Fedora is running a community Test Day from September 14 to 20, inviting volunteers to stress-test KDE Plasma 6.7 and report where things break. The event pairs KDE developers like Merritt and Nicolas Fella with Fedora QA veterans such as Adam Williamson, a co-branded quality push ahead of Fedora 45's final release. Plasma 6.7, shipped June 16, is notable as the last Plasma to support X11 before 6.8 goes Wayland-only, and it brings long-requested features like per-screen virtual desktops and a comeback from the Oxygen theme. If you want to participate, install Fedora 45, run the test cases, and submit results through the portal before the week ends.

Today's Linux security roundup delivers some of the year's largest browser patches, including Gentoo's 35-CVE roundup for Chrome, Edge, and Chromium alongside SUSE's 230-vulnerability chromedriver fix. The fixes warrant the most scrutiny are the Critical-rated 389-ds-base updates from both AlmaLinux and Oracle Linux, which hand attackers Directory Manager access. DNS tooling appears repeatedly across Fedora, Red Hat, and Debian as the resolver ecosystem keeps generating trouble. The rest of the batch ranges from routine openssl kernel and ffmpeg bumps to a Perl update on Rocky Linux that quietly rewrote more than two hundred downstream packages.

Greg Kroah-Hartman shipped six new Linux kernel versions, spanning the entire supported matrix from the newest 7.2.6 short-term line down to the five-year-old 5.10.270 longterm branch. Each release landed within minutes of the other, carrying only upstream bug fixes and security patches with no new features. Networking and memory-safety defects dominate the fixes, though most are local-privilege-escalation or DoS risks rather than remote code execution. Tarballs, patches, and full diffs are now available on kernel.org across the v7.x, v6.x, and v5.x directories.

Hestia Control Panel 1.10.5 launched today as a security-focused service release that hardens session integrity, closes read-only-mode bypasses, and reworks config parsing to prevent injection. The maintainer, Jaap Marcus, tagged it the fourth patch in the 1.10.x line, landing about three weeks after 1.10.4. It also ends Debian 11 support and bumps core dependencies like hestia-php to 8.5.10 and OpenSSL to 3.5.8. Admins can update via the default automatic updates or apt-get upgrade, with full changelog details on the project's GitHub page.

This week's five reviews cover iFi's redesigned NEO iDSD 3 DAC, Thrustmaster's Airbus flight-stick grip, the EPOMAKER TH65 keyboard, the Kioxia Exceria Pro G2 SSD, and Dell's Pro 5 webcam. The standout value pick is the EPOMAKER TH65 at $59.99, scoring 8.6 out of 10 for its gasket-mounted thocky feel. Not everything earns a buy recommendation: the Kioxia SSD's import pricing swings to $750 versus its expected $340, and the Dell Pro 5 webcam's $119.99 price tag asks too much for solid-but-unremarkable quality. Meanwhile, the Thrustmaster Airbus grip wobbles out of the box, making it hard to justify for everyone.

Shelly ALPM v3.1.4 shipped on September 13th, bringing a new --aur-cache flag that lets Arch users reclaim disk space by clearing built AUR package archives. The native builder received fixes for real-world PKGBUILD headaches like SOURCE_DATE_EPOCH timestamps and shared source filenames, while isolated builds now use the project's own Shelterstrap helper instead of Arch's pacstrap. Recommended installs flow through CachyOS or the AUR, and the binaries are available now on the project's GitHub release page.

The third release candidate for Linux Kernel 7.3 shipped Sunday as what Linus Torvalds calls "another fairly large rc," driven mainly by XFS and the SMB network client. Despite the filesystem headlines, drivers for sound, networking, and GPU still make up the bulk of the work. The release is packed with memory-safety fixes, many flagged by syzbot and security researchers, to defend against use-after-free and overflow bugs. 

Bazzite Linux 44.20260914 shipped to the stable channel today, capping another weekly update to Universal Blue's Fedora Atomic gaming Linux. The standout change disables Wi-Fi power saving by default on the Steam Deck to cut latency, with Gamescope jumping to 3.16.28 and Nvidia open drivers reaching 615.71.09. A handful of other fixes round out the release, including MangoHUD VRR throttling, a CEC suspend bug, and KDE 6.7.5 polish. The update also drops four packages from the base image, among them mesa-libOpenCL, over an upstream packaging issue.

Ungoogled Chromium 153.0.8010.36-1 has arrived, catching up with Google's latest Chromium base. The update expands its privacy defenses by tightening domain substitutions for new telemetry endpoints, blocking WebRTC IP leaks, and disabling Federated Identity Management alongside the ongoing Privacy Sandbox initiatives. Maintainer Ahrotahn handled the rapid commit and GPG-verified build, with dozens of patched privacy and fingerprinting protections intact. Users relying on the project should update immediately to close the security gap, especially if they depend on specific JIT toggles or extension flags that shift between builds.

Debian has released live images of its seventh point update for the Trixie stable branch, delivering a massive security sweep across 70+ packages that includes critical fixes for QEMU, glibc, and OpenSSL. The amd64 live images comes with GNOME 48, KDE Plasma 6.3, and traditional desktops like Xfce 4.20, Cinnamon 6.4.10, and MATE 1.27 alongside Firefox ESR 140 and PipeWire 1.4.2. These bootable ISOs run entirely from RAM without modifying your hard drive, making them perfect for testing new environments or performing forensics before committing to an installation. You can download the 1.9 GB to 4.2 GB variants directly from the official cdimage mirrors and verify them with the provided SHA-512 checksums before flashing a USB stick.

XanMod dropped fresh kernel builds for Debian-based Linux on September 12, updating both the rolling mainline track to 7.2.5-xanmod1 and the long-term support line to 6.18.51-xanmod1. Both packages run through LLVM software pipelining and Graysky x86_64 tuning, delivering the kind of desktop and gaming-focused performance gains that the project has built its reputation on. The upstream patch sets bring solid security hardening, NVIDIA Blackwell fixes for the open-source nouveau driver, and a default switch to Google’s BBRv3 congestion control. If you need deterministic latency, the LTS branch still ships a PREEMPT_RT variant, while mainline stays the go-to for the latest scheduler experiments and memory management rewrites.