2026-05-25
MX Linux 25.2 drops today with a practical mix of kernel patches, updated graphics drivers, and a text based installer mode that actually works without Xorg running first. The base releases stick to the tested 6.12.90 Debian kernel while AHS editions jump to a newer Liquorix build paired with mesa 26.0.1 for folks who need fresh hardware support. Live system persistence finally gets cleaned up by moving boot routines out of rc.local, and users can now manually pick which kernel loads during startup instead of guessing after every update. Current systems pull these changes through the normal upgrade path without forcing a reinstall, so grabbing the iso or running apt upgrade is all it takes to stay current.
The GEEKOM A9 Max computer stands out as a powerful machine thanks to its dual channel DDR5 memory configuration. Meanwhile, the Autonomous ErgoChair Pro provides decent seating comfort but ultimately lacks standout features in other categories. Graphics enthusiasts can check out updated benchmarks pitting the Nvidia RTX 5070 Ti against the AMD Radeon 9070 XT with a fresh focus beyond traditional rasterization performance. Audio gear reviews round out the list by examining the new SOUNDPEATS Air6 HS and the open back aune AC55, each offering distinct design choices for different listening preferences.
Computers: GEEKOM A9 Max 2026 Edition review: benchmarked with 64GB of dual-channel DDR5
Furniture: Autonomous ErgoChair Pro Review: Comfortable, but that's it
Graphics Cards: Nvidia RTX 5070 Ti vs AMD Radeon 9070 XT: Massive 52 Game Benchmark
Headphones: SOUNDPEATS Air6 HS Review, aune AC55 Reference Open-Back Clip-On Headphones Review
Linux Kernel 7.1 rc5 arrived with an unusually large number of minor driver tweaks and fixes that Linus Torvalds considers unnecessary late-stage churn. The maintainer plans to reject noncritical pull requests moving forward, arguing that bloated release candidates actively undermine long-term system stability. This cycle features hundreds of small patches across networking, graphics, storage, and audio subsystems, with several even triggered by automated AI code review tools. Going forward, developers can expect stricter merge windows and smaller release candidates as the kernel team prioritizes reliability over last-minute additions.
Zen Browser 1.20b finally brings a native Boosts feature that lets users tweak website colors, fonts, and dark mode without relying on bloated third-party extensions. The update also tightens privacy defenses by improving fingerprinting protection in Standard Enhanced Tracking Protection, which significantly cuts down on device identification leaks across all platforms. Practical daily improvements include local PDF merging, smarter Windows location permission handling, and several interface fixes that actually respect how people use split views and single sidebar modes. Under the hood, Mozilla pushed the engine to Firefox 151, patching critical security holes like sandbox escapes and memory corruption bugs that could otherwise be exploited by malicious sites.
OpenSUSE recently published a comprehensive set of moderate security patches aimed at hardening the Tumbleweed distribution against several newly discovered threats. These updates cover six distinct packages such as mcphost, apptainer, hauler, perl-YAML-Syck, rqlite, and jfrog-cli. Administrators will find that each release resolves between one and six separate flaws capable of causing system instability or unauthorized data exposure. Running your standard package manager to apply these fixes immediately remains the best way to protect your infrastructure from potential exploitation.
openSUSE-SU-2026:10845-1: moderate: mcphost-0.34.0-5.1 on GA media
openSUSE-SU-2026:10846-1: moderate: perl-YAML-Syck-1.450.0-4.1 on GA media
openSUSE-SU-2026:10842-1: moderate: apptainer-1.4.5-5.1 on GA media
openSUSE-SU-2026:10843-1: moderate: hauler-1.4.3-3.1 on GA media
openSUSE-SU-2026:10847-1: moderate: rqlite-10.1.0-1.1 on GA media
openSUSE-SU-2026:10844-1: moderate: jfrog-cli-2.104.1-1.1 on GA media
Slackware just pushed out new kernel packages for version 15.0 and the current development branch to fix critical network security flaws. The patches target how shared fragment markers move through buffer transfer helpers and coalescing routines, which directly resolves CVE-2026-43503 alongside CVE-2026-46300.
kernel (SSA:2026-144-01)
Debian just issued a Node.js update that fixes several vulnerabilities capable of crashing servers or leaking private data. GnuTLS received an extended support patch covering dangerous flaws in TLS processing, certificate validation, and token management. These releases target older Debian distributions like Bullseye, Stretch, and Buster to stop heap overruns and authentication bypasses. You really should install them right away before attackers exploit these known weaknesses.
[DLA 4598-1] nodejs security update
ELA-1732-1 gnutls28 security update
2026-05-24
Roundcube Webmail just pushed security patches to both its LTS and stable branches, closing a messy list of flaws that could let attackers inject code or hijack sessions before anyone even logs in. The update specifically targets pre-auth SQL injection, session poisoning bypasses, LDAP code execution risks, and several network and CSS sanitization loopholes that automated scanners love to exploit. Server admins should back up their current files and database, extract the new release over the existing install while preserving custom configs, then run the built-in migration script and clear the cache to avoid interface glitches. Skipping third-party hosting panels during this process keeps custom settings intact and prevents a half-patched setup from breaking mid-week.
This week’s security roundup delivers critical patches across every major Linux distribution, with Nginx, Ruby, OpenSSH, and the core kernel taking the hardest hits. Several advisories flag unauthenticated remote code execution flaws in management interfaces like Cockpit, alongside privilege escalation risks in bind and rsync that could hand attackers full system control without a password. Desktop users running Ubuntu or Slackware also need to grab updates for Firefox, Thunderbird, and specialized cloud kernels before those vulnerabilities get weaponized by automated scanners. Administrators should run their standard package manager commands immediately, schedule a quick reboot if the kernel changed, and verify critical services afterward to catch any unexpected regressions.
"AM" AppImage Manager 10.2.1 clarifies update summaries by separating actual version bumps from simple checksum changes. Mistyped package names now trigger a smart suggestion prompt that uses fuzzy matching to auto-correct before installation. Users can safely restore default desktop launchers with the new reinstall --launcher flag, which backs up custom edits instead of blindly overwriting them. The release also rolls out expanded language support and patches several background bugs for more reliable portable app management.
The Liquorix Linux Kernel 7.0-11 builds on the stable 7.0.10 base to deliver tighter scheduler tuning and real-time patches aimed at audio production and gaming performance. Desktop users will notice fewer buffer underruns during recording sessions and more consistent frame delivery because the kernel prioritizes foreground tasks over background noise. Installing it on Debian or Arch systems is as simple as running a single curl script, though proprietary drivers like Nvidia may still need manual recompilation after rebooting. Testing the update in a safe environment first keeps things from breaking when hardware quirks inevitably show up.
XanMod just dropped kernels 7.0.10 and 6.18.33 LTS to give Debian and Ubuntu systems a noticeable performance bump without requiring manual patching. The builds ship with LLVM ThinLTO, Google multigenerational LRU, BBRv3 networking, and an AMD 3D V-Cache driver that handles modern hardware quirks better than stock options. Installing them through the official APT repository is straightforward, but users should keep a fallback boot entry handy since proprietary drivers like NVIDIA or VirtualBox often break until maintainers catch up. Heavy workloads and sustained multitasking run noticeably smoother, though casual desktop users might find the extra tuning unnecessary compared to standard kernel stability.
openSUSE has released two distinct security updates for its Linux distributions. The first patch tackles a critical chromium issue by resolving ninety-five vulnerabilities and one bug on openSUSE Leap 16.0. A second moderate update addresses a single flaw within the python311-impacket package for openSUSE Tumbleweed users. System administrators can deploy these fixes quickly using standard installation utilities like YaST or zypper commands.
openSUSE-SU-2026:20775-1: critical: Security update for chromium
openSUSE-SU-2026:10837-1: moderate: python311-impacket-0.13.1-1.1 on GA media
Rocky Linux 8 just released three important security patches for the main kernel, real-time kernel, and Firefox browser. Teams can check the CVSS severity ratings attached to each vulnerability to figure out which systems need immediate attention. The official errata pages link straight to detailed CVE reports so engineers can review the exact technical flaws before rolling anything out.
RLSA-2026:19664: Important: kernel-rt security update
RLSA-2026:19588: Important: firefox security update
RLSA-2026:19666: Important: kernel security update
Evince users need to install a quick security patch that closes a command injection hole triggered by specially crafted PDF documents. The linux package also received a major update to address several kernel flaws capable of causing privilege escalation, service disruptions, or data exposure. Debian fixed these issues in version 6.12.90 for the trixie release while simultaneously resolving a separate Bluetooth regression tied to MediaTek chips. You should prioritize installing both updates right away since leaving them unpatched leaves your systems wide open to serious threats.
ELA-1731-1 evince security update
[DSA 6295-1] linux security update
[ Archive ]