Lepton from Valve to run Android games on Linux is now open source
Valve have officially opened up the source code for Lepton, their compatibility layer to run Android games on Linux for the Steam Frame.Read the full article on GamingOnLinux.
https://www.gamingonlinux.com/2026/09/lepton-from-valve-to-run-android-games-on-linux-is-now-open-source/
#Steam #OpenSource #SteamOS
Valve have officially opened up the source code for Lepton, their compatibility layer to run Android games on Linux for the Steam Frame.Read the full article on GamingOnLinux.
https://www.gamingonlinux.com/2026/09/lepton-from-valve-to-run-android-games-on-linux-is-now-open-source/
#Steam #OpenSource #SteamOS
GamingOnLinux
Lepton from Valve to run Android games on Linux is now open source
Valve have officially opened up the source code for Lepton, their compatibility layer to run Android games on Linux for the Steam Frame.
Harbour Masters release 'PaperBoat' their Paper Mario 64 PC port
Another Nintendo game has a new unofficial PC port with PaperBoat from Harbour Masters for Paper Mario 64.Read the full article on GamingOnLinux.
https://www.gamingonlinux.com/2026/09/harbour-masters-release-paperboat-their-paper-mario-64-pc-port/
#OpenSource #Retro #NewRelease
Another Nintendo game has a new unofficial PC port with PaperBoat from Harbour Masters for Paper Mario 64.Read the full article on GamingOnLinux.
https://www.gamingonlinux.com/2026/09/harbour-masters-release-paperboat-their-paper-mario-64-pc-port/
#OpenSource #Retro #NewRelease
GamingOnLinux
Harbour Masters release 'PaperBoat' their Paper Mario 64 PC port
Another Nintendo game has a new unofficial PC port with PaperBoat from Harbour Masters for Paper Mario 64.
Minecraft Java Edition 26.3 'Wilderness Bound' update released
The latest content drop is out now with Minecraft Java Edition 26.3 'Wilderness Bound' update released.Read the full article on GamingOnLinux.
https://www.gamingonlinux.com/2026/09/minecraft-java-edition-26-3-wilderness-bound-update-released/
#Adventure #Sandbox #Survival
The latest content drop is out now with Minecraft Java Edition 26.3 'Wilderness Bound' update released.Read the full article on GamingOnLinux.
https://www.gamingonlinux.com/2026/09/minecraft-java-edition-26-3-wilderness-bound-update-released/
#Adventure #Sandbox #Survival
GamingOnLinux
Minecraft Java Edition 26.3 'Wilderness Bound' update released
The latest content drop is out now with Minecraft Java Edition 26.3 'Wilderness Bound' update released.
How an Italian Logistics Company Moved From Windows to Linux: A Real Migration Story
Mišo Oroz shares how he migrated a small transport and logistics company in,Bergamo, Italy to Linux and open source to reduce cost and ordinary technical problems.
https://feed.itsfoss.com/link/24361/17464323/italian-logistics-company-migration
#LinuxStories #feed #linux
Mišo Oroz shares how he migrated a small transport and logistics company in,Bergamo, Italy to Linux and open source to reduce cost and ordinary technical problems.
https://feed.itsfoss.com/link/24361/17464323/italian-logistics-company-migration
#LinuxStories #feed #linux
It's FOSS
How an Italian Logistics Company Moved From Windows to Linux: A Real Migration Story
Mišo Oroz shares how he migrated a small transport and logistics company in,Bergamo, Italy to Linux and open source to reduce cost and ordinary technical problems.
or1k.net
Daily Digest — September 17, 2026
Ubuntu 26.10 moves to Rust coreutils, GNOME 51 debuts, and Kubernetes v1.37 hardens storage. Plus, major CVEs hit WSO2, Issabel PBX, and Acronis plugins.
📰 Daily Digest — September 17, 2026
• Ubuntu 26.10 Finally Dumps GNU cp, mv, and rm for Rust
• GNOME 51 Cleans Up Its Graphics Stack and Improves Files
• Kubernetes v1.37 Closes a Glaring emptyDir Security Hole
• WSO2 API Manager Suffers Active Attacks Over a Dumb JWT Bypass
• Fedora 45 Finally Replaces the Ancient In-Kernel Console
• Acronis Backup Plugins Targeted by Active Privilege Exploits
• Issabel PBX Framework Exploited via Hard-Coded JWT Key
• Linux Scheduler Might Start Rolling Dice to Find Idle Cores
• GEFS Brings Plan 9 Copy-on-Write Storage to OpenBSD
• AMD Prepares PCIe 6.0 Encryption for EPYC Venice
• AI Coding Assistant Hijack Spreads Worm Across 100 Repos
• Ubuntu 26.10's amd64v3 Builds Bring Speedups to Budget Laptops
• Flatpak's Terminal Intent Might Finally Let You Change Defaults
• Tails 7.13 Speeds Up the Paranoid Shutdown Process
• KDE Cleans Up NetworkManager Prompts with QML Migration
https://or1k.net/digests/daily-digest-2026-09-17/
• Ubuntu 26.10 Finally Dumps GNU cp, mv, and rm for Rust
• GNOME 51 Cleans Up Its Graphics Stack and Improves Files
• Kubernetes v1.37 Closes a Glaring emptyDir Security Hole
• WSO2 API Manager Suffers Active Attacks Over a Dumb JWT Bypass
• Fedora 45 Finally Replaces the Ancient In-Kernel Console
• Acronis Backup Plugins Targeted by Active Privilege Exploits
• Issabel PBX Framework Exploited via Hard-Coded JWT Key
• Linux Scheduler Might Start Rolling Dice to Find Idle Cores
• GEFS Brings Plan 9 Copy-on-Write Storage to OpenBSD
• AMD Prepares PCIe 6.0 Encryption for EPYC Venice
• AI Coding Assistant Hijack Spreads Worm Across 100 Repos
• Ubuntu 26.10's amd64v3 Builds Bring Speedups to Budget Laptops
• Flatpak's Terminal Intent Might Finally Let You Change Defaults
• Tails 7.13 Speeds Up the Paranoid Shutdown Process
• KDE Cleans Up NetworkManager Prompts with QML Migration
https://or1k.net/digests/daily-digest-2026-09-17/
or1k.net
Daily Digest — September 18, 2026
Daily digest: Cisco scrambles to patch a CVSS 10.0 zero-day in its Identity Services Engine, Check Point fixes an unauthenticated root exploit, and Unbound addresses a critical DNSSEC validator bug.
📰 Daily Digest — September 18, 2026
• Cisco Bags Another CVSS 10.0 Zero-Day in Identity Services Engine
• Unbound DNSSEC Validator Offers RCE via Malicious Zones
• Docker Sandboxes for macOS Fail at Basic Isolation
• Check Point Handing Out Root Shells via Stack Overflow
• BIND 9 Patches 14 Flaws, Including DoH Connection Crashes
• Rust Project Warns of Targeted Social Engineering Attacks
• GNOME 51 Drops with Better Performance and UI Refinements
• Sidero Labs Wraps Talos Kubernetes OS in Enterprise Compliance
• Dragonfly 2.0 Optimizes In-Memory Performance and Valkey Support
• GNOME Foundation Reshuffles Board and Hires Finance Director
• Fujitsu Formally Unveils the 144-Core MONAKA ARMv9 Processor
• Rust Coreutils 0.12 Clears the Runway for Ubuntu's Transition
• Jemalloc 5.4 Overhauls Portability and Cleans Up Technical Debt
• Linux Kernel Proposal Aims to Standardize GPU Memory Statistics
• New ASUS Glymur Driver Enhances Snapdragon X2 Linux Support
https://or1k.net/digests/daily-digest-2026-09-18/
• Cisco Bags Another CVSS 10.0 Zero-Day in Identity Services Engine
• Unbound DNSSEC Validator Offers RCE via Malicious Zones
• Docker Sandboxes for macOS Fail at Basic Isolation
• Check Point Handing Out Root Shells via Stack Overflow
• BIND 9 Patches 14 Flaws, Including DoH Connection Crashes
• Rust Project Warns of Targeted Social Engineering Attacks
• GNOME 51 Drops with Better Performance and UI Refinements
• Sidero Labs Wraps Talos Kubernetes OS in Enterprise Compliance
• Dragonfly 2.0 Optimizes In-Memory Performance and Valkey Support
• GNOME Foundation Reshuffles Board and Hires Finance Director
• Fujitsu Formally Unveils the 144-Core MONAKA ARMv9 Processor
• Rust Coreutils 0.12 Clears the Runway for Ubuntu's Transition
• Jemalloc 5.4 Overhauls Portability and Cleans Up Technical Debt
• Linux Kernel Proposal Aims to Standardize GPU Memory Statistics
• New ASUS Glymur Driver Enhances Snapdragon X2 Linux Support
https://or1k.net/digests/daily-digest-2026-09-18/
or1k.net
Daily Digest — September 19, 2026
Linux kernel hits public local root exploits, Google swaps Android's Binder C code for Rust, and Ubuntu 26.10 upgrades to the new Linux 7.3 kernel.
📰 Daily Digest — September 19, 2026
• GNOME 51 Arrives Alongside GNOME OS Memory Compression
• Java 27 Defaults to G1 GC and Shrinks Object Headers
• MariaDB 13.0 Goes Stable with Useful SQL Additions
• Ubuntu 26.10 Grabs the Linux 7.3 Kernel Ahead of Schedule
• Old C Networking Flaws Exposed by New Local Root Exploits
• Microsoft Fixes CVSS 10.0 Missing Authentication in Azure AI
• WordPress Click2Shell Chain Forces Silent Theme Installations
• Google Dumps Android's Legacy Binder C Code for Rust
• Upcoming Kbuild Patches Slash Incremental Kernel Build Times
• NVIDIA Brings Native Rust Compilation to CUDA GPU Kernels
• LibreOffice Refuses to Bloat Its Suite with Built-In AI
• Intel Scraps Paid Bug Bounties in Favor of Free Labor
• AI Coding Agents Tricked Into Installing Rogue Plugins
• Reverse-Engineered Apple Video Decoder Driver Headed Upstream
• Ubuntu 26.10 Tweaks OOM Rules to Keep Desktops Alive
https://or1k.net/digests/daily-digest-2026-09-19/
• GNOME 51 Arrives Alongside GNOME OS Memory Compression
• Java 27 Defaults to G1 GC and Shrinks Object Headers
• MariaDB 13.0 Goes Stable with Useful SQL Additions
• Ubuntu 26.10 Grabs the Linux 7.3 Kernel Ahead of Schedule
• Old C Networking Flaws Exposed by New Local Root Exploits
• Microsoft Fixes CVSS 10.0 Missing Authentication in Azure AI
• WordPress Click2Shell Chain Forces Silent Theme Installations
• Google Dumps Android's Legacy Binder C Code for Rust
• Upcoming Kbuild Patches Slash Incremental Kernel Build Times
• NVIDIA Brings Native Rust Compilation to CUDA GPU Kernels
• LibreOffice Refuses to Bloat Its Suite with Built-In AI
• Intel Scraps Paid Bug Bounties in Favor of Free Labor
• AI Coding Agents Tricked Into Installing Rogue Plugins
• Reverse-Engineered Apple Video Decoder Driver Headed Upstream
• Ubuntu 26.10 Tweaks OOM Rules to Keep Desktops Alive
https://or1k.net/digests/daily-digest-2026-09-19/
or1k.net
Daily Digest — September 20, 2026
Today's digest covers newly flagged Linux kernel vulnerabilities, a critical unauthenticated RCE in Orkes Conductor, and RustFS 1.0 reaching general availability.
📰 Daily Digest — September 20, 2026
• CISA flags three exploited Linux kernel bugs you should have patched
• Unsandboxed GraalVM sinks Orkes Conductor with critical RCE
• SolarWinds does it again with a hard-coded key in ARM
• CrowdSec loses 170 private repos to basic credential hygiene failure
• Stale Debian packages and SSO trust issues let researchers breach OpenAI
• Google Gemini accidentally hacks real-world systems during test mix-up
• Simple VFS dentry optimization yields 39% speedup in Linux 7.4
• Linux 7.3-rc4 reverts a pair of annoying Btrfs regressions
• Intel Xe driver gets smart about bad memory in Linux 7.4
• KDE turns 30: Tracking three decades of community evolution
• KDE devs squash beta bugs as Plasma 6.9 work begins
• GNOME OS deploys Zswap by default to combat memory exhaustion
• RustFS 1.0 lands as an Apache 2.0 alternative to MinIO
• Pangolin 1.23 simplifies high-availability clustering and CLI operations
• Elecrow CrowPanel 10.1: A beefy ESP32 touchscreen for actual tinkerers
https://or1k.net/digests/daily-digest-2026-09-20/
• CISA flags three exploited Linux kernel bugs you should have patched
• Unsandboxed GraalVM sinks Orkes Conductor with critical RCE
• SolarWinds does it again with a hard-coded key in ARM
• CrowdSec loses 170 private repos to basic credential hygiene failure
• Stale Debian packages and SSO trust issues let researchers breach OpenAI
• Google Gemini accidentally hacks real-world systems during test mix-up
• Simple VFS dentry optimization yields 39% speedup in Linux 7.4
• Linux 7.3-rc4 reverts a pair of annoying Btrfs regressions
• Intel Xe driver gets smart about bad memory in Linux 7.4
• KDE turns 30: Tracking three decades of community evolution
• KDE devs squash beta bugs as Plasma 6.9 work begins
• GNOME OS deploys Zswap by default to combat memory exhaustion
• RustFS 1.0 lands as an Apache 2.0 alternative to MinIO
• Pangolin 1.23 simplifies high-availability clustering and CLI operations
• Elecrow CrowPanel 10.1: A beefy ESP32 touchscreen for actual tinkerers
https://or1k.net/digests/daily-digest-2026-09-20/
or1k.net
Daily Digest — September 21, 2026
Linux 7.3-rc4 lands with x86 fixes, Portainer 3.0 pivots to Kubernetes, Gzip 1.15 resolves ancient bugs, and Garuda brings NixOS to the masses.
📰 Daily Digest — September 21, 2026
• Portainer 3.0 Pivots to Kubernetes, Shuffles Free Tier
• Gzip 1.15 Fixes Bugs Present Since the Dawn of Time
• Linux 7.3-rc4: File Systems and LLM Cleanups Dominate
• KDE Lays Out Two-Year Plan for Enterprise, Theme Engines, and Docs
• Clonezilla Live 3.3.3-37 Adds HTTP Boot and Ditches Legacy Net-Tools
• MX Linux 25.3 Ships with Smart Storage Defaults and New Tools
• Garuda Linux Wraps NixOS in Neon and Declarative Flakes
• Intel Microcode and APX Compiler Bugs Patched in Linux 7.3-rc4
• FOSS Digest: From Anti-AI Office Suites to Void Linux Drama
• Linux 7.3-rc4 Welcomes Quirky Gamepads and Fixes Laptop Touchpads
• Vulkan 1.4.363 Ends Fragile Intel GPU Look-Up Tables
• Starling 0.5 Revives the Useless 3D Desktop Fad via AI
• Under the Hood of NVIDIA's 400Gbps QSFP112 Optical Modules
https://or1k.net/digests/daily-digest-2026-09-21/
• Portainer 3.0 Pivots to Kubernetes, Shuffles Free Tier
• Gzip 1.15 Fixes Bugs Present Since the Dawn of Time
• Linux 7.3-rc4: File Systems and LLM Cleanups Dominate
• KDE Lays Out Two-Year Plan for Enterprise, Theme Engines, and Docs
• Clonezilla Live 3.3.3-37 Adds HTTP Boot and Ditches Legacy Net-Tools
• MX Linux 25.3 Ships with Smart Storage Defaults and New Tools
• Garuda Linux Wraps NixOS in Neon and Declarative Flakes
• Intel Microcode and APX Compiler Bugs Patched in Linux 7.3-rc4
• FOSS Digest: From Anti-AI Office Suites to Void Linux Drama
• Linux 7.3-rc4 Welcomes Quirky Gamepads and Fixes Laptop Touchpads
• Vulkan 1.4.363 Ends Fragile Intel GPU Look-Up Tables
• Starling 0.5 Revives the Useless 3D Desktop Fad via AI
• Under the Hood of NVIDIA's 400Gbps QSFP112 Optical Modules
https://or1k.net/digests/daily-digest-2026-09-21/
or1k.net
Daily Digest — September 22, 2026
Today's open-source digest covers Google's uninterrupted 'Orphaned VMs' tech, Red Hat OpenShift going quantum-safe, and Apple Silicon Mac audio patches.
📰 Daily Digest — September 22, 2026
• Keep Your VMs Humming While the Host Kernel Reboots
• Perf Script Ditches Embedded Python for Massive Speedups
• Mainline Apple Silicon Audio Patches Are Here (And Terrifying)
• Kubernetes 1.37 Finally Figures Out If Storage Is in Use
• WebKitGTK and WPE WebKit Drop Legacy Compositor for Skia
• Red Hat OpenShift Gets Quantum-Safe, but the Hard Part Remains
• Rsync 3.5.1 Patches Scary Path Regressions and Steps Up Protocol
• GNU Wget 2.3 Brings Back the Dot Progress Bar and OS/2 Love
• Nebula Matrix SmartNIC Driver Headed for Linux 7.4
• Valve Tests 'Pyrowave,' a Vulkan-Powered LAN Streaming Codec
• Greg Kroah-Hartman Drops Three Massive Stable Kernel Updates
• North Korean Hackers Weaponize Terraform to Hijack macOS Nodes
• ChainScript RAT Abuses Polygon Smart Contracts for C2 Rotation
• Fake LastPass Installer Abuses Microsoft-Signed Driver to Kill AV
• TASK#STOMP PowerShell Backdoor Uses Dual-Process Watchdogs
https://or1k.net/digests/daily-digest-2026-09-22/
• Keep Your VMs Humming While the Host Kernel Reboots
• Perf Script Ditches Embedded Python for Massive Speedups
• Mainline Apple Silicon Audio Patches Are Here (And Terrifying)
• Kubernetes 1.37 Finally Figures Out If Storage Is in Use
• WebKitGTK and WPE WebKit Drop Legacy Compositor for Skia
• Red Hat OpenShift Gets Quantum-Safe, but the Hard Part Remains
• Rsync 3.5.1 Patches Scary Path Regressions and Steps Up Protocol
• GNU Wget 2.3 Brings Back the Dot Progress Bar and OS/2 Love
• Nebula Matrix SmartNIC Driver Headed for Linux 7.4
• Valve Tests 'Pyrowave,' a Vulkan-Powered LAN Streaming Codec
• Greg Kroah-Hartman Drops Three Massive Stable Kernel Updates
• North Korean Hackers Weaponize Terraform to Hijack macOS Nodes
• ChainScript RAT Abuses Polygon Smart Contracts for C2 Rotation
• Fake LastPass Installer Abuses Microsoft-Signed Driver to Kill AV
• TASK#STOMP PowerShell Backdoor Uses Dual-Process Watchdogs
https://or1k.net/digests/daily-digest-2026-09-22/
or1k.net
Daily Digest — September 23, 2026
Today's tech digest covers critical KVM security flaws, the new systemd 262 release, and active zero-day exploits targeting enterprise network firewalls.
📰 Daily Digest — September 23, 2026
• KVM on ARM64 gets a guest-to-host escape hatch
• systemd 262 ships fallback units and an AI canary
• Canonical rakes in $345M in revenue for 2025
• Arch Linux update breaks TPM2-based LUKS decryption
• Alibaba drops $3 million to turn Omarchy into an "AI Agent" OS
• Red Hat pushes Ansible Automation Platform 2.7
• Kubernetes SIG Apps tries to balance reliability with AI workloads
• Linux 7.4 finally exposes AMD SEV status via sysfs
• Kernel scheduler fixes patch up Cache Aware Scheduling bugs
• KDE lays out its 2026-2028 roadmap for enterprise and styling
• PeppermintOS embraces the controversial XLibre to avoid Wayland
• California clamps down on unchecked data center expansion
• Critical Bifrost AI gateway bugs allow unauthenticated code execution
• Active exploits target critical CVSS 10.0 VeloCloud Orchestrator bug
• Check Point zero-day allowed unauthenticated script execution
https://or1k.net/digests/daily-digest-2026-09-23/
• KVM on ARM64 gets a guest-to-host escape hatch
• systemd 262 ships fallback units and an AI canary
• Canonical rakes in $345M in revenue for 2025
• Arch Linux update breaks TPM2-based LUKS decryption
• Alibaba drops $3 million to turn Omarchy into an "AI Agent" OS
• Red Hat pushes Ansible Automation Platform 2.7
• Kubernetes SIG Apps tries to balance reliability with AI workloads
• Linux 7.4 finally exposes AMD SEV status via sysfs
• Kernel scheduler fixes patch up Cache Aware Scheduling bugs
• KDE lays out its 2026-2028 roadmap for enterprise and styling
• PeppermintOS embraces the controversial XLibre to avoid Wayland
• California clamps down on unchecked data center expansion
• Critical Bifrost AI gateway bugs allow unauthenticated code execution
• Active exploits target critical CVSS 10.0 VeloCloud Orchestrator bug
• Check Point zero-day allowed unauthenticated script execution
https://or1k.net/digests/daily-digest-2026-09-23/
or1k.net
Daily Digest — September 24, 2026
Daily Linux and open-source news digest covering critical zero-day vulnerabilities in F5 BIG-IP and MikroTik, AI-assisted container escapes, and hardware enablement updates.
📰 Daily Digest — September 24, 2026
• F5 Patches Actively Exploited BIG-IP APM OAuth Zero-Day
• Critical Next.js ImageResponse Flaw Risks Server Execution
• Chinese Threat Actors Chain Chrome and Windows Zero-Days
• DepthFirst Drops Exploit for Unpatched Ubuntu Container Escape
• MikroTrick Chain Grants Root Router Takeover Without Password
• cPanel CalDAV Flaw Allows Full Root Server Takeover
• Radicle Network Protocol Discloses Critical Auth and Privacy Flaws
• Systemd v262 Lands with Static Binary Builds and OpenSSL 4
• Qualcomm Showcases Linux Bring-Up for Snapdragon X2 Laptops
• F5 Details Indicators of Compromise for BIG-IP APM Zero-Day
• Wireshark 4.6.9 Fixes Nineteen Bugs Including RCE Dissector Flaws
• NTFS-3G Driver Update Patches Multiple Heap Buffer Overflows
• FreeRDP 3.32 Adds Microsoft Entra Integration and RAIL Support
• Proposing a Human-First LLM Policy for the GNOME Project
• Qualcomm Posts Open-Source Patches for Adreno 850 Graphics
https://or1k.net/digests/daily-digest-2026-09-24/
• F5 Patches Actively Exploited BIG-IP APM OAuth Zero-Day
• Critical Next.js ImageResponse Flaw Risks Server Execution
• Chinese Threat Actors Chain Chrome and Windows Zero-Days
• DepthFirst Drops Exploit for Unpatched Ubuntu Container Escape
• MikroTrick Chain Grants Root Router Takeover Without Password
• cPanel CalDAV Flaw Allows Full Root Server Takeover
• Radicle Network Protocol Discloses Critical Auth and Privacy Flaws
• Systemd v262 Lands with Static Binary Builds and OpenSSL 4
• Qualcomm Showcases Linux Bring-Up for Snapdragon X2 Laptops
• F5 Details Indicators of Compromise for BIG-IP APM Zero-Day
• Wireshark 4.6.9 Fixes Nineteen Bugs Including RCE Dissector Flaws
• NTFS-3G Driver Update Patches Multiple Heap Buffer Overflows
• FreeRDP 3.32 Adds Microsoft Entra Integration and RAIL Support
• Proposing a Human-First LLM Policy for the GNOME Project
• Qualcomm Posts Open-Source Patches for Adreno 850 Graphics
https://or1k.net/digests/daily-digest-2026-09-24/
or1k.net
Daily Digest — September 25, 2026
Get the latest on WordPress RCE exploits, VeloCloud's CVSS 10 bypass, Ubuntu's rapid two-week kernel update cycle, and a massive ReactOS DirectX update.
📰 Daily Digest — September 25, 2026
• VeloCloud's On-Prem Orchestrator Suffers CVSS 10.0 Bypass
• Unpatched WordPress Themes Open the Door to Instant RCE
• Linux File-Notification API Abused to Spy on Users
• Jonathan Corbet Resurrects the Kernel Report for 2026
• Proposed 'slab_tiny' Boot Option Aims to Clean Up Allocations
• Fuzzing Bots Force Linux to Add a New Kernel Taint Flag
• Canonical Speeds Up Ubuntu Kernel Releases to Fight AI CVEs
• openSUSE Leap 16.1 Approaches Release Candidate Phase
• Qualcomm Drops Snapdragon X2 Developer Preview for Linux
• F-Droid 2.0 Delivers Modern Material Design and Compose Rewrite
• COSMIC Epoch 1.9 Lands Native Image Viewer and On-Screen Keyboard
• Mir 2.30 Makes Rust Mandatory to Align with Ubuntu 26.04
• KDE Plasma 6.8 Beta Welcomes Backups and Expanded Themes
• What's Up Docker 9.0 Swaps LokiJS for SQLite and Adds RBAC
• ReactOS Merges Massive Wine 10.0 DirectX Update
https://or1k.net/digests/daily-digest-2026-09-25/
• VeloCloud's On-Prem Orchestrator Suffers CVSS 10.0 Bypass
• Unpatched WordPress Themes Open the Door to Instant RCE
• Linux File-Notification API Abused to Spy on Users
• Jonathan Corbet Resurrects the Kernel Report for 2026
• Proposed 'slab_tiny' Boot Option Aims to Clean Up Allocations
• Fuzzing Bots Force Linux to Add a New Kernel Taint Flag
• Canonical Speeds Up Ubuntu Kernel Releases to Fight AI CVEs
• openSUSE Leap 16.1 Approaches Release Candidate Phase
• Qualcomm Drops Snapdragon X2 Developer Preview for Linux
• F-Droid 2.0 Delivers Modern Material Design and Compose Rewrite
• COSMIC Epoch 1.9 Lands Native Image Viewer and On-Screen Keyboard
• Mir 2.30 Makes Rust Mandatory to Align with Ubuntu 26.04
• KDE Plasma 6.8 Beta Welcomes Backups and Expanded Themes
• What's Up Docker 9.0 Swaps LokiJS for SQLite and Adds RBAC
• ReactOS Merges Massive Wine 10.0 DirectX Update
https://or1k.net/digests/daily-digest-2026-09-25/
or1k.net
Daily Digest — September 26, 2026
Dutch government adopts NixOS, Cloudflare container leaks raw tenant data, and AMD unveils Zen 6 Venice EPYC specs. Plus, critical RHEL, Git, and Samba news.
📰 Daily Digest — September 26, 2026
• CISA KEV Adds Adobe Commerce and WSO2 RCE Flaws
• Cloudflare Forgot to Zero Shared Container Disks
• Roundcube SQL Injection Actively Exploited in the Wild
• Dutch Government Moves to NixOS After Microsoft Sanctions
• systemd Adds Built-In systemd-report Infrastructure
• Samba 4.25 Arrives with SMB3 Persistent Handles
• The Battle Over LLM-Generated Code in GNOME and KDE
• GNOME Community Updates: Era Calendar and Deep Dive
• Git Contributors Outline Plans for Git 3.0
• Mageia 9 Reaches End of Life on September 30
• Re-Enabled GitHub Actions Resumed Serving Malware
• Red Hat Automates DISA STIG Compliance for RHEL 10
• AI Hype Drives Nvidia RTX 5090 Prices to $5,000
• AMD Lays Out Zen 6 Venice EPYC 9006 CPU Details
https://or1k.net/digests/daily-digest-2026-09-26/
• CISA KEV Adds Adobe Commerce and WSO2 RCE Flaws
• Cloudflare Forgot to Zero Shared Container Disks
• Roundcube SQL Injection Actively Exploited in the Wild
• Dutch Government Moves to NixOS After Microsoft Sanctions
• systemd Adds Built-In systemd-report Infrastructure
• Samba 4.25 Arrives with SMB3 Persistent Handles
• The Battle Over LLM-Generated Code in GNOME and KDE
• GNOME Community Updates: Era Calendar and Deep Dive
• Git Contributors Outline Plans for Git 3.0
• Mageia 9 Reaches End of Life on September 30
• Re-Enabled GitHub Actions Resumed Serving Malware
• Red Hat Automates DISA STIG Compliance for RHEL 10
• AI Hype Drives Nvidia RTX 5090 Prices to $5,000
• AMD Lays Out Zen 6 Venice EPYC 9006 CPU Details
https://or1k.net/digests/daily-digest-2026-09-26/
or1k.net
Daily Digest — September 27, 2026
Incus 7.5.1 launches with major security fixes, Valve updates SteamOS 3.9.2 Beta, and Oracle PeopleSoft exploits bypass WAF rules using simple URL encoding.
📰 Daily Digest — September 27, 2026
• Kiteworks Tells Customers to Shut Down Everything for Nine Hours
• Microsoft and MikroTik Bugs Chained and Exploited in the Wild
• Image-Based Linux Desktops Still Have a Developer Toolchain Problem
• Sharing Nvidia GPUs via KVM Without PCI Passthrough
• Incus 7.5.1 Arrives with OVN Upgrades and Critical Security Fixes
• GDB 18.1 Brings Cleaner Windows Support and Indexing Fixes
• Attackers Bypass WAFs with Basic URL Encoding to Hit PeopleSoft
• Lunex Stealer Blinds Security Software Using a Vulnerable AMD Driver
• SteamOS 3.9.2 Beta Tightens Up Hardware Support and Performance
• Proton Experimental Fixes CEG Games and AMD CPU Crashing
• PeaZip 11.3 Enforces Master Passwords and Tightens File Extraction
• Fastfetch 2.69 Drops ImageMagick and Adds Animated Logos
• OBS Studio 33 Beta 4 Overhauls Plugins and Upgrades CEF
• Solus Linux Sets Rules for AI-Generated Contributions
• AlmaLinux Launches Crowdsourced Hardware and Software Certification
https://or1k.net/digests/daily-digest-2026-09-27/
• Kiteworks Tells Customers to Shut Down Everything for Nine Hours
• Microsoft and MikroTik Bugs Chained and Exploited in the Wild
• Image-Based Linux Desktops Still Have a Developer Toolchain Problem
• Sharing Nvidia GPUs via KVM Without PCI Passthrough
• Incus 7.5.1 Arrives with OVN Upgrades and Critical Security Fixes
• GDB 18.1 Brings Cleaner Windows Support and Indexing Fixes
• Attackers Bypass WAFs with Basic URL Encoding to Hit PeopleSoft
• Lunex Stealer Blinds Security Software Using a Vulnerable AMD Driver
• SteamOS 3.9.2 Beta Tightens Up Hardware Support and Performance
• Proton Experimental Fixes CEG Games and AMD CPU Crashing
• PeaZip 11.3 Enforces Master Passwords and Tightens File Extraction
• Fastfetch 2.69 Drops ImageMagick and Adds Animated Logos
• OBS Studio 33 Beta 4 Overhauls Plugins and Upgrades CEF
• Solus Linux Sets Rules for AI-Generated Contributions
• AlmaLinux Launches Crowdsourced Hardware and Software Certification
https://or1k.net/digests/daily-digest-2026-09-27/
or1k.net
Daily Digest — September 28, 2026
Daily Linux and open-source news digest covering Citrix NetScaler zero-days, Apprise 2.0, openSUSE Leap 16.1 RC, and core software releases.
📰 Daily Digest — September 28, 2026
• Citrix Left the Door Wide Open Again
• Apprise 2.0 Finally Fixes Notification Retries
• Noctalia 5.2 Refines Its Wayland Window Switcher
• postmarketOS Rebrands to Nura
• Budgie 10.10.3 Adds Menu Favorites and Free Icon Placement
• Klassik Brings KDE 3 Back on Top of Plasma 6
• Vigilantism in Bug Reports Helps Nobody
• Linuxiac Weekly Wrap-Up for Week 39
• openSUSE Leap 16.1 RC Brings Built-in Immutable Mode
• OpenShot 4.0.1 Upgrades the Razor Tool and Linux Support
• OneTek Expands Full Fibre Network in Scotland
• Tellico 4.3 Celebrates 25 Years of Collection Management
https://or1k.net/digests/daily-digest-2026-09-28/
• Citrix Left the Door Wide Open Again
• Apprise 2.0 Finally Fixes Notification Retries
• Noctalia 5.2 Refines Its Wayland Window Switcher
• postmarketOS Rebrands to Nura
• Budgie 10.10.3 Adds Menu Favorites and Free Icon Placement
• Klassik Brings KDE 3 Back on Top of Plasma 6
• Vigilantism in Bug Reports Helps Nobody
• Linuxiac Weekly Wrap-Up for Week 39
• openSUSE Leap 16.1 RC Brings Built-in Immutable Mode
• OpenShot 4.0.1 Upgrades the Razor Tool and Linux Support
• OneTek Expands Full Fibre Network in Scotland
• Tellico 4.3 Celebrates 25 Years of Collection Management
https://or1k.net/digests/daily-digest-2026-09-28/
or1k.net
Daily Digest — September 29, 2026
Daily open source and Linux news digest covering Git 2.56, critical NetScaler zero-day vulnerabilities, KDE Plasma 6.8, Shotcut 26.9, and AI security platforms.
📰 Daily Digest — September 29, 2026
• Patch your NetScaler boxes now, or enjoy the breach
• CISA confirms active exploitation of NetScaler zero-days
• Git 2.56 lands with safer conflict resolution mechanics
• Fedora Linux on Snapdragon X1 laptops gets less painful
• GNOME 49.10 arrives as the final maintenance drop
• KDE Plasma 6.8 gives the classic Oxygen theme an accent color
• Shotcut 26.9 video editor adds audio ducking and FFmpeg 9.0
• Git 2.56 hits the mailing list with fresh contributors
• Carbonato botnet uses AI agents to pillage Docker hosts
• Securing AI agents means locking down the underlying OS
• Network digital twins replace testing in production
• NVIDIA launches Open Agent Safety Platform with kernel sandboxing
https://or1k.net/digests/daily-digest-2026-09-29/
• Patch your NetScaler boxes now, or enjoy the breach
• CISA confirms active exploitation of NetScaler zero-days
• Git 2.56 lands with safer conflict resolution mechanics
• Fedora Linux on Snapdragon X1 laptops gets less painful
• GNOME 49.10 arrives as the final maintenance drop
• KDE Plasma 6.8 gives the classic Oxygen theme an accent color
• Shotcut 26.9 video editor adds audio ducking and FFmpeg 9.0
• Git 2.56 hits the mailing list with fresh contributors
• Carbonato botnet uses AI agents to pillage Docker hosts
• Securing AI agents means locking down the underlying OS
• Network digital twins replace testing in production
• NVIDIA launches Open Agent Safety Platform with kernel sandboxing
https://or1k.net/digests/daily-digest-2026-09-29/
or1k.net
Daily Digest — September 30, 2026
Daily open-source and Linux news digest covering MCP Python SDK OAuth security flaws, OpenSSL 4.0.3, BTR Spectre variant, Firefox 157, and more.
📰 Daily Digest — September 30, 2026
• MCP Python SDK OAuth credential theft flaw
• OpenSSL 4.0.3 drops with 14 CVE fixes
• Spectre-v2 BTR attack leaks Linux kernel memory
• Firefox 157 ships hardware AV1 decoding
• Archinstall 4.5 adds AArch64 and RT kernels
• Firefox defaults to Nova redesign
• GoZen 0.14 video editor hits beta
• AMD buys World Labs for 8.2 billion
https://or1k.net/digests/daily-digest-2026-09-30/
• MCP Python SDK OAuth credential theft flaw
• OpenSSL 4.0.3 drops with 14 CVE fixes
• Spectre-v2 BTR attack leaks Linux kernel memory
• Firefox 157 ships hardware AV1 decoding
• Archinstall 4.5 adds AArch64 and RT kernels
• Firefox defaults to Nova redesign
• GoZen 0.14 video editor hits beta
• AMD buys World Labs for 8.2 billion
https://or1k.net/digests/daily-digest-2026-09-30/
or1k.net
Daily Digest — October 1, 2026
Daily open-source and Linux news digest covering OpenStack Hibiscus, OpenSSL and Citrix NetScaler vulnerabilities, Cisco SD-WAN zero-days, and Gitea 28.
📰 Daily Digest — October 1, 2026
• OpenStack Hibiscus Lands With AI Scaling and Security Fixes
• OpenSSL DTLS Flaw Leaks Heap Memory and Crashes Daemons
• Citrix NetScaler Pre-Auth RCE Exploited in the Wild
• Cisco Catches Zero-Day Exploits in SD-WAN Manager API
• AI Coding Agents Accidentally Leak Internal Data to Public GitHub
• Gitea 28.0 Drops 1.x Scheme and Adds Built-In Audit Logs
• Zimbrite Flaw Weaponized for Web Shells and Credential Harvest
• Microsoft Generalizes WSL Containers for Native Windows Use
• OpenTofu 1.13 Brings Windows ARM64 and Smarter Planning
• Tcl/Tk 9.1 Gains Screen Reader Accessibility and RTL Text
• Python Language Summit Reports Detail Free-Threaded Future
https://or1k.net/digests/daily-digest-2026-10-01/
• OpenStack Hibiscus Lands With AI Scaling and Security Fixes
• OpenSSL DTLS Flaw Leaks Heap Memory and Crashes Daemons
• Citrix NetScaler Pre-Auth RCE Exploited in the Wild
• Cisco Catches Zero-Day Exploits in SD-WAN Manager API
• AI Coding Agents Accidentally Leak Internal Data to Public GitHub
• Gitea 28.0 Drops 1.x Scheme and Adds Built-In Audit Logs
• Zimbrite Flaw Weaponized for Web Shells and Credential Harvest
• Microsoft Generalizes WSL Containers for Native Windows Use
• OpenTofu 1.13 Brings Windows ARM64 and Smarter Planning
• Tcl/Tk 9.1 Gains Screen Reader Accessibility and RTL Text
• Python Language Summit Reports Detail Free-Threaded Future
https://or1k.net/digests/daily-digest-2026-10-01/
or1k.net
Daily Digest — October 2, 2026
Get the latest on Cisco's critical SD-WAN bypass, a new Spectre-v2 vulnerability targeting Linux kernel memory, and Nvidia's hardware-isolated AI security.
📰 Daily Digest — October 2, 2026
• Cisco Catalyst SD-WAN Hit by Absurdly Simple Auth Bypass
• Spectre-v2 Strikes Again With Branch Target Reuse on Linux
• Rust 1.99.0 Lands with Variadics and Pointer Helpers
• Nvidia Enforces AI Agent Safety at the Kernel and Hardware Levels
• Thunderbird Is Finally Building a Real iOS App
• Raspberry Pi 2GB Models Get a Steep Price Hike
• Record Labels Try to Label CLI Tool yt-dlp as Piracy
• Clean Up Your Homelab with Local DNS and a Reverse Proxy
https://or1k.net/digests/daily-digest-2026-10-02/
• Cisco Catalyst SD-WAN Hit by Absurdly Simple Auth Bypass
• Spectre-v2 Strikes Again With Branch Target Reuse on Linux
• Rust 1.99.0 Lands with Variadics and Pointer Helpers
• Nvidia Enforces AI Agent Safety at the Kernel and Hardware Levels
• Thunderbird Is Finally Building a Real iOS App
• Raspberry Pi 2GB Models Get a Steep Price Hike
• Record Labels Try to Label CLI Tool yt-dlp as Piracy
• Clean Up Your Homelab with Local DNS and a Reverse Proxy
https://or1k.net/digests/daily-digest-2026-10-02/
or1k.net
FortiMail CVE-2026-104286 - GitLab Flaw - Dell CSM: Digest for October 3, 2026
FortiMail zero-day CVE-2026-104286 and GitLab's AI Gateway CVE-2026-90970 pose severe risk, while Dell CSM patches critical CVSS 10.0 vulnerabilities.
📰 FortiMail CVE-2026-104286 - GitLab Flaw - Dell CSM: Digest for October 3, 2026
• Cloudflare Wants to Be Your Next Free CA
• Fortinet Bungles Basic Input Validation in FortiMail
• GitLab AI Gateway Flaw Opens Door to Command Execution
• Dell CSM Fails Every Basic Security Exam in the Book
• systemd-appd Aims to Clean Up Desktop Application Tracking
• The Exhausting Reality of AI-Driven Vulnerability Scanning
• COSMIC Draws a Hard Line Against LLM-Generated Code
• Ubuntu Eyes Sequoia PGP to Finally Replace Legacy GnuPG
• Ubuntu Preps SHA3 Support for APT to Avoid Cryptocalypse
• Linux 7.4 Lands Initial Support for Apple M4 and A18 Pro
• KDE Linux Might Drop Arch Packages in Favor of BuildStream
• Red Hat OpenShift Prepares for RHCOS 10 Hardware Requirements
• Coreboot 26.09 Modernizes Codebase, Targets AMD Turin openSIL
• The EU Cyber Resilience Act Ends Free-Lunch Open Source Auditing
• AI Hardware Startup Apex Compute Chooses Mesa and Vulkan
https://or1k.net/digests/daily-digest-2026-10-03/
• Cloudflare Wants to Be Your Next Free CA
• Fortinet Bungles Basic Input Validation in FortiMail
• GitLab AI Gateway Flaw Opens Door to Command Execution
• Dell CSM Fails Every Basic Security Exam in the Book
• systemd-appd Aims to Clean Up Desktop Application Tracking
• The Exhausting Reality of AI-Driven Vulnerability Scanning
• COSMIC Draws a Hard Line Against LLM-Generated Code
• Ubuntu Eyes Sequoia PGP to Finally Replace Legacy GnuPG
• Ubuntu Preps SHA3 Support for APT to Avoid Cryptocalypse
• Linux 7.4 Lands Initial Support for Apple M4 and A18 Pro
• KDE Linux Might Drop Arch Packages in Favor of BuildStream
• Red Hat OpenShift Prepares for RHCOS 10 Hardware Requirements
• Coreboot 26.09 Modernizes Codebase, Targets AMD Turin openSIL
• The EU Cyber Resilience Act Ends Free-Lunch Open Source Auditing
• AI Hardware Startup Apex Compute Chooses Mesa and Vulkan
https://or1k.net/digests/daily-digest-2026-10-03/