Linux Compatible

Linux Security Roundup for Week 24, 2026

Security 10962 Published 2026-06-14 08:29 by Philipp Esselbach 0

This week’s security roundup includes kernel upgrades and core service updates for OpenSSL, Samba, and Apache. These will almost certainly require full reboots, so you must schedule maintenance windows around active production traffic. Running these changes in a staging environment first prevents nasty surprises, while leveraging automation scripts or zero-downtime tools keeps your servers online during the process.

Goverlay 1.8.3 Fixes Linux Gaming Config Headaches with Faster BGMOD and Built-in Benchmarks

Software 44462 Published 2026-06-14 07:34 by Philipp Esselbach 0

Goverlay 1.8.3 replaces the outdated FGMOD shell script with BGMOD, a faster native Pascal binary that stores settings in an external file to prevent config wipes during updates. The update bundles Pascube Benchmark directly into the overlay so users can test Vulkan post-processing effects and compare hardware scores against a growing public database without leaving their desktop. Flatpak installations get improved stability while Ubuntu AppImage users should skip the benchmark feature until developers patch a known distribution bug. Built-in setup videos for Steam and Heroic Games Launcher round out the release by removing guesswork from overlay configuration.

Wine Staging 11.11 Delivers Early Graphics Fixes and Thread Pool Updates

Software 44462 Published 2026-06-14 07:30 by Philipp Esselbach 0

Wine Staging 11.11 pushes experimental DirectComposition and Vulkan to DirectX 12 translation patches ahead of the main development branch so users can test newer titles without waiting for stable releases. The update rebases on version 11.11 while refreshing several core patchsets that handle modern Windows timers, ink objects, and device creation calls more reliably. Users should weigh the benefits of early graphics fixes against potential regressions since staging branches occasionally break legacy software that depends on older threading models or enterprise APIs. Installing through official repositories keeps dependency chains clean, but sticking to mainline remains the safer bet for daily workloads that demand predictable performance.

Chromedriver, Strongswan, Django, FFmpeg and Ansible updates for SUSE

SUSE 5677 Published 2026-06-14 07:19 by Philipp Esselbach 0

SUSE has released a series of moderate security updates for Tumbleweed that address multiple vulnerabilities across several widely used packages. The chromedriver update stands out by fixing 74 separate issues, while other patches target critical components like strongswan, Django, FFmpeg, and Ansible. Each advisory includes detailed CVSS ratings that highlight the potential impact on system confidentiality and availability if left unpatched. System administrators should prioritize installing these GA media updates to close security gaps before attackers can exploit the known flaws.

openSUSE-SU-2026:11005-1: moderate: strongswan-6.0.7-1.1 on GA media
openSUSE-SU-2026:11008-1: moderate: chromedriver-149.0.7827.102-1.1 on GA media
openSUSE-SU-2026:11003-1: moderate: python313-Django6-6.0.6-1.1 on GA media
openSUSE-SU-2026:11009-1: moderate: ffmpeg-7-7.1.4-3.1 on GA media
openSUSE-SU-2026:11007-1: moderate: ansible-core-2.21.0-3.1 on GA media
openSUSE-SU-2026:11001-1: moderate: postgresql-jdbc-42.7.11-1.1 on GA media
openSUSE-SU-2026:11006-1: moderate: tmux-3.6b-2.1 on GA media

Composer 2.10, WeasyPrint 69.0, and Xwayland updates for Fedora 43

Fedora Linux 9384 Published 2026-06-14 07:17 by Philipp Esselbach 0

Fedora 43 administrators must apply urgent security patches targeting Composer, WeasyPrint, and Xwayland before attackers exploit known weaknesses. The new Composer release tightens shell escaping protocols and enforces stricter plugin verification to stop malicious code from running during dependency management. WeasyPrint finally addresses a critical PDF rendering flaw while the Xwayland server update plugs several ZDI reported vulnerabilities that could compromise display servers. Since these updates are signed with official GPG keys, rolling them out via standard dnf commands guarantees a safe and seamless installation process for every connected machine.

Fedora 43 Update: composer-2.10.1-1.fc43
Fedora 43 Update: weasyprint-69.0-1.fc43
Fedora 43 Update: xorg-x11-server-Xwayland-24.1.12-1.fc43

Chromium security update for Debian

Debian 10953 Published 2026-06-14 07:15 by Philipp Esselbach 0

Debian has issued a critical security advisory for Chromium that patches 29 distinct vulnerabilities ranging from CVE-2026-12007 through CVE-2026-12035. These flaws could potentially let attackers execute arbitrary code on your machine or trigger denial of service attacks while exposing private information. Upgrade immediately to version 149.0.7827.114 on Debian GNU/Linux 12 (Bookworm) or Debian GNU/Linux 13 (Trixie) systems.

[DSA 6344-1] chromium security update

Zen Browser 1.21.1b Stable Release Fixes Linux Tab Lag and Extension Glitches

Software 44462 Published 2026-06-13 20:06 by Philipp Esselbach 0

Zen Browser 1.21.1b lands on the stable channel with targeted performance tweaks that directly improve Linux desktop workflows. The update reworks the rendering queue to align with standard Wayland and X11 protocols, which eliminates the CPU spikes that previously caused sluggish tab navigation. Background process stabilization also patches several extension conflicts that tended to break session managers and clipboard tools during sync cycles. Users should verify profile directory permissions after installing the update to ensure custom themes and third party add ons load without triggering false alarms or broken state files.

Alpine Linux 3.24.1 OpenSSL Security Fixes Prevent Certificate Forgeries and Server Crashes

Alpine Linux 57 Published 2026-06-13 20:01 by Philipp Esselbach 0

Alpine Linux 3.24.1 drops a comprehensive OpenSSL patch set that closes critical flaws in certificate parsing, PKCS validation, and the QUIC networking stack. Containers and backend services relying on untrusted input will finally stop crashing from heap over-reads or memory exhaustion attacks. The update also hardens cryptographic message processing and blocks known Bleichenbacher side channels that previously leaked private keys through error codes. Deploying the patch through the standard package manager takes minutes and instantly locks down the most dangerous attack surfaces in Alpine-based infrastructure.

AnduinOS v2.0 Beta Fixes Custom Linux Build Fragility With Declarative Architecture and Clean APT Management

AnduinOS 12 Published 2026-06-13 14:32 by Philipp Esselbach 0

AnduinOS v2.0 Beta completely abandons fragile post-install bash scripts in favor of a declarative XML build pipeline that compiles directly into modular native packages. The release strips out custom updaters and telemetry services while enforcing strict CI checks to guarantee clean APT compatibility across all downloads. Desktop performance gets targeted tuning through Ubuntu 26.04 and Linux Kernel 7, with adjusted memory, disk I/O, and network parameters designed to eliminate everyday UI stutter. Users now get a single two-point-five gigabyte ISO that handles twenty-eight languages at boot, swaps legacy applications for lightweight alternatives, and routes package updates through globally distributed repositories.

AOC Agon Pro 4K QD-OLED Monitor, YUNZII B87 Keyboard, and Intel Z890 Motherboards Compared

Reviews 52663 Published 2026-06-13 07:49 by Philipp Esselbach 0

The AOC Agon Pro AG326UZD2 monitor delivers stunning 4K visuals through its Penta Tandem QD-OLED panel while maintaining a surprisingly accessible price point. Gamers can explore the YUNZII B87 mechanical keyboard, which markets itself as an exceptionally cute peripheral available in several vibrant color schemes. Intel Z890 motherboard enthusiasts currently have two distinct options to consider, starting with Colorful's all-white iGame ULTRA-S W flagship designed for high-end custom builds. Alternatively, budget focused builders might prefer the Gigabyte Aorus Elite Wi-Fi7 Plus since it packs PCIe Gen 5 support and tool-free M.2 cooling under three hundred dollars.

Displays: AOC Agon Pro AG326UZD2 review: a dazzling 4K Penta Tandem QD-OLED monitor
Input: YUNZII B87 Review
Motherboards: Colorful iGame Z890 ULTRA-S W Review, Gigabyte Z890 Aorus Elite Wi-Fi7 Plus Review

Wine Development Release 11.11 Brings Faster Crypto, Wayland Fixes, and VBScript Tweaks

Software 44462 Published 2026-06-13 07:40 by Philipp Esselbach 0

Wine Development Release 11.11 swaps the aging TomCrypt backend for SymCrypt, which cuts down on memory leaks and speeds up hash operations that older Windows installers rely on. The update pushes more window metadata into shared memory and gets layered windows working properly under Wayland, so transparency effects and overlay menus stop flickering mid-drag. VBScript parsing gets tighter with compile-time variable binding, which means legacy setup routines and dictionary scripts that previously failed silently will now behave predictably. If you run older games or productivity tools through Wine, this build offers enough stability patches to justify the upgrade without breaking your existing prefix. Grab a fresh tarball and test your favorite Windows apps before pushing anything to production.

How Plasma 6.7 Fixes The Crashes And Quirks That Break Daily Workflows

KDE 1737 Published 2026-06-13 07:31 by Philipp Esselbach 0

KDE Plasma 6.7 wraps up next Tuesday with a heavy focus on squashing stability issues rather than adding flashy new features. The update brings practical improvements like Flatpak Edge support through Plasma Browser Integration, predictable window scrolling behavior, and mandatory notifications for remote control applications. Under the hood, KDE fixed a long list of crashes triggered by monitor layout changes, sleep wake cycles, wallpaper resets, and sandboxing conflicts that previously broke daily workflows. Combined with cleaner thumbnail alignment and frozen AVIF icon fixes in the accompanying frameworks release, this patch makes the desktop noticeably more reliable for everyday use.

Apache HTTP Server and GStreamer Base Plugins updates for Ubuntu LTS

Ubuntu 7120 Published 2026-06-13 07:24 by Philipp Esselbach 0

Ubuntu has released urgent security patches for multiple LTS distributions to address critical flaws in the Apache HTTP Server and GStreamer Base Plugins. The Apache update resolves four distinct CVEs that could allow local or remote attackers to crash services, steal sensitive data, or execute malicious code through compromised modules like mod_rewrite and mod_proxy_ajp. Meanwhile the GStreamer fix targets a parsing error in AVI media handling that previously enabled denial of service attacks or arbitrary program execution on affected systems running Ubuntu 16.04 LTS. Administrators should apply these package updates immediately and restart the web server to ensure all security changes take effect across their infrastructure.

[USN-8396-1] Apache HTTP Server vulnerabilities
[USN-8130-3] GStreamer Base Plugins vulnerability

Chromium, Linux Kernel, rclone, Django and more updates for SUSE

SUSE 5677 Published 2026-06-13 07:21 by Philipp Esselbach 0

.NET, Kernel, OpenSSL, and Core Packages updates for Rocky Linux

Rocky Linux 930 Published 2026-06-13 07:17 by Philipp Esselbach 0

Kernel Security updates for RHEL

Red Hat 9435 Published 2026-06-13 07:15 by Philipp Esselbach 0

Red Hat Product Security has assigned a critical rating to two new kernel updates designed to protect enterprise Linux environments from severe vulnerabilities. The first advisory addresses the Extended Update Support and Advanced Mission Critical Add-Ons for RHEL 8.6, while the second package delivers security patches plus bug fixes and enhancements for NVIDIA optimized systems running RHEL 10. Each vulnerability comes with a detailed CVSS base score that IT teams can access through the provided CVE references in the official documentation. System administrators need to deploy these updates promptly to maintain compliance and prevent potential exploitation across their infrastructure.

RHSA-2026:25533: Critical: kernel security update
RHSA-2026:25534: Critical: kernel security, bug fix, and enhancement update

.NET 8, 9, and 10 Patches Alongside Firefox ESR and krb5 updates for Oracle Linux

Oracle Linux 6496 Published 2026-06-13 07:11 by Philipp Esselbach 0

Oracle has released a comprehensive batch of critical security advisories for both Oracle Linux 7 and 8 systems. These updates primarily address multiple vulnerabilities across .NET versions 8, 9, and 10 while also delivering essential patches for the krb5 authentication library on older infrastructure. Administrators managing enterprise environments will find crucial fixes for Firefox Extended Support Release that resolve dozens of newly disclosed CVEs affecting web browsing stability. All affected packages are now available through the Unbreakable Linux Network to help organizations maintain hardened security postures without disrupting daily operations.

ELSA-2026-25113 Important: Oracle Linux 8 .NET 9.0 security update
ELBA-2026-9174 Oracle Linux 7 krb5 bug fix and enhancement update
ELSA-2026-25114 Important: Oracle Linux 8 .NET 10.0 security update
ELSA-2026-25110 Important: Oracle Linux 8 .NET 8.0 security update
ELSA-2026-8427 Important: Oracle Linux 7 firefox security update
ELSA-2026-3984 Important: Oracle Linux 7 firefox security update
ELSA-2026-13977 Important: Oracle Linux 7 firefox security update

Chromium, Varnish, Composer, and more updates for Fedora

Fedora Linux 9384 Published 2026-06-13 07:07 by Philipp Esselbach 0

Fedora 44 just pushed out a major wave of security patches that touch several essential system tools and development frameworks. Chromium dominates this release with fixes for over seventy memory management vulnerabilities and input validation weaknesses scattered across its rendering engine and extensions. You will also find important hardening measures for Apptainer, Composer, WeasyPrint, and the entire Varnish Cache ecosystem to prevent remote code execution risks. Run your regular system update commands right away so your machines stay protected against these newly disclosed threats.

Fedora 44 Update: chromium-149.0.7827.102-1.fc44
Fedora 44 Update: apptainer-1.5.1-1.fc44
Fedora 44 Update: composer-2.10.1-1.fc44
Fedora 44 Update: chezmoi-2.70.5-1.fc44
Fedora 44 Update: weasyprint-69.0-1.fc44
Fedora 44 Update: vmod-uuid-1.10-31.fc44
Fedora 44 Update: vmod-querystring-2.0.3-13.fc44
Fedora 44 Update: collectd-5.12.0-64.fc44
Fedora 44 Update: varnish-modules-0.27.0-4.fc44
Fedora 44 Update: varnish-8.0.2-1.fc44

Apache2, Kernel Base, and Image Libraries updates for Debian

Debian 10953 Published 2026-06-13 07:05 by Philipp Esselbach 0

A fresh wave of Debian security advisories dropped and demands immediate attention from system operators who want to keep their networks safe. Critical vulnerabilities in apache2 librabbitmq and jpeg xl could allow malicious users to execute arbitrary code or trigger severe service crashes if left unpatched. The release also includes necessary updates for linux base and kernel wedge so they can properly support the upcoming Linux 6.12 backport on Debian 12 systems. Administrators should verify their current package versions right away since delayed upgrades leave infrastructure wide open to exploitation.

[DLA 4628-1] linux-base update
[DLA 4627-1] kernel-wedge update
[DLA 4629-1] apache2 security update
[DSA 6343-1] librabbitmq security update
{DSA 6342-1] jpeg-xl security update

.NET, Redis, OpenSSL and Linux Kernel updates for AlmaLinux 9

AlmaLinux 2582 Published 2026-06-13 07:03 by Philipp Esselbach 0

AlmaLinux recently distributed a series of important security advisories for version 9. The updates cover essential infrastructure components like several dotnet framework versions, Redis seven, OpenSSL, and the base Linux kernel. Each notification highlights critical flaws including remote code execution risks, denial of service vulnerabilities, and dangerous memory corruption issues that attackers could easily exploit. IT teams need to apply these patches immediately to secure their servers against known threats before any damage occurs.

ALSA-2026:25221: .NET 9.0 security update (Important)
ALSA-2026:25219: redis:7 security update (Important)
ALSA-2026:25222: .NET 10.0 security update (Important)
ALSA-2026:25220: .NET 8.0 security update (Important)
ALSA-2026:25239: openssl security update (Important)
ALSA-2026:24381: kernel security update (Important)