Linux Compatible

IPFire 2.29 - Core Update 201 with DNS Firewall released

Security 10946 Published 2026-04-28 12:01 by Philipp Esselbach 0

IPFire 2.29 Core Update 201 finally delivers the DNS Firewall feature that blocks malware, phishing, and ads at the network gateway before any malicious traffic ever reaches connected devices. This new system replaces clunky URL filters and external Pi-hole setups by routing all domain queries through an updated proxy that pulls fresh blocklists automatically via IXFR transfers. Beyond the headline feature, the update rebases the core toolchain on newer glibc and binutils versions, patches a web proxy rule race condition, and drops unmaintained packages like 7zip to shrink the attack surface.

DFRobot LattePanda Iota Review and more

Reviews 52623 Published 2026-04-28 08:58 by Philipp Esselbach 0

Today's reviews are exploring compact computing options like the DFRobot LattePanda Iota, which combines x86 processing power with a flexible modular ecosystem for edge deployments. Enthusiast hardware continues to push boundaries with liquid coolers featuring large integrated screens and QD-OLED monitors that deliver blistering 500 Hz refresh rates for competitive gaming. The latest graphics cards prioritize efficient cooling and compact designs to handle demanding workloads, while innovative peripherals like the Valve Steam Controller bring flexible input options directly from your couch. Mobile gaming phones now incorporate advanced liquid cooling systems to sustain peak performance, and magnetic portable SSDs finally solve the hassle of tethered storage for modern smartphone creators.

Computers: DFRobot LattePanda Iota Review
Cooling: DeepCool LT360 Vision ARGB Review: Large Screen with Silent Cooling
Displays: MSI MPG 271QR QD-OLED X50 Review - 500 Hz for the Elite Few, Gigabyte Aorus FO27Q5P Review (500Hz QD-OLED)
Gaming: Pokémon Champions Review – Confined Competition
Graphics Cards: MSI GeForce RTX 5060 Ti 16G VENTUS 2X OC PLUS Review, GIGABYTE GeForce RTX 5080 WINDFORCE SFF 16G Video Card Review
Input: Valve Steam Controller review: Every input to PC game from the sofa
Mobile: REDMAGIC 11 Pro review: A powerful gaming phone with liquid cooling
Storage: ADATA SR800 Magnetic Power Bank SSD Review

XanMod Kernel 7.0.2 and 6.18.25 LTS released

Debian 10882 Ubuntu 7068 Published 2026-04-28 08:32 by Philipp Esselbach 0

XanMod has released kernel versions 7.0.2 and 6.18.25 LTS to deliver faster scheduling, improved memory management, and modern network optimizations for Debian-based systems. The builds ship with LLVM ThinLTO, Google's multigenerational LRU framework, BBRv3 congestion control, and dedicated drivers for AMD V-Cache hardware. Before upgrading, users should verify that their third-party modules like NVIDIA graphics or virtualization software support the new kernel, as DKMS compilation failures are common. Installing requires adding the official GPG key, pointing APT to the custom repository, pulling in build dependencies, and rebooting to activate the performance tweaks.

Zen Browser 1.19.10b released

Software 44319 Published 2026-04-28 08:26 by Philipp Esselbach 0

The latest Zen Browser update finally patches that nasty startup crash which left users staring at a completely unresponsive window. It also adds a quick alt or opt key combined with a click to instantly split merged tabs without digging through menus. Compact mode video controls now stay properly visible, and dragging tabs between separate windows correctly hides the sidebar instead of leaving it glitched in place. Workflow heavy users will appreciate how these targeted fixes clean up the daily routine without padding the release with unnecessary features.

Qubes OS 4.2 End of Life: How to Upgrade to 4.3 Safely

Qubes OS 63 Published 2026-04-28 08:22 by Philipp Esselbach 0

Qubes OS 4.2 officially drops all security support, leaving any lingering installations completely exposed to unpatched vulnerabilities. Users must migrate to version 4.3 through either a clean install that wipes dom0 customizations or an in-place upgrade tool designed to preserve them. The fresh installation route avoids technical headaches but forces a rebuild of modified settings, while the migration path keeps existing setups intact at the cost of navigating a fragile multi-stage process. Since every patch within the 4.2 branch shares the exact same expiration date, waiting past June guarantees running an unsupported system with zero maintenance backing it up.

Linux Kernel 6.6.136 released

Linux 3345 Published 2026-04-28 08:15 by Philipp Esselbach 0

Linux Kernel 6.6.136 LTS drops a heavy batch of patches aimed at closing memory safety holes in the networking stack and file system drivers. The update specifically targets out-of-bounds writes and use-after-free conditions in ksmbd, OCFS2, F2FS, and NTFS3 that could trigger kernel panics or leak sensitive data to untrusted clients. Virtualization gets a targeted fix for KVM MMIO fragment handling, while networking receives stricter validation checks for rxrpc tickets and packet socket headers to prevent race condition exploits. Hardware support rounds out the release with corrected driver lifecycle management for media devices and fresh audio quirks for several modern laptops and desktops.

Linux Kernel 7.0.2 released

Linux 3345 Published 2026-04-28 08:10 by Philipp Esselbach 0

The Linux kernel 7.0.2 release drops a heavy batch of SMB server fixes that finally patch out-of-bounds writes and broken connection counters, which means network shares will stop crashing or rejecting legitimate users after hitting artificial limits. FUSE mounts and the F2FS filesystem get tighter bounds checking to prevent page cache overflows and use-after-free bugs during concurrent unmounts or heavy backup jobs. AMDGPU drivers swap their legacy ID allocator for an XArray structure that handles interrupt contexts without deadlocking, while crypto subsystems finally fix async callback chains that were silently skipping hash verification. It is a straightforward stable update that quietly patches dangerous network sharing vulnerabilities and keeps the underlying system from tripping over itself during routine file operations.

NTFS, Pillow, ClamAV, and more updates for Ubuntu

Ubuntu 7068 Published 2026-04-28 08:01 by Philipp Esselbach 0

Ubuntu issued a series of security notices to patch critical flaws across numerous widely used software packages. These vulnerabilities impact essential tools like nginx, Vim, strongSwan, and NTFS-3G by allowing attackers to crash services or execute arbitrary code through malformed files and network requests. Some of the issues even let local users escalate privileges or trick remote systems into leaking sensitive information over the network. Administrators can fix everything by running a standard system update and rebooting their machines to apply the patched versions across all supported Ubuntu releases.

[USN-8192-2] NTFS-3G vulnerabilities
[USN-8211-1] Pillow vulnerability
[USN-8207-1] ClamAV vulnerability
[USN-8195-2] PackageKit vulnerability
[USN-8210-1] nginx vulnerabilities
[USN-8208-1] HAProxy vulnerability
[USN-8196-2] strongSwan vulnerabilities
[USN-8209-1] Little CMS vulnerability
[USN-8199-1] OpenStack Glance vulnerabilities
[USN-8212-1] authd vulnerability
[USN-8213-1] Vim vulnerabilities

Kernel, FreeCIV, Firefox, and more updates for SUSE

SUSE 5632 Published 2026-04-28 08:00 by Philipp Esselbach 0

SUSE rolled out a batch of security advisories that impact various Linux distributions and widely used open source software. Kernel live patches for SUSE Linux Enterprise address critical race conditions in ALSA alongside privilege escalation flaws within AppArmor. Firefox Extended Support Release gets a major upgrade to version 140.10.0, which closes 25 separate vulnerabilities tied to memory corruption and boundary checking failures. System administrators should also apply important fixes for freerdp that resolve multiple heap overflows, while moderate updates quietly patch security gaps in freeciv, systemd components, Emacs, and the ngtcp2 library.

SUSE-SU-2026:1622-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:1621-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
openSUSE-SU-2026:0155-1: moderate: Security update for freeciv
openSUSE-SU-2026:20621-1: important: Security update for MozillaFirefox
openSUSE-SU-2026:10624-1: moderate: libsystemd0-259.5-1.3 on GA media
openSUSE-SU-2026:10619-1: moderate: emacs-30.2-8.1 on GA media
openSUSE-SU-2026:10621-1: moderate: libngtcp2-16-1.22.1-1.1 on GA media
SUSE-SU-2026:1630-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:1632-1: important: Security update for freerdp
SUSE-SU-2026:1634-1: important: Security update for freerdp

MPG123 update for Slackware

Slackware 1252 Published 2026-04-28 07:58 by Philipp Esselbach 0

Slackware has released updated mpg123 packages to address a critical security flaw in versions 15.0 and current. The vulnerability stems from a regression introduced in release 1.32.0 that mishandles file offsets on 32-bit architectures, leading to memory corruption and unexpected crashes. This patch corrects the issue across the main player as well as companion utilities like out123 and mpg123-id3dump. Administrators can retrieve the fixed files from official FTP servers and apply them quickly using standard upgrade commands.

mpg123 (SSA:2026-117-01)

PCS, Kernel, Python, and more updates for Rocky Linux

Rocky Linux 897 Published 2026-04-28 07:57 by Philipp Esselbach 0

Kernel, TigerVNC, FreeRDP, and more updates for RHEL

Red Hat 9399 Published 2026-04-28 07:56 by Philipp Esselbach 0

OpenJDK, Grafana, Buildah, Systemd, Go updates for Oracle Linux

Oracle Linux 6473 Published 2026-04-28 07:54 by Philipp Esselbach 0

Gum, PackageKit, Firefox, and more updates for Fedora

Fedora Linux 9330 Published 2026-04-28 07:53 by Philipp Esselbach 0

Mbedtls, Libde265, OpenJDK updates for Debian

Debian 10882 Published 2026-04-28 07:51 by Philipp Esselbach 0

Debian released multiple security advisories to patch critical vulnerabilities in mbedtls, libde265, and openjdk-21. The mbedtls update resolves a timing discrepancy that could expose cryptographic secrets alongside a flawed random number fallback mechanism. Libde265 receives essential memory safety corrections after developers found stack and heap overflow bugs capable of triggering severe system crashes or unauthorized execution. OpenJDK 21 also gets fixed against numerous authentication flaws and denial of service risks, prompting administrators to upgrade all affected systems right away.

[DLA 4551-1] mbedtls security update
ELA-1698-1 libde265 security update
[DLA 4550-1] libde265 security update
[DSA 6231-1] openjdk-21 security update

Linux Kernel 6.12.84 and 6.18.25 released

Linux 3345 Published 2026-04-27 19:50 by Philipp Esselbach 0

The latest Linux stable releases finally plug several dangerous remote exploitation vectors in the ksmbd SMB server before attackers can abuse them. Filesystem and networking layers get much-needed hardening to stop FUSE cache overflows, f2fs use-after-free crashes during unmounts, and a time-of-check race condition in packet transmission. Driver stability improves across the board with an AMD GPU deadlock fix that swaps out unsafe interrupt locking for XArray handling, plus corrected ethernet frame forwarding for MTK hardware. System administrators and desktop users should apply these updates immediately to keep file shares secure and prevent random kernel panics from lingering memory management bugs.

VSCodium 1.116.02821 released

Software 44319 Published 2026-04-27 18:37 by Philipp Esselbach 0

The VSCodium update to version 1.116 swaps in Electron 39.8.4 for snappier performance while quietly dropping that mandatory onboarding screen. PowerPC64 LE users finally get working DEB and RPM packages, though developers should test native extensions before pushing the upgrade to production machines. Rolling out the update follows standard installation steps across Windows, Linux, and macOS, but adjusting the new terminal argument parser and update cooldown settings will keep background processes from eating into system resources. IT admins managing enterprise deployments will want to review the fresh troubleshooting notes for group policy and Defender exclusions before letting it run on shared workstations.

Kdenlive 26.04.0 released

KDE 1718 Published 2026-04-27 18:33 by Philipp Esselbach 0

Kdenlive 26.04.0 delivers a practical workflow overhaul focused on smoother timeline navigation, including continuous panning, multi-clip speed adjustments, and a lockable playhead. Transitions now feature animated previews and auto-duration matching, while new effects like the Euclid Eraser expand creative options without cluttering the interface. Longstanding audio capture and subtitle editing bugs are finally resolved, giving editors more reliable control over external hardware and dialogue workflows. The update also adds useful quality-of-life tweaks like monitor mirroring, direct render-to-bin placement, and AMF encoding support for faster Windows exports.

Linux Kernel 7.0 Fedora Test Days: Safe Installation, QA Testing, and Bug Reporting Guide

Fedora Linux 9330 Published 2026-04-27 13:59 by Philipp Esselbach 0

The Fedora QA team is running Linux Kernel 7.0 test days on versions 43 and 44 to catch early regressions before they reach stable release channels. Users should prepare a dedicated virtual machine or spare system, then install the pre-release kernel using standard DNF updates for traditional setups or rpm-ostree overrides for atomic distributions like Silverblue. Testing involves running the built-in regression suite alongside real-world usage checks, with all issues documented through detailed Bugzilla reports that include exact reproduction steps and system logs. Once testing wraps up, atomic systems must reset their package overrides to return to stable kernels, keeping the QA pipeline clean for developers.

AMD Ryzen 5 7600X3D Review and more

Reviews 52623 Published 2026-04-27 06:52 by Philipp Esselbach 0

Lenovo pushes hard into portable gaming with its new Legion Pro 7 laptop, combining raw processing power and a stunning OLED display for players who want uncompromising performance on the go. Meanwhile, Noctua expands its premium fan lineup with a sleek black version of its highly rated NF-A14x25 G2 series that maintains the brand's reputation for quiet and efficient thermal management. Gamers seeking affordable upgrades will find exceptional value in AMD's Ryzen 5 7600X3D, which currently stands alone at its price point when it comes to pure gaming speed. The roundup also highlights precision peripherals like the compact CHERRY keyboard featuring magnetic switches alongside Razer's lightweight DeathAdder mouse equipped with an advanced optical sensor for competitive play.

Computers: Lenovo Legion Pro 7 16IAX10H 16" OLED Gaming Laptop Review
Cooling: Noctua NF-A14x25 G2 chromax.black Series Review
CPUs: AMD Ryzen 5 7600X3D review: An unbeatable value gaming CPU
Input: CHERRY XTRFY K5 PRO TMR Compact Magnetic Switch Gaming Keyboard Review, Razer DeathAdder V4 Pro Esports Green Gaming Mouse Review

Linux Kernel 7.1 RC1 released

Linux 3345 Published 2026-04-27 06:42 by Philipp Esselbach 0

Linux Kernel 7.1 RC1 has arrived with a massive merge window where an AMD GPU register header sync artificially inflates the patch count. The update actively strips out legacy i486 configurations and obsolete SoC support to keep maintenance overhead manageable. Beyond the inflated stats, developers packed in meaningful improvements across VFS handling, NTFS and SMB compatibility, system tracing tools, and ongoing Rust integration. Testers should expect typical release candidate instability, run make oldconfig to handle removed options, and report bugs promptly to help stabilize the kernel before the final launch.

Apache 2.4.67 RC1 released

Software 44319 Published 2026-04-27 06:36 by Philipp Esselbach 0

The Apache HTTP Server team dropped a new release candidate that finally tackles the memory leaks and certificate renewal loops that have been tripping up production setups. By stripping out mod_http2's custom allocator and patching how mod_md handles stale ACME job files, the build stops those nasty double free crashes and endless retry cycles. You will also notice updated mime types for modern image formats and compatibility tweaks for older APR versions, which keeps legacy environments from choking on compilation errors. Treat this release candidate like any other beta code by running it through your staging environment first, since the final version should arrive within a few weeks anyway.

OVMF, Libminizip, FreeRDP, and more updates for SUSE

SUSE 5632 Published 2026-04-27 06:27 by Philipp Esselbach 0

openSUSE has released a series of security updates targeting multiple packages across Tumbleweed and SLE Backports distributions. These patches address numerous vulnerabilities rated from moderate to important, including critical flaws in Chromium and Kyverno alongside several issues affecting OVMF, FreeRDP2, and Mako templates. Administrators managing these systems should prioritize installing the fixes through zypper or YaST to prevent potential exploitation of the listed CVEs. Each announcement provides detailed package lists and direct links to SUSE security pages for further technical reference.

openSUSE-SU-2026:10615-1: moderate: ovmf-202602-9.1 on GA media
openSUSE-SU-2026:10617-1: moderate: libminizip1-1.3.1-2.1 on GA media
openSUSE-SU-2026:10611-1: moderate: freerdp2-2.11.7-8.1 on GA media
openSUSE-SU-2026:10612-1: moderate: golang-github-prometheus-alertmanager-0.31.1-3.1 on GA media
openSUSE-SU-2026:10616-1: moderate: python311-Mako-1.3.11-1.1 on GA media
openSUSE-SU-2026:10613-1: moderate: kyverno-1.17.2-1.1 on GA media
openSUSE-SU-2026:0152-1: important: Security update for chromium
openSUSE-SU-2026:0153-1: important: Security update for chromium

Container-Tools, OpenSSH, Webkit2GTK3, and more updates for RHEL

Red Hat 9399 Published 2026-04-27 06:23 by Philipp Esselbach 0

Red Hat has rolled out multiple important security patches for several core packages across different RHEL versions. Administrators should prioritize installing fixes for openssh, python3.12, and container-tools on systems ranging from release eight to ten. The product security team assigned an Important rating to each advisory because the underlying flaws could affect system integrity. You can access full vulnerability details by checking the Common Vulnerability Scoring System metrics provided in the reference links.

RHSA-2026:10703: Important: container-tools:rhel8 security update
RHSA-2026:10714: Important: openssh security update
RHSA-2026:10708: Important: gdk-pixbuf2 security update
RHSA-2026:10711: Important: python3.12 security update
RHSA-2026:10702: Important: webkit2gtk3 security update
RHSA-2026:10705: Important: rhc security update
RHSA-2026:10706: Important: rhc security update
RHSA-2026:10713: Important: pcs security update

Thunderbird and ImageMagick updates for Debian

Debian 10882 Published 2026-04-27 06:21 by Philipp Esselbach 0

Debian Long Term Support teams have released urgent security patches for both Thunderbird and ImageMagick to address critical flaws in their software suites. Attackers could exploit the Thunderbird vulnerabilities to execute arbitrary code on any affected Debian GNU/Linux 11 (Bullseye) LTS machine. The ImageMagick update tackles a different set of problems entirely, including symlink races, information leaks, and denial of service threats that impact Debian GNU/Linux 9 (Stretch) ELTS environments.

[DLA 4549-1] thunderbird security update
ELA-1696-1 imagemagick security update

Windows

Linux

macOS

Community