Ungoogled Chromium 153.0.8010.36-1 has arrived, catching up with Google's latest Chromium base. The update expands its privacy defenses by tightening domain substitutions for new telemetry endpoints, blocking WebRTC IP leaks, and disabling Federated Identity Management alongside the ongoing Privacy Sandbox initiatives. Maintainer Ahrotahn handled the rapid commit and GPG-verified build, with dozens of patched privacy and fingerprinting protections intact. Users relying on the project should update immediately to close the security gap, especially if they depend on specific JIT toggles or extension flags that shift between builds.

Debian has released live images of its seventh point update for the Trixie stable branch, delivering a massive security sweep across 70+ packages that includes critical fixes for QEMU, glibc, and OpenSSL. The amd64 live images comes with GNOME 48, KDE Plasma 6.3, and traditional desktops like Xfce 4.20, Cinnamon 6.4.10, and MATE 1.27 alongside Firefox ESR 140 and PipeWire 1.4.2. These bootable ISOs run entirely from RAM without modifying your hard drive, making them perfect for testing new environments or performing forensics before committing to an installation. You can download the 1.9 GB to 4.2 GB variants directly from the official cdimage mirrors and verify them with the provided SHA-512 checksums before flashing a USB stick.

XanMod dropped fresh kernel builds for Debian-based Linux on September 12, updating both the rolling mainline track to 7.2.5-xanmod1 and the long-term support line to 6.18.51-xanmod1. Both packages run through LLVM software pipelining and Graysky x86_64 tuning, delivering the kind of desktop and gaming-focused performance gains that the project has built its reputation on. The upstream patch sets bring solid security hardening, NVIDIA Blackwell fixes for the open-source nouveau driver, and a default switch to Google’s BBRv3 congestion control. If you need deterministic latency, the LTS branch still ships a PREEMPT_RT variant, while mainline stays the go-to for the latest scheduler experiments and memory management rewrites.

Zen Browser 1.22.1b has landed, bringing cross-device sync for custom workspaces and shareable links for Spaces, folders, and split views to the stable channel. Maintainer mr-cheffy has released the update, riding on Firefox 155.0 and delivering targeted performance tweaks that smooth out scrolling and cut battery drain during video playback. The new shareable links work across all browsers, turning Zen's tab organization into a genuine collaboration tool for teams and researchers.

MangoWM 0.17.0 has officially landed as a milestone release, marking the completion of the Wayland compositor's original feature roadmap. Built on dwl and wlroots, the update brings polish to existing tools like scratchpad animations, dwindle layout improvements, and a toggleable floating workspace while consolidating legacy input directives under a unified devicerule system. With the core feature set now locked down, maintainers confirm that future development will shift entirely toward bug fixes, performance refinements, and long-term stability. 

Debian GNU/Linux 13.7 "trixie" launched today, as a security-focused point release delivering 60 advisories across 47 packages. The update aggressively targets critical infrastructure, including 20+ CVEs for QEMU's secure boot bypass, 19 for ImageMagick, and 17 for wolfssl. A foundational glibc overhaul triggers a massive rebuild cascade affecting core utilities like bash and busybox, while the installer kernel advances to 6.12.107+deb13 with hardened EFI secure boot chains. Users can immediately apply the patches via apt full-upgrade, with new official installation images arriving shortly.

Canonical has pulled the Ubuntu 24.04.5 desktop ISO for AMD64 architectures after discovering a critical bug that crashes the installer when users select the "Extended" install option. The error originates from vestigial references to TPMFDE in livecd-rootfs and subiquity, which trigger unmet dependency conflicts that prevent installation from completing. Only the AMD64 desktop image is impacted; Arm64 builds, Server editions, and community flavors remain available and functional. Canonical has already merged fixes for both affected packages and expects to republish the corrected desktop image by early next week.

Major Linux distributions including AlmaLinux, Debian, Fedora, RHEL, Rocky, and SUSE released synchronized security updates, targeting high-risk packages like chromium, SPIP, vim, and the Linux kernel. The batch contains numerous Important-severity advisories alongside a critical chromium patch addressing 38 memory corruption and authorization flaws, plus unauthenticated remote code execution holes in Debian's SPIP and recurring heap overflows in vim. Vendors across the ecosystem explicitly recommend applying these patches immediately rather than waiting for scheduled maintenance windows, as unpatched versions are already being actively exploited in the wild.

Cooler Master's MasterFan A140 FC secured a Cybenetics Platinum rating for 164.4 CFM airflow, though reviewers flagged a confusing discrepancy between the spec sheet and the fan's printed amperage label. Razer debuted the Reclusa X Mini 65% at $49.99, delivering hot-swap support and Gen-3 Orange switches in a budget-friendly board that Windows Central praised as the start of a new enthusiast family. Thermalright's $91 TR-KG750 power supply undercuts nearly every name-brand 750 W Gold unit, but Tom's Hardware warns that "acceptable rather than good" regulation makes it a gamble for builders who prioritize silence or verified efficiency. Finally, AVerMedia's DUALCAM PW313D earned 95% for its unique dual-camera design at $149.99, filling a niche for streamers needing two angles without the cost of a full multi-camera rig.

GOverlay 1.9.2 delivering a critical fix for Gamescope compatibility just hours after the massive 1.9.1 feature release. The update targets a regression where the overlay's wrapper behavior could disrupt active sessions on Steam Deck and KDE Plasma Gaming Mode, ensuring stability for handheld users. This rapid turnaround highlights the project's active development cycle, with 13 commits already queued following the tag and a feature-heavy 1.9.1 update that introduced Lossless Scaling and frame generation support. Users can grab the patch via Flatpak, AppImage, or official repositories, as the overlay continues to consolidate Linux gaming performance tools into a unified interface.

YServer 1.5.1 shipped yesterday, delivering four critical bug fixes for the Rust-based X11 display server just two days after its major 1.5.0 update. The patch resolves a DRI3 buffer layout lie that scrambled Chrome's hardware-accelerated AV1 video, corrects a paint path bug that left Java text completely invisible, and stops phantom window drags in OpenBox alongside blank screens in KDE. Maintainer Jos Dehaes is driving the project using Anthropic's 1-million-token Claude model, applying AI-assisted verification to close gaps in Xorg parity without inheriting legacy C baggage. With binary packages ready for Arch, Fedora, Debian, and Alpine, the release proves the modern Rust display server is finally stable enough for daily desktop use.