Linux Compatible

BlueOnyx Hosting Control Panel Ships Three Updates Including AlmaLinux 10 Build with PHP 8.5 support

Software 44725 Published 2026-08-15 10:27 by Philipp Esselbach 0

BlueOnyx has refreshed its server distribution lineup with three concurrent generations, headlined by the new 5212R branch built on AlmaLinux 10 with PHP 8.5 and OpenSSL 4.x. The free, open-source hosting panel traces its lineage to Cobalt Networks and Sun Microsystems, offering a no-per-account-licensing alternative to cPanel across AlmaLinux 8, 9, and 10 bases. Recent updates include a newly released AI Assistant for server troubleshooting, a complete overhaul of 2FA implementation, and updated ISOs rebuilt with reproducible tooling for all three branches. Maintained by Michael Stauber, the project continues to provide a stable, multi-tenant web hosting platform complete with email, DNS, and database management without recurring licensing fees.

Hardware Roundup: Geekom GeekBook M16, Z Fold8, 6K Monitors, and Budget Gaming Gear

Reviews 52717 Published 2026-08-15 09:29 by Philipp Esselbach 0

Today's hardware roundup covers everything from Samsung’s passport-style Z Fold8 to a stripped-down 16-inch Geekom laptop that keeps Intel’s 16-core chip while cutting display and storage capacity. Desktop builders will find the Scythe Magoroku cooler worth a look for its standout RAM cooling, while G.Skill’s new EXPO-optimized DDR5 kit finally gives Ryzen users tighter memory sub-timings out of the box. The Samsung Odyssey G80HS 6K monitor delivers impressive pixel density and fast refresh rates, though you’ll need a serious GPU to push it at that resolution. Tying it all together is Corsair’s HS35 v3 Wireless headset, a budget pick that somehow nails sound, comfort, and mic quality without breaking the bank.

Raspberry Pi Imager 2.0.11 Adds Network Installer and Exclusive Drive Locks

Software 44725 Published 2026-08-15 09:02 by Philipp Esselbach 0

Raspberry Pi Imager 2.0.11 has arrived, introducing an embedded network installer and multi-frame .img.zst support in its latest stable update. This release doubles down on write reliability with exclusive drive locks on Windows and macOS, alongside a centralized credential hashing system for safer OS customisation. The build pipeline now supports rootless multi-arch builds and properly bundles transitive libraries for AppImages, though the intentional performance trade-off for data integrity remains in effect. You can grab the full set of assets, including CLI and embedded variants, from the official GitHub releases page.

D7VK 2.1 Brings Major Load-Time Optimizations and Surprising Performance Gains to Legacy DDraw Games on Linux

Software 44725 Published 2026-08-15 08:42 by Philipp Esselbach 0

D7VK 2.1 pivots from chasing raw FPS numbers to delivering deep load-time and startup optimizations for legacy Direct3D titles on Linux. Single developer WinterSnowfall reports that the update slashes loading screens by over 50% in select games while producing 3DMark scores on a 37-watt laptop that rival an RTX 4070 running older software builds. The patch also resolves long-standing compatibility issues, eliminating startup crashes in Arx Fatalis and fixing rendering artifacts in Resident Evil 2 and Empire Earth. You can grab the updated ddraw.dll directly from the project's GitHub repository and verify the layer is active using the DXVK_HUD=1 environment variable.

Shelly ALPM v3.0.6 Ships Valgrind and Leak Fixes for Arch

Software 44725 Published 2026-08-15 08:36 by Philipp Esselbach 0

Seafoam Labs released Shelly ALPM v3.0.6 on August 14, 2026, with a maintenance build that prioritizes code quality over new features. The update integrates Valgrind into the CI pipeline, patches the small heap leaks it uncovered, and corrects .desktop file and submenu ID handling for cleaner desktop environment integration. This patch follows the project's massive v3.0.0 overhaul in late July, which stripped the C# and .NET backend to rebuild the core, CLI, GTK4 frontend, and keyring natively in Zig.

OBS Studio 32.2.2 Drops: What Linux Users Need to Know Right Now

Software 44725 Published 2026-08-15 08:22 by Philipp Esselbach 0

OBS Studio 32.2.2 dropped on August 14 to patch a Windows plugin loading bug and unblock the app on macOS 12, but Linux users should hold their breath on package managers. The official Ubuntu PPA and Flathub Flatpak are still serving version 32.2.1, though direct .deb downloads are already live on GitHub for Ubuntu 24.04 and 26.04. Linux streamers will actually benefit more from the 32.2 feature wave, which finally fixes PipeWire drops on NVIDIA GPUs, restores VAAPI AV1 encoding over WHIP, and bumps OpenGL performance on low-end hardware.

KDE Frameworks 6.29.0 Released: KIO Redesign, Vi-Mode Overhaul, and Zip64 Support

KDE 1764 Published 2026-08-15 08:09 by Philipp Esselbach 0

KDE Frameworks 6.29.0 landed on Friday, August 14, 2026, bringing a comprehensive vi-mode overhaul to KTextEditor alongside zip64 archive handling and Hebrew calendar support in KArchive and KHolidays. The release features a fundamental restructuring of KIO's connection backend, routing in-process workers through a new thread-based transport to eliminate unnecessary IPC overhead, while KDav and KCodecs received significant network policy and encoding detection upgrades. Security and modernization improvements include a critical overflow fix in KFileMetaData, a KWallet refactoring that strips dead integrations, and expanded image format support for AVIF, JPEG XL, and HEIF. The update requires Qt 6.9.0 and is available now through standard distribution packages or the official KDE source mirrors.

AM 10.4.1 Fixes Silent Data Loss During AppImage Reinstall

Software 44725 Published 2026-08-15 08:01 by Philipp Esselbach 0

AppMan 10.4.1 resolves a critical data-loss regression introduced in the 10.4 release, where the reinstall command failed to preserve .home and .config directories for portable AppImages. The fix extends the backup-and-restore logic from the relocate option to reinstall, copying portable data to a temporary location before wiping the app directory to ensure a safety net for users. Alongside the hotfix, the update adds three new packages contributed by the community: PanConvert for document conversion, boris for behavioral observation, and t3-code for AI-assisted coding.

Chromium, Linux Kernel RT, Dracut updates for SUSE

SUSE 5738 Published 2026-08-15 07:45 by Philipp Esselbach 0

SUSE issued a coordinated set of important and moderate security patches across openSUSE Leap, Tumbleweed, and SUSE Linux Enterprise environments to address dozens of active CVEs. The releases neutralize high-risk flaws ranging from use-after-free memory corruption in Chromium and a root code execution vulnerability in Dracut to seventy-five kernel defects affecting real-time system stability. Additional updates resolve authentication bypasses in the himmelblau directory service, heap corruption in pgadmin4, and multiple command injection risks tied to ansible and 7zip utilities.

openSUSE-SU-2026:0284-1: important: Security update for chromium
SUSE-SU-2026:3611-1: important: Security update for dracut
SUSE-SU-2026:3612-1: important: Security update for dracut
SUSE-SU-2026:3617-1: important: Security update for the Linux Kernel
openSUSE-SU-2026:21573-1: important: Security update for himmelblau
openSUSE-SU-2026:11506-1: moderate: kernel-devel-7.1.8-1.1 on GA media
openSUSE-SU-2026:11509-1: moderate: python3-ansible-compat-26.8.0-1.1 on GA media
openSUSE-SU-2026:11502-1: moderate: 7zip-26.02-2.1 on GA media
openSUSE-SU-2026:11510-1: moderate: python313-nltk-3.10.2-1.1 on GA media
openSUSE-SU-2026:11503-1: moderate: ansible-lint-26.8.0-1.1 on GA media
openSUSE-SU-2026:11508-1: moderate: pgadmin4-9.17-1.1 on GA media
openSUSE-SU-2026:11507-1: moderate: molecule-26.8.0-1.1 on GA media
openSUSE-SU-2026:11504-1: moderate: dracut-112+suse.29.gc0c5e1d-1.1 on GA media

Kernel, .NET 8/9, BIND, and Dracut updates for Rocky Linux

Rocky Linux 979 Published 2026-08-15 07:39 by Philipp Esselbach 0

Red Hat OpenStack Platform update for RHEL

Red Hat 9488 Published 2026-08-15 07:37 by Philipp Esselbach 0

Red Hat has released RHSA-2026:54757, a security update for OpenStack Platform 16.2 (Train). Product Security classified this patch with an Important impact rating to address known vulnerabilities in the distribution.

RHSA-2026:54757: Important: Red Hat OpenStack Platform 16.2 security advisory

.NET, OpenJDK, BIND, UEK, and FreeRDP updates for Oracle Linux

Oracle Linux 6534 Published 2026-08-15 07:36 by Philipp Esselbach 0

Haveged and HTTP-Daemon updates for Gentoo Linux

Gentoo 2534 Published 2026-08-15 07:33 by Philipp Esselbach 0

Gentoo Linux issued two security advisories this month to address distinct software vulnerabilities. GLSA 202608-11 fixes a high-severity privilege escalation flaw in haveged that could allow local attackers to gain root access. GLSA 202608-10 corrects a header handling inconsistency in HTTP-Daemon that risks API abuse or cache poisoning. Users need to upgrade haveged to version 1.9.21 and HTTP-Daemon to version 6.160.0 to resolve both issues.

[ GLSA 202608-11 ] haveged: Privilege escalation
[ GLSA 202608-10 ] HTTP-Daemon: Improper header handling

Chromium, pdns, PHP CodeSniffer, libsoup3, and perl-Archive-Tar updates for Fedora

Fedora Linux 9452 Published 2026-08-15 07:31 by Philipp Esselbach 0

Fedora shipped security patches for Fedora 43 and 44 targeting five major packages. Chromium 151.0.7922.137 closes five use-after-free vulnerabilities spanning V8, TabStrip, Extensions, HTML, and Blink. PHP CodeSniffer 4.0.4 squashes a shell injection flaw in blame reporting tools and adds tokenizer support for PHP 8.5. Remaining updates bring PowerDNS to 5.0.7, lock three additional CVEs inside libsoup3, and bump perl-Archive-Tar to block a tar header parsing denial-of-service bug.

Fedora 43 Update: chromium-151.0.7922.137-1.fc43
Fedora 43 Update: pdns-5.0.7-1.fc43
Fedora 43 Update: php-pear-PHP-CodeSniffer-4.0.4-1.fc43
Fedora 43 Update: perl-Archive-Tar-3.12-1.fc43
Fedora 44 Update: libsoup3-3.6.6-9.fc44
Fedora 44 Update: chromium-151.0.7922.137-1.fc44
Fedora 44 Update: pdns-5.0.7-1.fc44
Fedora 44 Update: php-pear-PHP-CodeSniffer-4.0.4-1.fc44

Python-httplib2, Unzip, Zip, Util-Linux, Postgresql, and CA-Certificates-Java updates for Debian

Debian 11040 Published 2026-08-15 07:25 by Philipp Esselbach 0

Debian published six security and bugfix advisories, delivering updated packages for python-httplib2, unzip, zip, util-linux, postgresql-15, and ca-certificates-java across the stable trixie and bookworm distributions. The python-httplib2 patch resolves an unbounded decompression flaw that could cause a denial of service, while refreshed unzip and zip utilities block arbitrary code execution and command injection attacks triggered by malformed archive inputs. Operators need to upgrade util-linux to neutralize multiple privilege escalation risks, and postgresql-15 administrators must apply a configuration tweak to lock down logical decoding output plugins after patching over two dozen CVEs that previously allowed unauthorized access or data leaks. Applying these package updates immediately will close the newly disclosed vulnerabilities and keep affected systems aligned with current security baselines.

[DSA 6441-1] python-httplib2 security update
[DSA 6440-1] unzip security update
[DSA 6439-1] zip security update
ELA-1809-1 ca-certificates-java bugfix update (by )
[DSA 6442-1] util-linux security update
[DLA 4740-1] postgresql-15 security update

.NET, BIND, FreeRDP, and Kernel updates for AlmaLinux

AlmaLinux 2627 Published 2026-08-15 07:22 by Philipp Esselbach 0

HestiaCP 1.10.2 Released: Security Patches and DNS Fixes

Software 44725 Published 2026-08-14 14:47 by Philipp Esselbach 0

HestiaCP 1.10.2 has arrived as a service release, dropping just 17 hours after the massive 1.10.0 major update to address three immediate regressions. The hotfix patches two session-isolation vulnerabilities in the bundled file manager that could allow cross-user access to batch downloads and chunked uploads. It also corrects the Bind DNS SOA EXPIRE value to 1,209,600 seconds for better compliance and fixes a regression where sourcing /etc/os-release could overwrite the internal version variable during upgrades. Users on the 1.10.x branch can apply the changes now via the standard upgrade path.

KDE neon 20260813: Plasma 6.7.4 Weekly ISO Refresh on Ubuntu 24.04 LTS

KDE 1764 Published 2026-08-14 08:25 by Philipp Esselbach 0

KDE has released the neon-user-desktop-20260813-0523 ISO, delivering a steady weekly refresh built on Ubuntu 24.04 LTS. The build maintains Plasma 6.7.4, KDE Gear 26.04.3, and Frameworks 6.28.0 while layering in HWE kernel 7.0.0-28, Mesa 25.2.8, and upstream Noble security patches. Notable additions include the long-awaited per-screen virtual desktops, simultaneous HDR and ICC color management, and restored parity for the classic Oxygen theme ahead of KDE's 30th anniversary. Users can pull the update via neon-upgrade, while developers tracking bleeding edge features should monitor the parallel Testing and Unstable build streams.

Hardware Roundup: $799 GEEKOM IT13 Mini PC, 1200W SFX-L PSU, and Budget Mice

Reviews 52717 Published 2026-08-14 08:11 by Philipp Esselbach 0

Today's hardware roundup covers a mix of compact builds and budget peripherals, highlighted by the $799 GEEKOM IT13 Max mini PC and the 1,200W FSP DAGGER PM SFX-L power supply. The GEEKOM IT13 Max delivers solid Meteor Lake performance for esports and productivity, though soldered RAM and a 500 GB SSD will limit long-term upgradability. Corsair's new Hall-effect controller and the Epomaker Nex Lite mouse chase low-latency and affordable gaming niches, while Alphacool's rebranded Apex 2 thermal paste proves compound consistency beats brand logos. XPG and MONTECH round out the showcase with clean RGB memory and a stepped mid-tower, but reviewers warn that Maxsun's new B850M motherboard is already priced above MSRP.

Epic Games Store Linux Client Coming Soon, But EOS Anti-Cheat Is the Real Hurdle

General 8075 Published 2026-08-14 07:53 by Philipp Esselbach 0

Epic Games confirmed via a Discord AMA that a native Linux client for the Epic Games Store is in development and coming "soon," though it will be excluded from the upcoming preview build due to necessary architectural changes. This move parallels GOG's own efforts to build a native Linux Galaxy client, signaling a broader industry shift toward official Linux support driven by the Steam Deck's success. While a native launcher will improve performance and simplify setup for Linux gamers, the availability of multiplayer titles like Fortnite hinges on whether Epic can successfully port its EOS anti-cheat system to the platform. Until that happens, users will continue relying on Heroic Games Launcher, the open-source tool that currently bridges the gap using Wine and Proton.

PHP 8.4.25RC1 and 8.5.10RC1 Now in Remi's RPM Repository for Fedora and RHEL

Fedora Linux 9452 Published 2026-08-14 07:35 by Philipp Esselbach 0

Remi Collet’s RPM repository has published Release Candidate 1 packages for PHP 8.4.25 and 8.5.10, targeting Fedora 43–44 and Enterprise Linux eight and newer. Administrators can install them as base system packages through the remi-modular-test repository or run them in parallel via the remi-test Software Collection. Since RC builds follow a strict freeze policy, these packages closely mirror the stable releases Remi expects to ship in March 2027. The repository also includes a beta build of PHP 8.6 alongside the official security-only status of the older 8.3 branch.

Kubuntu Focus Backs Plasma 6.6 LTS With $100K+ Funding to Solve Linux Desktop's Support Gap

KDE 1764 Published 2026-08-14 07:27 by Philipp Esselbach 0

Kubuntu Focus, Techpaladin Software, and KDE e.V. have launched a three-year sponsored LTS program for Plasma 6.6, committing over $100,000 to guarantee security patches and bug fixes through Kubuntu 26.04's lifecycle. Techpaladin, the engineers behind the Steam Deck's desktop UX, acts as the primary technical steward for the backports while KDE e.V. uses the funding to deploy three new CI nodes for hardware validation. The move targets enterprise and government buyers hungry for a stable, privacy-focused Windows alternative, though the inclusion of Kubuntu Focus's proprietary "Focus Tools" adds a layer of commercial tension to the digital sovereignty pitch. While the initiative successfully plugs a long-standing gap in Linux desktop support, it leaves the funding model for Plasma 7.x uncharted once the current Kubuntu release reaches end-of-life.

Liquorix Kernel 7.1-12 Kernel Released With Project-C Scheduler Optimizations

Debian 11040 Ubuntu 7183 Arch Linux 990 Published 2026-08-14 07:05 by Philipp Esselbach 0

Steven Barrett has released Liquorix Kernel 7.1-12, continuing a rapid four-day iteration cycle with eleven targeted patches to Project-C, the project's custom sched/alt scheduler. The update prioritizes reduced task-switching overhead through improved fork handling, hybrid CPU idle-mask tracking, and atomic operation reductions designed specifically for gaming and audio production workloads. While AMD64 users can upgrade immediately via the official repositories, the project currently hosts several open AMDGPU stability reports that may warrant monitoring before switching from stock kernels. Users looking to install the latest build can pull it directly from the Debian, Ubuntu, or Arch Linux repositories today.

Bottles 66.6 Drops Six Hotfixes in Under 28 Hours

Software 44725 Published 2026-08-14 06:48 by Philipp Esselbach 0

Bottles 66.0 lis now available, introducing UMU launcher integration, ProtoSoda as the default runtime, and an experimental cpak package format. Instead of letting the major release settle, the team pushed five consecutive hotfixes between August 12 and August 14 to patch Flatpak path regressions, Steam runtime argument handling, and DLL case sensitivity issues. The intense two-day sprint not only stabilized the new features but also brought two new developers into the contributor ranks.

Linux Kernel and Axios updates for Ubuntu

Ubuntu 7183 Published 2026-08-14 06:31 by Philipp Esselbach 0

Ubuntu issued a coordinated set of security notices, patching dozens of vulnerabilities across the Linux kernel and the Axios Node.js HTTP client. The kernel updates span Ubuntu 16.04 through 26.04 LTS and cover cloud, OEM, and specialized hardware variants including Oracle, AWS, Azure, Google Cloud, and NVIDIA Tegra distributions. Key fixes address WiFi mesh network packet injection, a logic flaw labeled Fragnesia that enables local privilege escalation and container escapes, and prototype pollution bugs in Axios that allow proxy restrictions to be bypassed.

[USN-8631-2] Linux kernel (Oracle) vulnerabilities
[USN-8637-1] Linux kernel (OEM) vulnerabilities
[USN-8630-2] Linux kernel vulnerabilities
[USN-8633-2] Linux kernel vulnerabilities
[USN-8631-3] Linux kernel (NVIDIA Tegra IGX) vulnerabilities
[USN-8529-2] Linux kernel vulnerabilities
[USN-8530-2] Linux kernel (HWE) vulnerabilities
[USN-8548-2] Linux kernel vulnerabilities
[USN-8638-1] Axios vulnerabilities

Kernel and OpenSSH updates for SUSE

SUSE 5738 Published 2026-08-14 06:29 by Philipp Esselbach 0

SUSE issued two important security advisories to patch major vulnerabilities in the Linux kernel and OpenSSH for SUSE Linux Enterprise 15 SP6 and 15 SP7 systems. The kernel advisory addresses 77 distinct vulnerabilities across networking, storage, virtualization, and graphics drivers, while the OpenSSH advisory resolves eight flaws tied to SFTP file placement bypasses, scp cross-server copy errors, and pre-authentication denial of service conditions.

SUSE-SU-2026:3602-1: important: Security update for the Linux Kernel
SUSE-SU-2026:3605-1: important: Security update for openssh

Rsync update for Slackware

Slackware 1286 Published 2026-08-14 06:27 by Philipp Esselbach 0

The Slackware Linux Security Team released package SSA:2026-225-01 to patch known vulnerabilities and resolve bugs in rsync 3.5.0. This update applies directly to both Slackware 15.0 and the ongoing -current branch. Users can download the official i586 and x86_64 builds from the standard Slackware FTP mirrors before installing them with the root upgradepkg command

rsync (SSA:2026-225-01)

Kernel, Python, PHP, Grafana, and FreeRDP updates for Rocky Linux

Rocky Linux 979 Published 2026-08-14 06:25 by Philipp Esselbach 0

Bind, .NET, Gstreamer, and Dracut updates for RHEL

Red Hat 9488 Published 2026-08-14 06:24 by Philipp Esselbach 0

Freerdp, Grafana, Kernel, and Python-idna updates for Oracle Linux

Oracle Linux 6534 Published 2026-08-14 06:22 by Philipp Esselbach 0

Oracle issued a new wave of updates for Oracle Linux 7, 8, 9, and 10, delivering critical security patches and bug fixes across a broad range of system components. Significant advisories include important security fixes for the Unbreakable Enterprise kernel, freerdp, java-17-openjdk, and python3.9, alongside moderate updates for python-idna, grafana, and libpng. The release also addresses stability issues through bug fix updates for makedumpfile, crash, kexec-tools, systemd, and perl-DBI across the supported operating system versions.

ELSA-2026-54486 Important: Oracle Linux 10 freerdp security update
ELSA-2026-54481 Moderate: Oracle Linux 10 python-idna security update
ELSA-2026-54178 Moderate: Oracle Linux 10 grafana security, bug fix, and enhancement update
ELSA-2026-36541 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update
ELBA-2026-500170 Oracle Linux 10 makedumpfile bug fix update
ELBA-2026-500168 Oracle Linux 10 crash bug fix update
ELSA-2026-54268 Important: Oracle Linux 9 python3.9 security update
ELSA-2026-42887 Important: Oracle Linux 9 java-17-openjdk security update
ELBA-2026-500163 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500169 Oracle Linux 9 kexec-tools bug fix update
ELBA-2026-500167 Oracle Linux 9 crash bug fix update
ELBA-2026-500163 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500164 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELSA-2026-54290 Moderate: Oracle Linux 8 python-idna security update
ELSA-2026-54243 Important: Oracle Linux 8 grafana security update
ELSA-2026-53848 Important: Oracle Linux 8 isns-utils security update
ELSA-2026-52772 Important: Oracle Linux 8 perl-DBI:1.641 security update
ELSA-2026-52765 Moderate: Oracle Linux 8 kernel security update
ELBA-2026-500164 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500148 Oracle Linux 8 systemd bug fix update
ELBA-2026-500164 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update
ELSA-2026-51183 Important: Oracle Linux 7 glib2 security update
ELSA-2026-51063 Important: Oracle Linux 7 libXfont2 security update
ELSA-2026-50808 Moderate: Oracle Linux 7 libpng security update
ELSA-2026-49603 Important: Oracle Linux 7 gstreamer1-plugins-good security update

Bubblewrap, Apache HTTPD, Exim, Flatpak, Dnsmasq, libinput, and rsync updates for Gentoo

Gentoo 2534 Published 2026-08-14 06:20 by Philipp Esselbach 0

Gentoo Linux released seven high-severity security advisories in mid-August 2026 targeting widely used system utilities and network services. The vulnerabilities span critical attack vectors, including root privilege escalation in Bubblewrap and rsync, remote code execution in Dnsmasq and Exim, sandbox escape in Flatpak, and input device handling flaws in libinput. Apache HTTPD received the largest single patch addressing 41 tracked issues ranging from denial of service to remote code execution.

[ GLSA 202608-09 ] Bubblewrap: Root privilege escalation
[ GLSA 202608-08 ] libinput: Multiple Vulnerabilities
[ GLSA 202608-06 ] Flatpak: Multiple Vulnerabilities
[ GLSA 202608-07 ] Exim: Multiple Vulnerabilities
[ GLSA 202608-05 ] Apache HTTPD: Multiple Vulnerabilities
[ GLSA 202608-04 ] Dnsmasq: Multiple Vulnerabilities
[ GLSA 202608-03 ] rsync: Multiple Vulnerabilities

Erlang-cowlib/cowboy, libnfs, Flatpak updates for Fedora

Fedora Linux 9452 Published 2026-08-14 06:18 by Philipp Esselbach 0

Fedora 43 pushes security updates for erlang-cowlib and erlang-cowboy that fix CVE-2026-59248, allowing unbounded HPACK and QPACK prefixed-integer decoding to cause a denial of service. Fedora 44 delivers the matching Erlang packages while adding cookie parsing limits, HTTP/2 CONTINUATION frame rejection, and the removal of concurrent pipelined HTTP/1.1 request processing to strengthen protocol handling. Fedora 44 administrators must also apply the flatpak 1.18.1 release and a libnfs update that resolves CVE-2026-57918 and CVE-2026-53689 to block information disclosure and data corruption in NFS connections.

Fedora 43 Update: erlang-cowlib-2.19.0-1.fc43
Fedora 43 Update: erlang-cowboy-2.18.0-1.fc43
Fedora 44 Update: flatpak-1.18.1-1.fc44
Fedora 44 Update: libnfs-6.0.2-9.fc44
Fedora 44 Update: erlang-cowlib-2.19.0-1.fc44
Fedora 44 Update: erlang-cowboy-2.18.0-1.fc44

Xorg-Server, Chromium, PostgreSQL 17, and more updates for Debian

Debian 11040 Published 2026-08-14 06:16 by Philipp Esselbach 0

Debian has released latest security patches to address flaws across xorg-server, Chromium, PostgreSQL 17, apr-util, xdg-dbus-proxy, and python-django. The advisories target race conditions, stack buffer overflows, use-after-free errors, and malformed request handling that could allow privilege escalation, arbitrary code execution, or data exposure. Each affected package now includes fixed versions for Debian 11, Debian 12, and the Debian 13 stable distribution.

[DLA 4738-1] xorg-server security update
[DLA 4737-1] xorg-server security update
[DSA 6433-1] xdg-dbus-proxy security update
ELA-1808-1 python-django security update (by )
[DSA 6437-1] apr-util security update
[DSA 6436-1] chromium security update
[DLA 4739-1] chromium security update
[DSA 6438-1] postgresql-17 security update

Kernel, Vim, FreeRDP, and Xwayland updates for AlmaLinux

AlmaLinux 2627 Published 2026-08-14 06:14 by Philipp Esselbach 0

Windows

Linux

macOS

Community