Product
Last Report

Click here to browse the Windows compatibility database

Click here to browse the Linux compatibility database

Click here to browse the macOS compatibility database

Date: 2026-05-15 10:32 | Last update:



2026-05-15

KDE 1727 Published by Philipp Esselbach 0

KDE neon ships unpatched Plasma updates straight from upstream developers on a stable Ubuntu LTS foundation, which means you get the freshest desktop features without any distribution-level safety nets. Keeping the system running requires using sudo apt full-upgrade instead of standard update commands, since the rapid package turnover constantly breaks traditional dependency chains and leaves half installed desktops in its wake. Graphics card support stays strictly limited to open source drivers, leaving anyone who installs proprietary Nvidia software completely on their own when sessions inevitably fail. The setup works best for adventurous KDE enthusiasts who want immediate access to new tools and do not mind troubleshooting occasional breakage instead of relying on a polished daily driver.

Reviews 52638 Published by Philipp Esselbach 0

Today's tech roundup covers a wide range of hardware reviews spanning cooling solutions, gaming performance, peripherals, mobile devices, and power accessories. DeepCool introduces its updated AG620 G2 dual tower cooler as a strong budget option while Forza Horizon 6 undergoes extensive benchmarking across dozens of graphics cards and handheld PCs to showcase its Japanese open world. Gamers looking for peripherals can check out the highly versatile Turtle Beach Stealth Pro II headset alongside Razer's featherweight Viper V4 Pro mouse designed specifically for competitive esports. The mobile and power segments round things out with Motorola challenging Samsung in the flip phone market, plus detailed looks at ENERMAX's massive 1200W power supply and Nimble's practical retractable wall charger.

Cooling: DeepCool AG620 G2 Review: Is this a best budget cooler
Gaming: Forza Horizon 6 Performance Benchmark Review - 30+ GPUs Tested, Forza Horizon 6 Handheld Performance Review, Forza Horizon 6 review: a stunning open-world Japanese adventure
Headphones: Turtle Beach Stealth Pro II review: Impressively versatile
Input: Razer Viper V4 Pro review: 49 grams, 8,000 Hz, and a clear focus on competitive gaming
Mobile: Moto Razr Fold Review: The Folding Phone That Puts Samsung On Notice
Power: ENERMAX PlatimaxII 1200DF 1200W Report, Nimble Wally Stretch Review: A Colorful Charger With a Retractable USB-C Cable

Software 44378 Published by Philipp Esselbach 0

The Zed editor version 1.2.4 update delivers more reliable AI agent edits with reduced token consumption and better context tracking across changing files. Git history navigation receives a major boost through remote graph support, expanded commit editors, and improved folder-level viewing options. Platform stability gets patched up significantly by resolving Wayland graphical glitches, Linux inotify overflows, and Windows GPU recovery crashes that previously disrupted coding sessions. Additional workflow improvements include enhanced settings navigation, terminal path pasting, and cursor positioning strategies that keep development environments running smoothly without unnecessary friction.

Software 44378 Published by Philipp Esselbach 0

"AM" 10.2 removes wget from its mandatory dependency list and routes all download operations through curl instead. This backend swap eliminates the annoying Fedora warning about mismatched symlinks while keeping installation scripts fully functional. The update patches legacy setup files to use curl flags automatically, preventing silent failures on systems with outdated package managers. Users can now run automated installs without worrying about missing core utilities or manually fixing broken download routines.

Debian 10908 Ubuntu 7088 Published by Philipp Esselbach 0

The XanMod team has released kernels 7.0.7 and 6.18.30 LTS to deliver optimized process scheduling, improved memory management, and enhanced TCP congestion controls for demanding desktop environments. Users can apply the update by adding the official repository source list, installing the package through APT, and performing a system reboot. While these patches improve performance for gaming, virtualization, and heavy compilation tasks, certain third party modules like NVIDIA graphics drivers and OpenZFS may not fully support the newer kernel architecture yet. Staying up to date with these custom builds helps maintain smoother resource handling and reduces system latency on modern Linux hardware.

Debian 10908 Ubuntu 7088 Arch Linux 960 Published by Philipp Esselbach 0

The Liquorix Linux Kernel 7.0-7 update introduces a targeted scheduler optimization that skips unnecessary idle stack synchronization when cores remain identical, directly improving responsiveness for interactive workloads. Built on the standard 7.0.7 foundation, this release specifically targets Project-C latency reductions to deliver smoother frame pacing in games and more consistent audio processing in creative applications. Users can deploy the new kernel version across Debian, Ubuntu, or Arch distributions by running a single automated shell script that handles repository updates and bootloader configuration behind the scenes. Before applying the update on production machines, it is wise to verify driver compatibility and test the changes in a virtual environment to avoid potential boot or module loading issues.

Qubes OS 65 Published by Philipp Esselbach 0

Qubes OS released an advisory warning that a specific Intel processor flaw might let attackers extract information from isolated virtual environments on affected hardware. Official documentation from Intel remains incomplete, which forces security analysts to guess how badly cross qube data leaks could impact actual users. System owners simply need to wait for the community validated microcode updates to move into stable repositories before running a standard update cycle.

QSB-114: Intel CPU data exposure vulnerability

Ubuntu 7088 Published by Philipp Esselbach 0

Ubuntu users must apply an update for nginx after discovering that malformed network requests can crash the web server or allow unauthorized code execution through its rewrite module. A separate patch addresses two input processing flaws in Avahi, which previously allowed attackers to force denial of service crashes on nearly all supported distributions. Running a standard system upgrade will automatically pull these fixes for machines running versions from 14.04 up to 26.04.

[USN-8271-1] nginx vulnerability
[USN-8269-1] Avahi vulnerabilities

SUSE 5647 Published by Philipp Esselbach 0

SUSE has released a series of security patches addressing multiple vulnerabilities across its Linux distributions and openSUSE Tumbleweed systems. The most critical update fixes kernel issue CVE-2026-43284, which impacts numerous SLE variants and requires administrators to reboot affected machines after installation. Additional moderate severity updates target common software tools like ffmpeg, GitPython, Dovecot, and various Python packages by replacing outdated versions with patched releases on the general availability media.

SUSE-SU-2026:1857-1: important: Security update for the Linux Kernel
openSUSE-SU-2026:10759-1: moderate: python-Twisted-doc-26.4.0-1.1 on GA media
openSUSE-SU-2026:10767-1: moderate: ffmpeg-4-4.4.6-12.1 on GA media
openSUSE-SU-2026:10765-1: moderate: amazon-ssm-agent-3.3.4268.0-2.1 on GA media
openSUSE-SU-2026:10760-1: moderate: python311-click-8.3.3-2.1 on GA media
openSUSE-SU-2026:10766-1: moderate: dovecot24-2.4.4-1.1 on GA media
openSUSE-SU-2026:10762-1: moderate: rclone-1.74.1-1.1 on GA media
openSUSE-SU-2026:10758-1: moderate: python311-GitPython-3.1.49-1.1 on GA media
openSUSE-SU-2026:10764-1: moderate: syncthing-2.1.0-1.1 on GA media
openSUSE-SU-2026:10763-1: moderate: regclient-0.11.4-1.1 on GA media

Rocky Linux 908 Published by Philipp Esselbach 0

Recent errata notices highlight several critical security patches for Rocky Linux systems running versions 8 through 10. Administrators managing these environments should prioritize the updated packages because they address significant vulnerabilities in tools like jq, the main kernel, and gimp. The documentation also outlines moderate updates for applications such as freerdp alongside essential infrastructure components including git-lfs and krb5.

RLSA-2026:16692: Important: jq security update
RLSA-2026:16062: Important: kernel security update
RLSA-2026:16693: Important: jq security update
RLSA-2026:16206: Important: kernel security update
RLSA-2026:16484: Important: gimp security update
RLSA-2026:16482: Moderate: freerdp security update
RLSA-2026:16196: Important: kernel-rt security update
RLSA-2026:16252: Important: jq security update
RLSA-2026:17533: Important: gimp:2.8 security update
RLSA-2026:16875: Important: git-lfs security update
RLSA-2026:16195: Important: kernel security update
RLSA-2026:16799: Important: krb5 security update

Red Hat 9413 Published by Philipp Esselbach 0

Red Hat recently published multiple security advisories targeting common utilities and frameworks deployed across various Enterprise Linux versions. These updates address notable software including Firefox, Dovecot, PackageKit, and several image processing libraries. Administrators will notice that the majority carry Important or Moderate ratings while a single OpenShift container platform release receives a Low severity classification.

RHSA-2026:17567: Moderate: libpng security update
RHSA-2026:17561: Important: PackageKit security update
RHSA-2026:17558: Important: PackageKit security update
RHSA-2026:17533: Important: gimp:2.8 security update
RHSA-2026:17524: Moderate: libpng security update
RHSA-2026:16180: Important: OpenShift Container Platform 4.12.90 bug fix and security update
RHSA-2026:17525: Important: python3.12 security update
RHSA-2026:17481: Important: rsync security update
RHSA-2026:17482: Moderate: libsoup3 security update
RHSA-2026:17477: Important: firefox security update
RHSA-2026:17603: Moderate: libpng security update
RHSA-2026:17602: Important: dovecot security update
RHSA-2026:17688: Important: firefox security update
RHSA-2026:17689: Important: firefox security update
RHSA-2026:17687: Important: firefox security update
RHSA-2026:17690: Important: firefox security update
RHSA-2026:17686: Moderate: osbuild-composer security update
RHSA-2026:17685: Moderate: libpng security update
RHSA-2026:17660: Important: openexr security update
RHSA-2026:17658: Important: openexr update
RHSA-2026:17659: Important: openexr security update
RHSA-2026:17656: Important: openexr security update
RHSA-2026:17642: Moderate: libpng security update
RHSA-2026:17626: Important: dovecot security update
RHSA-2026:17628: Important: dovecot security update
RHSA-2026:17625: Important: dovecot security update
RHSA-2026:16176: Important: OpenShift Container Platform 4.14.66 bug fix and security update
RHSA-2026:17630: Important: dovecot security update
RHSA-2026:17619: Important: python3 security update
RHSA-2026:17618: Moderate: ImageMagick security update
RHSA-2026:17560: Important: PackageKit security update

Oracle Linux 6483 Published by Philipp Esselbach 0

Oracle Linux has released a series of security advisories and bug fix updates targeting multiple system versions including eight, nine, and ten. These packages address numerous critical vulnerabilities by patching buffer overflows, memory leaks, and race conditions across kernel components, networking utilities, and application frameworks. The updates cover essential tools like the Unbreakable Enterprise Kernel, Freerdp, Jq, Glib2, and Thunderbird while also providing architectural support for both x86_64 and aarch64 platforms.

ELSA-2026-16875 Important: Oracle Linux 8 git-lfs security update
ELSA-2026-50270 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELSA-2026-50262 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
ELBA-2026-16271 Oracle Linux 8 rust-toolset:rhel8 bug fix and enhancement update
ELSA-2026-13657 Moderate: Oracle Linux 8 corosync security update
ELSA-2026-50262 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
ELSA-2026-15953 Moderate: Oracle Linux 8 glib2 security update
ELSA-2026-50260 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELSA-2026-50261 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELBA-2026-16298 Oracle Linux 8 gcc-toolset-15-gcc bug fix and enhancement update
ELSA-2026-50271 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELSA-2026-16019 Moderate: Oracle Linux 8 freerdp security update
ELSA-2026-50270 Important: Unbreakable Enterprise kernel security update
ELBA-2026-50155 Oracle Linux 8 oVirt 4.5 ovirt-log-collector bug fix update
ELSA-2026-50260 Important: Unbreakable Enterprise kernel security update
ELSA-2026-50271 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
ELSA-2026-50261 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
ELSA-2026-16799 Important: Oracle Linux 8 krb5 security update
ELSA-2026-16252 Important: Oracle Linux 8 jq security update
ELSA-2026-16055 Important: Oracle Linux 8 libtiff security update
ELBA-2026-16257 Oracle Linux 8 llvm-toolset:rhel8 bug fix and enhancement update
ELSA-2026-50262 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
ELBA-2026-50268 Oracle Linux 8 delve bug fix update
ELBA-2026-50267 Oracle Linux 8 Module container-tools:ol8 update
ELBA-2026-50265 Oracle Linux 8 mdadm bug fix update
ELSA-2026-16693 Important: Oracle Linux 9 jq security update
ELSA-2026-16484 Important: Oracle Linux 9 gimp security update
ELSA-2026-15971 Moderate: Oracle Linux 9 glib2 security update
ELSA-2026-16482 Moderate: Oracle Linux 9 freerdp security update
ELSA-2026-16206 Important: Oracle Linux 9 kernel security update
ELSA-2026-15892 Important: Oracle Linux 9 thunderbird security update
ELSA-2026-15887 Important: Oracle Linux 9 openexr security update
ELBA-2026-6252 Oracle Linux 9 scap-security-guide bug fix and enhancement update
ELSA-2026-50271 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELSA-2026-50261 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELSA-2026-15969 Moderate: Oracle Linux 10 glib2 security update
ELSA-2026-17075 Important: Oracle Linux 10 yggdrasil security update
ELSA-2026-16014 Moderate: Oracle Linux 10 freerdp security update
ELSA-2026-16692 Important: Oracle Linux 10 jq security update
ELSA-2026-15968 Moderate: Oracle Linux 10 libsoup3 security update
ELSA-2026-16062 Important: Oracle Linux 10 kernel security update
ELSA-2026-15888 Important: Oracle Linux 10 openexr security update
ELBA-2026-50190 Oracle Linux 10 oracle-ai-database-preinstall-26ai bug fix update
ELSA-2026-13644 Moderate: Oracle Linux 10 corosync security update

Fedora Linux 9350 Published by Philipp Esselbach 0

Debian 10908 Published by Philipp Esselbach 0

Debian released a series of security advisories to patch critical flaws across several major software packages including Thunderbird, PostgreSQL versions fifteen and seventeen, Node.js, FFmpeg, Apache2, nghttp2, and gsasl. Attackers could exploit these weaknesses to execute arbitrary code, bypass authorization controls, trigger denial of service attacks, or leak sensitive information from vulnerable systems. The updates provide specific version numbers for Debian bookworm, trixie, and bullseye distributions while also correcting earlier release notes regarding certain Apache vulnerabilities. System administrators should upgrade their affected software immediately using the recommended package versions to maintain network security.

[DSA 6267-1] thunderbird security update
[DSA 6266-1] nghttp2 security update
[DSA 6271-1] gsasl security update
[DSA 6270-1] postgresql-17 security update
[DSA 6269-1] postgresql-15 security update
[DLA 4582-1] thunderbird security update
[DSA 6268-1] ffmpeg security update
[DSA 6272-1] nodejs security update
[ERRATUM] [DLA 4571-1] apache2 security update

AlmaLinux 2562 Published by Philipp Esselbach 0

AlmaLinux released important security patches for yggdrasil, GIMP, and jq. These updates fix several critical vulnerabilities that could let attackers run malicious code or crash the software using crafted input files. Attackers could exploit these weaknesses through malformed image formats, broken JSON objects, and improper file permission checks.

ALSA-2026:17075: yggdrasil security update (Important)
ALSA-2026:16484: gimp security update (Important)
ALSA-2026:16693: jq security update (Important)
2026-05-14

Software 44378 Published by Philipp Esselbach 0

The PostgreSQL team just dropped mandatory security updates for versions fourteen through eighteen, patching eleven vulnerabilities that range from memory corruption flaws to SQL injection holes in replication commands. Database operators can skip the usual dump and reload dance since these minor releases are fully cumulative and only require swapping out the binaries before restarting the service. Several of the fixed bugs quietly break query planning edge cases and timezone handling, so applying this patch now prevents nasty surprises during routine maintenance windows. Anyone still running version fourteen should start planning an upgrade immediately since official support ends next November and leaving that legacy build online is just asking for trouble.

Linux 3359 Published by Philipp Esselbach 0

This stable LTS kernel update quietly patches a dozen memory safety holes and network stack race conditions that routinely crash production boxes when they hit malformed filesystem images or run out of receive buffers under heavy load. The networking layer finally gets proper bounds checking across SMB clients and multipath TCP, while the storage drivers stop freeing held locks on error paths so corrupted Mac or UDF volumes no longer trigger kernel warnings. Virtualization and hardware teardown sequences get a major cleanup pass, meaning KVM guests will not silently leak page tables anymore and SPI controllers will actually deregister safely when administrators hot-unplug them. Just let the package manager handle the merge, skip manual patching unless debugging use-after-free bugs at two in the morning sounds fun, and enjoy the cleaner dmesg logs.

Linux 3359 Published by Philipp Esselbach 0

Linux Kernel 7.0.7 drops a massive batch of stability patches that mostly focus on squashing memory corruption bugs and race conditions across the networking, virtualization, and storage stacks. The update tightens bounds checking in the SMB client and server drivers to stop malicious packets from triggering out-of-bounds reads, while KVM gets critical fixes for shadow paging leaks and nested interrupt routing that used to crash host systems under load. Filesystems like f2fs and btrfs finally get proper transaction handling during directory removals and node migrations, which should stop those dreaded fsck corruption warnings after a sudden power loss or driver timeout.

Software 44378 Published by Philipp Esselbach 0

UniGetUI 2026.1.10 drops a practical mix of bug fixes and interface tweaks that actually clean up the daily package management workflow. The update logging gets tighter, and the app now warns users when the winget host switches versions instead of silently breaking connections. Navigation bars finally handle long translations without overflowing, while Windows installers shrink in size and non-Windows builds gain system tray support. Stale entries after failed installs, accidental portable file deletion during updates, and broken elevation prompts all get patched so the tool stops wasting time on phantom packages.

Software 44378 Published by Philipp Esselbach 0

Mesa 26.0.7 drops today with targeted fixes that actually stop Intel Arc and AMD Radeon drivers from crashing or corrupting textures in Vulkan games. The update also patches render target clearing bugs on ARM hardware and memory handling glitches in the software renderer, keeping heavy workloads from stalling out. System administrators should verify their package versions before installing since mismatched graphics stacks frequently cause silent failures that mimic application bugs rather than driver issues.

KDE 1727 Published by Philipp Esselbach 0

KDE Plasma 6.7 Beta finally delivers per-screen virtual desktops and a primary-display window switcher to fix long-standing multi-monitor workflow headaches. The update also cleans up Discover with better Flatpak management, smarter review sorting, and a more logical system tray layout. Practical daily improvements include press-and-hold character input, stylus synchronization for tablet users, and noticeable performance gains for Intel and AMD graphics hardware. While experimental Union theming and expanded Wayland protocols show promising direction, testers should expect typical beta instability before the stable release rolls out to distribution repositories.

Reviews 52638 Published by Philipp Esselbach 0

Today's tech roundup covers a wide range of hardware and software reviews that highlight both promising innovations and noticeable compromises across different categories. The Klipsch Pro Media Lumina speakers sound decent enough, yet they completely lack the deep bass you would expect from a dedicated subwoofer. Cooling options are equally split this month since the GEEKTC paste spreads easily while Noctua delivers premium silence for hot days, but the PCCooler CPU cooler falls short on thermals and noise control despite its clean look. You will also find reviews of a sturdy Endorfy gaming chair, a high-end Keychron keyboard, the Directive 8020 video game, and an Asus motherboard that all present unique trade-offs worth considering before you buy anything.

Audio: Klipsch Pro Media Lumina Review: Slimmer subwoofer, even slimmer bass
Casing: NZXT H2 Flow (2026) review, GAMEMAX Vista 2 AB Review – Stylish Airflow Focused Gaming Case
Cooling: GEEKTC GT-6530 Thermal Paste Test Review - Competitor to HY-P17 and Much Easier to Apply, Noctua HOME line Review, PCCooler CPS RZ620M X CPU Cooler Review
Furniture: Endorfy Scrim Review - Decent Gaming Chair Under €250
Gaming: Serafim S3 controller review: Good ergonomics, great tactility, and some weird stuff, Directive 8020 Review: Supermassive's Shapeshifting Aliens Can Hijack Your Own Character, Yet One Playthrough Is Enough
Input: Keychron Q3 Ultra 8K Keyboard Review
Motherboards: Asus Prime Z890-P Wifi Motherboard Review: Primed and ready for your Core Ultra processo

Software 44378 Published by Philipp Esselbach 0

The nginx-1.31.0 mainline release patches six critical vulnerabilities, including an HTTP/2 request injection flaw in the proxy module and buffer overflows that could crash worker processes or leak memory. Administrators gain two major new features: least_time load balancing for smarter traffic distribution across uneven backends, and native HTTP forward proxy support for outbound tunneling. The update also brings a refreshed OpenSSL library for Windows builds, ALPN compatibility for stream proxies, tighter WebDAV path validation, and a fix for HTTP/2 keepalive drops. Server operators should apply this upgrade promptly to close security gaps while unlocking better latency handling and routing flexibility.

Software 44378 Published by Philipp Esselbach 0

Ungoogled Chromium 148 strips out Google web service dependencies and background telemetry while keeping the standard browser experience completely intact. The project blocks network requests by swapping known endpoints with a fake domain suffix and removes precompiled binaries to guarantee full transparency during compilation. Most privacy enhancements stay disabled by default so users can manually enable only what they need without breaking their daily workflow or enterprise policies. The release installs cleanly through official repositories on Linux, macOS, FreeBSD, or Flatpak for a straightforward drop-in replacement that quietly stops background processes from phoning home.

Software 44378 Published by Philipp Esselbach 0

Node.js 22.22.3 delivers a necessary LTS update that prioritizes runtime stability by patching a critical crypto null pointer crash and refreshing root certificates alongside an OpenSSL upgrade. The release quietly bumps key dependencies like V8, npm, SQLite, and Acorn to improve garbage collection behavior and package resolution performance. Developers should also note targeted fixes for HTTP socket reuse races and module resolution quirks that previously caused memory leaks or dropped requests under heavy load. Teams are advised to run their full test suites against the new version during low-traffic windows before pushing it into production environments.

Qubes OS 65 Published by Philipp Esselbach 0

Qubes OS released Security Bulletin 113 to patch XSA-490, a processor flaw in AMD Zen 2 chips that could allow malicious code to escape virtual machine sandboxes and gain full kernel privileges. Only systems running that specific microarchitecture face this risk since Intel CPUs and other AMD designs remain completely unaffected. You can fix the problem by installing the updated Xen packages through the normal Qubes Update interface followed by a full system restart in dom0. People using Anti Evil Maid should remember to reseal their secret passphrase because the underlying security measurements will change once the new binaries take over.

QSB-113: AMD CPU Opcode Cache corruption (XSA-490)

Ubuntu 7088 Published by Philipp Esselbach 0

Ubuntu released a security advisory targeting several dangerous flaws in Dnsmasq across multiple active and legacy distribution branches. Malicious actors could leverage these memory handling errors and missing validation routines to crash systems or execute arbitrary code remotely. The document outlines specific package version upgrades required to patch each identified vulnerability for every supported release. Administrators can usually resolve the issues through a routine system update, though users on older releases must maintain an active Ubuntu Pro subscription to download the corrected files.

[USN-8268-1] Dnsmasq vulnerabilities

SUSE 5647 Published by Philipp Esselbach 0

SUSE recently pushed out a series of security patches that tackle numerous flaws across its enterprise and community Linux distributions. These updates hit major applications including the Linux kernel, Tor, Python modules, and Mesa graphics drivers while resolving dangerous problems like memory corruption, path traversal exploits, and denial of service attacks. System administrators should deploy the fixes quickly through zypper or YaST on any affected SUSE Linux Enterprise or openSUSE Leap installation. Delaying this rollout leaves networks exposed to the remote vulnerabilities that attackers could easily exploit.

openSUSE-SU-2026:0165-1: important: Security update for python-jupyterlab
openSUSE-SU-2026:0164-1: critical: Security update for tor
openSUSE-SU-2026:20720-1: moderate: Security update for trivy
openSUSE-SU-2026:20717-1: important: Security update for raylib
SUSE-SU-2026:1819-1: important: Security update for python-Mako
SUSE-SU-2026:1821-1: moderate: Security update for NetworkManager
SUSE-SU-2026:1827-1: important: Security update for dnsmasq
SUSE-SU-2026:1818-1: important: Security update for python39
SUSE-SU-2026:1816-1: moderate: Security update for krb5
SUSE-SU-2026:1835-1: moderate: Security update for Mesa
SUSE-SU-2026:1839-1: moderate: Security update for Mesa
SUSE-SU-2026:1840-1: important: Security update for the Linux Kernel
openSUSE-SU-2026:10748-1: moderate: jupyter-jupyterlab-4.5.7-1.1 on GA media
openSUSE-SU-2026:10752-1: moderate: OpenImageIO-3.1.13.1-2.1 on GA media
openSUSE-SU-2026:10751-1: moderate: libvinylapi3-9.0.0-1.1 on GA media
SUSE-SU-2026:1840-2: important: Security update for the Linux Kernel
SUSE-SU-2026:1842-1: important: Security update for python-Pillow

Rocky Linux 908 Published by Philipp Esselbach 0

Rocky Linux administrators should apply several new security patches that address vulnerabilities across multiple software packages. The updates target versions 8, 9, and 10 of the operating system while covering essential libraries and applications like freerdp, libtiff, glib2, libsoup3, openexr, and thunderbird. Severity levels for these fixes range from moderate to important, with detailed CVSS scores provided in the official errata documentation. System owners need to review the specific CVE listings before deploying the patches to ensure their environments remain protected against known exploits.

RLSA-2026:16019: Moderate: freerdp security update
RLSA-2026:16055: Important: libtiff security update
RLSA-2026:15953: Moderate: glib2 security update
RLSA-2026:15968: Moderate: libsoup3 security update
RLSA-2026:15969: Moderate: glib2 security update
RLSA-2026:15888: Important: openexr security update
RLSA-2026:16014: Moderate: freerdp security update
RLSA-2026:15887: Important: openexr security update
RLSA-2026:15971: Moderate: glib2 security update
RLSA-2026:15892: Important: thunderbird security update

Red Hat 9413 Published by Philipp Esselbach 0

Red Hat recently published multiple security advisories that address vulnerabilities across OpenShift Container Platform and several essential RHEL packages. System administrators should apply these fixes immediately since they target critical components like krb5, freerdp, podman, and git-lfs on versions eight through ten of the operating system. The advisory ratings range from Moderate to Important, with full severity details accessible through linked CVE references.

RHSA-2026:16155: Important: OpenShift Container Platform 4.21.15 bug fix and security update
RHSA-2026:16799: Important: krb5 security update
RHSA-2026:16814: Moderate: freerdp security update
RHSA-2026:16777: Moderate: freerdp security update
RHSA-2026:16171: Important: OpenShift Container Platform 4.16.62 bug fix and security update
RHSA-2026:16875: Important: git-lfs security update
RHSA-2026:16865: Moderate: freerdp security update
RHSA-2026:16866: Moderate: freerdp security update
RHSA-2026:14773: Important: OpenShift Container Platform 4.15.64 bug fix and security update
RHSA-2026:15087: Important: OpenShift Container Platform 4.14.65 bug fix and security update
RHSA-2026:17040: Important: podman security update
RHSA-2026:17083: Important: fence-agents security update
RHSA-2026:17075: Important: yggdrasil security update
RHSA-2026:17287: Important: podman security update
RHSA-2026:16157: Important: OpenShift Container Platform 4.20.22 bug fix and security update
RHSA-2026:17084: Important: gvisor-tap-vsock security update

Fedora Linux 9350 Published by Philipp Esselbach 0

Fedora has pushed out a wide array of security patches for versions 42, 43, and 44 targeting dozens of core packages and external tools. These updates fix critical flaws in widely used software including the Linux kernel, PHP, Django, Chromium, Firefox, Nix, Kerberos, Xen, GitPython, nano, Node.js, and SDL2_image. The patches address a messy mix of vulnerabilities that span memory corruption bugs, privilege escalation risks, denial of service vectors, and unsafe input handling. You can install all the necessary fixes by running dnf upgrade with the specific advisory codes listed in each notification.

Fedora 42 Update: kernel-6.19.14-102.fc42
Fedora 42 Update: python-django5-5.2.14-1.fc42
Fedora 42 Update: php-8.4.21-1.fc42
Fedora 42 Update: nix-2.31.5-1.fc42
Fedora 42 Update: GitPython-3.1.50-1.fc42
Fedora 42 Update: krb5-1.21.3-7.fc42
Fedora 42 Update: xen-4.19.5-2.fc42
Fedora 43 Update: kernel-headers-7.0.6-100.fc43
Fedora 43 Update: kernel-7.0.6-100.fc43
Fedora 43 Update: python-click-8.1.7-12.fc43
Fedora 43 Update: nix-2.31.5-1.fc43
Fedora 44 Update: kernel-7.0.6-200.fc44
Fedora 44 Update: kernel-headers-7.0.6-200.fc44
Fedora 44 Update: firefox-150.0.3-1.fc44
Fedora 44 Update: freerdp-3.26.0-4.fc44
Fedora 44 Update: nix-2.34.7-2.fc44
Fedora 42 Update: nodejs20-20.20.2-4.fc42
Fedora 42 Update: nano-8.3-4.fc42
Fedora 44 Update: chromium-148.0.7778.96-1.fc44
Fedora 44 Update: SDL2_image-2.8.12-1.fc44

Debian 10908 Published by Philipp Esselbach 0

Debian LTS recently issued an advisory for the nghttp2 library to patch CVE-2026-27135, which resolves a missing state validation that previously triggered assertion failures. A separate update addresses CVE-2026-30922 in pyasn1, fixing a denial of service flaw caused by uncontrolled recursion when processing deeply nested ASN.1 data. Both issues threaten system stability and require administrators to upgrade their packages immediately. You can find complete installation guidance and ongoing threat details on the official Debian security trackers.

[DLA 4581-1] nghttp2 security update
ELA-1717-1 pyasn1 security update

AlmaLinux 2562 Published by Philipp Esselbach 0

AlmaLinux recently distributed a series of security patches for versions 8 through 10. These updates target essential software components like FreeRDP, Thunderbird, Kerberos, and several graphics processing libraries across multiple operating system releases. The fixes resolve critical memory corruption flaws, privilege escalation risks, and denial of service conditions that could otherwise compromise system stability or expose sensitive data. System administrators should prioritize installing these corrections right away to prevent potential exploitation of the listed vulnerabilities.

ALSA-2026:14790: libpng security update (Moderate)
ALSA-2026:15969: glib2 security update (Moderate)
ALSA-2026:16014: freerdp security update (Moderate)
ALSA-2026:13644: corosync security update (Moderate)
ALSA-2026:14791: libpng security update (Moderate)
ALSA-2026:15892: thunderbird security update (Important)
ALSA-2026:15887: openexr security update (Important)
ALSA-2026:16875: git-lfs security update (Important)
ALSA-2026:16799: krb5 security update (Important)
ALSA-2026:16252: jq security update (Important)
ALSA-2026:16196: kernel-rt security update (Important)
ALSA-2026:16055: libtiff security update (Important)

[ Archive ]