IBM & Red Hat Find More Than 400 New Vulnerabilities In Popular Java Code


IBM and Red Hat announced today they have identified and remediated more than 400 previously unknown vulnerabilities across popular Java libraries.

Red Hat's Lightwell open-source software supply chain initiative that relies on specialized AI agents was able to accelerate the discovery of 400+ vulnerabilities affecting popular Java code. They announced this feat today as part of their promoting Lightwell Clearinghouse to GA, which is an enterprise service for their customers to submit open-source software dependencies for priority review and remediation.

From today's announcement:

"The milestone addresses a growing business risk. As autonomous AI agents become capable of combining several lower-risk software weaknesses into a more serious attack, companies need to do more than identify vulnerabilities. They need a practical way to develop, test and deploy fixes in the software that supports critical applications."

Details are light on all the specific vulnerabilities uncovered. They appear to be ramping up fast in their Lightwell efforts as in the embargoed press release days ago was at 300+ vulnerabilities and then increased to 400+ vulnerabilities. Their AI laden press release announcing these 400+ vulnerabilities can be found on the IBM Newsroom.

Introducing Toolpak


Raspberry Pi OS Updated with Battery and Squeekboard Dock Widgets


Today, the Raspberry Pi project released today an updated version of its Debian-based Raspberry Pi OS distribution for Raspberry Pi single-board computers with new features, improvements, and bug fixes.

Based on the latest Debian 13 “Trixie” operating system series and powered by Linux kernel 6.18.50 LTS, the new Raspberry Pi OS release ships with battery and squeekboard widgets for the new dock, support for automounting encrypted drives, Control Centre debug code, and new, better-quality Raspberry Pi menu icons.

The updated Raspberry Pi OS also adds tooltips to indicate the function of widgets in Control Centre’s Widget panel, a new color for inactive window titlebars to match window backgrounds, and a hook to update the list of shortcuts in Control Centre’s Shortcuts panel when the defaults are reloaded.

On top of that, the Screens panel in Control Centre has been updated to apply system file changes immediately on confirmation rather than when closed, and setting the size of the taskbar and dock, and the location in Control Centre now automatically sets desktop top and bottom margins appropriately.

Furthermore, the Main Menu will now only reload on cache update rather than before opening, the screen lock button was removed from shutdown options, the old source for standalone control panel applications was removed, and switching between taskbar and dock layouts no longer resets the system appearance.

Numerous bugs were fixed in this new Raspberry Pi OS release to improve various functionality, such as the PCmanFM right-click option to open a terminal from the file manager, dropping files onto list views in the file manager, menu shortcut keys, panel pop-up windows, and local PCmanFM automount configuration overriding global settings.

Also fixed are issues with system tray icons not displaying correctly on scaled screens or being hidden, an icon menu crash, swaybg desktop wallpaper files not loading, panel menus displaying off-screen, icon menu category view crash, a hotplug crash in the panel when no monitors were detected, and a crash when updating notifications.

The new Raspberry Pi OS release also fixes possible segfaults on various Control Centre panel initialisation functions, LibreOffice icons in launchbar sticking after close, keyboard activation of top-level menu item not closing the menu, and application pop-up menu text in new window list containing literal markup.

Last but not least, the updated Raspberry Pi OS release fixes a GTK4 colour representation manager reporting error, window count digits not shown correctly on new task list in Japanese locale, as well as an issue with opening of windows when mouse forward and back buttons were clicked in the file manager’s list view.

You can download the Raspberry Pi OS 2026-10-06 release right now from the official website for all supported Raspberry Pi models, including Raspberry Pi 1A+, 1B+, 2B, 3B, 3B+, 3A+, 4B, 400, CM1, CM3, CM3+, CM4, CM4S, Zero, Zero W, and Zero 2 W.

Existing Raspberry Pi OS users can update their installations by running the sudo apt update && sudo apt full-upgrade commands below in a terminal emulator or by using the built-in graphical package updater. If your system is up to date, you’re running the latest Raspberry Pi OS version.

Canonical Beefs Up Security for Ubuntu 26.10 with Slimmed-Down GRUB, Linux 7.3


Canonical is about to release its interim version of Ubuntu, the Stonking Stingray, a.k.a. Ubuntu 26.10, and they are doubling down on security with the upcoming Linux 7.3 kernel series, a slimmed-down GRUB bootloader, and more.

Ubuntu 26.10 (codename Stonking Stingray) is scheduled for release next week, on October 15th, 2026, with the latest and greatest GNOME 51 “A Coruña” desktop environment, the unreleased Linux 7.3 kernel series (yes, Ubuntu 26.10 will ship with an RC (Release Candidate) kernel), OpenSSL 4.0, OpenSSH 10.5, and Rust-based core utilities.

To beef up security, Canonical implemented a signed, slimmed-down GRUB bootloader with a reduced attack surface, TPM-backed encryption support on machines that don’t have a hardware root of trust, and dbus-broker as the default message bus with AppArmor mediation intact, using an event-driven architecture with better accounting, reliability, and scalability.

On top of that, Ubuntu 26.10 will ship with ntpd-rs, a memory-safe time daemon that will be enabled by default in Ubuntu 27.04, certificate revocation with upki, authd support for MS MFA and identity-provider-based accounts, hardware-token VPN sign-in support in NetworkManager, and on-device speech recognition powered by AI.

“Ubuntu 26.10 introduces Myna, a desktop speech-to-text feature. It’s designed to bring cutting-edge accessibility, without compromising security,” said Canonical in a blog post. “Myna performs speech recognition locally through an inference snap. Once the required models are installed, dictation works without an internet connection.”

Linux kernel 7.3, which will be released later this month, will also bring numerous updates to the Landlock, AppArmor, SELinux, and Smack security modules for Ubuntu 26.10, along with TPM driver updates and BPF verifier fixes to prevent pointer leaks on speculative execution paths, NTFS3 security hardening, memory-safety fixes, and Rust support for PowerPC.

Last but not least, Canonical doubles down on firmware updates via fwupd, which now asks for a recovery key only when the running system uses TPM-backed encryption and a firmware update could affect the measurements used to unlock the disk, instead of prompting unnecessarily on systems where the update doesn’t affect the TPM-backed unlock policy.

As mentioned before, Canonical plans to release Ubuntu 26.10 (Stonking Stingray) on October 15th, but if you’re eager to try it right now on your personal computer, you can download the beta release. However, please keep in mind that it’s a pre-release version, not suitable for use in production environments.

Les lycéens en lutte - Le journal des briques #132


Pour vous abonner par mail, flux RSS ou Fediverse : lejournaldesbriques.fr
Vous pouvez soutenir les briques ici : liberapay.com/LeJournalDesBriq…
Ou ici pour un soutien ponctuel : donate.stripe.com/aFa14m6lDcRV…

À la une, le mouvement social des lycéens, le rappel de tomates aux pesticides et la primaire des socialistes.

Le journal des briques #132

Bonjour et bienvenue dans votre journal.

BRÈVES CONTRADICTOIRES

À la une des derniers jours, en ballotage défavorable contre l’extrême-droite suite au premier tour de l’élection présidentielle brésilienne, Luiz Iniacio Lula da Silva, 80 ans, a demandé des conseils électoraux à Joe Biden. En Espagne, le Premier ministre Pedro Sanchez a promis en cas de victoire aux législatives de nommer Maricarmen ministre du Logement.

DE VRAIES SOLUTIONS

Mobilisation des lycéens. Face au blocage de nombreux lycées et à un mouvement qui se maintient malgré la répression féroce, le gouvernement semble incapable de trouver la réponse. Sébastien Lecornu, bonjour.
Lecornu — Bonjour.
Journaliste — Sébastien Lecornu, vraisemblablement la répression policière violente ne fonctionne pas, peut-être qu’il serait temps de trouver des solutions, non ?
Lecornu — Bah on a une solution, on a demandé à tous les lycéens de mettre leurs idées dans des boites à chaussure et ensuite on leur promet qu’on regardera.
Journaliste — Non mais Sébastien Lecornu, je veux dire qu’il serait temps de trouver de vraies solutions.
Lecornu — Ah, sérieusement, de vraies solutions ?
Journaliste — Bah oui, ça semblerait raisonnable.
Lecornu — … Envoyer encore plus de flics.
Journaliste — Bon j’ai rien dit.

LEÇON DE VIE

Le ministre de l’Intérieur Laurent Nunez est par ailleurs accusé de n’avoir donné aucune consigne de retenue aux forces de l’ordre alors même que la majorité des manifestants est mineure, et que plusieurs d’entre eux ont été gravement blessés. Laurent Nunez, bonjour.
Nunez — Bonjour.
Journaliste — Laurent Nunez, au début de la mobilisation, un adolescent a pris un tir de grenade en pleine tête, complètement illégal, qui l’a laissé défiguré à vie. Une adolescente a été étranglée par un autre policier, illégalement aussi, un autre encore a été noyé dans une rivière, un autre encore a eu la moitié du bras arrachée, un autre encore n’est plus capable de parler et devra communiquer par écrit toute sa vie-
Nunez — Oui bon bah ça va j’ai compris !
Journaliste — Bah visiblement non parce que vous avez eu plusieurs jours et même des années pour prendre des événements aussi atroces en compte et qu’ils continuent de se produire !
Nunez — Mais ça leur fera du bien, à ces jeunes ! Ça leur apprend la vie, bon sang !
Journaliste — Ça leur apprend la vie d’avoir la vie ruinée ?
Nunez — Ah bah oui comme ça au moins ils sont sûrs et certains que quoi qu’ils fassent rien ne changera plus pour eux. Quelle meilleure leçon de vie que celle-là ?
Journaliste — Euh…

LES INSTIGATEURS

Journaliste — Le parti de gauche La France Insoumise est par ailleurs accusé d’être l’instigateur du mouvement. Mathilde Panot, bonjour.
Panot — Exécutez l’ordre 66.
Quelqu’un — Bien madame.
On entend des explosions.
Journaliste — Bon ben je vais vous laisser moi.

PRÉPAREZ-VOUS

Journaliste — Pendant ce temps-là, la primaire des socialistes entre dans sa dernière ligne droite, et l’affaire Glucksmann qui vient tout juste d’éclater pourrait bien rebattre les cartes. Mais au profit de qui ? … … Le sketch c’est une chanson.

Si seulement tu t’souvenais
Qu’elle était centriste dans le passé
Tu serais effrayée
Si seulement tu t’souvenais
comment elle traitait ses employés
Elle pourrait t’engueuler

Mais laisse laisse le temps
Elle compte pile sur le fait
que t’auras tout oublié
Même s’il faudra du temps pour
oublier la bravitude qu’elle conquerrait

Et tu veux voter Ségolène ce soir
Même si 15 balles pour ça c’est cher payé
Tu voudrais qu’elle soit ta Royal ce soir
Toi Glucksmann tu t’en fous c’est pas c’qui t’plaît

Mais je pense qu’un jour tu verras que toi aussi tu l’aimes un peu plus fort
Moi je crois aux histoires auxquelles les autres ne croient pas encore

Et tu veux voter Ségolène ce soir
Même si 15 balles pour ça c’est cher payé
Tu voudrais qu’elle soit ta Royal ce soir
Toi Glucksmann tu t’en fous c’est pas c’qui t’plaît

Pour notre entretien du jour, nous nous retrouvons avec la ministre de la Santé Stéphanie Rist. Stéphanie Rist, bonjour.
Rist — Buvez de l’eau.
Journaliste — La canicule est finie, vous savez ?
Rist — Ah oui c’est vrai. Mais buvez de l’eau quand même.
Journaliste — J’y manquerai pas. Donc, Stéphanie Rist, la semaine dernière, des millions de tomates produites en France ont été rappelées en urgence à cause d’une teneur extrêmement élevée en acétamipride. Vous confirmez ?
Rist — Euh, ouais, ptete.
Journaliste — Vous… Vous êtes au courant, au moins ?
Rist — Bah moi vous savez je mange que des tomates bio, donc savoir si les tomates normales sont pourries ou pas, ça m’est un peu égal.
Journaliste — … Ah. Mais enfin vous savez, le bio, tout le monde ne peut pas se le procurer, notamment parce que l’industrie agroalimentaire pratique des marges beaucoup plus élevées que sur l’agriculture conventionnelle qui fait augmenter artificiellement les prix.
Rist — Oui mais moi je m’en fiche, j’ai les moyens.
Jouranliste — Mais la question c’est pas vous, c’est les Français.
Rist — Ah bon ?
Journaliste — … Vous êtes ministre de la Santé, pas vrai ?
Rist — … Euh… Ah, peut-être. J’étais pourtant persuadée que j’étais ministre du buvage d’eau.
Journaliste — Bah remarque ce serait peut-être mieux. Nous vous souhaitons une fin de journée. À bientôt !

This entry was edited (today, 5:32 PM)

How to Build Brand Guidelines for a Recognizable Business


Creating brand guidelines takes a little time, but it pays off every day. You do not need an agency to do it for you. You just need to write down who you are and how you want to look. Pick your colors, choose your fonts, and set your rules. When you finish, share it with your team.

How to Create Brand Guidelines That Unify Your Brand


A brand that feels familiar everywhere it appears earns recognition. Its website, social channels, and emails all carry a consistent identity. That consistency is not accidental. It comes from having brand guidelines in place.

These guidelines serve as a playbook for your company. They tell everyone how to present your brand. You do not need a huge budget to create them. A clear plan is enough. Let's walk through how to build your own brand guidelines from scratch.

1. Establish your brand's core identity


Begin by defining who you are before any visual decisions. Write down your mission, vision, and values. Your mission captures what you do today. Your vision outlines where you want to go. Your values are the beliefs that shape your decisions.

Then determine your brand voice. Are you formal or informal? Witty or serious? List a few adjectives that describe your tone. Also note what you are not. For example, if you are casual, you avoid corporate jargon. Documenting this sets the stage for every design choice. A cheap website designer can use this to align visuals with your personality.

2. Set logo usage rules


Your logo is the central symbol of your business. You need clear rules for its application. Begin by showing your primary logo. Then display any secondary versions, like horizontal or stacked layouts. Explain when each version should be used.

Most importantly, show what to avoid. Do not stretch the logo. Do not change its colors. Do not place it on a cluttered background. Provide visual examples of incorrect usage. This prevents people from weakening your brand identity over time.

3. Choose your color palette


Colors trigger emotions, so select a palette that matches your brand's personality. Pick a primary color that people will see most often. Then add secondary colors to support it. Finally, choose neutral colors for backgrounds and text.

When listing colors, do not just write "blue." Give exact color codes. Include HEX for digital, RGB for screens, and CMYK for print. This detail supports affordable web design by keeping colors consistent across media. Your chosen shade should look the same on a business card and a laptop screen.

4. Select your typography


Fonts matter more than many people think. A poor font choice makes a brand look unprofessional. Limit yourself to two or three fonts. Choose a bold primary font for headings. Then pick a clean secondary font for body text. It should be easy to read on screens.

Set specific rules for font sizes. For example, headings might be 36 pixels and body text 16 pixels. State which fonts to use online and which to use in print. Keep it simple. Too many fonts make a brand look messy.

5. Set imagery and graphic standards


Photos and graphics tell a story. You want them to tell the right one. Decide on a photographic style. Do you prefer bright, natural light? Or dark, moody shots? Are your photos of people or products? Show examples of images you like and dislike.

Apply the same approach to illustrations and icons. If you use flat icons, ensure no one uses 3D ones. Consistency is the goal. When someone visits your website, the visuals should feel cohesive.

6. Apply guidelines to your website


Your website is often the first place people interact with your brand. Your guidelines should cover web design rules. How do buttons look? What color are links? Where do images go on a page?

If you hire someone to build your site, these rules save time and money. When you seek an affordable web design option, clear guidelines make the process faster. A designer can build quickly when they know the exact fonts and colors to use.

Even a cheap website designer can produce great work if you provide a solid rulebook. They do not have to guess what you want. They just follow the rules you wrote. This keeps your site looking professional and on-brand.

A cheap website designer can also work faster with these rules. They spend less time asking questions. They spend more time building.

7. Cover your social media presence


Your brand also lives on social media. You need rules for how things look on Instagram or LinkedIn. Create templates for your posts. If you post quotes, what font do you use? What background color do you use?

Provide these templates for your team. This way, anyone can create a post that still looks like it came from your brand. Write these rules down so your social media does not become a random mess of colors and fonts.

8. Gather everything into a document


Now you have all your pieces. You have your mission, logo, colors, fonts, and image rules. Put them in one place. You can use a simple Word document, a Google Doc, or a PDF. Some people use Canva to make their guidelines look nice.

Organize the document logically. Start with the brand core, then move to visuals, then web rules. Use headers and bullet points. Make it easy to scan. An affordable web design project benefits from a well-structured document. No one wants to read a giant wall of text.

A cheap website designer will appreciate a clear, scannable document. It helps them follow your rules without confusion. Keep your sentences brief and your examples clear.

9. Share the guidelines


A rulebook is useless if no one reads it. Send the document to your team. Make sure your employees know where to find it. Tell them to use it every time they create something for the brand.

If you work with freelancers, send them the document before they start a project. This includes writers, designers, and social media managers. A Singapore cheap website designer will follow your guidelines more closely when they receive them upfront. When everyone follows the same rules, your brand gets stronger.

10. Update the guidelines over time


Your business will change. Your brand guidelines should change too. Maybe you rebrand in five years. Maybe you just add a new color to your palette.

Set a reminder to review your guidelines once a year. Check if the rules still make sense. Remove things that do not work. Add new things that do. An affordable web design strategy stays current when your document is updated. A brand guideline is a living document that grows with your business.

Wrapping up


Creating brand guidelines takes a little time, but it pays off every day. You do not need an agency to do it for you. You just need to write down who you are and how you want to look. Pick your colors, choose your fonts, and set your rules. When you finish, share it with your team. From that point on, every piece of content you make will look consistent. Your brand will look professional, no matter your budget. Start today, and you will build a brand people remember.

Taking F-Droid to IndiaFOSS


Noob: Can I install Linux on an empty nvme while in windows? Without needing a USB?


Basically. I have separate drive for my windowsOS/media etc. And one of my nvme drive now is completely empty.

Is there a way to install Linux onto that empty nvme with windows and then like turn the PC off remove my windows drive entirely, and then have it just boot with the linux drive without needing to do a whole bootable usb through the motherboard uefi?

I don't have USB drives and they cost too much for something i never use.

Like if there was a linux installer that Ibcan run while logged in to windows that would be amazing...

⇧