Debian and Ubuntu users pulling from DEB.SURY.ORG received a coordinated batch of PHP updates across all active branches, led by PHP 8.4.24 and the development release 8.5.9. The July 30 patch cycle addresses high-severity vulnerabilities including a BCMath out-of-bounds write and a PostgreSQL SQL injection via pg_query(), alongside significant opcache stability fixes for the JIT. This three-week gap from the previous release indicates an emergency response to newly disclosed critical CVEs, prompting SURY to push security-only updates to both current stable and end-of-life approaching branches. Operators should upgrade immediately via apt-get update and verify GPG signatures, though 8.5 users are advised to test carefully due to the heavy changes to the tracing JIT and default OpCache behavior.

HestiaCP 1.10-alpha has landed on the beta apt server, bringing official support for Debian 13 and Ubuntu 26.04 to the open-source control panel. The release also delivers a major behind-the-scenes overhaul with a QEMU-driven build pipeline that finally enables ARM64 packages to compile directly from standard x86-64 hardware. While the installer scripts now recognize the new codenames, the team is clear that this is strictly a testing channel, so you should keep it off production boxes until the final version ships.

Node.js v24.19.0 and v26.6.0 landed on August 3, 2026, delivering security and performance updates to the LTS and Current branches. The v26 release restructures the internal crypto module into three distinct backends and overhauls streams performance with ring buffers and reduced allocations. v24.19.0 LTS gains blockList release candidate status, stable stream.compose, and TLS improvements including certificate compression and negotiated group reporting. The new versions also introduce enhanced test runner logging, FFI event loop awareness, and hardware-accelerated crypto for RISC-V platforms.

NVIDIA has released driver version 610.57.04 for Linux, launching as the first point release in its new R610 feature branch alongside the quietly patched 595.91.07 stable build. The update brings full support for the GeForce RTX 50 series, patches rendering corruption and crashes in over twenty popular titles, and resolves lingering Vulkan semaphore and X11 modeset display bugs. Community feedback highlights a mix of smooth Turing-era driver installations and persistent variable refresh rate friction on Wayland, with synthetic benchmarks still catching up to real-world stability. Users can grab the ~442 MB installer directly from NVIDIA’s servers, where it supports DKMS, RPM, and deb package formats out of the box.

Greg Kroah-Hartman and Sasha Levin delivered stable point updates for three active LTS kernels on August 3, 2026, introducing v6.18.42, v6.12.101, and v6.6.148 to the stable queue. These builds prioritize security and stability, packing critical patches for ksmbd ACL validation, dm-verity buffer overflows, and BPF memory safety issues across all tracks. Driver maintainers focused heavily on reliability, notably converting BUG_ON() calls to WARN_ON() in the AMDGPU subsystem from gfx8 to gfx12 and backporting a major 1,900-line refactor of the DRM buddy allocator. With the mainline kernel advancing toward v7.2-rc6, these updates ensure existing LTS deployments continue receiving vital fixes well past December 2027.

Neowin reports that the GEEKOM IT13 Max mini PC handles everyday computing tasks efficiently thanks to its $735 price point, 24GB of DDR5 memory, and extensive port selection. Hardware Busters highlights the Cooler Master V8 ACE 3DHP as a renewed take on the brand's classic cooling line, featuring a hybrid thermal architecture designed for improved heat dissipation. Club386 notes that the iiyama G-Master GOB2701QSC-B1 delivers strong OLED gaming performance with a tandem panel design that keeps costs reasonable for gamers. IgorsLAB finds that the Creality K2 Pro Combo produces large multi-material prints successfully, though users may notice minor ghosting artifacts and inconsistent chamber heating during operation.

Computers: GEEKOM IT13 Max mini PC review: Tricked out with 24GB of DDR5 memory at just $735
Cooling: Cooler Master V8 ACE 3DHP CPU Cooler Review
Displays: iiyama G-Master GOB2701QSC-B1 review: excellent OLED gaming at an appealing price
Printers: Creality K2 Pro Combo review: 3D printer with 300 mm

This week brought a massive wave of Linux security advisories with critical patches targeting the Linux kernel, glibc, OpenSSH, Node.js, and OpenSSL. Debian, Red Hat, Fedora, and Ubuntu alone pushed dozens of updates for infrastructure staples like Samba, Unbound, and Chromium, while Qubes OS addressed four specific Xen vulnerabilities that could allow malicious VMs to escape isolation. Beyond the standard patching cycle, Ubuntu rolled out specialized cloud kernel updates for Azure, AWS, and Oracle environments. With nearly identical CVEs surfacing across multiple distros, system administrators should prioritize OpenSSH, glibc, Node.js, and Chromium first, then plan dedicated maintenance windows to handle the heavy restart volume without breaking production.