Linux Compatible

Node.js 26.7.0 Ships With STORE Loader Support, NSS Updates, and Perfetto Tracing

Software 44669 Published 2026-08-05 20:31 by Philipp Esselbach 0

Node.js 26.7.0 shipped today, delivering a major cryptographic overhaul that adds a STORE loader interface for loading private keys directly from HSMs and updates the root certificate store to NSS 3.125. The "Current" track also introduces experimental promise-based networking via node:net/promises and optional native Perfetto tracing support, though the two profiling backends remain mutually exclusive at build time. Developers gain access to Symbol.dispose within ModuleHooks for standardized ES module cleanup, alongside performance wins in the pipeTo stream path and critical fixes for SQLite and QUIC stability. While Node.js 24.x remains the recommended production baseline until the 26.x line officially enters LTS this October, this release clearly accelerates the platform's modernization roadmap.

Bottles 65.2 Fixes Steam Advertising Bug and Adds Proton 11 Support

Software 44669 Published 2026-08-05 20:25 by Philipp Esselbach 0

Bottles 65.2 dropped today with a critical patch that stops the app from incorrectly advertising every Windows program inside a bottle as a Steam app, a behavior that broke launchers like Goddess of Victory Nikke. The update also enables Steam Runtime 4 support for Proton 11+ runners, resolving compatibility crashes where newer GE Proton builds incorrectly fell back to older containers. Released just 30 hours after the massive 65.0 flagship sprint, the patch strips out aggressive auto-injection of fake Steam IDs while incorporating verified community contributions. You can grab the update directly from Flathub right now to keep your Linux gaming stack running smoothly.

GStreamer 1.28.6 Drops: Final 1.28 Release Adds Security and Bug Fixes

Software 44669 Published 2026-08-05 20:16 by Philipp Esselbach 0

GStreamer 1.28.6 dropped today as the final bug-fix release in the 1.28 stable series, delivering a batch of security patches and targeted fixes without adding new features. The update addresses several pipeline-critical regressions, including a playbin3 subtitle stall issue, DTLS and WebRTC adjustments for OpenSSL 4.0.0, and improved handling of timestampless buffers in hlssink3. The 1.28 line, which launched with a massive January feature release covering Vulkan Video, AMD HIP, and AI inference enhancements, is now officially in maintenance mode ahead of the upcoming 1.30 stable series targeted for Q4 2026.

Python 3.14.7 and 3.13.15 Released with Official JIT and Sigstore

Software 44669 Published 2026-08-05 20:05 by Philipp Esselbach 0

The Python Software Foundation published stable maintenance releases for Python 3.14.7 and 3.13.15 today, delivering roughly 499 and 400 bug fixes respectively. The 3.14 branch leads the update with an experimental JIT compiler now baked into official Windows and macOS binaries, alongside a switch to Sigstore for release verification and new Android embeddable packages. Python 3.13 remains fully supported alongside 3.14, though it will eventually reach end of life before the newer feature branch. You can grab the installers, source tarballs, and full changelogs from python.org starting today.

Zed Editor 1.14.2 Ships With OS-Level AI Sandboxing and Default Keymap Swap

Software 44669 Published 2026-08-05 19:56 by Philipp Esselbach 0

Zed Editor 1.14.2 shipped on August 5, 2026, with its headline feature firmly locked in: OS-enforced sandboxing for the AI agent's terminal and network tools. macOS users get Seatbelt out of the box, Linux relies on bubblewrap namespaces, and Windows agents are now gated behind WSL. The release also quietly swaps the default keymap from VSCode to Zed, reverts aggressive word navigation changes that broke bracket traversal, and patches roughly fifty bugs across crashes, Git panel state, and terminal process cleanup. Built alongside the Zed Guild community, the update keeps the editor focused on AI safety and stability ahead of the 1.15 roadmap.

Visual Studio Code 1.132 Ships: Agent Host, Browser Annotations, and On-Device Dictation

Software 44669 Published 2026-08-05 19:48 by Philipp Esselbach 0

Microsoft has released Visual Studio Code 1.132, doubling down on its transformation from a code editor into an AI agent orchestration platform with four headline features. The update brings the long-awaited Agent Host architecture to a smoother stable rollout, allowing Copilot, Claude, and Codex to run in isolated processes while /btw side chats and element-level browser annotations redefine how developers interact with AI workflows. On-device multilingual dictation now leverages Microsoft's open-source Nemotron 3.5 model, keeping audio data local and adapting to shell syntax in real time. Meanwhile, seven community pull requests address persistent memory leaks, and the Python Environments extension finally reaches 100% default rollout.

ML4W OS 2.15 Released: Quickshell Migration Replaces nwg-dock, Adds Scratchpad Support

Software 44669 Published 2026-08-05 19:37 by Philipp Esselbach 0

ML4W OS 2.15 has officially shipped, completing the project's migration to Quickshell by fully replacing nwg-dock-hyprland with a native QML-based dock and setting the Quickshell status bar as the new default interface. The release introduces a streamlined scratchpad workflow activated via SUPER + SHIFT + S while removing legacy components like the walker launcher and temporarily disabling the global theming system. By consolidating the UI layer around Quickshell, the update aims to improve stability across Arch, Fedora, and openSUSE Tumbleweed, though the project README still lags behind the current version. Users can install the stable release through the official one-line script or download the live ISO directly from the project website.

Exim 4.100-RC2 Drops: Native DMARC, PSL Lookups, and Security Bundles Signal the Final 4.100 Release

Software 44669 Published 2026-08-05 19:24 by Philipp Esselbach 0

Exim 4.100-RC2 shipped on August 5, with the maintainers explicitly closing the sourcebase to treat the candidate as the definitive 4.100 release. The unusually tight six-day gap from RC1 reflects high confidence in the codebase, as RC2 delivered only fixes, compiler quietening, and essential Proxy Protocol and DMARC hardening. Headlining the feature set are new psl and regdom lookups for Public Suffix manipulation, a native EXPERIMENTAL_DMACR_NATIVE build switch, and granular authentication logging selectors. Alongside the code changes, the project formalized a split development model and drew a hard line against LLM-generated contributions, with vulnerability credits now referencing AI training data.

Hyprland 0.56.2 Released: 16 Backported Fixes Stabilize the 0.56 Series

Software 44669 Published 2026-08-05 19:06 by Philipp Esselbach 0

Hyprland lead developer Vaxry shipped version 0.56.2 on August 5, 2026, delivering a bug-fix update that backports sixteen patches to the current development cycle. The release resolves issues with tiling algorithms in the scrolling layout, fullscreen rendering glitches, OpenGL depth buffer invalidation, and input method editor visibility for CJK characters. This maintenance release builds on the July 20 launch of 0.56 and the subsequent 0.56.1 patch, ensuring stability for users on the active branch before the next major version arrives in roughly two to three months

Amethyst Mod Manager v2.1.0 Adds Native BodySlide and Daggerfall Unity Support for Linux

Software 44669 Published 2026-08-05 18:58 by Philipp Esselbach 0

Amethyst Mod Manager v2.1.0 has launched, introducing native Linux execution for BodySlide and Outfit Studio, a built-in NIF mesh viewer, and official Daggerfall Unity compatibility. Built on a recent v2.0.0 Qt rewrite, the single-maintainer open-source project now covers 75+ games with enhanced profile grouping, automated logicmod detection for UE4/5 titles, and improved save management via LudaSavi. The update is available immediately via AppImage, Flatpak, and the Arch User Repository, further solidifying its position as a streamlined, Linux-native alternative to MO2 and Vortex. ChrisDKN continues to push the GPL-3.0 toolkit forward with targeted fixes like UUID conflict detection for Baldur's Gate 3 pak files and better Faugus launcher integration.

Bazaar 0.9.2: Flatpak App Store Gets Daemon, Auto-Updates, and Major Distro Support

GNOME 3726 Published 2026-08-05 18:37 by Philipp Esselbach 0

Bazaar 0.9.2 is introducing a daemon architecture that keeps the app store's memory footprint low by offloading background tasks to a separate process. The update also brings automatic Flatpak updates, a developer preview tool for metainfo files, and official translation support via GNOME Damned Lies. Major distributions including Bazzite, Bluefin, and Aurora are now shipping Bazaar as their default Flatpak app store.

Tails 7.10.1 Emergency Release Patches Critical Kernel and XML Bugs

Tails 95 Published 2026-08-05 18:28 by Philipp Esselbach 0

Tails has dropped version 7.10.1 as an emergency security patch just two weeks after 7.10 launched. The update locks down CVE-2026-64560 in the Linux kernel, preventing a malicious website from hijacking your Tor Browser session with root privileges. It also upgrades the expat XML parser to 2.8.2 to neutralize 20 distinct CVEs across LibreOffice, Audacity, and Git, while switching automatic upgrade payloads to zstd compression for faster downloads. Anyone on Tails 7.0 or later will get the patch automatically, though a manual USB reinstall remains a fully viable option that keeps Persistent Storage intact.

Apache NetBeans IDE 31 Released: Lambda Breakpoints, JGit 7.6, and JDK 27 Support

Software 44669 Published 2026-08-05 18:19 by Philipp Esselbach 0

Apache NetBeans 31 has landed, delivering long-requested lambda breakpoints to the debugger and jumping JGit to version 7.6.0 for a massive improvement in repository indexer performance. The new build tracks the JDK 27 early access release with JEP 519 enabled, while also fixing a critical JavaFX crash on JDK 26 that previously forced desktop developers to downgrade. Beyond core Java, the release adds full PHP 8.4 property hooks, allows Payara to run on JDK 25, and introduces a global settings.xml preference for cleaner Maven management. Although the GitHub label currently reads pre-release, the build is stable for production, and the project has seen renewed momentum with five new contributors and sixty-nine merged pull requests.

Liquorix Kernel 7.1-8 Lands with Linux 7.1.6 and Enhanced ACS Override Support

Debian 11025 Ubuntu 7175 Arch Linux 986 Published 2026-08-05 06:57 by Philipp Esselbach 0

Liquorix kernel 7.1-8 just landed, tracking upstream Linux 7.1.6 and bringing enhanced ACS override support for GPU passthrough enthusiasts. Maintainer Steven Barrett shipped the build on August 4, continuing an aggressive four-day turnaround that mirrors upstream stable point releases. The update pulls in modern hardware support including NTFSPLUS, Apple Silicon power reporting for Asahi users, and Intel FRED enabled by default for Arrow Lake processors. You're getting the usual PDS-scheduling and 2ms timeslice tweaks that make Liquorix a favorite for gaming and low-latency workloads, though you should retest your drivers before rebooting.

FEX-2608 Released: Memory Fix and Better Wine Support for x86-on-ARM Emulation

Software 44669 Published 2026-08-05 06:47 by Philipp Esselbach 0

FEX has shipped its August update, FEX-2608, after processing roughly 331 commits focused on memory safety and Windows compatibility. The release fixes a critical 64-bit allocator bug that was silently overwriting regions, while also patching JIT guard page handling and AVX signal state corruption. Windows support improves through a fixed VirtualProtect call and power-efficient WFE spinloops that lower battery drain on ARM laptops. Meanwhile, the project fully drops the deprecated FEXInterpreter binary and maintains its steady monthly cadence alongside Box64.

GOverlay 1.8.11 Adds RDNA 4 Fix for Linux Gamers with OptiScaler Update

Software 44669 Published 2026-08-05 06:41 by Philipp Esselbach 0

GOverlay 1.8.11 landed today, delivering a targeted fix for AMD's RDNA 4 GPUs within the OptiScaler upscaling tool. The patch reverts the Fsr4Update configuration from true to auto in optiscaler.ini, allowing OptiScaler to manage update timing and preventing conflicts on Radeon RX 9000 series hardware. This release follows a rapid development cycle in July that included six updates, bringing architecture improvements like the compiled BGMOD wrapper and expanded multi-format distribution support. Linux gamers can install the build via Flatpak, Arch Linux, or the official GitHub releases page to ensure stable upscaling performance across their existing toolkit.

Bottles 65.1 Hotfix Drops Hours After 65.0 to Patch GameMode Bottle Crash

Software 44669 Published 2026-08-05 06:32 by Philipp Esselbach 0

Bottles 65.1 hit the release page today, delivering a single surgical fix for a critical regression introduced hours earlier in the massive 65.0 update. The previous build would crash immediately when users tried to open settings for a newly created bottle if the gamemode service was missing, a scenario that covers the majority of Linux desktops. Lead developer Mirko Brombin reworked the preferences initialization to degrade gracefully when gamemode is absent, meaning you can finally access bottle configuration without staring at a terminal error. The patch arrives just eight hours after 65.0, a version that shipped over 100 changes including Soda v11.0-4 and full Steam library discovery.

GMKtec NucBox EVO-T2S Mini PC, Lenovo Yoga Pro 9i Gen 11 Laptop, and AMD Motherboards Reviewed

Reviews 52708 Published 2026-08-05 06:21 by Philipp Esselbach 0

Today’s hardware roundup examines fresh reviews across multiple PC categories, starting with GMKtec’s $2099 NucBox EVO-T2S mini computer built around Intel’s Panther Lake Core Ultra X7 358H processor. The laptop segment features the Lenovo Yoga Pro 9i Gen 11 Aura Edition with its tandem OLED touch panel and the budget-friendly LOQ Essentials 15 powered by a low-power RTX 5060 GPU. Display options highlight the Titan Army P275MV Plus, which pairs MiniLED backlighting with dual refresh rate modes to bridge the gap between image quality and speed. AMD enthusiasts get two new board choices in the GIGABYTE X870E AERO X3D DARK WOOD and ASUS ROG STRIX B850-F Gaming WIFI7 NEO, both designed for Ryzen 7000 through 9000 series chips with modern connectivity standards.

Computers: GMKtec NucBox EVO-T2S “Intel Core Ultra X7 358H” Mini PC Review: Panther Lake Brings Next-Level Features To Mini PCs, Lenovo Yoga Pro 9i Gen 11 Aura Edition (16IPH11) Review - Yoga Top Dog with Tandem OLED, Lenovo LOQ Essentials 15 Gen 11 Review: A good display meets a low-power RTX 5060
Displays: Titan Army P275MV Plus Gaming Monitor Review: MiniLED Meets Dual Mode
Motherboards: GIGABYTE X870E AERO X3D DARK WOOD Review, ASUS ROG STRIX B850-F Gaming WIFI7 NEO review

OpenSSL, nginx, bind, Python Packages, Node.js, and More updates for SUSE

SUSE 5729 Published 2026-08-05 06:12 by Philipp Esselbach 0

Stunnel security update for Slackware

Slackware 1282 Published 2026-08-05 06:11 by Philipp Esselbach 0

The Slackware Linux Security Team released stunnel version 5.80 for both Slackware 15.0 and the development branch to address two critical vulnerabilities. The first patch resolves an out-of-bounds memory access flaw that activates when logging attacker-controlled protocol messages exceeding 1,024 bytes. The second update closes a SOCKS server mode bypass that allowed attackers to route traffic through alternate local-address encodings and interface-scoped IPv6 destinations.

stunnel (SSA:2026-216-01)

Kernel, Perl, FRR, and Unbound updates for Rocky Linux

Rocky Linux 972 Published 2026-08-05 06:09 by Philipp Esselbach 0

Libpq, systemd, python3, Thunderbird, Kernel, Ansible, Satellite, and JBoss updates for RHEL

Red Hat 9479 Published 2026-08-05 06:07 by Philipp Esselbach 0

Thunderbird, Firefox, Node.js 22, Kernels, and Maintenance updates for Oracle Linux

Oracle Linux 6527 Published 2026-08-05 06:03 by Philipp Esselbach 0

Open62541, doctl, Kernel 7.1.6, Perl Ecosystem, ABRT, and Coreutils updates for Fedora

Fedora Linux 9442 Published 2026-08-05 05:59 by Philipp Esselbach 0

Fedora issued a coordinated set of security advisories for versions 43 and 44 that close active vulnerability gaps across essential system packages. The release updates open62541 to 1.5.6, pushes doctl to 1.164.0, ships Linux kernel 7.1.6 with upstream stability fixes, rebuilds Perl 5.42.3 dependencies, and resolves multiple flaw codes in ABRT, Coreutils, and related utilities. Each notification details specific CVE remediations that neutralize denial of service vectors, memory corruption flaws, file injection risks, and race conditions threatening system integrity.

Fedora 43 Update: open62541-1.5.6-1.fc43
Fedora 43 Update: doctl-1.164.0-1.fc43
Fedora 44 Update: kernel-7.1.6-201.fc44
Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44
Fedora 44 Update: polymake-4.15-11.fc44
Fedora 44 Update: perl-5.42.3-525.fc44
Fedora 44 Update: perl-Devel-Cover-1.52-4.fc44
Fedora 44 Update: abrt-2.17.9-1.fc44
Fedora 44 Update: coreutils-9.10-5.fc44
Fedora 44 Update: open62541-1.5.6-1.fc44
Fedora 44 Update: doctl-1.164.0-1.fc44

Ruby2.7, Botan3, and Aom updates for Debian

Debian 11025 Published 2026-08-05 05:56 by Philipp Esselbach 0

Debian released DLA-4716-1 to patch four vulnerabilities in ruby2.7, including a DNS decompression flaw that triggers denial of service and an ERB deserialization bug that allows arbitrary code execution on untrusted data. The botan3 advisory addresses CVE-2026-44378 by upgrading the C++ cryptography library to version 3.12.0, which resolves certificate validation and authentication bypass flaws while renaming the shared library package from libbotan-3-7 to libbotan-3-12.

[DLA 4716-1] ruby2.7 security update
[DSA 6412-1] botan3 security update
[DSA 6411-1] aom security update

Patch Kernel, Thunderbird, and Perl updates for AlmaLinux

AlmaLinux 2621 Published 2026-08-05 05:54 by Philipp Esselbach 0

AlmaLinux issued eight security errata covering versions 8 through 10 of its operating system. The patches resolve critical flaws in the Linux kernel, Thunderbird email client, GStreamer media framework, and several Perl modules including DBI and Archive::Tar. Attackers could exploit buffer overflows and use-after-free conditions to execute arbitrary code or bypass sandbox restrictions on affected systems.

ALSA-2026:49668: p11-kit security update (Moderate)
ALSA-2026:49508: gstreamer1-plugins-good security update (Important)
ALSA-2026:49612: perl-DBI security update (Important)
ALSA-2026:49523: perl-Archive-Tar security update (Important)
ALSA-2026:49927: fence-agents security update (Moderate)
ALSA-2026:49857: kernel security, bug fix, and enhancement update (Moderate)
ALSA-2026:49851: kernel-rt security, bug fix, and enhancement update (Moderate)
ALSA-2026:49922: thunderbird security update (Important)

Legendary v0.21.0 Revives the Open-Source Epic Games Launcher Replacement

Software 44669 Published 2026-08-04 21:19 by Philipp Esselbach 0

Legendary v0.21.0 “Lowlife” has officially shipped, marking the first major update to the open-source Epic Games Launcher replacement in years. The release finally adds support for Epic’s new ChunksV5 manifest format, including encrypted variants that older clients can no longer access. Users also get native Uplay protocol support for Ubisoft titles, a new achievement tracking system, and a modernized build environment that drops legacy Python versions. With 29 merged pull requests from a suddenly active community, the CLI-based launcher is now fully prepared for the current generation of digital storefronts.

Python 3.15.0rc1 Released: Lazy Imports, Built-in frozendict, and Tachyon Profiler

Software 44669 Published 2026-08-04 21:06 by Philipp Esselbach 0

Python 3.15.0rc1 is now available as the first release candidate in a two-RC cycle, with the final version targeted for October 2026. The release is headlined by PEP 810's lazy keyword for deferred module loading, which the team reports can reduce startup times by up to 70% on large codebases at companies like Meta. Additional major changes include a built-in frozendict type, a new profiling package featuring the high-frequency Tachyon sampler, and JIT speedups ranging from 8% to 13% depending on the architecture. Developers and maintainers should test against rc1 now, as binary wheels built against this candidate will be ABI-stable for the final release.

NVIDIA Joins Premier LVFS Sponsorship as DGX Spark Firmware Rolls Out to Linux

Linux 3402 Published 2026-08-04 20:54 by Philipp Esselbach 0

NVIDIA has become the fourth OEM to join the Linux Vendor Firmware Service (LVFS) as a premier sponsor, contributing $100,000+ annually alongside Dell, Lenovo, and HP to hit the service's funding target. The partnership brings immediate practical benefits, with NVIDIA distributing firmware updates for its DGX Spark AI workstation through fwupd, allowing Linux users to manage hardware patches without relying on Windows-only tools. Richard Hughes, the maintainer behind fwupd, confirmed the sponsorship clears a sustainability goal set last year, ensuring resources can be hired to maintain the infrastructure now hosting over 145 million firmware updates.

HestiaCP 1.9.9 Releases Critical Security Patch to Fix Root RCE Flaw

Software 44669 Published 2026-08-04 20:09 by Philipp Esselbach 0

HestiaCP released version 1.9.9 today, addressing a critical privilege escalation vulnerability that allows low-privilege users to execute arbitrary commands as root via the backup exclusions feature. This marks the third consecutive security-focused release in roughly three weeks, following a defensive hardening cycle triggered by what appears to be a comprehensive codebase audit. Lead maintainer Jaap Marcus merged PR #5574 after integrating AI-assisted code review and adding an extensive BATS test suite to validate the tightened config parser. Administrators should run the v-update-hestia script immediately to close the root access window before a CVE is officially assigned.

KDE Plasma 6.7.4 Lands with Critical AMD GPU Fixes and Wayland Updates

KDE 1758 Published 2026-08-04 19:56 by Philipp Esselbach 0

KDE released Plasma 6.7.4 on August 4, 2026, delivering the fourth maintenance update for the 6.7 series with three weeks of community fixes and translations. The release prioritizes KWin stability through critical workarounds for libepoxy failures during GPU resets and resolves DRM backend issues that were causing display corruption on AMD hardware. SDDM gains wallpaper persistence and crash prevention for multi-display setups, while Wayland support improves via new protocol extensions and a password-free sleep resume feature.

Bottles 65.0 Update Brings D7VK, Frame Generation, and 100+ Changes to Linux Gaming

Software 44669 Published 2026-08-04 19:42 by Philipp Esselbach 0

Bottles 65.0 has arrived with over 100 changes and the new Soda v11.0-4 runner, marking the largest release in the project's history. Sole maintainer Mirko Brombin delivered D7VK support for Direct3D 12, lsfg-vk frame generation, and a new "Eagle" malware scanner across the massive update. The Flatpak-only app now offers deeper Steam integration, dedicated sandbox improvements, and NTSync threading detection for better Linux gaming performance. Despite the scale of 70-plus commits from a single developer backed by 13 contributors, the project remains focused on stable, sandboxed Windows compatibility via its custom Wine fork.

Asus ProArt OLED Monitor, Game Freak Action RPG, Razer Gaming Earbuds, and more reviews

Reviews 52708 Published 2026-08-04 08:33 by Philipp Esselbach 0

Here is a roundup of today's reviews and articles. The Asus ProArt PA32UCDMR earns high marks for its precise 32-inch OLED panel and fast refresh rates, while Game Freak’s Beast of Reincarnation combines turn-based strategy with action combat to deliver a standout role-playing experience. Razer equips its Hammerhead V3 HyperSpeed earbuds with near-zero latency wireless connectivity and hybrid noise cancellation for mobile gamers, and Pulsar partners with VAXEE to produce the lightweight, ambidextrous eS FS-1 mouse featuring an 8000 Hz polling rate. The Thinkware U3000 Pro dashcam records clear 4K footage alongside radar parking assistance despite some Wi-Fi compatibility bumps for Android drivers, while the $170 ASRock X870 Challenger Wi-Fi motherboard packs PCIe Gen 5, USB4, and Wi-Fi 7 support into a budget-friendly board. The ASUS ROG Thor 1000W Platinum III power supply meets modern ATX 3.1 standards with exceptional efficiency and whisper-quiet operation for high-end gaming builds.

Displays: Asus ProArt PA32UCDMR 32-inch 4K professional OLED monitor review: Precision, speed, and flexibility
Gaming: Beast of Reincarnation Review - Turn-Based Meets Action In A Solid Action RPG from Pokémon Studio Game Freak
Headphones: Razer Hammerhead V3 HyperSpeed Gaming Earbuds Review
Input: Pulsar eS FS-1 Review
Mobile: Thinkware U3000 Pro Review - Smart Dashcam with Wi-Fi quirks
Motherboards: ASRock X870 Challenger Wi-Fi Review
Power: ASUS ROG Thor 1000W Platinum III in Test

FFmpeg 9.0 Lei Released: Library Bumps and Dev Impact

Software 44669 Published 2026-08-04 08:21 by Philipp Esselbach 0

FFmpeg 9.0 "Lei" officially launched on August 4, 2026, arriving roughly four months after version 8.1. The release pushes every core library into new major versions, with libavcodec and libavformat crossing into the 63 series. While the full changelog is still being mapped out, the version increments signal substantial internal changes to the project’s encoder and decoder architecture. Developers and media pipeline engineers should expect to rebuild their dependencies and run regression tests before deploying to production.

Samba 4.23.11 Ships Five Bundled CVEs and Critical AD Security Fixes

Software 44669 Published 2026-08-04 08:06 by Philipp Esselbach 0

Samba has dropped version 4.23.11, a stable point update that folds five previously disclosed CVEs directly into the 41-megabyte tarball. The most urgent patches cover two 8.8-rated flaws that let low-privilege accounts hijack Active Directory domains or extract gMSA root keys. Beyond the security work, the build resolves CephFS snapshot panics, CTDB cluster race conditions, and a regression that broke Windows-to-Samba trust paths.

Nginx, BIND DNS, OpenSSL 1.1, Vim, Xen Hypervisor, libssh, and Python updates for SUSE

SUSE 5729 Published 2026-08-04 07:48 by Philipp Esselbach 0

Node.js 22 & 24, Firefox, PipeWire, and more updates for Rocky Linux

Rocky Linux 972 Published 2026-08-04 07:44 by Philipp Esselbach 0

Rocky Linux has issued important security advisories for versions 8 and 9, patching vulnerabilities in packages such as Node.js, Firefox, PipeWire, libXfont2, yelp, gstreamer1-plugins-bad-free, and libtiff. Advisory RLSA-2026:47058 addresses Node.js 22 while RLSA-2026:47057 covers Node.js 24, affecting module.nodejs and associated packaging components on Rocky Linux 9. Distinct updates also target Firefox and multimedia libraries for Rocky Linux 9, plus yelp, compat-libtiff3, and libtiff packages for the older Rocky Linux 8 distribution.

RLSA-2026:47058: Important: nodejs:22 security update
RLSA-2026:47057: Important: nodejs:24 security update
RLSA-2026:47104: Important: firefox security update
RLSA-2026:47082: Important: pipewire security update
RLSA-2026:47084: Important: libXfont2 security update
RLSA-2026:47178: Important: yelp security update
RLSA-2026:47179: Important: gstreamer1-plugins-bad-free security update
RLSA-2026:47184: Important: libtiff security update
RLSA-2026:47183: Important: compat-libtiff3 security update
RLSA-2026:47177: Important: yelp security update

RHEL AI 3.5, JBoss, LibTiff, and more updates for RHEL

Red Hat 9479 Published 2026-08-04 07:42 by Philipp Esselbach 0

Node.js, Perl, PHP, and more updates for Oracle Linux

Oracle Linux 6527 Published 2026-08-04 07:39 by Philipp Esselbach 0

BorgBackup, SeaMonkey, Nebula, and Ammonia updates for Fedora

Fedora Linux 9442 Published 2026-08-04 07:36 by Philipp Esselbach 0

Fedora issued five security advisories, delivering patches for borgbackup, seamonkey, nebula, and the ammonia package ecosystem across Fedora 43 and Fedora 44. Fedora 43 administrators need to upgrade borgbackup to version 1.4.5 to close CVE-2026-62268, while Fedora 44 users must install seamonkey version 2.53.24 to secure the internet suite against reported vulnerabilities. The nebula update pushes version 1.11.0 on Fedora 44 and blocks six CVEs involving SSH denial of service attacks, unauthorized command execution via discarded permissions, and ECDSA signature malleability in the overlay networking tool. A joint advisory for Fedora 44 updates rust-ammonia to version 4.1.4 and rebuilds python-nh3 to fix RUSTSEC-2026-0193 and RUSTSEC-2026-0213, ensuring proper HTML sanitization across both the Rust crate and Python bindings.

Fedora 43 Update: borgbackup-1.4.5-1.fc43
Fedora 44 Update: seamonkey-2.53.24-1.fc44
Fedora 44 Update: python-nh3-0.3.6-4.fc44
Fedora 44 Update: rust-ammonia-4.1.4-1.fc44
Fedora 44 Update: nebula-1.11.0-1.fc44

OpenJDK 8 and Poppler updates for Debian ELTS

Debian 11025 Published 2026-08-04 07:34 by Philipp Esselbach 0

Debian released ELA-1791-1 and ELA-1792-1 to patch critical security flaws in OpenJDK 8 version 8u502-ga-1~deb9u1 and Poppler across stretch and buster distributions. The Java runtime update addresses ten vulnerabilities that could enable denial of service attacks, unauthorized data access, or sandbox restriction bypasses. Poppler patches six PDF processing flaws, including signature forgery risks, infinite recursion crashes, use-after-free memory corruption, and integer overflow errors that enable arbitrary code execution.

ELA-1791-1 openjdk-8 security update (by )
ELA-1792-1 poppler security update (by )

Vim, Perl DBI, Archive-Tar, ldns, FRRouting, and GLib2 updates for AlmaLinux

AlmaLinux 2621 Published 2026-08-04 07:31 by Philipp Esselbach 0

AlmaLinux released a batch of important security errata, targeting system versions 8, 9, and 10. The patches address critical vulnerabilities across six key packages, including vim, perl-DBI, perl-Archive-Tar, ldns, FRRouting, and mingw-glib2. Flaws in these components range from arbitrary code execution via malicious docstrings and crafted tar headers to heap corruption and DNS poisoning attacks caused by insufficient query-response matching.

ALSA-2026:48650: vim security update (Important)
ALSA-2026:49514: perl-DBI security update (Important)
ALSA-2026:49525: perl-Archive-Tar security update (Important)
ALSA-2026:49520: ldns security update (Important)
ALSA-2026:49524: perl-Archive-Tar security update (Important)
ALSA-2026:49511: frr security update (Important)
ALSA-2026:49512: mingw-glib2 security update (Important)

Windows

Linux

macOS

Community