KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing – Linux Weekly News

KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News

Video by The Linux Experiment via YouTube
KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News

Head to https://squarespace.com/thelinuxexperiment to save 10% off your first purchase of a website or domain using code THELINUXEXPERIMENT

Grab a brand new laptop or desktop running Linux: https://www.tuxedocomputers.com/en#

👏 SUPPORT THE CHANNEL:
Get access to:
– a Daily Linux News show
– a weekly patroncast for more thoughts
– your name in the credits

YouTube: https://www.youtube.com/@TheLinuxEXP/join
Patreon: https://www.patreon.com/thelinuxexperiment

Or, you can donate whatever you want:
https://paypal.me/thelinuxexp
Liberapay: https://liberapay.com/TheLinuxExperiment/

👕 GET TLE MERCH
Support the channel AND get cool new gear: https://the-linux-experiment.creator-spring.com/

Timestamps:
00:00 Intro
00:39 Sponsor: SquareSpace
02:25 KDE gets 1.2M euros from STF
05:14 DirtyFrag vulnerability & Killswitch proposed
07:20 Yet another vulnerability for Linux
08:16 And another Linux flaw discovered
09:59 Plasma 6.7 beta released
12:47 EU wants Google to share anonymized user data with other engines
17:04 Fedora discusses making an "AI desktop spin"
21:03 Abstract brings some of their software to Linux
23:08 CEMU infected with malware
24:31 Wine improves Wayland driver
26:25 Sponsor: Tuxedo Computers

Links:

KDE gets 1.2M euros from STF
https://kde.org/announcements/sovereign-tech-fund-invests-kde/

DirtyFrag vulnerability & Killswitch proposed

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk


https://www.phoronix.com/news/Linux-7.0.6-Released
https://itsfoss.com/news/linux-killswitch-proposal/

Yet another vulnerability for Linux
https://www.bleepingcomputer.com/news/security/new-fragnesia-linux-flaw-lets-attackers-gain-root-privileges/

And another Linux flaw discovered
https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn

Plasma 6.7 beta released
https://community.kde.org/Plasma/Plasma_6#Plasma_6.7

EU wants Google to share anonymized user data with other engines
https://www.techradar.com/vpn/vpn-privacy-security/google-is-not-collaborative-and-not-in-the-spirit-of-complying-with-this-regulation-can-the-eu-commission-strong-arm-google-into-levelling-the-playing-field-of-the-search-engine-market-and-is-this-really-in-the-interest-of-your-privacy

Fedora discusses making an "AI desktop spin""
https://discussion.fedoraproject.org/t/fedora-ai-developer-desktop-objective/184941
https://discussion.fedoraproject.org/t/fedora-ai-developer-desktop-objective/184941/54
https://www.techradar.com/pro/i-have-zero-evidence-in-front-of-me-that-users-are-being-driven-away-from-fedora-because-of-ai-ubuntu-and-fedora-confirmed-to-both-get-ai-support-soon

Fedora AI Desktop Initiative Blocked After Council Vote Reversal

Abstract brings some of their software to Linux

Abstract Rolls Out Native Linux Support: Built for the Pipelines that Power Production

CEMU infected with malware

Malware found in Linux builds of Cemu (Wii U emulator)


https://rentry.org/cemu-security-psa

Wine improves Wayland driver
https://www.phoronix.com/news/Wine-Wayland-Pointer-Warp

#linuxnews #linuxdesktop #linuxdistro

Source

Open Source Digest: Community, Security & AI News

Open Source Digest: Community, Security & AI News

Community & Contributions Rencontres R 2026 – Nantes: The R user community will gather in Nantes for Rencontres R 2026, a conference focused on the R language and its applications. From Learner to Contributor: Wikimedia Mentorship: A personal story about finding a voice on Wikimedia through mentorship, highlighting how guidance helps newcomers become contributors. Help … Read more

Open-Source Digest: Malware, AI Agents, CERN

Open-Source Digest: Malware, AI Agents, CERN

Top Stories Impacting Open Source This week’s open-source landscape is marked by a jarring paradox: the open-sourcing of malware on GitHub. The Shai-Hulud worm, released by TeamPCP, raises critical questions about platform responsibility and the ethical boundaries of open source. While GitHub is a hub for innovation, this incident highlights the need for better security … Read more

Open Source AI: Agents, Security, and Community

Open Source AI: Agents, Security, and Community

AI’s Open Source Crossroads This week’s digest highlights a pivotal tension: AI is becoming both more accessible and more risky. From multi-agent orchestration to hidden censorship biases, the open source community must navigate powerful capabilities alongside new vulnerabilities. The stories below show how developers and enterprises are grappling with these trade-offs. Multi-Agent AI Gets a … Read more

Update and audit a finance model in Excel with ChatGPT

Update and audit a finance model in Excel with ChatGPT

Video by OpenAI via YouTube
Update and audit a finance model in Excel with ChatGPT

See how ChatGPT for Excel can help finance teams review a CFO performance workbook before it goes out.

In this demo, ChatGPT checks tie-outs across model tabs, flags issues like stale source data and revenue mismatches, creates a QA issue log, drafts owner questions, and gives a clear readiness verdict.

Learn more: https://chatgpt.com/apps/spreadsheets/

Source

Multi Agent AI Orchestration & MCP via Enterprise h2oGPTe | Part 20

Multi Agent AI Orchestration & MCP via Enterprise h2oGPTe | Part 20

Video by H2O.ai via YouTube
Multi Agent AI Orchestration & MCP via Enterprise h2oGPTe | Part 20

How h2oGPTe enables no-code Super Agent customization and auto-generated multi-agent Python code using CrewAI and LangGraph.

Enterprises often need agents tailored to specific workflows beyond built-in defaults. h2oGPTe supports two approaches: the Super Agent can be rapidly customized using system prompts, collections, and tool configurations without any code. For advanced requirements, the Agent Builder generates fully executable Python source code by accepting a natural language workflow description, selecting the right framework (CrewAI or LangGraph), and running an internal build-test-refine loop. Agents also generate standardized A2A protocol files for cross-framework interoperability.

Technical Capabilities & Resources

➤ Super Agent Customization: Configure task-specific agents using custom system prompts, collections, and tool orchestration—no code required.
🔗 https://docs.h2o.ai/enterprise-h2ogpte/guide/agents#how-it-works

➤ Agent Builder & Code Generation: Generate production-ready Python code for custom agents using CrewAI, LangGraph, or the OpenAI SDK.
🔗 https://docs.h2o.ai/enterprise-h2ogpte/guide/agents

➤ Multi-Agent Ecosystems (A2A Protocol): Automatically generate A2A communication files for agent interoperability across different frameworks.
🔗 https://docs.h2o.ai/enterprise-h2ogpte/guide/agents/agent-builder/a2a-protocol

Source

April 2026 Product Update: Version bumps and Kafka Client Telemetry in GA

April 2026 Product Update: Version bumps and Kafka Client Telemetry in GA

Video by NetApp Instaclustr via YouTube
April 2026 Product Update: Version bumps and Kafka Client Telemetry in GA

April saw lots of updates with Kafka, ClickHouse, and more:

Powering analytics with ClickHouse and FSx.
https://www.instaclustr.com/blog/powering-low-latency-analytics-with-clickhouse-and-amazon-fsx/
Kafka Client Telemetry
https://www.instaclustr.com/blog/introducing-kafka-client-telemetry-centralized-client-metrics-for-instaclustr-managed-apache-kafka/
Version bumps for Kafka:
Released Kafka 3.9.2 and Kafka Connect 3.9.2 to General Availability
Support Karapace Schema Registry 5.2.0 and Karapace Rest Proxy 5.2.0
Released PostgreSQL 18.3, 17.9 and 16.13

More product updates in April so subscribe for more video content like this about Kafka, ClickHouse, Cassandra, and more.

Jaime’s Article
https://instaclustr.com/blog/powering-low-latency-analytics-with-clickhouse-and-amazon-fsx/

Instaclustr Blog
https://instaclustr.com/blog/

Monthly Release Playlist
https://youtube.com/watch?v=Z0XI5AHgpxU&list=PLqVewYXd-XX69e6TgXR15BDnIaXnjVZx4

Source

Privacy, Security, and Censorship in LLMs, Cybersecurity and Privacy, #FOSSASIA Summit 2026

Privacy, Security, and Censorship in LLMs, Cybersecurity and Privacy, #FOSSASIA Summit 2026

Video by FOSSASIA via YouTube
Privacy, Security, and Censorship in LLMs, Cybersecurity and Privacy, #FOSSASIA Summit 2026

Large Language Models (LLMs) can inherit hidden biases from their training data—including censorship bias. This talk explores how training on censored internet content can shape AI outputs, especially in Simplified Chinese datasets affected by state censorship.
Learn about a new research method comparing responses in Simplified Chinese and Traditional Chinese to detect censorship bias in popular AI models from Google, Meta, OpenAI, and Anthropic. The findings reveal evidence of censorship bias across multiple leading LLMs.
We’ll also discuss the wider implications for AI privacy, security, and trust, including risks of generative AI in the software supply chain and how open source communities can respond.

FOSSASIA Summit 2026 held in Bangkok, is Asia’s leading Open Source tech conference featuring sessions on #AI, #Cloud, #DevOps, #Open Hardware, #Security, #Web #Mobile Technologies, #Web3, and #Databases. Learn more: http://summit.fossasia.org

Session slides: https://eventyay.com/e/88882f3e/session/10454

#FOSSASIA #FOSSASIASummit #opensource #FOSS

Source

Why KubeCon + CloudNativeCon in-person matters

Why KubeCon + CloudNativeCon in-person matters

Video by CNCF [Cloud Native Computing Foundation] via YouTube
Why KubeCon + CloudNativeCon in-person matters

Collaborating on GitHub is great, but solving a production bottleneck over coffee? That’s where the real magic happens. ☕️

The "hallway track" is where the best cloud native insights are born—from whiteboarding new architectures to hearing raw migration stories you won’t find in a PR.

Join the community this summer to build the future of cloud native, face-to-face:

🇮🇳 Mumbai, India | June 18-19
🇯🇵 Yokohama, Japan | July 29-30
Register here: https://www.cncf.io/kubecon-cloudnativecon-events/

#KubeCon #CloudNative #OpenSource #Kubernetes #TechCommunity

Source

Where I have been lately, and what have I been doing?

Where I have been lately, and what have I been doing?

Video by Awesome Open Source via YouTube
Where I have been lately, and what have I been doing?

I just want to give you some explanation. I’m sure most of you barelly notice I haven’t posted in a while. It’s been a month or so, and I know it, believe me. Sometimes life happens. I have a job that is incredibly demanding lately, and I’ve been having to play catch up quite a bit. I’m not usually the person catching up. I’m usually the one on the cutting edge of anything in the tech world, but with AI being a massive focus at my company, I’ve been left behind a bit.

Additionally, I’ve been working, with my wife, on a huge project to landscape our yard. It’s a large-ish yard (garden for you Brits) at a bit over a half acre (2026 sq meters). This takes an immense amount of watering, and living in a desert region…that’s super expensive. So we are Xeriscaping a large portion of the front yard. This eats up all of my weekends lately as well. I do have new videos in the works, so please stick with me, and new content is coming.

=== Links ===
No links this week.

Get the AwesomeOpenSource Merchandise
https://osia.printify.me

Support my Channel and ongoing efforts through Patreon:
https://patreon.com/awesomeopensource

Buy Me a Coffee or Beer
https://paypal.me/BrianMcGonagill?country.x=US&locale.x=en_US

=== Get My Novel ===
Entanglement – by Brian McGonagill

Dave is just a normal guy with a normal job that he doesn’t like that much. That is, until he meets Leo, and gets the job he never imagined. Action, adventure, betrayal, love, loss, and some serious weirdness happen throughout this science fiction thrill-ride.

— eBook on Amazon by Country —
US – United States – https://www.amazon.com/dp/B0DZJ5PMHG
UK – United Kingdom – https://www.amazon.co.uk/dp/B0DZJ5PMHG
DE – Germany – https://www.amazon.de/dp/B0DZJ5PMHG
FR – France – https://www.amazon.fr/dp/B0DZJ5PMHG
ES – Spain – https://www.amazon.es/dp/B0DZJ5PMHG
IT – Italy – https://www.amazon.it/dp/B0DZJ5PMHG
NL – Netherlands – https://www.amazon.nl/dp/B0DZJ5PMHG
JP – Japan – https://www.amazon.co.jp/dp/B0DZJ5PMHG
BR – Brazil – https://www.amazon.com.br/dp/B0DZJ5PMHG
CA – Canada – https://www.amazon.ca/dp/B0DZJ5PMHG
MX – Mexico – https://www.amazon.com.mx/dp/B0DZJ5PMHG
AU – Australia – https://www.amazon.com.au/dp/B0DZJ5PMHG
IN – India – https://www.amazon.in/dp/B0DZJ5PMHG

— Paperback by Country —
US – United States – https://www.amazon.com/dp/B0DZPM682N
UK – United Kingdom – https://www.amazon.co.uk/dp/B0DZPM682N
DE – Germany – https://www.amazon.de/dp/B0DZPM682N
FR – France – https://www.amazon.fr/dp/B0DZPM682N
ES – Spain – https://www.amazon.es/dp/B0DZPM682N
IT – Italy – https://www.amazon.it/dp/B0DZPM682N
NL – Netherlands – https://www.amazon.nl/dp/B0DZPM682N
PL – Poland – https://www.amazon.pl/dp/B0DZPM682N
SE – Sweden – https://www.amazon.se/dp/B0DZPM682N
JP – Japan – https://www.amazon.co.jp/dp/B0DZPM682N
CA – Canada – https://www.amazon.ca/dp/B0DZPM682N
AU – Australia – https://www.amazon.com.au/dp/B0DZPM682N

— Hard cover by Country —
US – United States – https://www.amazon.com/dp/B0DZPVSRNZ
UK – United Kingdom – https://www.amazon.co.uk/dp/B0DZPVSRNZ
DE – Germany – https://www.amazon.de/dp/B0DZPVSRNZ
FR – France – https://www.amazon.fr/dp/B0DZPVSRNZ
ES – Spain – https://www.amazon.es/dp/B0DZPVSRNZ
IT – Italy – https://www.amazon.it/dp/B0DZPVSRNZ
NL – Netherlands – https://www.amazon.nl/dp/B0DZPVSRNZ
PL – Poland – https://www.amazon.pl/dp/B0DZPVSRNZ
SE – Sweden – https://www.amazon.se/dp/B0DZPVSRNZ

=== Timestamps ===

=== Contact ===
Matrix: @mickintx:discuss.opensourceisawesome.com
Mastodon: @MickInTx@fosstodon.org

=== Special Thanks ===
Gabriela Lopez – Video Editor

=== Affiliates ===
Get a super cheap, yet pwerful VPS at Racknerd
https://my.racknerd.com/aff.php?aff=14764

Get a $50.00 credit for Digital Ocean by signing up with this link:
https://m.do.co/c/a6a61ae55242

Use Hover as your Domain Name Registrar to get some great control over you domains / sub-domains:
https://hover.com/SHPaiirr

Support my Channel and ongoing efforts through Patreon:
https://patreon.com/awesomeopensource

What does the money go to?
To Pay for Digital Ocean droplets, donations to open source projects I feature, any hardware I may need to purchase for future episodes.

Source