2026-07-26
Auto-Cpufreq 3.1.0 is now available, bringing long-overdue GTK interface parity to its Linux CPU power optimizer. The update introduces a live monitor mode, native Bluetooth boot toggles, and dynamic conservation mode scanning across IdeaPad and Legion hardware. Twelve targeted bug fixes round out the release, addressing security gaps, NVIDIA GPU wake-ups, and missing sysfs fallbacks. You can grab the new build via the AUR, NixOS flake, or Gentoo GURU, with the full changelog posted on GitHub.
Linux distributions released a wave of mass security patches this week, hitting core infrastructure packages like glibc, the Linux kernel, WebKitGTK, and .NET 8 through 10 to close active exploitation pathways. Enterprise admins on RHEL-family systems should prioritize the new advisories for OpenShift, SSSD, and the real-time kernel, while Fedora and Ubuntu users need to apply the latest Chromium, Firefox, and Python 3.14 hardening immediately. With high-severity flaws like CVE-2026-46323 and widespread memory corruption bugs targeting production workloads, delaying these updates is effectively leaving enterprise networks exposed to automated scanning. Running your package manager this week is the only safe move before your maintenance windows close.
XanMod has released updated builds for its Mainline and LTS kernel branches, bringing the 7.1.5 and 6.18.40 upstream releases to Debian-based systems. The builds layer in LLVM ThinLTO compilation, Google BBRv3 congestion control, Cloudflare TCP collapse processing, and the AMD 3D V-Cache optimizer. Upstream security work takes center stage, closing critical ksmbd SMB server vulnerabilities, NTFS bounds-checking gaps, and a long-standing POSIX CPU timer use-after-free. Users can install via APT using psABI-matched packages, though NVIDIA DKMS driver compatibility should be verified before switching branches.
Fedora released a batch of security patches on July 26, 2026, targeting both Fedora 43 and Fedora 44 distributions. The advisories address multiple critical vulnerabilities across core applications like Firefox, the Moby container engine, xrdp remote desktop server, Libreswan VPN daemon, PAM authentication modules, and WebKitGTK rendering libraries. Attackers could exploit these flaws to trigger denial-of-service crashes, bypass authentication through timing side-channels, or leak sensitive data via buffer overflows and unvalidated input parsing.
Fedora 43 Update: firefox-153.0-3.fc43
Fedora 43 Update: google-osconfig-agent-20260717.00-1.fc43
Fedora 43 Update: moby-engine-29.6.2-1.fc43
Fedora 43 Update: xrdp-0.10.6.1-3.fc43
Fedora 43 Update: libreswan-5.3.2-2.fc43
Fedora 43 Update: webkitgtk-2.52.5-1.fc43
Fedora 43 Update: python-idna-3.18-1.fc43
Fedora 43 Update: p11-kit-0.26.4-1.fc43
Fedora 43 Update: pam-1.7.1-5.fc43
Fedora 44 Update: GitPython-3.1.55-1.fc44
Fedora 44 Update: google-osconfig-agent-20260717.00-1.fc44
Fedora 44 Update: xrdp-0.10.6.1-3.fc44
Fedora 44 Update: moby-engine-29.6.2-1.fc44
AlmaLinux released two kernel errata: an important security update for AlmaLinux 10 and a bugfix advisory for AlmaLinux 9. The AlmaLinux 10 patch addresses CVE-2026-46323, which resolves a use-after-free vulnerability in the net/gro subsystem caused by improper handling of zerocopy skbs. The AlmaLinux 9 advisory fixes data corruption issues with XFS reflink operations in version almalinux-9.8.z, resolving JIRA issue AlmaLinux-193937.
ALSA-2026:44270: kernel security update (Important)
ALBA-2026:39332: kernel bug fix and enhancement update (None)
2026-07-25
GloriousEggroll has published GE-Proton11.3, a rapid-response hotfix for the popular Linux gaming compatibility layer that lands just hours after the massive 11.2 release. The drop contains three targeted patches, including a fix for a wine-wayland virtual device double-input bug, an ARM64 compilation break in the wineopenxr patch, and a second ARM64 failure from x86-only NVIDIA libraries. Those two ARM64-focused fixes signal that the project's build pipeline is actively prioritizing Apple Silicon and Linux ARM support alongside traditional x86_64 desktops. Users can grab the verified tarballs from the GitHub releases page and drop them into their Steam compatibility tools folder or feed them to frontends like Heroic and Lutris.
Zen Browser 1.21.9b has shipped, built on Firefox 153.0 and featuring HDR video playback for Windows, native multi-PDF merging, and EU QWAC/eIDAS compliance for enterprise authentication. The release inherits Mozilla’s massive MFSA2026-68 security advisory, patching 44 CVEs including critical sandbox escapes and use-after-free vulnerabilities. Beyond the underlying security sweep, users will also notice refined container management, Globe-F keyboard support on macOS, and fixes for Space Routing and essential menu friction. The build is available now across Windows, macOS, and Linux, offering a low-friction upgrade for those relying on the productivity-focused Firefox fork.
Tom's Hardware tested the Geekom A9 Max mini PC with Gorgon Point silicon inside a sub-liter case alongside a battery-focused Dell 14S laptop that trades XPS-level features for over twenty hours of runtime. The UPERFECT BE173BU portable display delivers sharp 4K productivity visuals but struggles with input lag during gaming, while the FlexiSpot E7 Plus standing desk prioritizes rigid stability over a compact footprint. Sharkoon released three wireless gaming mice across different price tiers, with the SGM70W earning top marks as the best balanced option, and Endorfy launched the Solum 2 USB microphone featuring metal construction without charging a premium for basic sound quality. The Gigabyte Z890 Aorus Elite Duo X supports ultra-high capacity DDR5 memory at speeds up to 8000 MT/s while staying under three hundred dollars, and the Asustor Lockerstor 2 Gen2+ NAS pairs dual five gigabit Ethernet ports with four NVMe slots for expandable home server storage.
Computers: Geekom A9 Max 2026 review: Gorgon Point in a compact Mini PC, Dell 14S review: High-class design and 20+ hour battery life
Displays: UPERFECT BE173BU Review - Sharp Picture, Blurred Gaming Ambitions
Furniture: FlexiSpot E7 Plus review: a four-legged standing desk built for serious stability
Input: Sharkoon SGM25W, SGM70W and FIREGLIDER One Review - From All-Rounder to High-End Gaming Mouse
Microphones: Endorfy Solum 2 review: a great-quality USB microphone without a hefty premium
Motherboards: Gigabyte Z890 Aorus Elite Duo X Review
Storage: Asustor Lockerstor 2 Gen2+ AS6702T v2 Review
Linux Kernel 6.12.98 is now available, signed off today by Greg Kroah-Hartman with a changelog barely hitting 1.3 KB. The release contains one backported patch from Wind River fixing a file descriptor leak in ext4's EXT4_IOC_MOVE_EXT ioctl, which can cause EMFILE errors during failed cross-filesystem move extent operations. If you're running the 6.12.y longterm branch, this is the minimal update to apply, though the impact is limited to edge cases involving backup or migration tools triggering the specific validation path. The 6.12.y branch remains supported through December 2028, built on the November 2024 mainline release that introduced EEVDF and PREEMPT_RT support.
KDE's latest development sprint for Plasma 6.8 has introduced a significant security enhancement that automatically locks and unlocks desktop sessions when Remote Desktop clients connect or disconnect. Long-time power users will appreciate the new kscreenctl command-line tool, which serves as a robust replacement for the deprecated kscreen-doctor utility and supports script-based display configuration. The Plasma Login Manager now remembers the last-used session type per user account, eliminating the need to manually select between Plasma, X11, or Wayland on shared machines. Additional usability updates include improved multi-screen task switching that targets the active monitor, grouped transaction displays in Discover, and enhanced language search in the initial setup wizard.
OBS Studio 32.2.1 landed on July 24, 2026, delivering a targeted hotfix that resolves a Windows game capture crash triggered by lingering hook DLLs after an update. Linux users can skip the DLL drama. You can grab the patched release straight from obsproject.com.
Wine Staging 11.14 has landed, tracking upstream Wine 11.14 and introducing a significant rebased vkd3d-latest patchset that adds descriptor heap support for World of Warcraft Classic and Retail. The release also removes the user32-rawinput-mouse patchset, as upstream Wine now handles absolute-mouse input natively through commit 08f7b746b00c07312a70d2f978d86bc80e6df88a. Alistair Leslie-Hughes tagged the build on July 25, 2026, which rounds out the release with 70+ patch sets and well over 500 individual patches maintained by volunteers. With Wine 12.0 stable slated for January 2027, users looking for improved shader model 6.9 support and fixes for titles like Sea of Thieves should upgrade immediately.
Wine 11.14 landed on July 24, 2026, bringing FreeBSD into the 32-bit Windows era, extending DirectSound to full 7.1 surround, and adding AES-GMAC support for modern TLS 1.3 cryptography. It's the third research release in the 11.x series, arriving exactly two weeks after 11.13 as the project maintains a strict biweekly cadence under Alexandre Julliard. Contributors also delivered a massive msxml3 overhaul, native WoW64 support on FreeBSD, and patchwork fixes for Age of Empires, Word 2016, and Falcon BMS across 21 notable bug reports. The source tarball is available for download now, and with the 14-day release cycle holding firm, Wine 11.15 is expected to land around August 7.
GloriousEggroll has published GE-Proton11-2, a targeted stabilization patch arriving weeks after the extensive media rework in version 11-1. The update introduces wired USB haptic feedback for DualShock 4, DualSense, and DualSense Edge controllers, routing audio through PulseAudio for improved trigger resistance and vibration support. Major game fixes include upstream Valve patches for Marvel Rivals and Diablo IV, alongside resolved audio stuttering in Cyberpunk 2077 and restored video playback in VRChat and GTA San Andreas.
Ubuntu released a security update for Linux kernels on Azure and Azure FDE systems running Ubuntu 26.04 LTS, patching over five hundred vulnerabilities spanning networking, file systems, drivers, and hardware interfaces. The advisory specifically flags flaws in AMD processors that let local attackers leak sensitive data through speculative execution or escalate privileges via shared cache isolation failures on Zen 2 chips. System administrators should install the corrected kernel packages immediately and reboot their virtual machines, keeping in mind that new version numbers force a recompilation of all third-party kernel modules due to an ABI change.
[USN-8603-1] Linux kernel (Azure) vulnerabilities
SUSE distributed a fresh wave of security advisories addressing critical vulnerabilities across multiple openSUSE and standard enterprise packages. The release flags updates for perl, ImageMagick, gh, helm, glib2, and aws-nitro-enclaves-cli as important severity, while perl-XML-Bare and PackageKit receive moderate ratings. General availability media also received patches for kernel-devel 7.1.4, java-11-openjdk, java-26-openjdk, python313-pandas, and python314 alongside standard fixes for avahi, nmap, and SVT-AV1 libraries. Administrators should review the openSUSE-SU-2026 and SUSE-SU-2026 advisories to apply these corrections before threat actors exploit known flaws in the affected software stacks.
openSUSE-SU-2026:21435-1: moderate: Security update for perl-XML-Bare
openSUSE-SU-2026:21433-1: important: Security update for hauler
openSUSE-SU-2026:21432-1: important: Security update for gh
openSUSE-SU-2026:21426-1: important: Security update for ImageMagick
openSUSE-SU-2026:21429-1: low: Security update for net-tools
openSUSE-SU-2026:21427-1: moderate: Security update for perl-HTTP-Date
openSUSE-SU-2026:21423-1: important: Security update for jline3
openSUSE-SU-2026:21425-1: moderate: Security update for PackageKit
openSUSE-SU-2026:21418-1: important: Security update for shibboleth-sp
openSUSE-SU-2026:21422-1: important: Security update for helm
openSUSE-SU-2026:21417-1: moderate: Security update for avahi
openSUSE-SU-2026:21412-1: important: Security update for perl-DBI
openSUSE-SU-2026:21409-1: important: Security update for mariadb-connector-c
openSUSE-SU-2026:21410-1: important: Security update for glib2
openSUSE-SU-2026:21411-1: important: Security update for perl
openSUSE-SU-2026:21408-1: important: Security update for joe
openSUSE-SU-2026:21406-1: important: Security update for aws-nitro-enclaves-cli
openSUSE-SU-2026:11341-1: moderate: python313-pandas-3.0.3-1.2 on GA media
openSUSE-SU-2026:11339-1: moderate: kernel-devel-7.1.4-1.1 on GA media
openSUSE-SU-2026:11342-1: moderate: python313-3.13.14-1.1 on GA media
openSUSE-SU-2026:11343-1: moderate: python314-3.14.6-2.1 on GA media
openSUSE-SU-2026:11340-1: moderate: prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media
openSUSE-SU-2026:11335-1: moderate: java-11-openjdk-11.0.32.0-1.1 on GA media
openSUSE-SU-2026:11334-1: moderate: helm3-3.21.3-3.1 on GA media
openSUSE-SU-2026:11337-1: moderate: java-26-openjdk-26.0.2.0-1.1 on GA media
openSUSE-SU-2026:0259-1: important: Security update for gh
SUSE-SU-2026:3217-1: moderate: Security update for avahi
SUSE-SU-2026:3219-1: important: Security update for ImageMagick
SUSE-SU-2026:3218-1: moderate: Security update for avahi
SUSE-SU-2026:3220-1: moderate: Security update for nmap
SUSE-SU-2026:3224-1: important: Security update for SVT-AV1, libyuv0, libaom3
Red Hat Product Security released four new errata addressing vulnerabilities across multiple Red Hat Enterprise Linux releases. The RHSA-2026:45192 advisory delivers combined security, bug fix, and enhancement patches for RHEL 9, while standalone security updates cover RHEL 10 and the RHEL 8.10 Extended Update Support track. A separate release targets the real-time kernel on standard RHEL 8 systems under RHSA-2026:45116.
RHSA-2026:45192: Important: kernel security, bug fix, and enhancement update
RHSA-2026:45114: Important: kernel security update
RHSA-2026:45115: Important: kernel security update
RHSA-2026:45116: Important: kernel-rt security update
Oracle Linux 10 released security advisory ELSA-2026-22711 to patch the vim editor across x86_64 and aarch64 architectures. The update resolves seven common vulnerabilities, including code injection in netrw, command execution flaws in python3complete and glob(), a path traversal bypass in zip.vim, and arbitrary file overwrites tied to tar and cucumber plugins.
ELSA-2026-22711 Moderate: Oracle Linux 10 vim security update
Fedora 43 and Fedora 44 received a batch of security updates targeting critical vulnerabilities across key system components including Chromium, Django, .NET Runtime, Skopeo, Netatalk, Mbed TLS, MuPDF, SSSD, and Wget. The patches resolve numerous Common Vulnerabilities and Exposures (CVEs), ranging from buffer overflows and use-after-free errors to privilege escalation flaws in the System Security Services Daemon and authentication bypasses within Netatalk's Apple Filing Protocol server. Notable fixes address severe issues such as arbitrary code execution risks in Wget via crafted HTML attributes, denial-of-service conditions caused by excessive DNS SAN processing in Skopeo, and potential Kerberos authentication bypasses due to path traversal attacks in SSSD's Group Policy Object cache.
Fedora 43 Update: chromium-150.0.7871.181-1.fc43
Fedora 43 Update: python-django5-5.2.16-1.fc43
Fedora 43 Update: dotnet10.0-10.0.110-1.fc43
Fedora 43 Update: mupdf-1.27.2-2.fc43
Fedora 43 Update: sssd-2.12.0-3.fc43
Fedora 43 Update: wget1-1.25.0-3.fc43
Fedora 43 Update: mbedtls-3.6.7-1.fc43
Fedora 44 Update: chromium-150.0.7871.181-1.fc44
Fedora 44 Update: dotnet10.0-10.0.110-1.fc44
Fedora 44 Update: skopeo-1.22.2-2.fc44
Fedora 44 Update: netatalk-4.5.1-1.fc44
Debian administrators must apply four new security patches targeting critical flaws in spice-vdagent, ImageMagick, GRUB2, and Exim4 this month. The spice-vdagent release closes an integer overflow that crashes virtual machines alongside a path traversal bug permitting unauthorized file writes, while ImageMagick addresses more than twelve issues where malformed images risk denial of service or arbitrary code execution. GRUB2 clears twenty weaknesses tied to UEFI Secure Boot bypasses and system instability, and Exim4 patches two mail server bugs that enabled local privilege escalation. System operators running Debian 10 through 13 should upgrade to the specified package versions right away to block active exploitation.
[DLA 4698-1] spice-vdagent security update
[DLA 4696-1] imagemagick security update
ELA-1783-1 grub2 security update (by )
[DSA 6400-1] exim4 security update
AlmaLinux published critical security errata targeting the Linux kernel, OpenJDK versions 8 through 21, SSSD, and OpenSSL 1.1.1 across operating system releases 8, 9, and 10. These patches close memory corruption flaws, fix privilege escalation risks in the SSSD LDAP provider, and address TLS certificate handling weaknesses inside multiple Java runtime components. Production servers running these components face immediate exposure to kernel memory leaks, Java image processing vulnerabilities, and SSSD path traversal exploits until administrators install the new RPM packages.
ALSA-2026:45115: kernel security update (Important)
ALSA-2026:45116: kernel-rt security update (Important)
ALSA-2026:42877: java-1.8.0-openjdk security update (Important)
ALSA-2026:42895: java-21-openjdk security update (Important)
ALSA-2026:42887: java-17-openjdk security update (Important)
ALSA-2026:42877: java-1.8.0-openjdk security update (Important)
ALSA-2026:43307: kernel security, bug fix, and enhancement update (Important)
ALSA-2026:42887: java-17-openjdk security update (Important)
ALSA-2026:42122: sssd security update (Important)
ALSA-2026:42895: java-21-openjdk security update (Important)
ALSA-2026:44438: compat-openssl11 security update (Important)
ALSA-2026:42919: kernel security, bug fix, and enhancement update (Important)
ALSA-2026:42895: java-21-openjdk security update (Important)
[ Archive ]