think mattered most in Linux this week in the comments.

---

Our community remains free of banner ads thanks to our partnership with Better Stack. There are no ad impression or click requirements. Their ongoing support of the LinuxCommunity.io initiative is something we genuinely appreciate.

Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com

---

1. AMD Pulls a Bait-and-Switch on Linux Users with Vivado Licensing Changes ↩︎ ↩︎

2. Linux is Getting a Free Pass on Age Verification in California and Colorado ↩︎ ↩︎

3. Canonical takes over Flutter desktop maintenance & roadmap ↩︎ ↩︎

4. A New Linux Driver Could Make USB4 Cables a Blazing Fast Way to Move Data ↩︎ ↩︎

5. Ubuntu 26.10 Snapshot 1 is now available to download - OMG! Ubuntu ↩︎

6. Google, Canonical team up to certify Ubuntu images for TPU VMs ↩︎

7. Steam Deck OLED is Absurdly Overpriced Now, Yet It Sold Out in North America Overnight ↩︎

8. Canonical's Workshop: create secure, reproducible dev environments ↩︎

9. Fail2ban on Linux: Protect Your Server from Brute-Force Attacks | LinuxBlog.io ↩︎

[system]

A busy week across the stack: Linux 7.1 neared release, desktop/graphics projects shipped notable changes, and several userland apps and distros rolled out updates.

Top Stories

• Linux 7.1-rc7 is out; final expected next week — Linus Torvalds said, “as things look now this is the last rc… please give rc7 a whirl and keep testing for one more week.” This lines up with kernel.org listing mainline 7.1-rc7 dated 2026-06-07.^[1][2]

• Ubuntu plans AI-powered voice input across desktop text fields — Canonical’s Jon Seager says Ubuntu will let users “press a button and talk into any field that you could previously type in,” powered by an on-device model like Whisper, targeting Ubuntu 26.10 and shipped as removable Snaps for an opt-out “kill switch.”^[3]

• libinput 1.31.2 ships fix for arbitrary root code execution — The widely used input library was updated due to “arbitrary root code execution”; users should take the security update via their distro channels.^[4]

• Proton Drive says Linux client is coming “soon” as service gets faster — As part of a broader SDK overhaul, Proton says a native Linux client is on the roadmap; the service “is now faster” following recent backend improvements.^[5]

• GNOME 51 removes legacy NVIDIA EGLStreams path — Mutter retires the old EGLStreams route that NVIDIA once used for Wayland; NVIDIA’s current stack aligns on DMA-BUF/GBM/KMS, so removing the legacy path simplifies the codebase.^[6]

Releases & Updates

• Wayland Protocols 1.49 — Adds improved multi-GPU support and BT.2100 window handling details.^[7]

• Vulkan 1.4.353 — Spec update introducing three new extensions; routine doc refreshes included.^[8]

• OpenCV 5.0 — Major release with a rewritten DNN engine and built-in LLM/VLM support.^[9]

• Linux Lite 8.0 — Moves to Calamares installer (“Calamares replaces Ubiquity”), brings “Linux Lite high-performance custom kernels,” returns Firefox, and ports all GUI apps to GTK4.^[10]

• Clonezilla Live 3.3.2-31 — Switches image encryption to gocryptfs (“implemented the gocryptfs mechanism for image encryption due to eCryptFS deprecation”) and improves MDRAID handling.^[11]

• Steam Snap for ARM64 (stable) — Canonical’s stable ARM64 Snap currently “bundles FEX to emulate x86 Steam on ARM hardware” with longer-term plans to rebuild it.^[12]

Worth Reading

• Splicing out vmsplice() by LWN — History, security problems, and why splice()/vmsplice() “may end up being removed altogether.”^[13]

• Moving beyond fork() + exec() by LWN — Li Chen’s “spawn templates” proposal “will not be accepted in its current form,” but the discussion outlines what a new primitive might require.^[14]

• BPF in the agentic era by LWN — Alexei Starovoitov’s session was “less of a presentation, more of a scream of realization,” exploring how BPF needs to adapt to LLM/agent workflows.^[15]

• A website that’s a working GNOME 2 desktop by OMG! Ubuntu — A playful throwback that doubles as a reminder of how far desktop plumbing has come.^[16]

From LinuxBlog.io

• From TECO to Neovim: 50 Years of Text Editing on Unix and Linux — A practical, lived-history tour of editors from TECO and ed through vi/Vim/Neovim and Emacs, with workflow takeaways for modern use.^[17]
• Linux: Guide to useradd, usermod, and groupadd — Concrete examples for creating and modifying users and groups safely.^[18]
• PHP-FPM tuning: Using ‘pm static’ for max performance — When to switch from dynamic to static worker pools, and how to size them.^[19]
• Choosing the Perfect Network Firewall Device for under $300 — Hardware guidance for home labs and small offices, with Linux-friendly picks.^[20]
• Best Linux Distro (2026) — Editor’s picks by use case, from newcomer-friendly to power-user setups.^[21]
• Linux Network Bonding: Combine Network Interfaces — A step-by-step on NIC bonding (throughput, failover), including config tips.^[22]

Share what you shipped, tested, or broke and fixed this week — discuss in the comments.

---

Our community remains free of banner ads thanks to our partnership with Better Stack. There are no ad impression or click requirements. Their ongoing support of the LinuxCommunity.io initiative is something we genuinely appreciate.

Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com

---

1. Linux 7.1-rc7 [LWN.net] ↩︎

2. https://www.kernel.org/ ↩︎

3. Ubuntu plans to add AI-powered voice input to all text fields - OMG! Ubuntu ↩︎

4. https://www.phoronix.com/news/libinput-1.31.2-Security-Fix ↩︎

5. Proton Drive is Now Faster (And Getting a Linux Client Soon) ↩︎

6. https://www.phoronix.com/news/GNOME-51-Drops-EGLStreams ↩︎

7. https://www.phoronix.com/news/Wayland-Protocols-1.49 ↩︎

8. https://www.phoronix.com/news/Vulkan-1.4.353 ↩︎

9. https://www.phoronix.com/news/OpenCV-5.0-Released ↩︎

10. Distribution Release: Linux Lite 8.0 (DistroWatch.com News) ↩︎

11. Distribution Release: Clonezilla Live 3.3.2-31 (DistroWatch.com News) ↩︎

12. Canonical's Steam Snap for ARM64 is now stable  - OMG! Ubuntu ↩︎

13. https://lwn.net/Articles/1075838/ ↩︎

14. https://lwn.net/Articles/1076018/ ↩︎

15. https://lwn.net/Articles/1075067/ ↩︎

16. This dev's personal website is a working GNOME 2 desktop - OMG! Ubuntu ↩︎

17. From TECO to Neovim: 50 Years of Text Editing on Unix and Linux | LinuxBlog.io ↩︎

18. Linux: Guide to useradd, usermod, and groupadd | LinuxBlog.io ↩︎

19. PHP-FPM tuning: Using 'pm static' for max performance | LinuxBlog.io ↩︎

20. Choosing the Perfect Network Firewall Device for under $300 | LinuxBlog.io ↩︎

21. Best Linux Distro (2026) ↩︎

22. Linux Network Bonding: Combine Network Interfaces | LinuxBlog.io ↩︎