Linux Compatible

Zen Browser 1.21.14b Lands: Firefox 153.0.4, FFmpeg 63, and Sync Bug Fixes

Software 44714 Published 2026-08-13 19:05 by Philipp Esselbach 0

Zen Browser 1.21.14b drops today, updating the Firefox fork to engine 153.0.4 and adding FFmpeg 63 for faster media decoding. The stable build finally squashes a Window Sync hang triggered by container ID mismatches and patches a dark-mode contrast bug for Live Folders.

PostgreSQL 19 Beta 3 and Critical Security Patches Released; PG 14 EOL Notice Issued

Software 44714 Published 2026-08-13 16:43 by Philipp Esselbach 0

PostgreSQL has shipped maintenance updates for every supported version, including 18.6, 17.11, 16.15, 15.19, and 14.24, to patch 30 security vulnerabilities involving heap buffer overflows and remote code execution risks. The third beta of PostgreSQL 19 is also available, bringing a unified REPACK command, SQL Property Graph query support, and temporal data handling via the FOR PORTION OF clause. Performance and optimizer enhancements in the upcoming release include automatic NOT IN to ANTI JOIN conversions, SIMD-accelerated COPY FROM operations, and a switch to LZ4 as the default TOAST compression method.

Exim 4.100-RC3 Ships With Native DMARC and Feature Freeze

Software 44714 Published 2026-08-13 13:52 by Philipp Esselbach 0

The Exim development team released 4.100-RC3 on August 13, marking the third and final release candidate before the stable major update ships. The new branch introduces native DMARC evaluation, expanded log selectors, and a musl DNS out-of-bounds read fix for containerized environments. Legacy malware scanner bridges and outdated protocol support have been removed alongside a new versioning structure that separates security patches onto a dedicated branch. Operators running mail infrastructure should test the release candidate now, with the official 4.100 tag expected within weeks.

Bottles 66.2 Releases Hours After 66.1, Patching Steam Runtime and NVK Vulkan on Linux

Software 44714 Published 2026-08-13 13:37 by Philipp Esselbach 0

Bottles 66.2 dropped less than 24 hours after version 66.1, patching six critical regressions and tightening network calls for the popular Linux Wine and Proton manager. The hotfix resolves a bottle-deletion crash for multi-drive setups, restores custom Steam Runtime launch flags, and finally handles case-sensitive DLL conflicts for the XACT audio dependency. Lead maintainer Mirko Brombin also merged patches that properly detect NVIDIA's open-source NVK Vulkan driver, move heavy network requests off the main UI thread, and revive the external executable launch workflow. The update is available now via Flatpak and cpak, keeping the 143,000-download-strong community on stable ground before the next major feature push lands.

New Hardware Reviews: Panther Lake Mini PC, QIDI Plus5, and Cases

Reviews 52715 Published 2026-08-13 07:39 by Philipp Esselbach 0

Today's hardware roundups cover the InWin Covalent and Cooler Master HAF II 500 chassis, plus a $1,959 GMKtec Evo-T2 packing Intel's Panther Lake. TechPowerUp and TweakTown break down the Logitech G Pro X2 Superstrike mouse and the D-Link F518 hotspot, while Tom's Hardware labels the QIDI Plus5 a genuine rival to Bambu Lab's 3D printers. Keep in mind that review scores often shift once firmware updates drop.

Shelly ALPM v3.0.5 Ships With a Polkit Warning Update, Signaling Post-Rewrite Stability

Software 44714 Published 2026-08-13 07:17 by Philipp Esselbach 0

Shelly ALPM v3.0.5 hit the GitHub releases today, bringing just an updated Polkit warning and a routine branch back-merge to the v3.x line. The release lands just one day after the feature-packed v3.0.4, signaling that the team behind the Zig rewrite is shifting focus from rapid-fire development to post-stabilization polish. The quiet bump sits on top of the core architecture introduced back in late July, where the project finally ditched its .NET runtime to link directly to libalpm for genuine native performance across its GTK4 UI, CLI, and TUI modes. You can grab the 6.8 MB UI bundle directly from the GitHub releases page, or sync it through the AUR if you're running a CachyOS or Arch-based install.

rsync 3.5.0 Drops 33 CVEs, Plugs Critical Symlink Race Conditions

Security 10977 Published 2026-08-13 07:08 by Philipp Esselbach 0

rsync 3.5.0 has arrived, delivering fixes for 33 CVEs across symlink race conditions, daemon protocol flaws, and authentication bypasses. The release introduces secure_relative_open(), a hardened path-resolution framework that pins directory file descriptors and blocks out-of-tree symlink hops. If you run rsync with elevated privileges or rely on it for CI/CD and cloud backups, updating immediately is non-negotiable. Backports for the 3.4.1 and 3.2.7 branches are rolling out alongside the main release this week.

AM 10.4 AppImage Manager Update: New -y Flag, Automation, and 3,388 Apps for Linux

Software 44714 Published 2026-08-13 06:46 by Philipp Esselbach 0

AM, the open-source AppImage package manager for GNU/Linux, has released version 10.4, expanding its supported app database to 3,388 entries with a major focus on headless automation. The headline update introduces a global -y flag and enhanced non-interactive installation support, making the tool far more suitable for CI/CD pipelines, container builds, and unattended deployments without requiring manual prompts. Driven by a surge in community contributions following the maintainer's reduced involvement, the release also adds useful utilities like a relocate option for preserving portable profiles, a downgrade command, and fuzzy search suggestions for typos. Unlike Flatpak or Snap, AM keeps apps running natively outside of system package managers, though users should note that the script-based database relies on community-maintained installers rather than strict sandboxes.

Python Security Updates: 3.12.14, 3.11.16, and 3.10.21 Patch tarfile Bypasses and DoS Vectors

Software 44714 Published 2026-08-13 06:39 by Philipp Esselbach 0

Python's core team has released security-only source-only updates for Python 3.10.21, 3.11.16, and 3.12.14, confirming all three versions are now in maintenance mode with no further release cadence. The updates prioritize critical path traversal bypasses in tarfile and ZIP extraction on Windows, while also blocking remote code execution vectors in webbrowser, cookie handling, and WSGI status fields. Denial-of-service protections have been strengthened against exponential complexity attacks in csv, HTML parsing, and XML modules, complemented by a bundle update to libexpat 2.8.3 for improved billion laughs and hash flooding defenses. Users should upgrade immediately, especially those processing untrusted archives or structured data, as these patches address high-severity CVEs including a tarfile link-target escape and cookie control character injection.

Yelp, node-follow-redirects, libgit2, and Linux Kernel updates for Ubuntu

Ubuntu 7181 Published 2026-08-13 06:28 by Philipp Esselbach 0

Ubuntu issued a series of security notices, addressing multiple flaws across the Yelp help browser, the node-follow-redirects module, the libgit2 library, and the Linux kernel. The patches correct weaknesses that could let attackers steal credentials via improperly stripped HTTP redirect headers, expose user data through lax content security policies in help documents, or trigger crashes and arbitrary code execution through malformed Git protocol packets. Kernel updates cover dozens of cloud, IoT, and real-time variants for Ubuntu 14.04 through 26.04 LTS, and the required system reboot combined with an ABI change means users must reinstall any third-party kernel modules they previously compiled.

[USN-8627-1] Yelp vulnerability
[USN-8632-1] follow-redirects vulnerability
[USN-8628-1] libgit2 vulnerabilities
[USN-8631-1] Linux kernel vulnerabilities
[USN-8635-1] Linux kernel (Azure) vulnerabilities
[USN-8629-1] Linux kernel vulnerabilities
[USN-8633-1] Linux kernel vulnerabilities
[USN-8636-1] Linux kernel vulnerabilities
[USN-8630-1] Linux kernel vulnerabilities
[USN-8634-1] Linux kernel vulnerabilities

Chromium Patches, Kernel Fixes, and Node.js, RPM, and OpenVPN updates for SUSE

SUSE 5736 Published 2026-08-13 06:26 by Philipp Esselbach 0

Kernel, isns-utils, fence-agents, and Core Package updates for Rocky Linux

Rocky Linux 977 Published 2026-08-13 06:24 by Philipp Esselbach 0

Firefox, Kernel, Python, and MariaDB updates for RHEL

Red Hat 9486 Published 2026-08-13 06:23 by Philipp Esselbach 0

Unbreakable Enterprise Kernel, OpenJDK, Sudo, Ruby, and GStreamer updates for Oracle Linux

Oracle Linux 6532 Published 2026-08-13 06:22 by Philipp Esselbach 0

FreeType update for Gentoo Linux

Gentoo 2532 Published 2026-08-13 06:19 by Philipp Esselbach 0

Gentoo Linux released security advisory GLSA 202608-02 to patch multiple vulnerabilities in media-libs/freetype for versions below 2.14.3. The flaws encompass an out-of-bounds read and information disclosure risk across nine CVE identifiers, with no known workaround available. Administrators must update the font engine to version 2.14.3 or later to resolve the issues. Install the fix by running emerge --sync and then emerge --ask --oneshot --verbose ">=media-libs/freetype-2.14.3".

[ GLSA 202608-02 ] FreeType: Multiple Vulnerabilities

Patches for cri-o, vaultwarden, sqlite, linux-firmware, apr-util, and libcupsfilters updates for Fedora

Fedora Linux 9449 Published 2026-08-13 06:18 by Philipp Esselbach 0

Fedora 43 and 44 received a coordinated batch of security-focused package updates. The release upgrades cri-o1.34 to version 1.34.11, vaultwarden to 1.37.1, sqlite to 3.51.2, linux-firmware to 20260810, apr-util to 1.6.5, and libcupsfilters to 2.1.1. These changes close multiple critical vulnerabilities, including arbitrary code execution flaws in sqlite FTS5, denial of service risks in vaultwarden and cri-o, and XML stack attacks in apr-util. Users can apply the patches immediately by running the standard dnf upgrade command paired with the corresponding Fedora advisory ID.

Fedora 43 Update: cri-o1.34-1.34.11-1.fc43
Fedora 43 Update: vaultwarden-1.37.1-1.fc43
Fedora 44 Update: sqlite-3.51.2-2.fc44
Fedora 44 Update: linux-firmware-20260810-1.fc44
Fedora 44 Update: apr-util-1.6.5-1.fc44
Fedora 44 Update: libcupsfilters-2.1.1-9.fc44
Fedora 44 Update: cri-o1.34-1.34.11-1.fc44
Fedora 44 Update: vaultwarden-1.37.1-1.fc44

BIND9, PHP, Django, Flatpak, and SPIP updates for Debian

Debian 11037 Published 2026-08-13 06:15 by Philipp Esselbach 0

Debian and Freexian LTS distributions released security patches addressing more than forty CVEs across BIND DNS, PHP, Django, Flatpak, and several other widely used packages. The BIND9 update backports the software from Debian 10 to stretch, which fixes thirteen CVEs but breaks binary compatibility and requires third-party applications to rebuild against the new libraries. PHP 7.0 and 7.3 patches eliminate stack exhaustion crashes in phar archives and close a SQL injection route in the psql extension, while Django updates block a denial-of-service trigger and cross-site scripting flaws in the admin interface. Additional fixes target Flatpak local privilege escalation, SPIP remote code execution, Neutron network state mutation, jq arbitrary code execution, and libgd2 malformed GIF processing.

ELA-1802-1 bind9 security update (by )
ELA-1801-1 jq security update (by )
ELA-1803-1 ca-certificates CA certificates update (by )
ELA-1802-1 bind9 security update (by )
ELA-1807-1 php7.0 security update (by )
ELA-1806-1 php7.3 security update (by )
ELA-1805-1 libgd2 security update (by )
ELA-1804-1 libconfig-inifiles-perl security update (by )
[DLA 4735-1] neutron security update
[DSA 6434-1] lemonldap-ng security update
[DSA 6432-1] flatpak security update
[DLA 4736-1] python-django security update
[DSA 6435-1] spip security update

Kernels, PostgreSQL, Firefox, and Networking Tools updates for AlmaLinux

AlmaLinux 2625 Published 2026-08-13 06:12 by Philipp Esselbach 0

Wireshark 4.6.8 Drops Record 31 Security Patches in Major Hardening Push

Software 44714 Published 2026-08-12 22:07 by Philipp Esselbach 0

Wireshark 4.6.8 is here, delivering 31 security patches that represent the largest single-release hardening effort in the tool's history. The updates focus on crashes triggered by malformed capture files, while also patching the Bluetooth stack, 5G telecom protocols, and the network-facing sharkd daemon. The Wireshark Foundation pushed the fixes alongside version 4.4.18 for long-term support users, closing memory corruption risks across dissectors for SSH, Kerberos, and various file parsers. Linux administrators should note that extcap binaries now default to /usr/libexec/wireshark/extcap, and teams relying on the tool for daily traffic analysis should update immediately to mitigate out-of-bounds read vulnerabilities.

Mesa 26.1.7 Released: Stable Branch Bugfix Drop with Driver Fixes

Software 44714 Published 2026-08-12 18:53 by Philipp Esselbach 0

Mesa 26.1.7 landed today, delivering a tight cluster of memory safety patches, compiler corrections, and driver-level workarounds to the stable 26.1.x maintenance branch. The update addresses long-standing buffer object refcounting bugs across the DRM shim, fixes float-to-int conversion artifacts in the NIR pipeline, and adds missing hardware stepping workarounds for Intel Arc and RDNA graphics. OpenCL developers also get a structural bump as Rusticl pivots to a community-maintained libclc fork verified against the official conformance suite. The maintenance branch will continue receiving stability-only patches through August 26, while feature development remains firmly locked to the newer 26.2.x track.

Shelly ALPM v3.0.4 Adds Terminal UI and Flatpak Improvements in Rapid Arch Update

Software 44714 Published 2026-08-12 18:40 by Philipp Esselbach 0

Shelly ALPM v3.0.4 shipped today, introducing the project's first dedicated terminal interface alongside a completely redesigned unified search flow for the AUR, official repositories, and Flatpak. The drop arrives just five days after v3.0.3, continuing a breakneck six-release cadence in two weeks following the July 29 Zig rewrite that completely eliminated the .NET runtime. Flatpak users get end-of-life detection, remote branch resolution, and a cleaner uninstall workflow, while polished shell completions and new CLI man pages target terminal power users who prefer direct libalpm integration. The update is live now for CachyOS via sudo pacman -S shelly and is also available through the AUR or as standalone tarballs on GitHub.

Zed Editor v1.15.0 Adds Self-Hosted AI Predictions, Git Diff Baseline, and Wayland Support

Software 44714 Published 2026-08-12 18:10 by Philipp Esselbach 0

Zed Editor v1.15.0 ships with self-hosted sweep-next-edit model support for private AI inference, a new git.diff_base setting to toggle diff baselines against default branches, and Wayland drag-and-drop for Linux. The update brings linked editing for custom JSX/TSX elements, Emmet completions in arrow functions, and 11 contributions from the Zed Guild community. Copilot users must re-authenticate as Zed decouples session management for chat and edit predictions to reduce credential blast radius. The release underscores Zed's continued sprint toward production parity, combining tighter Git workflows with expanded private inference options.

Bazaar 0.9.3 Released: Flatpak App Store Maintenance Update Includes Daemon Fixes and Accessibility Improvements

Software 44714 Published 2026-08-12 18:01 by Philipp Esselbach 0

Bazaar 0.9.3 is a maintenance update for the Flatpak-first app store, arriving just seven days after the feature-heavy 0.9.2 release to stabilize the newly introduced background daemon. The update brings Flathub's curated topic sections to the home page for improved discovery, alongside significant accessibility improvements led by contributor Alexander Vanhee, such as fixing screen reader button double-reading. Released on August 12, 2026, this rapid iteration addresses post-launch bugs in the auto-update system and autostart services, reflecting the project's active development cycle. Users can upgrade immediately via Flathub, GitHub Actions, or Debian and Arch repositories, keeping their alternative to GNOME Software and KDE Discover up to date.

How to Install and Configure Fail2Ban on Debian 13 Trixie

Guides 11794 Published 2026-08-12 17:41 by Philipp Esselbach 0

Fail2Ban is an open-source intrusion prevention daemon that scans service logs for attack patterns and automatically blocks offending IPs through firewall rules. Debian 13 Trixie modernizes the package by defaulting to the systemd journal backend, switching to nftables for ban actions, and requiring Python 3.12. Administrators configure it through a layered override system of *.conf, *.local, and jail.d/ drop-in files, replacing legacy log paths with journalmatch directives. Production deployments combine targeted SSH, web, and mail jails with a long-term recidive jail, all validated through fail2ban-regex and managed via the daemon's client/server architecture.

Mango Wayland Compositor Hits 0.16.0 with Native Touch Support and XWayland Fixes

Software 44714 Published 2026-08-12 14:29 by Philipp Esselbach 0

Mango Wayland Compositor 0.16.0 has been released, adding native touch input and improved XWayland scaling to its dwl-inspired design. Key features include real-time overview updates, xdg_activation_v1 support to stop focus stealing, and a force_render rule for smoother animations. The update also addresses critical stability issues, fixing crashes after system suspend and increasing buffer limits for XWayland clients. Available for Arch, NixOS, and other distributions, the project now sits at roughly 3,456 stars and continues to grow its community ecosystem.

Visual Studio Code 1.133 Released: Major Agent Host Architecture Shift and Open AI Protocol

Software 44714 Published 2026-08-12 14:21 by Philipp Esselbach 0

Visual Studio Code 1.133 introduces a dedicated Agent Host process that decouples AI agents from the editor, enabling shared multi-window sessions and remote execution. Microsoft pairs this architectural shift with an open Agent Host Protocol (AHP) spec, positioning the communication layer alongside LSP and DAP to support extensible third-party tooling. The update also delivers developer-friendly features like mixed Anthropic and Copilot model switching in Claude sessions, an experimental toggle to skip GitHub sign-in, and auto-reloading HTML in the integrated browser. The update is now rolling out to Windows, macOS, and Linux, with early testing available through the Insiders build.

Manjaro Linux 26.1.0 Drops on SourceForge, Ships Linux 7.1 as Default Kernel

Manjaro Linux 178 Published 2026-08-12 14:15 by Philipp Esselbach 0

Manjaro Linux 26.1.0 is now live on SourceForge, bringing Linux 7.1 to the default kernel lineup. The release drops all 5.x kernel options entirely, meaning hardware from the mid-2010s will no longer be supported. You can grab the new ISOs for KDE Plasma, GNOME, or Xfce today, though the official download page still lists the previous 26.0.4 build. This shift marks a major step forward for the rolling distribution, trading legacy compatibility for modern scheduler and memory management improvements.

Bottles 66.1 Emergency Patch Fixes Flatpak Paths and UMU Crashes on Linux

Software 44714 Published 2026-08-12 14:05 by Philipp Esselbach 0

Open-source Linux gaming tool Bottles released version 66.1, just hours after its major v66.0 launch. The initial release shipped with two critical regressions that broke game launching inside Flatpak sandboxes and crashed the custom UMU prefix picker. Lead developer Mirko Brombin addressed both issues with a two-commit emergency patch that adjusts Flatpak path resolution and corrects a mismatched method reference in the UMU integration code. The rapid sub-two-hour turnaround highlights both the responsiveness of the single-maintainer project and the ongoing friction of shipping major gaming features to a sandboxed Linux ecosystem.

LACT 0.10.0 Adds Nvidia Overclocking and Blackwell Sensor Support to Linux GPU Tool

Software 44714 Published 2026-08-12 13:55 by Philipp Esselbach 0

LACT 0.10.0 has been released, delivering major Nvidia GPU support to the open-source Linux controller tool with new overclocking features including PowerMizer Mode and a Voltage Boost slider comparable to MSI Afterburner. The update brings first-class monitoring for NVIDIA's Blackwell architecture, resolving bogus temperature readings and enabling per-chip memory temperature sensors for GDDR6x and GDDR7 modules on RTX 50-series cards. Usability receives a boost through an interactive setup wizard, Polkit integration for standard authentication, and a new CLI command allowing GPUs to be detached and reattached for virtual machine passthrough workflows. Now available on major Linux distributions and Flathub, this release significantly expands LACT from an AMD-focused utility into a comprehensive multi-vendor GPU management application.

Today's Reviews: AIO Coolers Get Screens, Razer Naga V3 Pro Hits 23 Buttons, and Arctic Fans Embrace Daisy-Chain

Reviews 52715 Published 2026-08-12 08:14 by Philipp Esselbach 0

AIO coolers are fully embracing personality panels and daisy-chain ecosystems, with MSI’s MPG CORELIQUID P22 360 W, be quiet!’s Light Loop IO LCD 360, and Arctic’s Bionix P12 and P14 A-RGB fans all landing in this week's roundup. Razer upped the customization ante with the 23-button Naga V3 Pro, positioning it as the default peripheral for MMO and RTS players who actually want to map out their loadouts. The budget crowd keeps winning, as the Valkyrie B12 ARGB, EPOMAKER GX1 headset, and MSI’s display-equipped AIO all deliver solid performance without the usual flagship tax. While DeepCool’s woodgrain AK620 G2 and Id-Cooling’s visual "hybrid" design try to shake up the thermal market, premium acoustics and clean cable management.

GNOME Shell Unveils Long-Term Design Vision Roadmap With Search Overhaul and Mosaic Tiling

GNOME 3729 Published 2026-08-12 07:51 by Philipp Esselbach 0

The GNOME Shell development team has published a comprehensive roadmap outlining nine major design improvements for the desktop environment, ranging from a spatial search overlay to mobile-inspired quick settings. The most immediate update is a new search interface that spawns results as an overlay from the search field, a change currently in progress via Merge Request #4307 and expected to ship in GNOME 51 this fall. While the design team emphasizes that developer capacity remains the primary bottleneck, they plan to use community extensions like MosaicWM to prototype complex tiling and window management concepts before integrating them into the core Mutter compositor. Other proposals, including a visual login grid, dynamic battery icons, and a transparent panel system, are still in early stages and will likely span multiple release cycles as the desktop focuses on incremental refinement rather than structural overhaul.

QEMU 11.1.0 Released: NVMe Hotplug, sp-mem Emulation, and 12+ CVE Fixes

Software 44714 Published 2026-08-12 07:22 by Philipp Esselbach 0

QEMU 11.1.0 has officially landed, wrapping up roughly 3,500 commits and over 111,000 lines of code from 285 contributors. The release is squarely focused on hardening host-mode QEMU, patching at least 12 assigned CVEs across virtio, 9pfs, the dmg parser, and NVMe subsystems. Beyond the security work, you can now hotplug NVMe namespaces at runtime, enable the new sp-mem device for Intel accelerator workloads, and dynamically manage QMP monitors without restarting the daemon. While the new RISC-V IOMMU and VT100 terminal emulator round out the feature set, production deployments should prioritize this update immediately to close out-of-bounds access and memory exhaustion vulnerabilities.

Visual Studio Code 1.132.1 Ships as Security Patch, Locking Down 7 Agent and Electron Flaws

Software 44714 Published 2026-08-12 07:08 by Philipp Esselbach 0

Microsoft released Visual Studio Code 1.132.1 on Tuesday to address seven security vulnerabilities across the Chat, Terminal, Electron, and network subsystems. The patch arrives just six days after the feature-rich 1.132 release, which introduced a major architectural shift via the new Agent Host Protocol. Critical remote code execution flaws were patched in the integrated browser and web URL payloads, while four additional fixes target the expanding AI agent attack surface. Users should force a check for updates immediately to secure their development environment.

Bottles 66.0 Release Cuts Out Wine Friction With Native UMU And Adaptive Launch

Software 44714 Published 2026-08-12 07:00 by Philipp Esselbach 0

Bottles 66.0 drops on Linux desktops with native UMU integration that finally removes the need for external game launchers and separate Wine scripts. The update swaps in ProtoSoda as the default runtime for UMU launches and adds an adaptive launch feature that auto-tunes performance parameters based on the detected application. A new experimental cpak package format offers a lightweight, self-contained alternative to Flatpak without breaking existing sandboxed installations. Flatpak users get quiet but important fixes for NVK detection, SOCKS proxy downloads, and Proton 11 compatibility alongside cleaner onboarding flows and official runner branding.

Liquorix Linux Kernel 7.1-11 Adds a Single Stability Patch for Debian, Ubuntu, and Arch

Debian 11037 Ubuntu 7181 Arch Linux 989 Published 2026-08-12 06:53 by Philipp Esselbach 0

Liquorix Kernel 7.1-11 drops a focused stability fix that hardens memory protection in the cgroup/dmem and drm/ttm subsystems to prevent race conditions during high-contention scenarios. The update builds on upstream Linux 7.1.8 and applies a single defensive patch to the scheduler and GPU buffer management paths, which helps gamers and video editors avoid sudden freezes or kernel panics while streaming or rendering. Debian and Ubuntu users can grab the package through the official PPA via a one-line install script, while Arch Linux builders pull the linux-lqx package straight from the AUR without relying on third-party wrapper tools.

PHP 8.4.25 and 8.5.10 Release Candidates Ship With Stack Hardening

Software 44714 Published 2026-08-12 06:41 by Philipp Esselbach 0

The PHP project released PHP 8.4.25 RC1 and PHP 8.5.10 RC1 for testing, introducing substantial security hardening across both active branches. The patch sets focus heavily on preventing stack overflows in recursive functions like array_walk_recursive() and DOM operations, while also resolving critical use-after-free vulnerabilities in core extensions. Additional fixes address JIT deoptimizer register corruption, session heap corruption in mod_mm, and various edge cases in PDO_PGSQL, PCRE, and Reflection that previously caused silent memory issues.

Bind, Erlang26, Python, and Chromium updates for SUSE

SUSE 5736 Published 2026-08-12 06:31 by Philipp Esselbach 0

Expats and OpenSSH 10.5p1 updates for Slackware

Slackware 1285 Published 2026-08-12 06:29 by Philipp Esselbach 0

The Slackware Linux Security Team released updated packages for Slackware 15.0 and -current to patch known vulnerabilities in the expat XML parser and OpenSSH. The expat refresh resolves CVE-2026-72522 by correcting an out-of-bounds read that causes an infinite loop when the parser processes low Unicode surrogates. The OpenSSH upgrade pushes the software to version 10.5p1, which ships with several security hardening patches and routine bug fixes. Users can download the new builds from the official Slackware FTP mirrors and apply them with the upgradepkg command before restarting the sshd daemon.

expat (SSA:2026-223-01)
openssh (SSA:2026-223-02)

Libarchive, kernel, vim, nodejs-nodemon, and perl-DBI updates for Rocky Linux

Rocky Linux 977 Published 2026-08-12 06:27 by Philipp Esselbach 0

Rocky Linux has released a collection of security errata targeting Rocky Linux versions 8, 9, and 10, addressing vulnerabilities across key system packages. Important severity patches now include vim updates for all three supported releases, plus fixes for nodejs-nodemon on Rocky Linux 10 and perl-DBI on Rocky Linux 8. Moderate updates resolve issues within the kernel and kernel-rt packages on Rocky Linux 8, while libarchive receives security corrections for both Rocky Linux 9 and Rocky Linux 10.

RLSA-2026:52674: Moderate: libarchive security update
RLBA-2022:3897: new packages: libarchive
RLSA-2026:52761: Moderate: kernel-rt security update
RLSA-2026:52772: Important: perl-DBI:1.641 security update
RLSA-2026:52765: Moderate: kernel security update
RLSA-2026:52841: Important: nodejs-nodemon security update
RLSA-2026:38509: Important: vim security update
RLSA-2026:52675: Moderate: libarchive security update
RLSA-2026:38511: Important: vim security update
RLSA-2026:38510: Important: vim security update

Thunderbird, Kernel, OpenShift, and JBoss updates for RHEL

Red Hat 9486 Published 2026-08-12 06:25 by Philipp Esselbach 0

ClamAV, libidn, and Domoticz updates for Fedora

Fedora Linux 9449 Published 2026-08-12 06:18 by Philipp Esselbach 0

Fedora published security updates for versions 43 and 44 on August 12, 2026, addressing critical vulnerabilities in the ClamAV antivirus toolkit, the libidn internationalized domain name library, and the Domoticz home automation system. The ClamAV updates to version 1.4.6 resolve multiple denial-of-service risks stemming from crafted InstallShield, 7z, PESpin, FSG, and DMG files, alongside an error handling flaw in the HTML CSS module related to UTF-8 string splitting. The libidn release fixes a CVE that allows out-of-bounds reads within the ToUnicode APIs, while the Domoticz version 2026.3 update patches significant security weaknesses in its web server and API infrastructure.

Fedora 43 Update: clamav-1.4.6-1.fc43
Fedora 43 Update: libidn-1.44-1.fc43
Fedora 44 Update: clamav-1.4.6-1.fc44
Fedora 44 Update: libidn-1.44-1.fc44
Fedora 44 Update: domoticz-2026.3-1.fc44

NSS, Postfix, PHP 7.4/8.2, OpenJDK 25, and libgd2 updates for Debian

Debian 11037 Published 2026-08-12 06:17 by Philipp Esselbach 0

Debian has released six security patches released to address critical flaws across NSS, Postfix, PHP 7.4, PHP 8.2, OpenJDK 25, and libgd2. These updates resolve CVEs that enable arbitrary code execution through malformed certificates, SQL injection via backslash escaping errors, denial of service from unbounded recursion, and invalid certificate validation in Java archives. The advisory provides exact version numbers for Debian Stretch through Trixie, ensuring each affected package receives a targeted version bump. Users should deploy these patches through their standard package managers to eliminate the identified vulnerabilities across their respective operating systems.

ELA-1800-1 nss security update (by )
[DSA 6430-1] postfix security update
[DLA 4733-1] php7.4 security update
[DLA 4732-1] php8.2 security update
[DSA 6431-1] openjdk-25 security update
[DLA 4731-1] libgd2 security update

Windows

Linux

macOS

Community