# LWN.net LWN.net is a comprehensive source of news and opinions from and about the Linux community. This is the main LWN.net feed, listing all articles which are posted to the site front page. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## GNOME 51 released DevFeed: [GNOME 51 released]() Original publisher: [Read original article]() Author: corbet Published: 2026-09-17T13:08:12Z Content type: release Language: en Sources: [LWN.net]() Topics: [version](), [App](), [data](), [interface](), [file]() Tags: [application](), [changes](), [data](), [desktop](), [file](), [gnome](), [gnome-51](), [improvements](), [interface](), [maps](), [offline](), [performance](), [transit](), [version]() ### AI overview GNOME 51 has been released with performance improvements, offline data and improved transit information in Maps, a new file previewer interface, and other changes. ### Source excerpt Version 51 of the GNOME desktop environment has been released. The list of changes includes a number of performance improvements, offline data and better transit information in the Maps application, a new interface for the file previewer, and more. ## Security updates for Thursday DevFeed: [Security updates for Thursday]() Original publisher: [Read original article]() Author: corbet Published: 2026-09-17T12:48:01Z Content type: news Language: en Sources: [LWN.net]() Topics: [Security]() Tags: [ansible](), [firefox](), [grafana](), [net-9](), [nginx](), [opentelemetry](), [python](), [security](), [updates]() ### AI overview A roundup of security updates issued by AlmaLinux, Debian, Fedora, Mageia, Red Hat, Slackware, SUSE, and Ubuntu. The updates cover packages and components including .NET, kernels, Firefox, nginx, Python packages, Grafana, OpenTelemetry Collector, Ansible, and valkey. ### Source excerpt Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, corosync, firewalld, kernel, kernel-rt, libevent, libsoup, microcode_ctl, nginx:1.26, python-lxml, rsyslog, tesseract, and unbound), Debian (firefox-esr, mkvtoolnix, thunderbird, and tor), Fedora (open62541, php-pecl-mongodb2, python-django6, python-jwcrypto, and roundcubemail), Mageia (aom, cockpit, libgd, packagekit, and python-h2), Red Hat (corosync, delve, git-lfs, grafana-pcp, gstreamer1-plugins-base, libvirt, opentelemetry-collector, and rhc-worker-playbook), Slackware (mozilla-firefox and mozilla-thunderbird), SUSE (acl, attr, alloy, ansible-core, clamav, containerized-data-importer, corosync, cups, distribution, glibc, google-cloud-sap-agent, govulncheck-vulndb, gvfs, helm, jq, kbd, kubernetes1.34-apiserver, kubernetes1.35-apiserver, lcms2, libcupsfilters, liblzmasdk26, libzypp, zypper, mistral-vibe, opensc, openvpn, pcre2, python-jwcrypto, tomcat, tomcat10, and tomcat11), and Ubuntu (guix, libheif, perl, python-cryptography, sqlite3, and valkey). ## Fedora 45 beta drags the Linux console into the 21st century (Register) DevFeed: [Fedora 45 beta drags the Linux console into the 21st century (Register)]() Original publisher: [Read original article]() Author: corbet Published: 2026-09-16T16:24:46Z Content type: news Language: en Sources: [LWN.net]() Topics: [Fedora](), [Linux](), [console](), [legacy](), [Terminal](), [Software]() Tags: [beta](), [console](), [development](), [legacy](), [linux](), [replacement](), [software](), [terminal]() ### AI overview The article reports that Fedora 45 beta replaces Linux's legacy in-kernel console with kmscon, a software-controlled userspace terminal emulator that has been in development for more than a decade. ### Source excerpt The Register looks forward to the upcoming Fedora 45 release. The biggest surprise is that Linux's legacy in-kernel console - the text-mode interface normally hidden beneath the GUI - has been replaced with a software-controlled alternative. The replacement is kmscon, a userspace terminal emulator that has been in development for more than a decade. ## \[$\] Ways to encrypt data on servers DevFeed: [\[$\] Ways to encrypt data on servers]() Original publisher: [Read original article]() Author: jake Published: 2026-09-16T14:17:55Z Content type: article Language: en Sources: [LWN.net]() Topics: [Encryption](), [Server](), [Cryptography]() Tags: [2026](), [encryption](), [government](), [servers]() ### AI overview A report on Romeo Solano's FOSSY 2026 presentation about encrypting data on servers. It explains why remote systems without keyboard access during boot are harder to encrypt than laptops and discusses problems and possible solutions. ### Source excerpt At the 2026 edition of FOSSY, Romeo Solano gave a fast-paced, humorous presentation on what could have been a rather boring topic: server encryption. There are a number of threats that we face in today's world, from criminals, government overreach, espionage, and more, that can be thwarted with encryption. But encrypting data on a system that may live elsewhere, without any access to its keyboard at boot time, is rather more difficult than encrypting the disk of a laptop. Solano described the problems and gave a tour of some of the solutions in the talk. ## Security updates for Wednesday DevFeed: [Security updates for Wednesday]() Original publisher: [Read original article]() Author: corbet Published: 2026-09-16T13:40:53Z Content type: news Language: en Sources: [LWN.net]() Topics: [Security](), [Linux](), [nginx](), [openssl](), [Python](), [OpenSSH]() Tags: [debian](), [linux](), [nginx](), [openssh](), [openssl](), [python](), [security](), [updates]() ### AI overview Security updates were issued by AlmaLinux, Debian, Fedora, Oracle, Red Hat, SUSE, and Ubuntu for packages including kernels, nginx, OpenSSL, Python, Perl, Git, Docker, OpenSSH, and other software. ### Source excerpt Security updates have been issued by AlmaLinux (kernel, kernel-rt, libkcapi, nginx, nginx:1.24, openssl, osbuild-composer, perl, perl:5.32, python-tornado, rsync, and rust), Debian (cjose and nginx), Fedora (environment-modules, erlang, GitPython, knot, perl-Authen-SASL, python-configargparse, ruby, rubygems, and sblim-sfcb), Oracle (firefox, git-lfs, gstreamer1-plugins-base, kernel, libkcapi, nginx, nginx:1.26, openssl, osbuild-composer, perl, perl-YAML-Syck, postgresql18, python-tornado, and rust), Red Hat (fence-agents, git-lfs, microcode_ctl, osbuild-composer, podman, python-pyasn1, and resource-agents), SUSE (389-ds, ant, bson-devel, chirp-20260911, docker, gimp, google-cloud-sap-agent, hauler, kernel, kimi-code, libpcap, python-GitPython, python310, syncthing, yast2-samba-client, and zstd-jni), and Ubuntu (aom, imagemagick, kitty, openssh, phpseclib, policykit-1, python-sql, python-webob, shibboleth-sp, simplesamlphp, snapcast, srt, and suricata-update). ## \[$\] Adding BPF to blk-iocost DevFeed: [\[$\] Adding BPF to blk-iocost]() Original publisher: [Read original article]() Author: corbet Published: 2026-09-15T14:37:30Z Content type: article Language: en Sources: [LWN.net]() Topics: [Kernel](), [IO](), [ordering](), [Operating system]() Tags: [kernels](), [loading](), [ordering](), [performance]() ### AI overview This article discusses a patch series that would make the Linux blk-iocost I/O controller more flexible by allowing a BPF program to make cost decisions. It places the change in the context of block I/O scheduling for modern solid-state drives, where fairness and high throughput are important. ### Source excerpt The scheduling of block I/O requests has long been a challenge for operating-system kernels. For many years, the performance characteristics of rotating drives meant that putting considerable resources into request ordering was worthwhile. In a world with fast, solid-state drives, scheduling is more concerned with enforcing fairness between competing users while being fast enough to keep up with drives that can perform millions of I/O operations per second. The blk-iocost I/O controller was designed for the solid-state world and generally performs well, but there is always a desire to do better. This patch series from Tao Cui aims to make blk-iocost more flexible by enabling the loading of a BPF program to make cost decisions. ## Vondra: PostgreSQL development activity DevFeed: [Vondra: PostgreSQL development activity]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-15T13:20:30Z Content type: news Language: en Sources: [LWN.net]() Topics: [PostgreSQL](), [Development]() Tags: [blog-post](), [development](), [postgresql]() ### AI overview A PostgreSQL contributor's analysis examines development activity from the late 1990s to the present. It reports roughly 50 commits per week today, compared with about 25 per week around 2010, alongside an approximately twofold increase in active committers. ### Source excerpt PostgreSQL contributor Tomas Vondra has published a blog post looking at development activity in the project, with data from the late 1990s to today. We're doing ~50 commits per week, give or take. In ~2010 we were doing maybe 25/week, and the trend seems to be a slow and consistent growth. The monthly average makes the trend a bit easier to spot. Which is good, although there's a lot of other important details (size of commits, are they new features or fixes, ...). It however nicely aligns with the number of active committers, which also grew ~2x between 2010 and today. So maybe that's working as expected. ## Security updates for Tuesday DevFeed: [Security updates for Tuesday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-15T13:10:46Z Content type: news Language: en Sources: [LWN.net]() Topics: [Security](), [Debian](), [Fedora](), [Ubuntu](), [Linux](), [Grafana](), [nginx]() Tags: [debian](), [grafana](), [hat](), [java](), [linux](), [mozilla](), [network](), [nginx](), [openssl](), [php](), [podman](), [python](), [rust](), [security](), [systemd](), [ubuntu](), [updates](), [vim]() ### AI overview Debian, Fedora, Mageia, Red Hat, SUSE, and Ubuntu issued security updates for a broad range of packages and components, including Linux-related tools, libraries, servers, programming environments, and desktop software. ### Source excerpt Security updates have been issued by Debian (network-manager-l2tp and urwid), Fedora (perl-Dancer2, perl-Data-Entropy, perl-DBI, perl-Protocol-HTTP2, podman-tui, rust-lru, and rust-lru0.16), Mageia (bzip2, cups-filters, libcupsfilters, libssh2, perl-Authen-SASL, perl-HTML-FormFu, tar, unzip, and zip), Red Hat (grafana and image-builder), SUSE (389-ds, acl, attr, apache2-mod_auth_openidc, apr-util, aws-nitro-enclaves-cli, bzip2, c-ares, clamav, cpio, curl, dhcpcd, dovecot23, dovecot24, dracut, emacs, fuse-overlayfs, go1.25-openssl, go1.26-openssl, google-cloud-sap-agent, google-osconfig-agent, govulncheck-vulndb, gstreamer-devtools, gzip, helm, java-17-openjdk, java-21-openjdk, java-25-openjdk, jq, libBasicUsageEnvironment2, libgpg-error, libidn, librest, libusb-1_0, libvirt, LibVNCServer, libzypp, zypper, lkl, mcphost, MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen, MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen, MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen, msgpack-c, multipath-tools, NetworkManager, openexr, openssl-3, perl-Protocol-HTTP2, perl-URI, php-composer2, postgresql14, postgresql15, postgresql16, postgresql17, postgresql18, python-aiohttp, python-cryptography, python-h2, python-ruff, python-sqlparse, python311, python312, python39.SUSE_SLE-15-SP3_Update, rav1e, rpcbind, sssd, systemd, tomcat, tomcat11, ucode-intel, udisks2, vim, and wicked2nm), and Ubuntu (cgit, dracut, freeciv, konsole, libinput, linux-azure, linux-nvidia-7.0, nginx, vips, and yelp). ## \[$\] Lessons learned as the Debian Project Leader DevFeed: [\[$\] Lessons learned as the Debian Project Leader]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-14T15:34:44Z Content type: opinion Language: en Sources: [LWN.net]() Topics: [Debian](), [Large Language Model]() Tags: [debian](), [llm](), [project]() ### AI overview Andreas Tille reflects on his two terms as Debian Project Leader, discussing initiatives he led, mistakes he made, lessons from the role, and Debian's general resolution on large language model usage. ### Source excerpt What is it like to be a Debian Project Leader (DPL), or a former one? According to Andreas Tille, who stepped down this year after two consecutive terms as DPL, you'd have to be one to know. At the recent MiniDebConf in Winterthur, Switzerland, Tille spoke about what he learned while serving as DPL, some of the initiatives he led, mistakes that he made, and his thoughts on the general resolution (GR) on large language model (LLM) usage in Debian. ## Emacs arbitrary code execution flaw DevFeed: [Emacs arbitrary code execution flaw]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-14T15:20:00Z Content type: news Language: en Sources: [LWN.net]() Topics: [Lisp](), [vulnerability](), [Maintainers]() Tags: [cve](), [emacs](), [maintainers](), [release](), [vulnerability]() ### AI overview An incomplete fix for the Emacs arbitrary code execution flaw CVE-2024-53920 has been identified. Viewing or editing untrusted files in modes other than Emacs's Lisp mode can also trigger arbitrary code execution. The issue affects Emacs 24 and newer, with a minimal fix queued for Emacs 31.2; upstream maintainers do not expect to backport it to older releases. ### Source excerpt Sean Whitton has announced that the original fix for an arbitrary code execution flaw in Emacs (CVE-2024-53920) was incomplete. Bas Alberts discovered that viewing or editing untrusted files in modes other than Emacs's Lisp mode can also result in arbitrary code execution. This problem affects all Emacs versions affected by CVE-2024-53920. This means Emacs 24 and newer, and possibly also older versions. A minimal fix, attached, is queued up for release with Emacs 31.2. We (the Emacs upstream maintainers) don't expect to backport the fix to older Emacs releases ourselves. LWN covered the original vulnerability in December 2024. ## Security updates for Monday DevFeed: [Security updates for Monday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-14T13:18:14Z Content type: news Language: en Sources: [LWN.net]() Topics: [Security](), [Debian](), [Fedora](), [Firefox](), [Git](), [nginx](), [Python](), [cURL](), [Elixir](), [F#](), [Redis](), [Rust]() Tags: [curl](), [debian](), [elixir](), [firefox](), [git](), [nginx](), [python](), [redis](), [rust](), [security](), [updates]() ### AI overview Security updates were issued across AlmaLinux, Debian, Fedora, Gentoo, Mageia, Oracle, and SUSE. The affected software includes operating-system components, browsers, developer tools, programming-language packages, servers, libraries, and cloud-related utilities. ### Source excerpt Security updates have been issued by AlmaLinux (389-ds-base, apr-util, coreutils, freerdp, git-lfs, glib2, gstreamer1-plugins-base, kernel, libkcapi, nginx, nodejs:22, nodejs:24, osbuild-composer, perl-YAML-Syck, postgresql16-postgis, ruby, ruby4.0, ruby:3.3, and vim), Debian (jbig2dec, kamailio, nginx, spip, and xorg-server), Fedora (baresip, bind, bluez, bubblewrap, chirp, chromium, cockpit, composer, corosync, darktable, dokuwiki, elixir, exiv2, expat, firefox, freerdp, freerdp2, gdk-pixbuf2, gegl04, golang-x-perf, grpcurl, kernel, kernel-headers, libevent, libmongocrypt, libpcap, libre, libsoup3, memcached, mingw-expat, mingw-openexr, mongo-c-driver, mrtg, nagios-plugins, nsd, nss, openssl, openvpn, PackageKit, pdns-recursor, perl-Net-OAuth, perl-XML-Bare, php-pecl-mongodb2, python-asteval, python-pip, rclone, rest, rust-hickory-net, rust-hickory-proto, rust-hickory-resolver, rust-ppmd-rust, rust-webbrowser, srt, syncthing, tar, tkimg, and valkey), Gentoo (Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi and Ruby), Mageia (bind, ffmpeg, glibc, java-17-openjdk, java-21-openjdk, librabbitmq, perl-Catalyst-Plugin-Static-Simple, perl-Imager, tor, and xz), Oracle (389-ds:1.4, ansible-core, apr-util, coreutils, freerdp, git-lfs, glib2, gstreamer1-plugins-base, gzip, httpd:2.4, image-builder, java-21-openjdk, kernel, mrtg, nginx, osbuild-composer, perl-DBI, postgresql16-postgis, python-lxml, python3.12-lxml, redis:6, and vim), SUSE (389-ds, ansible-core, ansible-creator, azure-storage-azcopy, cargo-audit, chromedriver, chromium, clamav, containerized-data-importer1.65, containerized-data-importer1.66, curl, dracut, ffmpeg-4, google-guest-agent, google-osconfig-agent, helm, java-1_8_0-ibm, jupyter-nbconvert, kernel, libpng16, libusb-1_0, libvirt, multipath-tools, NetworkManager, opensc, openssl-3, perl-Authen-SASL, perl-HTML-FormHandler, perl-Mojolicious, perl-Protocol-HTTP2, python-jwcrypto, python-sqlparse, python-tornado6, python313-geopy, python313-modelscope ## More than 9,000 patches total in the seven stable kernels for Monday DevFeed: [More than 9,000 patches total in the seven stable kernels for Monday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-14T13:00:07Z Content type: news Language: en Sources: [LWN.net]() Topics: [kernels]() Tags: [kernels](), [upgrade]() ### AI overview Seven stable Linux kernels have received updates totaling more than 9,000 patches, including over 1,800 patches in version 7.2.6. Users are advised to upgrade. ### Source excerpt Greg Kroah-Hartman has announced the 7.2.6, 6.18.52, 6.12.110, 6.6.157, 6.1.188, 5.15.221, 5.10.270 stable kernels. According to Kroah-Hartman, this batch may set a record for the number of patches with more than 9,000 in total between them. There are more than 1,800 patches in 7.2.6 alone. Users of these kernels are, of course, advised to upgrade. ## Kernel prepatch 7.3-rc3 DevFeed: [Kernel prepatch 7.3-rc3]() Original publisher: [Read original article]() Author: corbet Published: 2026-09-13T22:32:53Z Content type: news Language: en Sources: [LWN.net]() Topics: [Kernel](), [Testing]() Tags: [filesystem](), [kernel](), [release](), [testing]() ### AI overview The Linux kernel 7.3-rc3 prepatch has been released for testing. Linus Torvalds described it as a relatively large release candidate with a larger-than-usual filesystem footprint. ### Source excerpt The 7.3-rc3 kernel prepatch is out for testing. Linus said: "Another fairly large rc release, and again one with a bigger filesystem footprint that we usually see." ## \[$\] Accelerating the kernel's build process DevFeed: [\[$\] Accelerating the kernel's build process]() Original publisher: [Read original article]() Author: corbet Published: 2026-09-11T14:15:32Z Content type: article Language: en Sources: [LWN.net]() Topics: [Kernel](), [Large Language Model]() Tags: [build](), [kernel](), [llm]() ### AI overview The article describes how Lorenzo Stoakes used assistance based on large language models to improve the Linux kernel's complex build system and substantially reduce kernel build times. ### Source excerpt Kernel developers do a lot of kernel builds. Since the kernel is not a small program, those builds can take a fair amount of time, even on a fast machine. The kernel also has a complex build system; it is probably fair to say that few developers truly understand it, and fewer still are willing to try to improve it. Lorenzo Stoakes, armed with LLM-based assistance, decided to give it a try, though, and has managed to reduce the time it takes to build a kernel -- and not by a small amount. ## Two stable kernel updates for Friday DevFeed: [Two stable kernel updates for Friday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-11T13:27:35Z Content type: news Language: en Sources: [LWN.net]() Topics: [kernels]() Tags: [kernel](), [kernels](), [release](), [updates]() ### AI overview Greg Kroah-Hartman announced stable kernel updates 7.2.5 and 6.18.51, each containing more than 550 patches with fixes throughout the tree. Users are advised to upgrade. ### Source excerpt Greg Kroah-Hartman has announced the release of the 7.2.5 and 6.18.51 stable kernels. There are more than 550 patches in each with fixes throughout the tree; users are advised to upgrade. ## Security updates for Friday DevFeed: [Security updates for Friday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-11T13:14:32Z Content type: news Language: en Sources: [LWN.net]() Topics: [Debian](), [cURL](), [Azure]() Tags: [azure](), [debian](), [ggml](), [kernel](), [linux](), [nvidia](), [oracle](), [python](), [ruby](), [security](), [updates]() ### AI overview Security updates have been issued across AlmaLinux, Debian, Fedora, Oracle, Red Hat, SUSE, and Ubuntu for a broad set of system libraries, tools, runtimes, and applications. ### Source excerpt Security updates have been issued by AlmaLinux (apr-util and qt6-qt5compat), Debian (libevent and ruby-rack), Fedora (bluez, corosync, curl, dokuwiki, grpcurl, libevent, and rest), Oracle (gstreamer1-plugins-bad-free, perl-DBI, python-urllib3, qt5-qtbase, qt6-qt5compat, and thunderbird), Red Hat (osbuild-composer), SUSE (azure-storage-azcopy, chromedriver, corosync, ggml-devel, helm, kernel, libmariadb-devel, libzypp, zypper, opensc, php7, tomcat10, and waylyrics), and Ubuntu (apache2, beets, glibc, kissfft, libebml, linux-nvidia-6.17, php8.1, php8.3, php8.5, and python2.7, python3.4, python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12, python3.14). ## Forgejo 16.0.4 and 15.0.8 address critical security vulnerability DevFeed: [Forgejo 16.0.4 and 15.0.8 address critical security vulnerability]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-10T20:05:50Z Content type: release Language: en Sources: [LWN.net]() Topics: [Vulnerabilities]() Tags: [git](), [release](), [security](), [vulnerability]() ### AI overview Forgejo 16.0.4 and 15.0.8 fix two security vulnerabilities, including a critical remote-code-execution flaw involving template repository expansion. The fix removes any .git directory after expansion and before repository initialization. ### Source excerpt The Forgejo software-forge project has announced the release of versions 16.0.4 and 15.0.8, which fixes two security vulnerabilities. One is a critical flaw that would allow remote-code execution (RCE): When generating a new repository from a template repository, Forgejo clones the template repository, removes the .git folder, performs variable template expansion on files listed in .forgejo/template, and initializes a new git repository. During this process, variable template expansion could be misused in order to create a new .git folder, which git would adopt and incorporate during its initialization of a new git repository. A malicious template repository could be used to read arbitrary data from the Forgejo host, and to execute arbitrary processes on the Forgejo host, as a remote code execution attack. To address this issue, after variable expansion is completed, any existing .git folder is removed from the directory before the git repository is initialized. The project recommends upgrading to the latest version as soon as possible. ## \[$\] PostgreSQL 19's "scary patch contest" DevFeed: [\[$\] PostgreSQL 19's "scary patch contest"]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-10T17:29:06Z Content type: news Language: en Sources: [LWN.net]() Topics: [PostgreSQL](), [patches](), [Testing](), [bug]() Tags: [beta](), [bug](), [patches](), [postgresql](), [release](), [stable](), [testing]() ### AI overview The PostgreSQL 19 release faced concerns about the readiness of several patches after unusually many bug fixes and ongoing revisions. One patch was reverted, and an extra beta release was scheduled for additional testing. ### Source excerpt PostgreSQL 19 was expected to be released in September, in keeping with the database project's longstanding tradition of a major release every year. However, some late-breaking concerns about several of the features slated for inclusion has some developers worried about the quality of the release. On August 25, PostgreSQL contributor Robert Haas sent an email with the subject "scary patch contest" about several patches that have required an unusually large number of bug fixes leading up to the release, which has raised questions about their readiness for a stable release. One of the patches has been reverted, but several are still under heavy revision, and an extra beta release has been slotted in to allow for additional testing. ## Julia 1.13 released DevFeed: [Julia 1.13 released]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-10T13:23:50Z Content type: release Language: en Sources: [LWN.net]() Topics: [releases]() Tags: [programming](), [programming-language](), [release](), [release-notes]() ### AI overview Julia 1.13 is released with faster package precompilation, REPL improvements, and Juliaup graphical-interface updates. ### Source excerpt Version 1.13 of the Julia programming language has been released. Highlights include faster precompilation of packages, improvements to Julia's REPL, and Juliaup, a graphical interface for the Julia version manager. A full list of changes can be found in the release notes. LWN covered Julia 1.12 in November 2025. ## Security updates for Thursday DevFeed: [Security updates for Thursday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-10T13:14:35Z Content type: news Language: en Sources: [LWN.net]() Topics: [Security, Privacy and Abuse Prevention](), [.NET](), [Boot Process, passwd, systemd](), [Grafana]() Tags: [ansible](), [grafana](), [kernel](), [linux](), [net](), [opentelemetry](), [oracle](), [prometheus](), [python](), [redis](), [rust](), [security](), [systemd](), [ubuntu](), [updates]() ### AI overview A roundup of security updates issued by several Linux distributions for a range of packages. ### Source excerpt Security updates have been issued by AlmaLinux (389-ds-base, ansible-core, buildah, expat, glib2, gpsd, gpsd-minimal, gzip, kernel, kernel-rt, opentelemetry-collector, osbuild-composer, perl-DBI, python-lxml, python3.12-lxml, qt5-qtbase, thunderbird, valkey, vim, and xz), Debian (pyasn1), Fedora (darktable, freeipa, freerdp2, gdk-pixbuf2, GitPython, libsoup3, openssl, perl-Net-DNS, rust-ppmd-rust, samba, and valkey), Mageia (ceph, firefox, nss, perl-DBI, thunderbird, and wget), Oracle (389-ds-base, buildah, expat, git-lfs, glib2, glibc, gpsd, gpsd-minimal, grafana-pcp, kernel, libssh, nginx, perl-GD, python3.14-cryptography, redis:7, skopeo, thunderbird, valkey, xmlrpc-c, and xz), Slackware (xz), SUSE (bzip2, cpio, curl, dracut, fuse-overlayfs, golang-github-vpenso-prometheus_slurm_exporter, helm, java-1_8_0-ibm, kbfs, kernel, kernel-devel, libopenslide-devel, libsoup, libssh2_org, libusb-1_0, libvirt, libzypp, zypper, mcphost, multipath-tools, NetworkManager, opensc, openssl-3, perl-Net-DNS, python-aiohttp, python-Authlib, python-pip, python-sqlparse, python313-dnspython, python313-idna, rpcbind, sssd, strongswan, systemd, tomcat11, ucode-intel, and wget), and Ubuntu (dotnet8, dotnet10, ffmpeg, flatpak, netty, and perl). ## A decade of Rustls DevFeed: [A decade of Rustls]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-09T18:11:54Z Content type: news Language: en Sources: [LWN.net]() Topics: [releases](), [Cryptography](), [Security, Privacy and Abuse Prevention]() Tags: [api](), [blog](), [compression](), [cryptography](), [performance](), [post-quantum](), [releases](), [tls]() ### AI overview A retrospective on ten years of the Rustls TLS-library project, covering its release history, the forthcoming 0.24 and eventual 1.0 releases, and features added in the stable 0.23 line. ### Source excerpt Joe Birr-Pixton has written a blog post reflecting on a decade of the Rustls TLS-library project and looking ahead to the upcoming 0.24 release and an eventual 1.0 release. Rustls began with a first commit on May 2, 2016. Progress was quick: a month later, on June 5, it could interoperate with most sites on the web. The first release, 0.1.0, followed on August 27, 2016 - less than four months after the first commit. [...] From the 0.1.0 release, the project moved through a long series of releases over the following eight years, building out functionality, hardening and refining the API. That sequence of release lines culminated in 0.23, released on February 29, 2024. The 0.23 release line has been a stable one: in the time since, it has seen 43 non-breaking releases. That stability didn't come with stagnation. The 0.23 line delivered a wide range of important features, including a FIPS-certified cryptography option, certificate compression, Encrypted ClientHello, post-quantum cryptography, and performance improvements. ## LibreOffice Base survey results DevFeed: [LibreOffice Base survey results]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-09T17:07:42Z Content type: news Language: en Sources: [LWN.net]() Topics: [User interface design]() Tags: [blog](), [bug](), [database](), [design](), [enterprise](), [erp](), [java](), [linux](), [media](), [performance](), [search](), [user-experience](), [workflow]() ### AI overview A survey of LibreOffice Base users highlights requests for a cleaner interface, more capable or simpler workflows, stronger search, bug fixes, stability, performance, and improvements to queries, forms, and reports. ### Source excerpt Heiko Tietze has published a blog post summarizing the results of a recent survey about the use of LibreOffice's database application, Base. 455 people participated in the survey, including more than 330 who use Base on Linux, with use cases ranging from maintaining records of personal media such as CDs or DVDs to use enterprise-resource planning (ERP) and finance. Of course, users had many ideas how to improve the application: The majority asks for improvements to the user interface with less clutter and a more attractive design. The workflow and user experience should become either simplified or more powerful, depending on the expertise and the scenario. For example, an elaborate search function is something that many people expect. [...] Almost the same number of answers requests bug fixes, improvements to stability, and better performance. Issues with queries, forms, and reports were mentioned equally often. In this regard, many replies suggest to remove the Java dependencies. ## Typst 0.15 adds variable fonts, MathML, and multiple bibliographies DevFeed: [Typst 0.15 adds variable fonts, MathML, and multiple bibliographies]() Original publisher: [Read original article]() Author: jake Published: 2026-09-09T15:37:55Z Content type: news Language: en Sources: [LWN.net]() Topics: [Typst](), [pdf](), [SVG](), [Variable Fonts](), [LaTeX](), [Rust]() Tags: [apache](), [features](), [fonts](), [latex](), [new-features](), [open-source](), [pdf](), [rust](), [variable-fonts]() ### AI overview Typst 0.15 adds support for variable fonts, MathML, multiple bibliographies, and other features. The article examines variable-font support and demonstrates it with Roboto Flex and Zycon. ### Source excerpt Typst is a system for typesetting documents into various formats: PDF, SVG, PNG, and, in progress, HTML. It is adept at handling technical material, and is often considered to be an eventual LaTeX replacement. We last looked in on Typst a year ago, when it had reached version 0.13. A new version, 0.15, was released in June with lots of new features, including support for variable fonts, MathML, multiple bibliographies, and more. Typst is free, Apache-2.0-licensed software, programmed in Rust. ## Security updates for Wednesday DevFeed: [Security updates for Wednesday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-09T13:04:46Z Content type: news Language: en Sources: [LWN.net]() Topics: [Debian](), [cURL](), [Chromium](), [systemd](), [Terraform](), [.NET]() Tags: [chromium](), [cli](), [debian](), [google](), [intel](), [java](), [kernel](), [opentelemetry](), [python](), [redis](), [security](), [systemd](), [terraform](), [updates]() ### AI overview Security updates have been issued across AlmaLinux, Debian, Fedora, Mageia, Red Hat, SUSE, and Ubuntu for a broad set of packages, including kernels, systemd, Chromium, curl, Python, Java, Terraform provider components, and other system and developer tools. ### Source excerpt Security updates have been issued by AlmaLinux (expat, glib2, microcode_ctl, mrtg, pam, redis, thunderbird, and valkey), Debian (fort-validator, gst-plugins-base1.0, kernel, and slurm-wlm), Fedora (complyctl, libevent, openvpn, and tar), Mageia (dovecot and spice-vdagent), Red Hat (ignition, opentelemetry-collector, and osbuild-composer), SUSE (amazon-ssm-agent, aws-nitro-enclaves-cli, bzip2, cadvisor, chromium, curl, distribution-registry, emacs, freeciv, fuse-overlayfs, gh, google-guest-agent, GraphicsMagick, hauler, insighttoolkit-devel, java-17-openjdk, libidn, libusb-1_0, libvirt, libvncserver, libzypp, zypper, lkl, lxd, multipath-tools, NetworkManager, perl-Net-DNS, perl-URI, python, python-authlib, python-sqlparse, python-tornado, python3, rpcbind, supergfxctl, systemd, terraform-provider-null, ucode-intel, wget, wireshark, and xen), and Ubuntu (curl, ffmpeg, glibc, hsqldb1.8.0, imagemagick, perl, and vim). [Next page]()