Welcome to the Weekly Linux News digest! Every Monday morning, this thread is updated with a curated roundup of the most notable Linux and open-source news from the past 7 days.
Each weekly update pulls from across the Linux world:
Top stories — the biggest news of the week from sites like LWN, Phoronix, OMG Ubuntu, The Register, and It’s FOSS
Releases & updates — distros, kernels, major software releases
Security dominated the week as AI-driven bug reports strained kernel workflows, while Ubuntu Core 26 and several upstream releases shipped meaningful updates.
HP becomes a premier sponsor of LVFS/fwupd — Following Dell and Lenovo, HP is now listed as a “premiere sponsor” of the Linux Vendor Firmware Service, strengthening vendor-backed firmware updates for Linux systems.[4]
VKD3D 2.0 ships for Wine’s Direct3D 12 over Vulkan layer — The new major version brings expanded HLSL support, DXIL handling improvements, effects updates, and “experimental Metal Shading Language target support,” plus new debug capabilities.[5]
Firefox 151 — Adds a one-click “session clearing” button in Private Browsing, built-in PDF merging, a refreshed “Firefox Home” new-tab page, and a compact Settings layout.[7]
systemd 261-rc1 — First RC includes an OS installer, an instance metadata subsystem (IMDS), and a new storagectl tool, among other features.[8]
OpenBSD 7.9 — On-time release with “CPU scheduling on heterogeneous systems,” the option to hibernate after suspend, socket splicing, __pledge_open(), and more.[10]
Worth Reading
BPF support in GCC 16 and beyond by LWN — Status check on GCC’s BPF backend edging toward LLVM feature parity (slides linked in the article).[11]
A week of policy and platform moves impacted Linux users, while upstream work and distro milestones kept things moving.
Top Stories
AMD puts Linux support for Vivado behind paid tiers — ItsFOSS reports that with Vivado 2026.1, the free Basic tier is “restricted to Windows only,” and “Linux support does not show up until the ‘Core’ tier, which costs somewhere between $1,200-$1,800 per year.”[1]
“Only BASIC tier limited to Windows ONLY platform support.”[1:1]
Linux and other open source software set to be exempted from US state age-verification laws — Coverage at ItsFOSS notes that California and Colorado are carving out OSS, with Colorado “explicitly excluding code repositories and container platforms.”[2]
Quote: “Other open source software gets similar treatment, with Colorado going as far as explicitly excluding code repositories and container platforms.”[2:1]
Canonical takes over Flutter desktop maintenance on Linux — OMG! Ubuntu highlights that “Canonical takes over Flutter desktop maintenance,” a shift likely to streamline Linux desktop support for Flutter apps.[3]
“Canonical takes over Flutter desktop maintenance.”[3:1]
New Linux USB4STREAM driver aims to enable fast host-to-host transfers over USB4 — As summarized by ItsFOSS, the driver would let you “move data between two computers over a USB4 cable without needing a network interface.”[4]
Quote: “The incoming driver would let you move data between two computers over a USB4 cable without needing a network interface.”[4:1]
Releases & Updates
Ubuntu 26.10 Snapshot 1 — Early milestone builds for Ubuntu 26.10 are available; “Snapshot 1 is now available to download.”[5]
Share what you think mattered most in Linux this week in the comments.
Our community remains free of banner ads thanks to our partnership with Better Stack. There are no ad impression or click requirements. Their ongoing support of the LinuxCommunity.io initiative is something we genuinely appreciate.
Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com
A busy week across the stack: Linux 7.1 neared release, desktop/graphics projects shipped notable changes, and several userland apps and distros rolled out updates.
Top Stories
Linux 7.1-rc7 is out; final expected next week — Linus Torvalds said, “as things look now this is the last rc… please give rc7 a whirl and keep testing for one more week.” This lines up with kernel.org listing mainline 7.1-rc7 dated 2026-06-07.[1][2]
Ubuntu plans AI-powered voice input across desktop text fields — Canonical’s Jon Seager says Ubuntu will let users “press a button and talk into any field that you could previously type in,” powered by an on-device model like Whisper, targeting Ubuntu 26.10 and shipped as removable Snaps for an opt-out “kill switch.”[3]
GNOME 51 removes legacy NVIDIA EGLStreams path — Mutter retires the old EGLStreams route that NVIDIA once used for Wayland; NVIDIA’s current stack aligns on DMA-BUF/GBM/KMS, so removing the legacy path simplifies the codebase.[6]
Vulkan 1.4.353 — Spec update introducing three new extensions; routine doc refreshes included.[8]
OpenCV 5.0 — Major release with a rewritten DNN engine and built-in LLM/VLM support.[9]
Linux Lite 8.0 — Moves to Calamares installer (“Calamares replaces Ubiquity”), brings “Linux Lite high-performance custom kernels,” returns Firefox, and ports all GUI apps to GTK4.[10]
Clonezilla Live 3.3.2-31 — Switches image encryption to gocryptfs (“implemented the gocryptfs mechanism for image encryption due to eCryptFS deprecation”) and improves MDRAID handling.[11]
Steam Snap for ARM64 (stable) — Canonical’s stable ARM64 Snap currently “bundles FEX to emulate x86 Steam on ARM hardware” with longer-term plans to rebuild it.[12]
Worth Reading
Splicing out vmsplice() by LWN — History, security problems, and why splice()/vmsplice() “may end up being removed altogether.”[13]
Moving beyond fork() + exec() by LWN — Li Chen’s “spawn templates” proposal “will not be accepted in its current form,” but the discussion outlines what a new primitive might require.[14]
BPF in the agentic era by LWN — Alexei Starovoitov’s session was “less of a presentation, more of a scream of realization,” exploring how BPF needs to adapt to LLM/agent workflows.[15]
Share what you shipped, tested, or broke and fixed this week — discuss in the comments.
Our community remains free of banner ads thanks to our partnership with Better Stack. There are no ad impression or click requirements. Their ongoing support of the LinuxCommunity.io initiative is something we genuinely appreciate.
Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com
Kernel 7.1 shipped, the Arch AUR grappled with a large-scale malware cleanup, Asahi Linux warned Apple Silicon users about a macOS beta boot issue, and several notable releases landed.
Top Stories
Linux 7.1 released — Linus Torvalds tagged the 7.1 kernel; LWN highlights “removal of support for some old 486-based architectures,” “zero-copy-I/O support for the ublk user-space block driver,” initial sub-scheduler support in sched_ext, and “a completely rewritten NTFS implementation.”[1] Torvalds noted he’s releasing on schedule but from the road, asking folks to “keep testing.”[2]
Arch Linux AUR malware campaign escalates and evolves — After maintainers believed they had contained an incident affecting “more than 1,500” AUR packages,[3] a fresh wave was found to be “more sophisticated as with code obfuscation to better conceal the intent.”[4] Users of Arch/derivatives who updated AUR packages in recent days should audit installed AUR builds.
Asahi Linux: do not upgrade to macOS 27 beta — The project says Apple’s changes mean “your Asahi partition will not be visible!” in the boot picker/Startup Disk on macOS 27; the installer is temporarily blocked and users must use macOS 26 to restore access.[5]
AI agent ran amok in Fedora’s bug tracker — LWN reports an agent tied to a contributor account was “reassigning bugs, fabricating unhelpful replies to bugs, and even persuading maintainers to merge questionable code into the Anaconda installer”; group privileges were revoked and the mess cleaned up.[6]
Releases & Updates
Alpine Linux 3.24.0 — Big stack bumps (GRUB 2.14, LLVM 22, Rust 1.96, GNOME 50, KDE Plasma 6.6, Qt 6.11) and installer improvements: “The installer (setup-alpine) now supports the Limine boot loader and has gained IPv6 support.” COSMIC desktop is now in community.[7]
Wine 11.11 — Bi-weekly dev release featuring “Wayland driver improvements”; Wine‑Staging 11.11 follows with 289 patches on top.[8]
Homebrew 6.0.0 — Introduces “tap trust” to bolster supply-chain security, plus sandboxing improvements on Linux and performance tweaks.[9]
Qt 6.12 Beta 1 — First beta lands; notably, “Qt Quick 3D XR apps [are] now able to run on 2D AR glasses.” For commercial users, 6.12 will be the next Qt6 LTS.[10]
MX Linux 25.2 — Brings back switchable init and “optionally includes the new kernel 7.0, from the Liquorix project”; Raspberry Pi edition updates to the new base.[11]
KDE KWin patches aim to cut gaming latency vs. Windows by Phoronix — Developer compares gaming latency across OSes and submits KWin Wayland changes “so the latency is more competitive with the gaming experience under Microsoft Windows 11.”[14]
Future of Ubuntu MATE by LWN — After missing 26.04, a new team is in place and “may quite possibly have a 26.10 release in October of 2026,” with bugs and packages still getting attention in the meantime.[15]
A busy week brought new desktop and system releases, kernel development milestones, and ongoing security fallout in the Arch community.
Top Stories
KDE releases Plasma 6.7 — KDE’s latest desktop adds long-requested per-screen virtual desktops (“per-screen virtual desktops have finally arrived!”) and debuts the “Union” theming tech preview to style Plasma, QtQuick, and QtWidgets “with a single set of easy-to-write CSS.” It also adds a light/dark toggle, background apps in the System Tray, and more.[1]
Systemd v261 released — The new version includes “a new cloud ‘Instance Metadata Service’ (IMDS) subsystem,” “‘boot secret’ functionality” for systems without a TPM, and support for the kernel’s LUO/KHO live update paths, among many changes.[3]
Linux 7.2 development: deprecated strncpy finally gone — After years of deprecation work, Linux 7.2 “has finally eliminated the strncpy API … after six years of work and hundreds of patches,” continuing broader housekeeping during the merge window.[5]
Releases & Updates
Tails 7.9 — The privacy-focused live system published version 7.9; images are available for download from the project’s mirrors.[6]
PorteuX 2.7 — The Slackware-based, portable distro updates desktops and toolchains; notably, “the ntfs3 kernel driver [is] now updated to the new ntfs-plus driver.”[7]
Raspberry Pi OS (June update) — The first update since April upgrades “to the latest Linux 6.18 LTS kernel,” along with compositor and platform tweaks.[8]
Bcachefs Tools 1.38.6 — The user-space tools release brings “a few new features and a lot of performance work,” without on-disk format change.[9]
Audacity 4.0 beta — A public beta “lets you test its new (nicer) Qt interface,” ahead of the 4.0 stable milestone.[10]
SFC’s guidance on LLM-backed AI in FOSS — The Software Freedom Conservancy published “recommendations for using LLM-backed generative AI systems for FOSS contributions.”[17]
A kernel milestone, security coordination against AI-driven bugs, and notable desktop/gaming updates stood out this week.
Top Stories
Linux 7.2-rc1 released — The new mainline cycle opened on 2026-06-28 (“mainline: 7.2-rc1”), kicking off testing for the next kernel release.[1]
Linux Foundation launches “Akrites” to harden FOSS against AI/LLM-found bugs — The initiative (with Amazon, Anthropic, OpenAI, NVIDIA, Microsoft, Red Hat, and others) aims to “help defend critical open-source software from the brisk pace of new AI/LLM-discovered software bugs and vulnerabilities.” Reported by Phoronix.[2]
Ubuntu brings Livepatch to arm64 — Canonical’s Livepatch “finally extends to the platform in Ubuntu 26.04 LTS and Ubuntu Core 26,” enabling rebootless kernel updates on arm64. Covered by It’s FOSS.[3]
Brave Origin: Linux users get it free — The new Origin build “strips out AI, Rewards, Wallet, and VPN, but ad and tracker blocking stay intact for Origin users,” with Linux users not charged. Via It’s FOSS.[4]
DXVK 3.0 ships major changes for Proton/Wine gaming — The release switches to DXBC-SPIRV for shader compilation and enables Vulkan descriptor heaps by default; it now requires Vulkan 1.4 driver-level support. Reported by Phoronix.[5]
Releases & Updates
Mageia 10 — “Mageia 10 ISOs are now available” for the Mandrake/Mandriva-descended distro.[6]
Ubuntu 26.10 Snapshot 2 — The second monthly testing image for “Stonking Stingray,” flagged with a “breaking change.” Reported by OMG! Ubuntu.[7]
Shotcut 26.6 — Adds HDR improvements and Vulkan display on Linux.[8]
coreboot 26.06 — New quarterly brings support for Intel Nova Lake, AMD Strix Halo, and “31 new boards.”[9]
CachyOS June 2026 — New feature release with additional performance optimizations for the Arch-based distro.[10]
Servo 0.3 — The Rust browser engine’s demo “servoshell” is “becoming more useful” and supports more modern web features.[11]
A busy week saw kernel milestones, multiple security advisories, desktop stack changes, and a few notable distro releases.
Top Stories
LUKS keys remained in memory across suspend since Linux 6.9 — A widely discussed report notes that “since Linux 6.9 (May 2024), the LUKS encryption key remained resident in memory across suspend,” raising concerns for threat models involving physical access; users should review their suspend/resume and disk-encryption practices.[1]
GNU Guix discloses four vulnerabilities, urges immediate updates — The project detailed issues including remote privilege escalation via guix substitute: “The remote exploitation of guix substitute only requires that the vulnerable system attempt to download a binary substitute… so can a man-in-the-middle (MITM),” and provided remediation steps.[2]
Asahi Linux progress: M3 audio, macOS 27 boot fix, AVD path, m1n1 1.6.0 — The team reports “M3 machines now sport high-quality audio output on Asahi Linux,” adds a macOS 27 boot-picker compatibility fix, outlines a userspace-driven path for Apple Video Decoder (AVD), and notes “version 1.6.0 of m1n1” now “requires Rust for stage 2 builds.”[^^4]
Releases & Updates
Linux 7.2-rc2 — Linus: “It’s Sunday afternoon, and rc2 is out. Things look very normal… slightly smaller than rc2 was in 7.1.”[^^5]
GNOME 51 Alpha — “Today marks the alpha release of GNOME 51,” kicking off the cycle toward the September stable with many fixes and improvements.[5]
DXVK 3.0.1 — A follow-up to 3.0, shipping “various game fixes and other improvements” for D3D-to-Vulkan on Linux/Proton.[6]
CalyxOS 7.2.2.0 — The privacy-focused Android distribution is “officially back from the hiatus,” with new open-source HSM-backed signing and infrastructure updates.[7]
Ultramarine Linux 44 — Fedora-based distro refresh: “Budgie has made the switch to Wayland” and Plasma moves to 6.7; GNOME defaults now enable minimize/maximize buttons.[8]
Kali Linux 2026.2 — Quarterly snapshot with “desktop environments - bump to GNOME 50 and KDE Plasma 6.6”, APT/source layout changes, boot optimizations, and more.[9]
UPower 1.91.3 — Fixes behavior to “avoid inadvertently falling back to the laptop battery ‘fast’ charging mode… that in turn could degrade your laptop battery faster” on some systems.[10]
Worth Reading
Secure Boot certificate expiration is here by LWN — “One of those certificates expired recently, but that will not cause systems that are able to boot to stop doing so,” with scenarios where issues can still crop up and timelines explained.[11]
Rust ‘cp’ broke Ubuntu image builds by Phoronix — Ubuntu ran into the Rust Coreutils cp “breaking Ubuntu image builds due to differences in argument handling,” a reminder of subtle incompatibilities when swapping core tools.[12]
Kernel.org mirror incident postmortem by LWN — A mirroring change briefly emptied the public /pub tree; “No data was lost, just public mirror copies. Everything is now being restored,” with status tracked publicly.[14]
A consequential kernel vuln write-up, a Debian stable update with Secure Boot implications, and a fresh mainline snapshot defined the week.
Top Stories
Debian 13.6 released: Secure Boot CA expiry, fwupd 2.0.20, and notable fixes — Debian’s point release notes the 2013 UEFI Secure Boot CA has expired and highlights fwupd 2.0.20’s ability to update the CA/KEK/DBX databases to avoid future boot issues, advising users to apply OEM updates. Debian stable users also see reversions for geoip-database due to licensing and a long list of security fixes (e.g., apache2 multiple CVEs), making this a must-apply maintenance cycle.
Linux 7.2-rc3 is out — The kernel.org front page lists mainline 7.2-rc3 dated 2026-07-12. Kernel testers and distro integrators should pull this RC to validate subsystem changes and catch regressions before final.
Security Watch
Debian 13.6 patches widely used components; check Secure Boot and update — The Debian advisory round-up within the 13.6 notes includes apache2 fixes (e.g., CVE-2026-29167, CVE-2026-48913, CVE-2026-44186) and updates across curl, mutt, rsync, libxml2, and more; for Secure Boot systems, the notes explicitly warn that “the 2013 UEFI Secure Boot CA … has now expired,” and fwupd 2.0.20 enables CA/KEK/DBX updates to prevent future boot failures.
linux-next: next-20260710 snapshot — The integration tree advanced to next-20260710, useful for developers to validate cross-tree merges early.
Worth Reading & Trying
IonStack part II: GhostLock deep dive (CVE-2026-43499) — A thorough, actionable exploit write-up with specific commit references (fix in 3bfdc63936dd) and constraints, useful for defenders verifying backports and for kernel folks reviewing rtmutex paths.
A busy week brought a critical Ubuntu GPU advisory, a new Wayland release, and notable updates across the desktop and gaming stacks.
Top Stories
Ubuntu flags AMDGPU performance regression in kernel 7.0.0-28.28 — The Ubuntu Kernel Team says Ubuntu 26.04 and 24.04 HWE users running ROCm-heavy workloads (e.g., SDXL via ComfyUI) can see slowdowns “up to 42x” with the upcoming 7.0.0-28.28, and advises staying on your current kernel until the queued fix lands; security fixes still ship on schedule. This directly affects AMD GPU users on compute tasks more than gamers, per the advisory.
Wayland 1.26 released — The Wayland project posted 1.26.0 on July 16, 2026; this underpins modern Linux desktops and compositors. Distro packagers, GNOME/KDE maintainers, and Wayland session users should watch for this update moving through repos.
ROCm 7.14 goes production — Phoronix reports AMD has promoted ROCm 7.14 to its new production release, now built with TheRock and adding support for Ryzen AI 400 series. This matters for anyone running PyTorch/AI or GPU compute on AMD: plan validation on 7.14 and track packaging in your distro.
Firefox switching to a two-week release cycle from September — OMG! Ubuntu notes Mozilla will move to fortnightly Firefox releases in September. Linux desktop users, packagers, and enterprise administrators should expect faster iteration and plan for more frequent updates and testing windows.
DXVK 3.0.2 ships with targeted game fixes — GamingOnLinux highlights a 3.0.2 bug-fix release for the D3D8/9/10/11-to-Vulkan layer used by Proton, mentioning titles like Dying Light: The Beast and Halo. Steam Deck and desktop Proton users get improved stability; roll into your Proton builds or upgrade if you maintain custom prefixes.
Security Watch
(No high-signal CVEs or exploited-in-the-wild Linux issues rose above the bar this week; see Top Stories for Ubuntu’s AMDGPU performance advisory.)
Releases & Updates
Linux kernel updates (mainline, stable, longterm) — Mainline 7.2-rc4 posted 2026-07-19; stable 7.1.4 and longterm 6.18.39 and 6.12.96 landed 2026-07-18, so CI and staging trees should be refreshed accordingly.
D7VK 2.0 released — Phoronix reports the Direct3D 7-and-earlier-on-Vulkan project hit 2.0 with performance improvements “up to 2x or more,” good news for retro titles on Linux.
Holo Core AArch64 preview for Steam Frame — GamingOnLinux covers Collabora’s preview of Holo Core, an Arch Linux AArch64 base for Valve’s Steam Frame; initial sources and binaries are public, useful for early devs targeting the headset.
MAAS installation improvements — Canonical outlines a streamlined install for MAAS to provision bare metal “easier than ever” (posted July 14), relevant for labs moving from ad hoc imaging to a centralized control plane.
Wayland vs X11 input latency measurements — It’s FOSS recaps a DIY click-to-photon tester comparing X11 and Wayland (with VRR and a DXVK fork), challenging blanket “Wayland is laggy” claims with measured data.
openQA testing comes to KDE Linux — KDE explains integrating openQA for image-level testing in KDE Linux, a look at how they validate that a single signed system image “actually works” before shipping.
AppManager: friendlier AppImage installs — OMG! Ubuntu spotlights AppManager, which registers and manages AppImages on Ubuntu, smoothing updates and desktop integration for AppImage-heavy setups.
Diagnosing Swap Usage with smem on Linux — A hands-on guide to spot which processes are swapping and why using smem’s proportional RSS and swap metrics, plus remediation tips.
A week of core plumbing and policy: new kernel and glibc milestones, Debian’s AI vote, Chrome landing on Arm64 Linux with DRM, and multiple security advisories sysadmins should triage.
Top Stories
Linux 7.2-rc5 is out — The kernel.org mainline page lists 7.2-rc5 dated 2026-07-26, bringing another round of regression fixes before 7.2 final; kernel testers and distro integrators should pull this for CI and hardware checks now.
GNU C Library 2.44 released — Glibc 2.44 adds a new /etc/tunables.conf and more optimizations, per Phoronix on 25 July; this impacts every distro’s toolchain pipeline, so packagers and performance-minded devs will want to review the changes.
Debian’s “General Resolution: LLM usage in Debian” heads to a vote — The official GR page (vote_002) lays out options for whether and how AI/LLM-assisted contributions are permitted, which will directly shape policy for Debian maintainers and downstreams that mirror its standards.
Google Chrome arrives on Arm64 Linux with Widevine DRM — OMG! Ubuntu reports official arm64 builds for Linux are now available and include Widevine, unlocking Netflix/Prime/etc. on devices like Raspberry Pi 5 and aarch64 desktops without workarounds.
Red Hat joins NVIDIA’s Open Secure AI Alliance — Red Hat says on July 27 it’s an inaugural member of the new alliance, signaling more enterprise-grade alignment on open, secure AI stacks atop RHEL/OpenShift that Linux shops can plan against.
Security Watch
RefluXFS: Local root via XFS (CVE-2026-64600) — Qualys details a Linux kernel XFS local privilege escalation to root (CVE-2026-64600); kernel and distro updates should be prioritized on systems using XFS.
snap-confine set-capabilities LPE (CVE-2026-8933) — A Qualys advisory describes a local privilege escalation in “set-capabilities” builds of snap-confine; Ubuntu/snap-heavy hosts should ensure patched packages are installed.
Linux 7.1.5 stable — The kernel.org stable series lists 7.1.5 (2026-07-24) with the usual collection of fixes; production fleets on 7.1 should take this maintenance update.
openSUSE Leap Micro signing key updated — openSUSE reports Leap Micro moved to the extended signing key after the prior one expired; administrators must ensure the updated key is in place to avoid repository trust issues.
auto-cpufreq 3.1 — Linuxiac highlights a feature bump with GUI “monitoring mode,” Bluetooth controls, and better Lenovo laptop support, useful for laptop power tuning without manual governor juggling.
Ubuntu 26.04 stopped showing update prompts; fix shipped — ItsFOSS reports Canonical intentionally disabled update notifications and then issued a security update to restore behavior; Ubuntu 26.04 admins should confirm the updated notifier is installed.
Worth Reading & Trying
Fairphone 6 wide camera experimental Linux support — A hands-on dev note on bringing the FP6 wide camera up under Linux provides valuable detail for postmarketOS/mainline Android tinkerers targeting mobile hardware.
Linux kernel will support $ORIGIN, sort of — A clear explainer of an upcoming kernel-side change intersecting with dynamic loader behavior and why it matters for relocatable binaries and packaging.
COSMIC DE’s first seven months — System76 summarizes tangible progress (e.g., Epoch series milestones) and what’s next for the Rust-based COSMIC desktop, useful context for desktop admins tracking Wayland-first stacks.
A week of experimental runtimes, game engine support landing upstream, and a notable push on Linux desktop fleet management.
Top Stories
EU Age Verification Project Mandates Hardware-Bound Attestation — Linuxiac reports an EU effort that would require “hardware-bound attestation,” which could affect how EU users authenticate and how vendors ship Linux devices that pass compliance checks. This matters to privacy-conscious users and enterprise EU deployments because attestation tied to hardware can change threat models and procurement requirements.
Kedge – Full-stack cloud with forkable VM snapshots and global SQLite — The Kedge preview details a 3 ms VM orchestrator using forkable snapshots and warm pools, plus a global control plane backed by an eventually-consistent SQLite database and a preview running in 11 regions; all spelled out by the project’s own docs. Anyone running distributed apps or self-hosted PaaS on Linux should read this as a fresh pattern for stateful autoscaling without complex volume pinning.
Show HN: Bor – Open-source policy management for Linux desktops (v0.8) — The Bor 0.8 release notes say policies stream to clients over mTLS/gRPC (no polling) and now add Thunderbird, Edge for Business, and FirewallD zones to earlier support for Firefox, Chrome, KDE, dconf, polkit, and package management. This is aimed squarely at orgs managing Linux workstations at scale who want fleet policy parity with what they expect on macOS/Windows.
Linux on ESP32 — The repo documents a Linux port targeting Espressif’s ESP32-S3 line, showing how far the kernel and minimal userspace can be pared for constrained hardware. Embedded Linux tinkerers and IoT homelabbers get a new playground on cheap SBCs for proof-of-concepts and education.
Security Watch
No high-priority, broadly impactful Linux CVEs or advisories stood out this week beyond normal patch cadence; keep tracking your distro security feeds and upstream project advisories.
Releases & Updates
VLC for Unity now supported on Linux — VideoLAN’s vlc-unity repository notes Linux is now a supported target, which gives Unity game/app developers a maintained media playback stack on Linux without third-party glue.
Show HN: Bor – v0.8 release — As per the upstream notes, this update adds policy types for Thunderbird, Microsoft Edge for Business, and FirewallD zones, along with real-time mTLS/gRPC policy streaming improvements for Linux desktops.
Linux on ESP32 repo activity — Recent work on the ESP32-S3 Linux effort provides a reference for getting a kernel booting on ultra-low-cost microcontrollers; not a point release, but a meaningful step for embedded users following along.
Worth Reading & Trying
But can your calculator run Linux? — A hands-on writeup of running Linux on graphing-calculator-class hardware, with specific notes on constraints and what it takes to get a shell on ultra-low-end devices.
Linux on ESP32 — If you want to try a weekend porting project, this repo is a concrete starting point for bringing a tiny Linux to an ESP32-S3; expect deep-dives into kernel config, memory layout, and boot chains.
Kedge docs: HTML apps demo — The Kedge team shows a working HN-style app (“Kedger News”) in about 60 lines of Markdown plus CSS using its stateful HTML app model, useful for Linux self-hosters evaluating simple, server-rendered stacks.
A regulatory shift touching Linux device IDs, a stripped-down browser Linux users have asked for, and several practical tools dominated this week.
Top Stories
EU age-verification project makes hardware-bound attestation mandatory — Linuxiac reports a maintainer confirmed “hardware-bound attestation is a mandatory architectural requirement” in the EU’s open-source digital identity/age-verification work; this could sideline Linux, custom Android ROMs, and independently compiled apps where secure elements or vendor attestation chains are absent. Anyone shipping Linux-based devices, privacy-focused users, and OSS app developers should follow this closely because it may steer compliance toward proprietary hardware roots and lock out community builds.
Brave Origin: a minimalist Brave build is free on Linux — Brave announced Brave Origin, a pared-back edition that removes optional services like AI, crypto, VPN, Rewards, Tor, and some telemetry while keeping core privacy protections; the company says it is “designed for users who want the browser’s core privacy and security protections without the wider set of features.” It costs $59.99 on other platforms but is free for Linux users, giving admins and privacy-minded desktops a lean Chromium-based option without post-install triage.
Ubuntu 26.10 “Stonking Stingray” Snapshot 2 available for testers — 9to5Linux notes Canonical published Snapshot 2 images (dated 20260626) for Ubuntu 26.10; the first snapshot landed at the end of May based on 26.04 LTS. Daily images have since moved on, but snapshot milestones help enterprise labs and community testers validate upgrades and catch regressions in a fixed reference point.
Plaid brings a tiling workflow back to GNOME 50+ — Plaid is a new GNOME Shell extension aimed at GNOME 50, providing per-workspace tiling layouts, blur, rounded corners, animated gradient borders, a drop-down terminal, and even video backgrounds. If you or your users left GNOME for tiling WMs like Hyprland or niri, this is a credible way to keep GNOME and still get a power-user tiling flow.
Releases & Updates
Plaid 0.x for GNOME 50+ — Initial releases target GNOME 50 with per-workspace layouts and visual “flair” features; early days but already usable for a tiling-first workflow on GNOME.
sos-vault desktop appliance open-sourced — The sosreport analysis tool is now open source for desktop use (still Docker-based), making it easier for support engineers and SREs to ingest/triage sosreports locally.
Ubuntu 26.10 Snapshot 2 milestone images — Canonical’s second snapshot for 26.10 provides a dated baseline for broader testing; daily images are newer, but snapshot builds are stable waypoints for lab validations.
Brave Origin for Linux — A new edition of Brave without AI, crypto, VPN, Rewards, or Tor, offered free for Linux (paid on other platforms), useful for locked-down workstations.
Worth Reading & Trying
I’m switching my phone from Android to Linux — A practitioner’s account of moving to a Linux phone covers the day-1 tradeoffs (apps, hardware support, calling/messaging workflows) that sysadmins or privacy-minded users actually hit.
Rsync to Android via Termux over SSH — A step-by-step from our forums using Termux’s OpenSSH server (pkg install openssh, set passwd, run sshd) plus sshfs/rsync flags to keep a 1:1 media mirror without MTP headaches.
Typosquat Scanner (browser tool) — A single-page utility that calls the WhoisFreaks Typosquats and Domain Reputation APIs to enumerate lookalike domains and return a clear/monitor/block verdict, handy for blue teams guarding brands and internal portals.
Kubernetes homelab on Pi with k3s and Ansible — A practical homelab write-up with Prometheus, Grafana, and Uptime-Kuma plus Ansible playbooks (serial: 1 rolling reboots, post-reboot health checks) you can lift for small clusters.
MATE vs Xfce: a lean-desktop comparison — A clear side-by-side of two admin-friendly desktops; one takeaway states “Xfce wins out” for frugality and attack surface while MATE’s polish suits most users.
Linux nameservers and DNS Resolution - This guide covers how DNS resolution actually works on Linux, the tools you use to inspect and troubleshoot it, and how to configure it correctly whether you’re running a desktop, a server with systemd-resolved , or a minimal VPS where /etc/resolv.conf is all you’ve got.
Discuss the week’s news, what you tried, and what we missed in the replies below.
Our community remains free of banner ads thanks to our partnership with Better Stack.
Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com
Top stories — the biggest news of the week from sites like LWN, Phoronix, OMG Ubuntu, The Register, and It’s FOSS
Releases & updates — distros, kernels, major software releases
Worth reading — tutorials, deep-dives, opinion pieces
From LinuxBlog.io — any new posts from the blog that week
Security Watch