foss-daily.org

Tools and recommendations get updated over time, services change hands, get acquired, get audited (or stop publishing audits), so check the date above and don’t treat this as gospel six months from now.

The HTTP/2 Bomb dropped this week. CVE-2026-49975 chains two decade-old attack techniques into something nastier than the sum of its parts. An AI coding assistant helped find it. Your server is probably vulnerable right now.

Colorado almost forced age verification on your Linux laptop. That actually happened.

Wine 11 shipped in January 2026 with NTSYNC support—a kernel-level rewrite of how Wine handles Windows thread synchronization. The performance gains are real and measurable:

Look, we all know the deal with Arch Linux. It’s powerful, it’s got the latest software, and the Arch Wiki is basically the gold standard for Linux documentation. But let’s be honest for most people, the idea of managing their system through pacman commands is pretty intimidating. That’s been the trade-off for years: you want cutting-edge Arch goodness? Better get comfortable with the terminal.