Arch Linux has halted package adoption on the Arch User Repository (AUR) as of July 30 due to a third wave of malware attacks, referred to as "Atomic Arch," which began in late May and has compromised over 1,900 packages. The attacks involve malicious actors adopting orphaned packages and embedding harmful compiled binaries within build scripts, circumventing prior detection measures. Despite efforts to purge compromised packages and declare the repository clean, the situation escalated with more sophisticated attack methods that bypass traditional scanning tools. The ongoing crisis highlights the challenges of securing an open-source repository while maintaining community contributions, leading to a temporary freeze on adoption and new account registrations until the issue is resolved

Mabox Linux 26.07 has been released with a patch to the tint2 panel that fixes system-tray freezes caused by applications like Steam and Lutris, and it also updates the FSearch utility to version 0.3, enhancing its functionality with real-time filesystem monitoring. The new build integrates updates from Manjaro Stable, which includes new Mesa drivers and a COSMIC 1.2 session option, while maintaining a focus on the Openbox environment. The update continues Mabox's monthly release cadence, consolidating previous updates into a single July ISO, available in both Linux 6.18 LTS and 6.6 LTS variants. While this release does not introduce revolutionary changes, it addresses significant user concerns, making it a worthwhile update for those using a lightweight desktop setup

The Liquorix Kernel 7.1-7 was released on July 31, 2026, featuring a key change of removing the irqbalance recommendation to enhance low-latency performance for interactive and gaming workloads. This update continues to build on Linux 7.1.5 and reflects an aggressive development pace, having produced seven releases in just 18 days, with a focus on optimizing scheduler logic. The decision to disable irqbalance aligns with Liquorix's design philosophy, as users typically prefer to pin interrupts to dedicated cores rather than allowing a background service to redistribute them. While the update is aimed at improving responsiveness, some users have reported issues with older hardware and specific AMD systems, indicating the need for ongoing stabilization within the 7.1 series

KDE neon has released its latest build, 20260730-0522, which continues to deliver rolling KDE software on a stable Ubuntu 24.04 LTS base. This distribution supports multiple edition tracks, including stable, testing, unstable, and developer variants, primarily focusing on Intel and AMD graphics with open-source drivers. The new release improves testing pipelines, ensuring that each edition receives adequate quality assurance before public release. Users can easily obtain the ISO for installation, enjoying the benefits of fresh KDE software without waiting for their preferred distribution to package updates

PHP has released security updates for versions 8.2.33, 8.3.33, 8.4.24, and 8.5.9, fixing three critical vulnerabilities (CVEs) including a SQL injection in PostgreSQL extensions and a stack overflow in Phar archives. The updates, made available through Remi Collet's RPM repository, are essential for users, especially since PHP 8.1 has reached its end of life. The vulnerabilities addressed include a significant SQL injection risk, an out-of-bounds write affecting certain versions, and a stack overflow issue related to circular symlinks in Phar archives. Developers are urged to upgrade their PHP versions promptly to mitigate these security risks and take advantage of the latest features

Red Hat has divided the Fedora Community Architect role into two positions, with Shaun McCance assuming the traditional role and Justin Wheeler taking on a newly established AI Alignment Community Architect position. This transition will continue until the Fedora Linux 45 release in October 2026, allowing McCance to manage logistics and budget while Wheeler focuses on aligning AI services with Fedora’s core principles. The split aims to address the growing complexities of community management in open source, enabling each architect to concentrate on their specific domain without distractions. Both leaders acknowledge the necessity for thoughtful governance around AI within the Fedora ecosystem, emphasizing the importance of balancing innovation with privacy and freedom

XanMod Linux Kernel 6.18.41-xanmod1 has been released, building on the upstream Linux 6.18.41 LTS and featuring LLVM ThinLTO compilation across three x86-64 ABI tiers. This release focuses on stability and performance, incorporating various patches, including Google BBRv3 and AMD optimizations, while addressing vulnerabilities in posix-cpu-timers. The kernel is designed for long-term support through December 2028 and includes bundled NVIDIA graphics drivers. Additionally, it offers a variety of third-party patches that enhance performance and compatibility for desktops, workstations, and servers

Greg Kroah-Hartman released six coordinated stable versions of the Linux kernel, addressing a critical patch for a 16-year-old use-after-free vulnerability in the POSIX CPU timers subsystem. This vulnerability, caused by a race condition between sys_timer_delete() and non-leader exec() calls, could lead to timers being silently disabled or allow local privilege escalation on multi-threaded systems. The fix, authored by Thomas Gleixner, consists of a four-part patch that adds necessary release semantics and a new retry-based lookup helper to enhance thread safety. Users running these kernel versions are encouraged to update to ensure the stability and security of their systems, particularly those operating multi-threaded daemons or container runtimes

Krita 5.3.3 has been released, featuring 28 bug fixes and new functionality that improves user workflow, such as preventing layers from deselecting during transforms. This update also marks the first stable release of Krita 6.0.3, which utilizes Qt 6 for enhanced HDR and fractional scaling support on Linux Wayland. The update drops 32-bit Windows builds, raises the macOS minimum to Catalina, and introduces in-app Android donations for the first time. Krita continues to evolve from its origins in 1998, now providing robust tools for typography and painting while maintaining its commitment to being a free and open-source application

On July 29, 2026, Greg Kroah-Hartman released Linux Kernel versions 6.1.179, 6.6.146, and 6.12.99, which focus on bug fixes and security enhancements. The updates involved significant changes, with 6.1.179 modifying nearly 15,000 files, and the GPU subsystem receiving the most attention with over a thousand altered files to support various drivers. Networking also saw substantial updates, particularly with Ethernet and wireless drivers, while Rust driver support continues to grow in these stable releases. Users on older kernel branches should be aware that both the 6.1 and 6.6 trees will reach end of life in December 2027, prompting timely updates to newer versions

Debian developers are currently voting on five proposals regarding the use of Large Language Models (LLMs) in their project, with options ranging from a complete ban on AI-assisted contributions to a more permissive framework that emphasizes accountability and disclosure. The proposals reflect ongoing tensions between volunteer reviewer burnout, copyright clarity, and the practical benefits of AI tools that many maintainers already utilize. Enforcement remains a significant challenge across all proposals, with varying degrees of commitment to regulation and ethical considerations. The outcome of this vote will significantly influence Debian's stance on generative AI for the next several years, shaping its policies and community values in the context of technological advancements

Qubes Security Bulletin 116 has announced the release of security updates for four new Xen vulnerabilities (XSA-500, XSA-505, XSA-506, and XSA-507) that pose risks of system memory compromise or sensitive data leakage in Qubes OS. While the default configuration is at moderate risk, administrators with certain workloads should prioritize addressing these vulnerabilities. Users operating on Qubes OS 4.3 can resolve the issues by upgrading to Xen package version 4.19.5-2 and rebooting their systems, and those using Anti Evil Maid protection will need to reseal their secret passphrase due to changes in PCR values. The vulnerabilities affect various systems based on their configuration, with specific risks associated with paravirtualized workloads and untrusted HVM qubes

Canonical has introduced a new rolling virtualization Hardware Enablement stack for Ubuntu 26.04 LTS, which allows for upgrades to QEMU, libvirt, EDK2, and SeaBIOS every six months for the first two years. This upgrade cadence addresses the rapid evolution of CPU encryption standards, such as AMD SEV-SNP and Intel TDX, allowing enterprises to access new features without waiting for the traditional two-year LTS update cycle. The new stack is managed through the ubuntu_virt_helper tool, ensuring all components are upgraded together to prevent inconsistencies that could break confidential workloads. This initiative positions Ubuntu as a primary platform for regulated AI and sovereign cloud deployments, aligning with the launch of AMD's EPYC 9006 processors and Instinct MI455X GPU

Liquorix Linux Kernel 7.1-6 has been released, incorporating upstream Linux Kernel 7.1.5 and providing fixes to the custom Project-C scheduler developed by Steven Barrett. The update enhances task placement for modern hybrid processors, benefiting gamers and multimedia creators with its aggressive 1000Hz scheduling and lower input latency. Key improvements include auto-detection for heterogeneous CPU topologies, which allows for more intelligent task management on processors like Intel Meteor Lake and AMD Zen 4/5. The rapid release cycle of the 7.1.x series highlights ongoing development, with six versions launched in just two weeks, and users can find the installation script on the Liquorix website

The Linux Kernel 7.2-rc5 was released on July 26, 2026, featuring a significant networking patch that accounts for over 35% of the updates, aimed at stabilizing the release by August 16. This release candidate prioritizes networking drivers, with USB patches surpassing GPU updates, reflecting a shift in the usual update pattern. Automated tools are increasingly being utilized to uncover hardware-specific audio quirks that may be overlooked by human reviewers, marking a new standard in bug discovery. The development cycle is progressing rapidly, with a stable release anticipated soon, prompting users to consider testing the latest rc5 before committing to production environments

XanMod has released new Linux kernels 7.1.5 and 6.18.40, which include significant security patches and performance optimizations for Debian-based systems. The updates incorporate LLVM ThinLTO compilation, Google BBRv3 congestion control, and address critical security vulnerabilities, particularly in the ksmbd SMB server and NTFS systems. Users are advised to check NVIDIA DKMS driver compatibility before upgrading, as certain driver versions may affect functionality. The installation process is straightforward, with the latest builds tailored for various CPU architectures, while the mainline kernel will receive updates every one to two months, ensuring ongoing security and performance enhancements

Linux Kernel 6.12.98 has been released, featuring a minimal update that includes a single backported patch to fix a file descriptor leak in the ext4 filesystem. This leak could lead to EMFILE errors under specific conditions, especially during cross-filesystem extent moves, although such scenarios are rare in typical workloads. The 6.12.y longterm branch remains supported until December 2028, and users are encouraged to apply this update if they are utilizing this version. Additionally, the 6.12 mainline kernel has introduced significant features such as PREEMPT_RT support and changes to the EEVDF scheduler, enhancing performance and stability for real-time and latency-sensitive applications

KDE Plasma 6.8 has introduced several significant features, including an auto-lock function for Remote Desktop sessions, enhancing security for remote users. The new kscreenctl command-line tool replaces the deprecated kscreen-doctor and allows for better display configuration through scripting. Additionally, the Plasma Login Manager now remembers the last-used session type for each user, improving usability on shared machines. Other updates include improved multi-screen task switching, grouped transaction displays in Discover, and enhanced language search options for new users

UBports has released Ubuntu Touch OTA 2.0, a significant update based on Ubuntu 24.04 LTS, which includes the upgraded Chromium 134 engine for better web compatibility and added support for new devices like the Zinwa Q25. The update introduces features such as notch avoidance, Widevine DRM support, and a screenshot editor, while also improving mobile data stability and user data encryption. Users will need to follow a mandatory two-step migration process to install the update, which is now available for twenty-one supported devices, including Fairphone and Xiaomi models. Although the update showcases impressive advancements for a community-driven OS, its lack of retail backing and certain streaming restrictions keep it within the enthusiast space

On July 24, 2026, Greg Kroah-Hartman released six long-term support (LTS) kernel versions simultaneously, including the new 6.18.40 branch. The release included a substantial number of patches, with the latest LTS branch receiving 1,624 updates, emphasizing security fixes for critical vulnerabilities such as CVE-2026-46113. Alongside security improvements, various subsystem updates were made, enhancing power management, memory reclaim, and networking. All source tarballs are available at kernel.org, with vendors expected to integrate the patches into their distributions soon