Vue lecture

A GitHub Issue Title Compromised 4,000 Developer Machines (grith.ai)

✇LWN
Par : corbet
The grith.ai blog reports on an LLM prompt-injection vulnerability that led to 4,000 installations of a compromised version of the Cline utility.

For the next eight hours, every developer who installed or updated Cline got OpenClaw - a separate AI agent with full system access - installed globally on their machine without consent. Approximately 4,000 downloads occurred before the package was pulled.

The interesting part is not the payload. It is how the attacker got the npm token in the first place: by injecting a prompt into a GitHub issue title, which an AI triage bot read, interpreted as an instruction, and executed.

  •  

[$] The relicensing of chardet

✇LWN
Par : corbet
Chardet is a Python module that attempts to determine which character set was used to encode a text string. It was originally written by Mark Pilgrim, who is also the author of a number of Python books; the 1.0 release happened in 2006. For many years, this module has been under the maintainership of Dan Blanchard. Chardet has always been licensed under the LGPL, but, with the 7.0.0 release, Blanchard changed the terms to the permissive MIT license. That has led to an extensive (and ongoing) discussion on when code can be relicensed against the wishes of its original author, and whether using a large language model to rewrite code is a legitimate way to strip copyleft requirements from code.
  •  

Buildroot 2026.02 released

✇LWN
Par : jzb

Peter Korsgaard has announced version 2026.02 of Buildroot, a tool for generating embedded Linux systems through cross-compilation. Notable changes include added support for HPPA, use of the 6.19.x kernel headers by default, better SBOM generation, and more.

Again a very active cycle with more than 1500 changes from 97 unique contributors. I'm once again very happy to see so many "new" people next to the "oldtimers".

See the changelog for full details. Thanks to Julien Olivain for pointing us to the announcement.

  •  

Les étudiants (et leurs proches) peuvent acheter le MacBook Neo pour 599 euros grâce à cette astuce

Comme la plupart des produits Apple, le MacBook Neo est éligible aux remises « Éducation » sur le site de la marque. Apple propose 100 euros de remise, peu importe le modèle choisi, soit 15 % de réduction. De quoi acquérir le MacBook le moins cher de l'histoire à un tarif encore plus compétitif.

  •  

[$] Reconsidering the multi-generational LRU

✇LWN
Par : corbet
The multi-generational LRU (MGLRU) is an alternative memory-management algorithm that was merged for the 6.1 kernel in late 2022. It brought a promise of much-improved performance and simplified code. Since then, though, progress on MGLRU has stalled, and it still is not enabled on many systems. As the 2026 Linux Storage, Filesystem, Memory-Management and BPF Summit (LSFMM+BPF) approaches, several memory-management developers have indicated a desire to talk about the future of MGLRU. While some developers are looking for ways to improve the subsystem, another has called for it to be removed entirely.
  •  

Wicked sur Netflix : vous devez absolument vous laisser envoûter par cette comédie musicale culte

C’est le plus gros succès de ces dernières années. Prolongement de l’univers du Magicien d’Oz, le film Wicked, porté par Ariana Grande et Cynthia Erivo, a débarqué le 4 mars 2026 sur Netflix. Alors, enfilez votre balai et votre plus beau chapeau pointu, on vous explique pourquoi ce film est inratable !

  •  

Security updates for Thursday

✇LWN
Par : jzb
Security updates have been issued by AlmaLinux (go-rpm-macros, libpng, thunderbird, udisks2, and valkey), Fedora (coturn, php-zumba-json-serializer, valkey, and yt-dlp), Red Hat (delve, go-rpm-macros, grafana, grafana-pcp, image-builder, osbuild-composer, and postgresql), Slackware (nvi), SUSE (firefox, glibc, haproxy, kernel, kubevirt, libsoup, libsoup2, libxslt, mozilla-nss, ocaml, python, python-Django, python-pip, util-linux, virtiofsd, wicked2nm,suse-migration-services,suse-migration- sle16-activation,SLES16-Migration,SLES16-SAP_Migration, and wireshark), and Ubuntu (gimp, linux-aws, linux-lts-xenial, linux-aws-fips, linux-azure, linux-azure-fips, linux-fips, nss, postgresql-14, postgresql-16, postgresql-17, and qemu).
  •  
❌