Linux Compatible

Mesa 26.1.6 Released: AMD RX 9070, Riddick, and RDNA 4 Fixes

Software 44634 Published 2026-07-29 21:46 by Philipp Esselbach 0

Mesa has released version 26.1.6 for the Amber stable branch, a targeted maintenance update arriving on July 29, 2026, that focuses exclusively on bug fixes rather than new features. The release addresses several gaming regressions, including broken ambient occlusion in The Chronicles of Riddick, page faults in Doom Eternal on the new AMD RX 9070, and lighting issues in Horizon Forbidden West. Driver improvements are highlighted by Intel ANV fixes for compute-pass timing on Panther Lake hardware and AMD RADV corrections for ray-tracing workloads on NAVI32 GPUs. Additional patches cover Vulkan video codec accuracy for AV1 and H265 encoding, a Raspberry Pi 5 decoder crash, and various stability enhancements across other open-source graphics drivers.

Krita 5.3.3 Releases Today Alongside the First Stable Qt 6 Build

KDE 1755 Published 2026-07-29 20:44 by Philipp Esselbach 0

Krita 5.3.3 landed today with 28 targeted bug fixes, including a long-awaited workflow tweak that stops layers from deselecting during transforms. The free and open-source painting app also drops 32-bit Windows builds, raises its macOS minimum to Catalina, and adds in-app Android donations for the first time. More significantly, this maintenance release coincides with Krita 6.0.3, which shares the exact same source code but compiles against Qt 6 to enable full HDR and fractional scaling on Linux Wayland. It's a rather aggressive rollout strategy, giving Linux users early access to next-generation display support while keeping the stable Qt 5 build polished for everyone else.

Linux Kernel 6.1.179, 6.6.146, and 6.12.99 LTS Released: Stable Updates with GPU and Security Fixes

Linux 3396 Published 2026-07-29 20:31 by Philipp Esselbach 0

Greg Kroah-Hartman released Linux 6.1.179, 6.6.146, and 6.12.99 on July 29, 2026, as part of the weekly stable release cycle. These updates focus strictly on bug fixes and security hardening, with 6.1.179 touching nearly 15,000 files across the codebase. The GPU stack remains the most heavily maintained subsystem, with over a thousand DRM files altered in every release to support Intel, AMD, NVIDIA, and ARM Mali drivers. While Rust driver backports and growing LoongArch support show the kernel's evolution, users should note that the 6.1 and 6.6 trees reach end of life in December 2027.

Amethyst Mod Manager 2.0.5 Drops With Drag-and-Drop Installs, New AAA Game Support

Software 44634 Published 2026-07-29 20:15 by Philipp Esselbach 0

Amethyst Mod Manager 2.0.5 has landed for Linux, marking the sixth release in as many weeks following the project's complete v2.0 Qt rewrite. The update brings native modding support for Devil May Cry 5, Dragon’s Dogma 2, and Halo: Campaign Evolved, alongside workflow upgrades like drag-and-drop installation and an in-app wiki viewer. Solo developer ChrisDKN is pushing the Linux-native tool at a blistering pace to keep it competitive with established Windows counterparts like MO2 and Vortex. Users can grab the latest build via AppImage, Flatpak, or the Arch User Repository, with full release notes available on the project's GitHub page.

Mesa 26.2.0-RC3 Ships: VCN 5.0.2 Video, VirtIO Timeline Sync, and 86 Commits

Software 44634 Published 2026-07-29 19:54 by Philipp Esselbach 0

Mesa 26.2.0 RC3 dropped today with 86 commits, marking the final release candidate before the stable 26.2.0 build lands around August 5. The patch set is anchored by Yiwei Zhang's 37 commits that rewrite the VirtIO GPU driver to use Vulkan 1.2 timeline synchronization, a major architectural upgrade for QEMU, KVM, and Wayland compositors. AMD users get VCN 5.0.2 hardware video support for RDNA 4, RADV receives raster primitive and ray tracing acceleration structure fixes, and Qualcomm's Turnip driver sees a wave of correctness patches targeting Adreno mobile silicon. Rolling-release distros like Arch and Tumbleweed will adopt the final build on day one, while production workstations will likely wait for the August 5 to 12 freeze lift before pulling the stable tarball.

Debian's 2026 LLM Vote: Five Proposals Shape Open Source AI Policy

Debian 11013 Published 2026-07-29 19:10 by Philipp Esselbach 0

Debian developers are casting preferential votes on how the project handles LLM-assisted contributions, with five competing resolutions currently in discussion. The proposals range from a hard ban on AI-generated code to a permissive framework that mandates disclosure and contributor accountability. The core tension pits volunteer reviewer burnout and copyright clarity against the practical reality that many maintainers already rely on AI for day-to-day work. Results will land in the coming weeks and likely define Debian's official stance on generative AI for the next several years.

Zed Editor 1.13.1 Lands with Agent Controls, Mistral Thinking, and Dev Container Fixes

Software 44634 Published 2026-07-29 18:56 by Philipp Esselbach 0

Zed Industries released version 1.13.1 of its AI-native code editor today, July 29, 2026, delivering a patch focused on agent UX improvements, Mistral model updates, and broader Dev Container interoperability. The update introduces per-response controls within multi-turn agent conversations and adds thinking support for Mistral Medium 3.5 and Small 4, while also allowing Zed-created dev containers to be reused by VS Code and the CLI. Stability work addresses platform-specific crashes on Windows and macOS alongside a significant Linux fix for Fcitx5 memory leaks on KDE Wayland, and resolves Git operation timeouts that previously interrupted slow authentication flows. With contributions from over 15 external developers through the Zed Guild, this release highlights the editor's rapid maturation toward feature parity with VS Code and strong ecosystem integration.

Visual Studio Code 1.131 Adds Built-In Dictation, Subagent Visibility, and Agent Polish

Software 44634 Published 2026-07-29 18:45 by Philipp Esselbach 0

Visual Studio Code 1.131 drops on MS Build 2026 day, bringing built-in dictation, deeper subagent visibility, and a hybrid Markdown editor to the Stable channel. Native voice input now runs Microsoft's offline Nemotron model across chat, editors, and the terminal on Windows, Linux, and Apple Silicon Macs, removing the need for third-party extensions. Python Environments flips to default after hitting its rollout target, while agent workflows get better observability through a new parent-conversation overlay that tracks active subagents. Several features land behind experimental flags and platform restrictions, marking an incremental but meaningful shift toward voice-driven development and agent observability.

Node.js Ships 22.23.2, 24.18.1, and 26.5.1 Emergency Security Patch Fixing 10 CVEs Across All Active Releases

Software 44634 Published 2026-07-29 18:37 by Philipp Esselbach 0

Node.js has published coordinated security patches for 22.23.2, 24.18.1, and 26.5.1 after a two-day delay caused by infrastructure issues. The release addresses 10 CVEs, including three high-severity vulnerabilities that exploit HTTP/2 routing, heap memory management, and the --permission sandbox model. Medium-severity fixes round out the update by patching DNS response handling, zlib compression crashes, and mTLS certificate reuse flaws. Developers should update their active release lines immediately and review the full July 2026 security advisory before restarting services.

Rails 7.2.3.2, 8.0.5.1, and 8.1.3.1 Active Storage Security Patch Targets CVE-2026-66066

Software 44634 Published 2026-07-29 18:18 by Philipp Esselbach 0

Ruby on Rails released coordinated security updates for versions 7.2.3.2, 8.0.5.1, and 8.1.3.1 on July 29, 2026. The patches address CVE-2026-66066 by disabling untrusted libvips image loaders at boot, shielding apps that process user-uploaded files from crafted image attacks. Applications handling BMP, ICO, PSD, or similar formats will see variant generation break and must strip those content types from the variable_content_types config. Developers should run bundle update rails immediately and confirm libvips sits at version 8.13 or higher.

COSMIC Epoch 1.5.0 Released: System76 Ships Rust Desktop Hardening Update

Software 44634 Published 2026-07-29 17:54 by Philipp Esselbach 0

System76 released COSMIC Epoch 1.5.0, delivering a focused stability update for its Rust-based, Wayland-native desktop environment. The release prioritizes hardening over new features, addressing critical issues like GPU crash recovery, multi-monitor cursor positioning, and wallpaper orientation bugs across the compositor and settings panel. Following a rapid one-week development cycle after Epoch 1.4.0, the update continues System76's aggressive iteration cadence for Pop!_OS 24.04 and supported Linux distributions. While community engagement remains quieter for this maintenance build, the patch significantly clears Wayland plumbing debt, marking a clear shift toward production-level reliability for the desktop.

PHP 8.3.33 and 8.4.24 Released: Critical Security Fixes for PGSQL SQLi and BCMath Memory Corruption

Software 44634 Published 2026-07-29 09:50 by Philipp Esselbach 0

PHP released PHP 8.3.33 on July 28 and PHP 8.4.24 on July 29, delivering critical security patches with zero new features. The updates resolve multiple CVEs, most notably a critical PostgreSQL SQL injection in the PGSQL and PDO_PGSQL extensions and an out-of-bounds memory write in PHP 8.4's BCMath extension. Additional high-severity fixes address a denial-of-service crash via recursive symbolic links in the Phar extension and upstream graphic processing vulnerabilities in libgd. With PHP 8.3 entering its final months of security support before December 2026, developers should verify GPG signatures and upgrade immediately to block potential remote code execution.

YServer 1.4.0: Rust-Native X11 Server Hits Usable Milestone

Software 44634 Published 2026-07-29 09:37 by Philipp Esselbach 0

YServer 1.4.0 dropped today, marking the Rust-native X11 display server's crossover into actual desktop usability. The release adds KDE Plasma support, fixes Electron app crashes, and corrects screenshot capture bugs by reading directly from the composited scanout. Maintained by Jos Dehaes and backed by three new external contributors, the project now passes 672 tests in its full XTS5 regression suite across AMD, Intel, NVIDIA, and Apple Silicon hardware. It does not replace Wayland, but it offers a pragmatic, memory-safe alternative for users who still need the X11 protocol without decades of C legacy code.

GEEKOM GeekBook M16 Laptop, MSI Coreliquid E15 360 Cooler, Acer ProDesigner 6K Monitor, and more reviews

Reviews 52702 Published 2026-07-29 08:59 by Philipp Esselbach 0

Tech reviewers put several new hardware pieces through their paces this week, starting with a look at the GEEKOM GeekBook M16 laptop, which packs an Intel Core Ultra 9 processor into a premium aluminum chassis with a massive battery. The MSI MEG CORELIQUID E15 360 liquid cooler catches the eye with its curved AMOLED screen and straightforward installation, making it a strong match for Intel builds. Display and input peripherals also get tested, featuring Acer's touchscreen ProDesigner PE320QXT monitor that delivers 6K resolution for professional workflows, alongside Logitech's retro-styled G316 X 98 keyboard that balances vibrant lighting with overly loud tactile switches. Finally, the roundup covers internal components like the white ASRock B850 Challenger WiFi motherboard offering PCIe 5.0 and Wi-Fi 7 support, plus the BIWIN M560 Gen5 SSD that prioritizes fast write speeds and stable temperatures at 2TB capacity.

Computers: GEEKOM GeekBook M16 Review
Cooling: MSI MEG CORELIQUID E15 360 Review
Displays: Acer ProDesigner PE320QXT professional monitor review: Touchscreen functionality with a 6K resolution
Input: Logitech G316 X 98 Wired Gaming Keyboard Review - Retro-Inspired Board that Falls a Little Short
Motherboards: ASRock B850 Challenger WiFi White Motherboard Review
Storage: BIWIN M560 2TB Gen5 SSD Review

GOverlay 1.8.10 Shipped: Major UI, Stability, and Testing Overhaul for Linux Gaming

Software 44634 Published 2026-07-29 08:50 by Philipp Esselbach 0

GOverlay 1.8.10 is now available, bringing a massive wave of stability fixes, UI modernization, and automated testing to the popular Linux gaming config tool. The update resolves persistent crash issues, adds fluid resizable windows, and finally locks down config persistence for MangoHud and OptiScaler settings. Solo maintainer Benjamim Gois also integrated OpenSpec design documents and over 1,800 lines of test code, signaling a major maturity shift for the project. You can grab the release today through Flatpak, AppImage, Arch, and other supported distributions.

Shelly 3.0.0: Arch Linux Package Manager Rewritten in Zig, Drops .NET Runtime

Software 44634 Published 2026-07-29 08:22 by Philipp Esselbach 0

Shelly 3.0.0 has launched as a complete rewrite of the Arch Linux package manager, migrating the codebase from C#/.NET to native Zig to eliminate runtime overhead and deliver faster startup times. The release introduces a modular design with Flatpak support as an optional backend, alongside a refreshed GTK4 UI, simultaneous AUR search capabilities, and shell completions for the CLI. Users upgrading from the v2.x line should review migration notes regarding config handling and the renamed keyring tool before proceeding. Installation is available through CachyOS packages or the AUR, with Seafoam Labs already working on repository modification and offline update features for the post-v3 roadmap.

Xen (XSA-500, XSA-505, XSA-506, XSA-507) security updates for Qubes OS released

Qubes OS 69 Published 2026-07-29 08:11 by Philipp Esselbach 0

Qubes Security Bulletin 116 addresses four new Xen vulnerabilities (XSA-500, XSA-505, XSA-506, and XSA-507) that could allow malicious virtual machines to compromise system memory or leak sensitive data across isolated qubes. While the default Qubes OS configuration faces moderate risk, administrators running paravirtualized workloads, untrusted HVM qubes, or templates with active memory balancing should treat these flaws as high priority. Systems operating on Qubes OS 4.3 can resolve the issues by upgrading dom0 to Xen package version 4.19.5-2 through the standard update tool and then rebooting the machine. Anyone who previously enabled Anti Evil Maid protection must also reseal their secret passphrase, since the updated binaries shift PCR values 18 and 19.

QSB-116: Multiple Xen issues (XSA-500, XSA-505, XSA-506, XSA-507)

Across Azure, AWS, and Oracle Cloud Platforms Alongside Samba and FreeRDP updates for Ubuntu

Ubuntu 7167 Published 2026-07-29 07:36 by Philipp Esselbach 0

Live Kernel Patches, Samba Updates, Chromium Fixes, and Core System Packages updates for SUSE

SUSE 5722 Published 2026-07-29 07:33 by Philipp Esselbach 0

Libarchive, Samba, and SeaMonkey updates for Slackware

Slackware 1281 Published 2026-07-29 07:31 by Philipp Esselbach 0

The Slackware Linux Security Team issued advisory SSA:2026-209 to patch security vulnerabilities in libarchive, Samba, and SeaMonkey for Slackware 15.0 and -current releases. Libarchive updates to version 3.8.9 to resolve security flaws and bug reports, while Samba advances to 4.22.11 on the stable branch and 4.24.5 on -current to fix defects like DNS crashes, LDAP domain takeovers, and CTDB bounds checking errors linked to CVE-2026-6949 through CVE-2026-58224. SeaMonkey gets version 2.53.24 with security fixes that address unspecified browser exploits.

libarchive (SSA:2026-209-01)
samba (SSA:2026-209-03)
seamonkey (SSA:2026-209-02)

LibreSwan, Grafana, Dovecot, SSSD, Unbound, and Node.js updates for Rocky Linux

Rocky Linux 966 Published 2026-07-29 07:28 by Philipp Esselbach 0

Rocky Linux administrators need to apply a fresh batch of security advisories targeting core infrastructure packages across versions 8, 9, and 10. The errata address vulnerabilities in LibreSwan VPN, Grafana monitoring dashboards, Dovecot mail servers, SSSD identity management, Unbound DNS caching, and Node.js runtime modules. Each advisory links specific CVE identifiers to Common Vulnerability Scoring System ratings so teams can rank patch urgency without guessing severity levels. Installation requires visiting the official Rocky Linux errata portal for package-specific commands and release notes before deploying changes to production systems.

RLSA-2026:46396: Important: libreswan security update
RLSA-2026:46391: Important: grafana security, bug fix, and enhancement update
RLSA-2026:46532: Important: dovecot security update
RLSA-2026:46990: Important: sssd security, bug fix, and enhancement update
RLSA-2026:46394: Important: go-fdo-client security update
RLSA-2026:46395: Important: go-fdo-server security update
RLSA-2026:36320: Important: unbound security update
RLSA-2026:46398: Important: libreswan security update
RLSA-2026:36777: Important: unbound security update
RLSA-2026:37282: Important: unbound security update
RLSA-2026:47060: Important: nodejs:24 security update
RLSA-2026:47059: Important: nodejs:22 security update

OpenShift, Kernel Patches, and more updates for RHEL

Red Hat 9473 Published 2026-07-29 07:25 by Philipp Esselbach 0

Kernels, OpenSSL, Tomcat, and Developer Toolchains updates for Oracle Linux

Oracle Linux 6522 Published 2026-07-29 07:23 by Philipp Esselbach 0

Chromium, Restic, Kronosnet, Btrbk, and GPSD updates for Fedora

Fedora Linux 9432 Published 2026-07-29 07:12 by Philipp Esselbach 0

Fedora released a batch of security patches for versions 43 and 44 on July 29, 2026. The update addresses critical flaws in five packages: Chromium, restic, kronosnet, btrbk, and gpsd. System administrators should apply these fixes to resolve sandbox escapes, command injection risks, memory corruption bugs, and multiple cryptographic vulnerabilities tracked under specific CVE identifiers. Users can install the patches by running dnf upgrade --advisory [update-ID] from their terminal.

Fedora 43 Update: chromium-150.0.7871.186-1.fc43
Fedora 43 Update: restic-0.19.1-1.fc43
Fedora 43 Update: kronosnet-1.35-1.fc43
Fedora 43 Update: btrbk-0.32.7-1.fc43
Fedora 43 Update: gpsd-3.26.1-7.fc43
Fedora 44 Update: chromium-150.0.7871.186-1.fc44
Fedora 44 Update: kronosnet-1.35-1.fc44
Fedora 44 Update: restic-0.19.1-1.fc44

Samba, OpenJDK, HPLIP and libraw updates for Debian

Debian 11013 Published 2026-07-29 07:07 by Philipp Esselbach 0

Debian released security advisories covering critical updates for Samba, OpenJDK Java runtimes, HPLIP printing software, libxfont1, and libraw image library across stable and LTS distributions. The advisories remediate vulnerabilities that could allow attackers to achieve privilege escalation, arbitrary code execution, domain takeover, sandbox bypasses, or data corruption through specially crafted inputs targeting buffer handling and decoder routines in these applications.

[DSA 6401-1] samba security update
[DLA 4703-1] openjdk-17 security update
[DLA 4702-1] openjdk-11 security update
ELA-1787-1 openjdk-11 security update (by )
[DSA 6402-1] hplip security update
ELA-1788-1 libxfont1 security update (by )
[DLA 4704-1] libraw security update

Sssd, Kernel, Dovecot, go-fdo-server updates for AlmaLinux

AlmaLinux 2614 Published 2026-07-29 07:01 by Philipp Esselbach 0

AlmaLinux released security updates for packages including sssd, kernel, kernel-rt, dovecot, go-fdo-server, and go-fdo-client across AlmaLinux versions 8 and 10. The sssd update addresses privilege escalation via sudo LDAP provider searches (CVE-2026-14474) and Kerberos authentication bypass through GPO cache path traversal (CVE-2026-14476), while also resolving bugs in the AD UPN override tool. Kernel and kernel-rt packages fix a use-after-free vulnerability in ipv6 ICMPv6 handling (CVE-2026-53006), and dovecot resolves a denial of service issue caused by excessive IMAP bracing (CVE-2026-42006). The go-fdo-server and go-fdo-client updates for AlmaLinux 10 patch privilege escalation via Punycode processing (CVE-2026-39821) and denial of service attacks targeting DNS SAN entries (CVE-2026-27145).

ALSA-2026:46990: sssd security, bug fix, and enhancement update (Important)
ALSA-2026:47011: kernel security update (Important)
ALSA-2026:47010: kernel-rt security update (Important)
ALSA-2026:46532: dovecot security update (Important)
ALSA-2026:46395: go-fdo-server security update (Important)
ALSA-2026:46394: go-fdo-client security update (Important)

PHP 8.5.9 and 8.2.33 Security Updates Drop Alongside 8.6 Alpha 3

Software 44634 Published 2026-07-28 19:36 by Philipp Esselbach 0

PHP tagged three releases in php/php-src on July 28, 2026, landing PHP 8.6.0alpha3 alongside security patches for both 8.5.9 and 8.2.33. Every active branch received the same synchronized patch set, addressing a stack-based out-of-bounds write in ext/bcmath, a pgsql SQL injection via backslash breakouts, a Phar circular symlink crash, and a libgd vulnerability. The 8.6 alpha cycle brings partial function application, a new clamp() function, and TAILCALL VM support on Windows, with the next snapshot expected around July 30. 8.5 users should watch php.net for the official bulletin, while 8.2 operators need to start planning a migration to 8.4 LTS or 8.5 before the maintenance branch hits end-of-life.

Samba Patches Critical Domain Takeover Flaws Across All Branches

Software 44634 Published 2026-07-28 19:15 by Philipp Esselbach 0

The Samba Team issued coordinated security updates for versions 4.24.5, 4.23.10, and 4.22.11 on July 28, 2026, addressing six vulnerabilities across all active maintenance branches. Two of these flaws, both rated CVSS 8.8 and discovered by OpenAI Security Research, allow low-privilege authenticated users to bypass LDAP access controls and fully compromise an Active Directory domain. Because no workarounds exist for the critical issues, administrators are strongly urged to apply the patches immediately to prevent domain takeover and cryptographic key extraction. The release also resolves additional medium-severity issues affecting DNS TSIG signing, KDC stability, and CTDB clustering protocol integrity.

PixiEditor 2.1.2.1 Update Expands Node Graph and Adds Tool Overhaul

Software 44634 Published 2026-07-28 18:57 by Philipp Esselbach 0

PixiEditor 2.1.2.1 has officially dropped, bringing a major expansion to its open-source 2D graphics workflow just a year after a complete engine rewrite. The update pushes heavy procedural additions into the node graph, including a Color Ramp, Vector Math, and Random node, alongside long-requested tools like Find and Replace and a Gradient Brush. Built on C# and AvaloniaUI, the free app now ships native builds for Windows, macOS, and Linux, with a paid Steam tier funding ongoing development. It's fast becoming a legitimate alternative to commercial pixel art and vector editors, though the rapid release cadence means you should expect a few rough edges until 2.2 stabilizes.

Valve Drops Proton 11.0-1b and 10.0-4b with Steamworks SDK 1.65

Software 44634 Published 2026-07-28 18:11 by Philipp Esselbach 0

Valve published Proton 11.0-1b and 10.0-4b on July 28 to add official compatibility for the newly released Steamworks SDK 1.65. Both builds include a networking patch that resolves a persistent 32-bit to 64-bit data alignment issue under WoW64 prefixes. The 10.0-4b drop also folds in a background optimization that trims unnecessary environment variable calls during Steamworks initialization. Linux gamers running either the stable 11.x stack or the older 10.x branch can grab the updates automatically through Steam's compatibility settings.

PC Cases, Gaming Prebuilts, Halo Benchmarks, Keyboards, PSUs, and SSDs Reviewed

Reviews 52702 Published 2026-07-28 08:07 by Philipp Esselbach 0

Endorfy’s Fishtank 6000 Corona offers striking aesthetics but falls short on airflow, while the Framework Laptop 13 Pro and CyberPowerPC Infinity U7 Plus deliver polished designs for builders and gamers alike. Microsoft’s Unreal Engine 5 remake of Halo: Combat Evolved pushes hardware hard, requiring extensive testing across thirty-five discrete graphics cards and dozens of handheld PCs to map out performance and VRAM demands. The Logitech G512 X 98 keyboard introduces a magnetic switch system for quick customization, the COUGAR GR 1000 power supply undercuts rivals at $129 with full ATX 3.1 compliance, and Biwin’s M560 solid-state drive tops DRAMless benchmarks with 11,000 megabytes per second of read speed. Independent lab results across these categories give shoppers precise metrics for upgrading workstations, purchasing prebuilt rigs, or tracking modern game optimization on current PC components.

Casing: Endorfy Fishtank 6000 Corona review: a handsome but expensive panoramic PC case
Computers: Framework Laptop 13 Pro review: It cleans up nice, CyberPowerPC Infinity U7 Plus Review (270K Plus + 5070 Ti)
Gaming: Halo: Campaign Evolved Handheld Performance Review, Halo: Campaign Evolved Performance Benchmark Review - 35 GPUs Tested
Input: Logitech G512 X 98 Analog Mechanical Gaming Keyboard Review - An Innovative Two-in-One
Power: COUGAR GR 1000 PSU Review
Storage: Biwin M560 2TB SSD Review - Best Overall Retail-Ready DRAMless SSD

Roc Toolkit, Glibc, and FreeIPMI updates for Ubuntu

Ubuntu 7167 Published 2026-07-28 07:37 by Philipp Esselbach 0

Ubuntu released three security notices addressing vulnerabilities in Roc Toolkit, GNU C Library, and FreeIPMI across multiple LTS releases. The glibc update resolves seven flaws including heap buffer overflows in scanf functions and incorrect DNS response handling that could allow denial of service or arbitrary code execution; systems running Ubuntu 26.04, 24.04, and 22.04 LTS must reboot after applying the libc6 package update. Roc Toolkit requires a libroc0.4 update to fix a crash vector triggered by malformed WAV files, while the FreeIPMI patch corrects buffer overflow issues in IPMI OEM message processing that could enable local denial of service attacks on systems ranging from Ubuntu 14.04 LTS through 26.04 LTS.

[USN-8612-1] Roc Toolkit vulnerability
[USN-8611-1] GNU C Library vulnerabilities
[USN-8613-1] FreeIPMI vulnerabilities

Glib2, python-Pillow, Chromium, Linux Kernel Live Patches, and Core System updates for SUSE

SUSE 5722 Published 2026-07-28 07:32 by Philipp Esselbach 0

Kernel, Libpq, and Libreswan updates for Rocky Linux

Rocky Linux 966 Published 2026-07-28 07:27 by Philipp Esselbach 0

Rocky Linux issued important security errata covering kernel, kernel-rt, libpq, compat-openssl11, and libreswan packages for Rocky Linux 8, 9, 10, and SIG Cloud releases. Kernel updates appear in separate advisories for the real-time variant on version 8 and the standard kernel across versions 8, 9, 10, plus specific cloud-focused builds for SIG Cloud 8 and 9. Non-kernel advisories deliver libpq maintenance for Rocky Linux 9 and 10 alongside compat-openssl11 and libreswan corrections for version 9. Each vulnerability carries a Common Vulnerability Scoring System base score, allowing users to assess severity levels via the provided CVE list before installing the updates.

RLSA-2026:45116: Important: kernel-rt security update
RLSA-2026:45115: Important: kernel security update
RLSA-2026:45114: Important: kernel security update
RLSA-2026:44391: Important: libpq security update
RLSA-2026:44308: Important: libpq security update
RLSA-2026:44438: Important: compat-openssl11 security update
RLSA-2026:46397: Important: libreswan security update
RXSA-2026:45192: Important: kernel security, bug fix, and enhancement update
RXSA-2026:45115: Important: kernel security update
RLSA-2026:45192: Important: kernel security, bug fix, and enhancement update

Kernel-RT, TigerVNC, SSSD, and more updates for RHEL

Red Hat 9473 Published 2026-07-28 07:24 by Philipp Esselbach 0

Perl-Mojolicious, RPM Command, Opkssh updates for Fedora

Fedora Linux 9432 Published 2026-07-28 07:21 by Philipp Esselbach 0

Fedora administrators should apply new security advisories for versions 43 and 44 that address critical flaws across three packages: perl-Mojolicious, rpm, and opkssh. The perl-Mojolicious update to version 9.48 resolves a BREACH attack vulnerability where CSRF tokens were previously exposed through compression oracle techniques, now masking tokens with fresh random values per request. Meanwhile, the rpm rebase to version 6.0.2 patches two distinct issues including a heap buffer overflow in NDB slot table parsing and a command injection flaw within rpmuncompress triggered by unescaped archive directory names. Finally, opkssh moves to version 0.16.0 with an upgraded openpubkey dependency that fixes GQ-commitment PK Token weaknesses affecting GitLab-CI workflows, though current opkssh usage does not reach the vulnerable code path.

Fedora 43 Update: perl-Mojolicious-9.48-1.fc43
Fedora 43 Update: rpm-6.0.2-1.fc43
Fedora 43 Update: opkssh-0.16.0-1.fc43
Fedora 44 Update: opkssh-0.16.0-1.fc44
Fedora 44 Update: perl-Mojolicious-9.48-1.fc44
Fedora 44 Update: rpm-6.0.2-1.fc44

Chromium security update for Debian

Debian 11013 Published 2026-07-28 07:18 by Philipp Esselbach 0

Debian Long Term Support released advisory DLA-4701-1 to update Chromium version 150.0.7871.181-1~deb12u1 on Debian 12 Bookworm. The patch resolves eighteen vulnerabilities identified under CVE identifiers from CVE-2026-15899 through CVE-2026-16424 that could enable arbitrary code execution, denial of service attacks, or unauthorized data access.

[SECURITY] [DLA 4701-1] chromium security update

Uibreswan and Grafana updates for AlmaLinux

AlmaLinux 2614 Published 2026-07-28 07:16 by Philipp Esselbach 0

AlmaLinux released four important security errata covering Libreswan across versions 8 through 10 and Grafana for version 8. The Libreswan updates patch four separate flaws that enable denial of service attacks or daemon crashes when attackers send malformed IKE packets or improperly formatted X.509 certificates. A dedicated Grafana release fixes a validation weakness in the go-billy Git library while adjusting a build macro for the Konflux pipeline. Operators need to deploy these patches immediately to close CVE gaps spanning from 2026-12413 through 2026-50722 before threat actors exploit the VPN tunneling weaknesses.

ALSA-2026:46398: libreswan security update (Important)
ALSA-2026:46397: libreswan security update (Important)
ALSA-2026:46391: grafana security, bug fix, and enhancement update (Important)
ALSA-2026:46396: libreswan security update (Important)

Windows

Linux

macOS

Community