E014 - Newsupdate 01/2026: curl Bug-Bounty, Firefox als KI-Browser, gehärtete Container-Images, MongoDB-/glibc-CVEs, oVirt-Lebenszeichen
Episode Description
Intro
- 30 Jahre Ruby: https://blog.jetbrains.com/ruby/2025/12/ruby-turns-30-a-celebration-of-code-community-and-creativity/
- 25 Jahre Wikipedia (Heise): https://www.heise.de/hintergrund/Wikipedia-wird-25-Zwischen-Wissensmacht-und-Existenzkampf-11115083.html
- Seite zum Wikipedia-Jubiläum: https://wikipedia25.org/en/
- Jimmy Wales bei Jung & Naiv (YouTube): https://www.youtube.com/watch?v=uswRbWyt_pg
- 10 Jahre Bunsenlabs: https://forums.bunsenlabs.org/viewtopic.php?id=9616
- Doom auf dem Bondrucker: https://hackaday.com/2025/12/27/playing-doom-on-a-receipt-printer/
- HP-UX EOL: https://www.theregister.com/2026/01/05/hpux_end_of_life/
- Digital Independence Day: https://di.day/
- Die Känguru-Rebellion: Digital Independence Day (39c3): https://media.ccc.de/v/39c3-die-kanguru-rebellion-digital-independence-day
Follow-Up
- Lesen des UNIX V4-Bands: https://oldbytes.space/@bitsavers/115748987786556302
- UNIX v4 auf virtueller PDP-11 unter SGI IRIX (Mastodon): https://oldbytes.space/@flexion/115752573933914452
- Unix V4 kann heruntergeladen werden (Golem): https://www.golem.de/news/betriebssystem-unix-v4-kann-heruntergeladen-werden-2512-203652.html
- AOSP-Quellcode wird nur noch halbjährlich veröffentlicht: https://www.androidauthority.com/aosp-source-code-schedule-3630018/
Aufreger des Monats
- GitHub versucht lokale Runner zu monetarisieren: https://www.theregister.com/2025/12/17/github_charge_dev_own_hardware/
- Unable to deprecate or remove role in my namespace (Anisble Forum): https://forum.ansible.com/t/unable-to-deprecate-or-remove-role-in-my-namespace/4613
- Bruno: https://www.usebruno.com/
- Sterbende AMD Ryzen 9800X3D-CPUs: https://www.techradar.com/computing/cpu/we-have-initiated-an-immediate-internal-review-asus-responds-to-worries-about-amd-ryzen-9800x3d-cpus-dying-in-its-motherboards
curl stellt Bug Bounty-Programm ein
- Pull Request: https://github.com/curl/curl/pull/20312
- Ankündigung: https://daniel.haxx.se/blog/2026/01/26/the-end-of-the-curl-bug-bounty/
Red Hat kauft Neural Magic
MongoDB-CVE
- Heise-Artikel: https://www.heise.de/news/MongoBleed-Exploit-fuer-kritische-Luecke-in-MongoDB-erleichtert-Angriffe-11125112.html
- PoC: https://github.com/joe-desimone/mongobleed/blob/main/mongobleed.py
Phoenix als X.Org-Rewrite in Zig
- Artikel: https://www.phoronix.com/news/Phoenix-X-Server
- Git-Repository: https://git.dec05eba.com/phoenix/about/
zlib-Lücke
- CVE: https://nvd.nist.gov/vuln/detail/CVE-2026-22184
- Heise-Artikel: https://www.heise.de/news/zlib-Kritische-Sicherheitsluecke-ermoeglicht-Codeschmuggel-noch-kein-Update-11133774.html
Gehärtete Container-Images für die Verwaltung und Docker
- Gehärtete Container für die Verwaltung: https://container.gov.de/
- Docker Hardened Images: https://docs.docker.com/dhi/
- Chainguard Emeritoss: https://www.chainguard.dev/unchained/introducing-chainguard-emeritoss
Neuer Mozilla-CEO will Firefox zum KI-Browser machen
- LWN-Artikel: https://lwn.net/Articles/1050826/
- Statement von Waterfo: https://www.waterfox.com/blog/no-ai-here-response-to-mozilla/
- 9to5linux-Artikel: https://9to5linux.com/firefox-will-ship-with-an-ai-kill-switch-to-completely-disable-all-ai-features
- Just the Browser: https://justthebrowser.com/
- Zusätzliche RPM-Repositories: https://www.firefox.com/en-US/channel/desktop/
Kubernetes Workload Aware Scheduling
- Ankündigung: https://kubernetes.io/blog/2025/12/29/kubernetes-v1-35-introducing-workload-aware-scheduling/
30 Jahre alter glibc-CVE gefixt
- Phoronix-Aritkel: https://www.phoronix.com/news/Glibc-Security-Fix-For-1996-Bug
Patch-Management News
- What repository consumes the most disk space under /var/lib/pulp on Satellite6? (Red Hat Knowledge Base): https://access.redhat.com/solutions/7006345
- Patch-Management-Werkzeuge unter Linux (Linux-Magazin, Paywall): https://www.linux-magazin.de/ausgaben/2026/02/patch-me-if-you-can/
- The Journey of auditing UYUNI (SUSE Security Team Blog): https://security.opensuse.org/2026/01/16/the-journey-of-auditing-uyuni.html
- orcharhino 7.6 Release Notes: https://orcharhino.com/en/resources/release-notes/orcharhino-7-6
Kubernetes 1.35
Fortschritte im Asahi Linux-Projekt
- LWN-Artikel: https://lwn.net/Articles/1050953/
- Phoronix-Artikel: https://www.phoronix.com/news/Asahi-Linux-EOY-2025-CCC
Distributionsnews
- Manjaro 26.0-Aritkel: https://9to5linux.com/manjaro-26-0-released-with-linux-6-18-lts-xfce-4-20-kde-plasma-6-5-and-gnome-49
- Artikel über CachyOS Server-Edition: https://www.phoronix.com/news/CachyOS-Server-Edition-Coming
- CachyOS 2025 Wrapped: https://cachyos.org/blog/2025-christmas-new-year/
- elementaryOS 8.1-Artikel: https://9to5linux.com/elementary-os-8-1-released-with-wayland-session-by-default-arm64-support
- Loong64 is now an official Debian architecture (LWN): https://lwn.net/Articles/1051576/
- Synex Server: A New Debian Based Linux Distro With Native ZFS Installation Support (Phoronix): https://www.phoronix.com/news/Synex-Debian-With-ZFS
- Fedora Linux 43 election results (LWN): https://lwn.net/Articles/1053333/
- FOL058 – Red Hat Summit 2023 – Interviews with Máirín Duffy and Matthew Miller: https://focusonlinux.podigee.io/58-red-hat-summit-2023-interviews-with-mairin-duffy-and-matthew-miller
Telnet Auth‑Bypass‑Lücke
- CVE‑2026‑24061: https://nvd.nist.gov/vuln/detail/CVE-2026-24061
oVirt 4.5.7 – Totgesagte leben länger?
- Phoronix-Artikel: https://www.phoronix.com/news/oVirt-4.5.7
Kurznews
- QEMU 10.2 Officially Released with Live Update Support and Improvements (9to5linux): https://9to5linux.com/qemu-10-2-officially-released-with-live-update-support-and-improvements
- Rust Coreutils 0.5.0 erreicht 88 Prozent GNU-Kompatibilität (Heise): https://www.heise.de/news/Rust-Coreutils-0-5-0-erreicht-88-Prozent-GNU-Kompatibilitaet-11115125.html
- Copyright-Verstoß: Open-Source-Projekt geht gegen Chiphersteller vor (Heise): https://www.heise.de/news/Copyright-Verstoss-Open-Source-Projekt-geht-gegen-Chiphersteller-vor-11134450.html
- Forgejo v14.0: https://forgejo.org/2026-01-release-v14-0/
- Linux Consulting Firm Linutronix Recently Began A New Chapter (Phoronix): https://www.phoronix.com/news/Linutronix-New-Chapter
- FODO022 – 30 Jahre Linux: https://focusondevops.podigee.io/24-e22-30-jahre-linux
Veranstaltungstipps
- FOSDEM 2026: https://fosdem.org/2026/
- CfgMgmtCamp 2026: https://cfgmgmtcamp.org/ghent2026/
- „How (not) to create Ansible collections from OpenAPI specifications“: https://cfp.cfgmgmtcamp.org/ghent2026/talk/LFDCGL/
- „SELinux and AppArmor in a nutshell“: https://cfp.cfgmgmtcamp.org/ghent2026/talk/7ADGAL/
- KubeCon EU Amsterdam: https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/
- Chemnitzer Linux-Tage 2026: https://chemnitzer.linux-tage.de/2026/de
- Easterhegg 2026: https://www.easterhegg.eu/category/easterhegg-2026/
- SUSECON 2026: https://www.suse.com/susecon/
- Red Hat Summit 2026: https://www.redhat.com/en/summit
- CCH-CON: https://cch-con.de
Tool- und Medientipps
- Unsere Tooltipps: https://user.space/tooltipps/
- Git-Repository unserer Tooltipps: https://codeberg.org/userspace-podcast/tooltipps
- Radio Badesalz: https://radio-badesalz.podigee.io/
- Creepylink: https://creepylink.com/
- Ozobot: https://ozobot.com/
- Stratoshark: https://stratoshark.org/
Post-Outro Phun
- Badesalz – Dabrauchemergarnetdrübberredde (YouTube): https://www.youtube.com/watch?v=92WIqUSrvl0
- Badesalz – Kernseif