Special Guest: Jon Seager.

Sponsored By:

• Incogni: They can't harm you if they can't find you! Take back control of your personal data today. Go to incogni.com/unplugged and use code UNPLUGGED for 60% off an annual plan. It's completely risk-free with a 30-day money-back guarantee. Promo Code: UNPLUGGED
• Namecheap: Use code UNPLUGGED for an extra 15% off VPS hosting. Promo Code: UNPLUGGED
• Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.
• Hostinger: Snag Hostinger services at their lowest prices before the sale ends! Create your website today for just $1.99. Go to Hostinger.com/UNPLUGGED and use code UNPLUGGED for an additional 10% off Black Friday and Cyber Monday pricing. Promo Code: UNPLUGGED

Support LINUX Unplugged

Links:

• Share your Holiday Homelab — One hardworking box or a rack full of experiments? We want to see it. Tell us what you built, show it off, and share what makes it yours.
• Web Boost — Send us a boost via sats or USD
• Jupiter Uplink
• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• ConnecTen Internet: promo Jupiter35
• MP3: Clanker Therapy 3: What Have You Been Building?
• YouTube: Clanker Therapy 3: What Have You Been Building?
• Bootleg: Clanker Therapy 3: What Have You Been Building? | Members Stream
• Fixes available in -proposed pocket for CVE-2026-98432 | Ubuntu
• CVE-2026-98432 | Ubuntu
• Canonical releases Ubuntu 26.10 Stonking Stingray
• Ubuntu 26.10 release notes
• Accelerating Ubuntu Core Desktop
• Canonical Reviving Their Immutable Ubuntu Core Desktop
• enioka group
• Accelerating Ubuntu Core Desktop
• Engineering Ubuntu For The Next 20 Years
• GamingOnLinux: Core Desktop restarted, gaming plans
• It's FOSS: Core Desktop + firmware HWE proposal
• Why Canonical Is Reviving Ubuntu Core Desktop (explainer)
• Releases - canonical/ubuntu-core-desktop - GitHub — Ubuntu Core Desktop 26 DANGEROUS developer preview.
• canonical/workshop - GitHub — Ubuntu-native development environments: secure, fast, composable, and agent-ready.
• The Immutable Linux Paradox - Jon Seager
• Ubuntu Core — Canonical's immutable, snap-based Ubuntu for desktops, servers, and edge devices.
• Snap confinement — How strict confinement and interfaces isolate applications.
• LXD — Canonical's system container manager, used for isolated development environments.
• uutils coreutils — Rust reimplementation of the GNU coreutils shipped in 26.10.
• bootc — Container-image-based OS updates, as used by Fedora's image-based desktops.
• ntpd-rs — Full-featured Rust implementation of NTP, including NTS support.
• imagecraft — Tool for customizing and building bootable Ubuntu images.
• Introducing Myna: Speech to Text for Ubuntu Desktop - Desktop
• Myna speech-to-text is now available as a technology preview
• Myna - GitHub — Myna is a lightweight speech-to-text application for Ubuntu Desktop.
• Myna - Snapcraft — Install the Myna snap.
• Torsher — One Docker container with one database and one interface, made for the TV first.
• koya-bar — JavaScript UI on Koya's own GPU renderer, without a browser underneath.
• koya-os — Live ISO if you fancy trying it from USB rather than changing your current setup.
• Pick: List All Tabs (Updated) — A Firefox extension that lists every open tab across all windows, groups duplicates and busy sites (respecting Multi-Account Containers), and lets you jump to or close tabs individually or by site.
• zachleat/list-all-tabs: Firefox extension to list tabs, find duplicates, and close them.
• Pick: Tangram — Tangram is a new kind of browser. It is designed to organize and run your Web applications. Each tab is persistent and independent. You can set multiple tabs with different accounts for the same application.
• Tangram on Flathub
• Pick: Pinchflat-NGX — An enhanced, self-hosted YouTube media manager built on Pinchflat with Material design UI, PostgreSQL support, OIDC SSO, and disk staging.

Special Guest: Jon Seager.

Sponsored By:

• Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.
• Jupiter Signal Network Membership: Put your support on automatic with our annual plan, and get one month of membership for free!

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• Copy Fail — CVE-2026-31431 — "An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root." — Theori
• Copy Fail: 732 Bytes to Root - Xint — "A single 732-byte Python script can edit a setuid binary and obtain root on essentially all Linux distributions shipped since 2017." — Xint
• Linux Kernel Bug Explained - Jorijn — "CopyFail is more portable. One script, every distro, no offsets. Dirty Pipe needed kernel ≥ 5.8; Copy Fail covers 2017–2026." — Jorijn"Kubernetes Pod Security Standards (Restricted) and default seccomp do NOT block the syscall used." — Jorijn
• Ars: Most Severe Linux Threat in Years — "The most severe Linux threat to surface in years catches the world flat-footed." — Ars Technica
• Sysdig: CVE-2026-31431 Analysis — "The flaw was introduced in 2017 via commit 72548b093ee3, which switched AEAD operations to in-place processing." — Sysdig
• CERT-EU Advisory
• Ubuntu Security Tracker
• The Register: Crypto Flaw
• Kernel Patch (reverts 2017 optimization) — "This mostly reverts commit 72548b093ee3 except for the copying of the associated data." — Kernel Commit
• Buggy Commit: 72548b093ee3 (2017)
• DeepWiki: AF_ALG Internals
• oss-security Disclosure
• PSA + GRUB Mitigation - Jan Wildeboer
• Ubuntu 26.04 LTS (Resolute Raccoon) Released — "Ubuntu 26.04 LTS sets the example for providing best-in-class resilience while simultaneously embracing innovation and the advancement of open source." — Jon Seager, VP Ubuntu Engineering
• The Future of AI in Ubuntu - Jon Seager — "Throughout 2026 we'll be working on enabling access to frontier AI for Ubuntu users in a way that is deliberate, secure, and aligned with our open source values." — Jon Seager
• Ubuntu 26.04 Release Notes
• Ubuntu AI Features Throughout 2026 - Phoronix — "Canonical's approach to AI is refreshingly thoughtful — Microsoft should take note." — ZDNet
• Canonical DDoS Attack Update — "Canonical's web infrastructure is under a sustained, cross-border attack and we are working to address it." — arcticp, Canonical
• Ubuntu Weekly Newsletter #942
• Canonical AI Approach - ZDNet
• 9to5Linux: Opt-In LLM Tools
• uutils/coreutils: Cross-platform Rust rewrite of the GNU coreutils
• LINUX Unplugged 636: Engineering the Future
• LiveCD fails to start X session on QEMU · Issue #354 · ghostbsd/issues
• Monty's “rescue” drive NixOS config
• Magnolia Mayhem's BSD Challenge Report
• Pick: NASty — NASty is a NAS operating system built on NixOS and bcachefs. It turns commodity hardware into a storage appliance serving NFS, SMB, iSCSI, and NVMe-oF — managed from a single web UI, updated atomically, and rolled back when things go sideways.
• Pick: Defuse — Defuse is a GTK4 application for removing image backgrounds locally.
• Defuse on Flathub