Linus Torvalds now views himself as a development lead rather than a programmer, noting that he rarely reads or commits code directly anymore. His workflow has shifted toward high-level management, where he primarily uses Git and email to coordinate with maintainers and resolve merge conflicts. He emphasizes that his role focuses on understanding the intent behind pull requests rather than performing deep technical dives into every line of code.

Source

Canonical is elevating Arm64 to a primary architecture in Ubuntu 26.04 LTS, moving its packages from specialized port servers to the main global archive. This infrastructure shift ensures that Arm64 software is automatically distributed across all worldwide mirrors, significantly improving download speeds and reliability. The transition requires extensive updates to build pipelines and release scripts to achieve parity with traditional x86 systems.

Source

Microsoft has confirmed that its new WSL Containers (WSLc) feature is compatible with Windows 10, back-porting a capability originally expected to be exclusive to Windows 11. This tool allows developers and system administrators to create, run, and manage Linux containers directly through the command line using the wslc.exe binary. By leveraging the existing Windows Subsystem for Linux (WSL) infrastructure, the feature eliminates the requirement for third-party container runtimes like Docker Desktop or Podman.

Source

Découverte à l'aide d'une IA, GhostLock (CVE-2026-43499) est une faille du noyau Linux présente depuis 2011. Elle permet à un utilisateur local de devenir root.

Le post GhostLock : cette faille Linux vieille de 15 ans offre un accès root sur la majorité des distributions a été publié sur IT-Connect.

A critical use-after-free vulnerability known as GhostLock (CVE-2026-43499) has been discovered in the Linux kernel’s real-time mutex subsystem. This flaw originated in 2011 and affects nearly all mainstream distributions, allowing any locally logged-in user to gain full root privileges. The vulnerability is particularly dangerous because it requires no special permissions or unusual configurations to exploit.

Source

Valve a publié Proton 11.0, basé sur Wine 11. Au programme : des classiques, des jeux EA réparés, un meilleur support VR et de nombreux correctifs.

Le post Proton 11.0 est disponible : Valve muscle encore la compatibilité des jeux sous Linux a été publié sur IT-Connect.

Microsoft has released a public preview of WSL Container, a built-in feature of the Windows Subsystem for Linux that lets you create, run, and manage Linux containers directly from Windows without installing Docker Desktop, Podman Desktop, or any other third-party runtime. The feature ships in two parts: a command-line tool called wslc.exe and a container API distributed as a NuGet package for C, C++, and C# developers. This article covers the installation steps, key capabilities, enterprise integration points, and current limitations you should be aware of before adopting it.

Source

IBM is expanding its mainframe lineup with the introduction of the z17 and LinuxONE Rockhopper 5, featuring new single-frame and rack-mounted configurations. These models are designed to fit into industry-standard racks, allowing organizations to co-locate mainframe power with other technologies in smaller data center footprints. The hardware is powered by the 5.5 GHz Telum II processor and includes a dedicated Spyre AI accelerator to support high-volume inferencing directly within transactional workflows.

Source

OpenSSH 10.4 has been released to address multiple security vulnerabilities affecting the sftp, scp, and sshd components. A primary fix prevents malicious servers from tricking the sftp client into downloading files to unintended local locations during command-line operations. Another patch for scp stops remote servers from writing files to the parent directory of a target when performing remote-to-remote copies.

Source

Linus Torvalds has released the second release candidate for Linux 7.2, describing the update as very normal and comparable in size to recent kernel releases. About half of the changes involve driver updates, while the remaining patches focus on file systems, networking, and core kernel components. The smooth progression suggests the final kernel will likely be released on schedule without the need for an additional eighth release candidate.

Source

Ubuntu 25.10, also known as "Questing Quokka," will reach its end of life on July 9, meaning it will no longer receive security updates. Systems running this interim release will not immediately become vulnerable, but security risks will accumulate over time as new patches are no longer applied. Administrators still using this version must take immediate action to ensure their environments remain secure and supported.

Source

QuimaRAT is a newly discovered Java-based remote access trojan (RAT) sold as a malware-as-a-service (MaaS) subscription on the dark web. The cross-platform malware targets Windows, macOS, and Linux systems by embedding Java Native Access (JNA) libraries for multiple architectures within a Java SE 8 archive. Subscription prices range from $150 per month to $1,200 for lifetime access, making it broadly accessible to threat actors.

Source

Bad Epoll (CVE-2026-46242) permet à un utilisateur local de devenir root sur Linux et Android. Une faille que l'IA Mythos avait laissé passer.

Le post Bad Epoll : la faille Linux qui donne un accès root sur Android, et que l’IA Mythos n’avait pas vue a été publié sur IT-Connect.

A newly disclosed Linux kernel vulnerability named Bad Epoll (CVE-2026-46242) enables unprivileged local users to gain complete root access. The flaw is a use-after-free memory corruption issue located within the epoll subsystem, a core component heavily utilized by modern server applications and network daemons. Affecting Linux kernel versions 6.4 and later, the vulnerability impacts desktops, enterprise servers, cloud workloads, and potentially Android devices.

Source

Azure Files now offers fully managed NFS 4.1 storage designed to accelerate data-intensive Linux workloads such as AI inferencing and containerized applications. By utilizing the nconnect mount option, clients can establish multiple parallel TCP connections to a single share to significantly improve throughput. New zonal placement capabilities allow administrators to co-locate file shares with GPU virtual machines, reducing latency and maximizing expensive hardware utilization.

Source

Fedora 45 is considering a proposal to enable x86_64 Shadow Stack protection by default to enhance system security on modern processors. This hardware-assisted feature creates a hidden, isolated stack to store copies of return addresses for verification during function calls. By comparing these copies against the primary stack, the CPU can detect and block Return-Oriented Programming (ROP) attacks that attempt to hijack control flow.

Source

Oracle has released VirtualBox 7.2.12, a maintenance update addressing a critical stability flaw affecting Linux hosts. The most significant fix resolves a bug that caused full kernel freezes on Arch Linux when attempting to start a virtual machine. This issue previously required a hard hardware reset because the system would stop responding before any diagnostic information could be logged.

Source

AMD has submitted new Linux kernel patches that officially introduce a "Low Power" CPU core classification for its future heterogeneous processors. This new core type joins the existing Performance and Efficiency categories to help the operating system better manage diverse workloads. The patches enable the Linux kernel to identify these cores via specific CPUID functions, ensuring they are correctly recognized by the system's performance management infrastructure.

Source

Faire tourner Linux sur Mac avec container machine, le mode de l'outil Apple Container qui offre un environnement Linux persistant : un équivalent de WSL.

Le post container machine : un environnement Linux sur Mac, façon WSL a été publié sur IT-Connect.