资讯与观察· Linux
AI 行业动态、工程实践、产品方法和社区故事。
[$] LWN.net Weekly Edition for October 22, 2026
Inside this week's LWN.net Weekly Edition: - Front: Android vendor hooks; Reproducible builds and kernel integrity; Rust data structures; NFS server changes; Setting no_new_privs for PID 1; Rust XArray; Rust cross-crate…
Today's PHP Security Release, and How We're Strengthening PHP Security (PHP Foundation)
The PHP Foundation has put out a blog entry explaining how the vulnerabilities disclosed today came about and why they took so long to fix. To fix the OOM problem, the PHP security team developed several competing appro…
2 分钟 · LWN.net
More vulnerabilities in widely deployed software
The Node.js project has released a number of security updates to fix, among other vulnerabilities, a remote-code-execution bug affecting programs that use Brotli compression. And, in case any programmers who use compile…
1 分钟 · LWN.netLATEST STORIES
最新内容
[$] Hash-based module integrity for reproducible distributions精选导读
We last looked in on hash-based integrity checking for kernel modules just over a year and half ago. Since that time, the patch set has undergone multiple revisions. At the 2026 Linux Plumbers Conference (LPC), Thomas W…
Upstreaming Tyr: Rust, DRM, and the Linux Kernel (Collabora)精选导读
The Collabora blog provides an update on Tyr, a driver for Arm Mali GPUs. One of our biggest challenges has been developing Tyr while the Rust kernel abstractions and driver interfaces are also being developed. As the d…
[$] Understanding Nix flakes精选导读
Nix flakes are an experimental feature of the Nix package-management tool designed to build projects in a more self-contained and reproducible way. Despite the feature's experimental status, it has become increasingly p…
PHP patches released for two critical RCEs精选导读
The PHP project has published PHP versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to address two critical vulnerabilities that could allow unauthenticated remote code execution. Who is at risk: all PHP installations serving …
Four stable kernels for Wednesday精选导读
Greg Kroah-Hartman has announced the release of the 7.2.12, 6.18.58, 6.12.114, and 6.6.160 stable kernels. Each contains a number of important fixes; users are advised to upgrade.
Security updates for Wednesday精选导读
Security updates have been issued by AlmaLinux (bubblewrap, emacs, gimp:2.8, glibc, jackson-databind, kernel, kernel-rt, librabbitmq, openexr, openssh, postgresql:16, postgresql:18, python3, resteasy, wireshark, xorg-x1…
Critical PHP security update coming精选导读
The PHP security team has let it be known that there is a high-stakes security update coming at 14:00 UTC on October 21. "All PHP users are encouraged to prepare now so they can upgrade as soon as the release is availab…
[$] SUSE's efforts to disable setuid system-wide精选导读
Setuid (and setgid) binaries have long been a source of headaches, and security vulnerabilities, on Linux systems. They are largely seen as something to be avoided; SUSE's security team, for example, forbids the inclusi…
[$] Discussing a rewrite of XArray精选导读
The work to support block sizes larger than the page size on XFS has been difficult. Many users of XFS run stable kernels, which means that they aren't testing new XFS code as it is released. That has made Daniel Gomez …