The rc.firewall script now supports reading IP addresses or subnets from on-disk files for the firewall_allowservices and firewall_trusted list variables. Elements that look like absolute paths are read line by line, skipping comments and blank lines, and the first word on each line is treated as an address or subnet. The default history size in sh(1) has been increased from 100 to 128, complying with the POSIX.1-2024 minimum requirement. LTO-10 and LTO-10P density codes and cartridge specifications have been added to mt(1) and libmt, enabling detection and reporting of the new tape formats. The default behaviour of pwd(1) has changed from -P to -L, aligning with POSIX semantics. The ipfw(8) binary now includes a fallback mechanism to support the new kernel interface introduced in FreeBSD 15.0. When running with a 15.0+ kernel, ipfw(8) automatically invokes a bundled ipfw15 binary to load firewall rules, ensuring compatibility during upgrade procedures. The daemon(8) utility now supports the -m option to specify the output file mode, allowing non-root log collectors to access log files.
Spaced Linux 9.26 is a major production release focused on upgrade reliability, graphics-driver recovery, desktop startup resilience, signed package delivery, and substantially stronger automated release validation. System updates and upgrade reliability: reworked Spaced Update to handle complete operating system upgrades more safely and predictably; added a dedicated APT transaction guard so package changes are protected during the actual locked package-management operation rather than only during preliminary checks; improved handling of package refreshes, native package upgrades, Flatpak updates, release-marker changes, and error reporting; added explicit testing for upgrades from earlier Spaced Linux installations to reduce the chance of regressions affecting existing users; added package-payload validation to confirm that the packages delivered by the production repository match the expected release; added release-identity checks so the built ISO, installed release metadata, package repository, and release version cannot silently drift apart...
Announcing NetBSD 9.5. Note: this will be the final release from the netbsd-9 stable branch and also marks the end-of-support for this branch. There will be no further security pullups to this branch! Users running netbsd-9 in production are strongly encouraged to transition to a newer release series, such as netbsd-11 or netbsd-10. Changes since 9.4: system improvements and hardware support - build.sh - various tools build fixes for newer compilers and non-NetBSD platforms; aarch64 - fixed thread-local storage support; x86 - fixed MSI/MSI-X configuration on some machines; mbsnrtowcs(3), wcsnrtombs(3) - added manual pages; acpiout(4) - fixed display brightness controls on certain machines; eap(4) - restore the full set of supported hardware encodings from netbsd-7; uftdi(4) - added support for a range of Brainboxes USB to Serial adapters; urtwn(4) - added support for Mercusys MW150USV2 USB WiFi adapters; urtwn(4) - added support for Asus USB-N10 Nano B1 Wi-Fi adapters; &man.viaide.4 - various improvements in support for several controllers.
Welcome to the 1.14.0 release of Talos. Talos now supports DNS over TLS (DoT) and DNS over HTTPS (DoH) for secure DNS resolution. These features allow Talos to encrypt DNS queries and responses, enhancing privacy and security for DNS traffic. The DNS protocol can be configured on a per-name server basis in the ResolverConfig document, allowing for flexible configuration of DNS resolution. The '--mode=reboot' option has been removed from the talosctl apply-config command; by default, configuration is applied without a reboot. Most configuration changes don't require a reboot; the documentation lists the changes that do. Talos now supports running native BGP routing instances on the host via embedded GoBGP servers, configured with BGPInstanceConfig documents. This removes the need to ship FRR as a system extension for the common fabric-facing use case.
One of the improvements in this milestone is the integration of native Flatpak support directly into the Zenwalk desktop. Flatpak is installed and configured out of the box, with Flathub available as an application source. Installing modern desktop applications no longer requires searching for packages, dealing with dependencies or opening a terminal. Simply open the graphical application store, find the application you want, click Install - and you're done. This provides Zenwalk users with access to a huge ecosystem of up-to-date desktop applications while keeping the traditional Slackware package system available for the core operating system. In other words: Zenwalk packages for the system, Flatpak for applications - and both are ready to use from day one. This milestone moves to the Linux 7.1.7 kernel, providing a modern kernel base together with the BORE (Burst-Oriented Response Enhancer) CPU scheduler patch. BORE is designed with interactive desktop workloads in mind. It aims to improve responsiveness by favoring short, interactive bursts of CPU activity, helping desktop tasks remain responsive even when the system is under heavier CPU load. For a desktop-oriented distribution such as Zenwalk, this makes a particularly good match: applications, window management, multimedia workloads and background processes can coexist while maintaining a responsive user interface. The result is a kernel configuration aimed not simply at benchmark numbers, but at the thing you actually feel when using a desktop: a system that stays responsive.