Product
Last Report

Click here to browse the Windows compatibility database

Click here to browse the Linux compatibility database

Click here to browse the macOS compatibility database

Date: 2026-05-30 17:10 | Last update:



2026-05-30

Software 44424 Published by Philipp Esselbach 0

Wine Staging 11.10 pushes experimental graphics and threading patches to Linux users without waiting for mainline development cycles. The build addresses specific compatibility issues like washed out textures, audio stuttering from timer resolution bugs, and window composition glitches in modern Windows titles. Installing the update requires backing up existing prefix directories first, since mixing staging binaries with stable releases frequently corrupts registry entries and breaks game configurations. Running a single test application before full deployment catches rare regressions while keeping the system reliable for everyday use.

Software 44424 Published by Philipp Esselbach 0

Bottles 64.1 patches a sandbox bug that kept Windows programs from launching when stored outside the container directory. The update restores proper path resolution and environment variable handling, which eliminates those silent permission loops that usually force users into manual workarounds. Anyone running mixed Linux and Windows workflows should pull the latest package through their preferred distribution method to verify the fix. Legacy applications may still require registry tweaks or missing redistributables, but this release noticeably smooths out daily operations for most users.

Software 44424 Published by Philipp Esselbach 0

ROCm 7.2.4 delivers targeted performance patches for AI inference workloads running on AMD Instinct GPUs, focusing on latency reduction and stability improvements. The update trims hipGraphLaunch dispatch delays, fixes a memory copy regression in CPX mode for MI300 series cards, and cleans up profiling traces that previously showed phantom idle gaps during vLLM execution. MIGraphX gains optimizations to skip redundant tensor copies at small batch sizes, though int8-quantized models may experience a minor throughput dip until AMD addresses it. Server administrators should verify firmware compatibility before upgrading and plan their migration away from deprecated profiling tools well ahead of the 2026 end-of-support deadline.

Software 44424 Published by Philipp Esselbach 0

Wine 11.10 delivers a practical update that replaces the heavy libxml2 dependency with a faster built-in XPath engine while upgrading vkd3d to version two point zero for smoother Direct3D 12 performance. The release tightens VBScript compatibility and patches memory leaks in DirectSound and Bluetooth stacks, which stops legacy installers and automation scripts from crashing or hanging at full CPU load. Targeted fixes resolve rendering failures in Age of Empires III, audio glitches in Star Wars Racer, and font display issues in Photolemur by correcting how Windows APIs translate to Linux desktop environments. Users can grab the source tarball or check community repositories for precompiled binaries, though testing this development build on a secondary machine is still the safest approach before upgrading production systems.

Reviews 52651 Published by Philipp Esselbach 0

Here is today's reviews roundup. The MSI Raider 16 Max HX laptop delivers serious processing power for demanding tasks while maintaining a sleek design that appeals to both gamers and professionals. Corsair introduces its iCue Link Titan 360 RX LCD cooler, which pairs wireless fan connections with an integrated display panel to challenge competitors on noise levels and thermal performance. Intel Z890 and B850 chipsets get fresh attention through the GIGABYTE AORUS ELITE DUO X and ASUS ProArt boards, though buyers should weigh the missing Thunderbolt support against the affordable pricing. QIDI completes this daily roundup with a spacious 3D printer that prioritizes fast printing speeds, steady heat management, and smooth color switching for demanding workflows.

Computers: MSI Raider 16 Max HX Review: 300W Of Power In A Beastly Laptop
Cooling: Corsair iCue Link Titan 360 RX LCD Review, Performance Computing Inquisitor
Motherboards: GIGABYTE Z890 AORUS ELITE DUO X Review, ASUS ProArt B850-Creator Wi-Fi Neo Review
Printers: QIDI Max 4 Combo 3D Printer Review

Rocky Linux 920 Published by Philipp Esselbach 0

Rocky Linux 10.2 drops straight into production with a simple upgrade command for existing v10 systems, though older releases still demand fresh installs and stricter x86_64-v3 hardware baselines. The kernel gets sharper performance monitoring tools and better encrypted storage crash handling, while OpenSSH and libssh finally adopt hybrid post-quantum key exchange methods to future-proof authentication pipelines. Developers get a refreshed toolchain with GCC 15 and updated debuggers, but the real headache comes from running both PHP 8.3 and 8.4 side by side without careful dependency tracking. Administrators who verify CPU compatibility and lock down package versions before deploying will avoid unnecessary downtime while taking advantage of these solid infrastructure upgrades.

Software 44424 Published by Philipp Esselbach 0

Bottles 64.0 addresses the interface lag and broken desktop shortcuts that have frustrated Linux users running Windows software. The update introduces faster startup times, proper handling of app names with spaces, and reliable offline mode so setup processes no longer hang indefinitely. Built-in Eagle security scanning now warns about potentially malicious executables before they run, while improved sandbox management keeps background processes from leaking into the host system. Anyone managing a mixed Linux and Windows workflow will find this release significantly more stable and easier to maintain without constant manual tweaks.

Security 10956 Published by Philipp Esselbach 0

Servers running Exim versions between 4.88 and 4.99.3 leak uninitialized stack memory straight into SMTP banners when processing malformed proxy headers. Attackers can grab those raw bytes to map out system memory layouts and bypass modern address space randomization protections. Rolling out version 4.99.4 adds strict length checks that reject the bad frames before they touch sensitive data, while clearing the hosts_proxy directive disables the feature entirely until patches propagate. Mail admins should treat this as a high priority since leaving an unpatched relay open to the internet basically hands attackers a free memory map.

Software 44424 Published by Philipp Esselbach 0

The latest HestiaCP update finally resolves webmail DNS alias inconsistencies that previously broke email routing for domains using custom overrides. Server admins will also notice that rebuilding mail domains no longer wipes out existing SSL certificates, which saves hours of manual certificate reimporting. The release bumps Roundcube to version 1.6.16 to deliver standard stability improvements without adding unnecessary feature bloat. These targeted fixes address the most common daily hosting headaches while keeping active mail services completely uninterrupted during installation.

Software 44424 Published by Philipp Esselbach 0

MariaDB Community Server 12.3 LTS hits general availability with a rewritten binary log that pushes write throughput up by four times, letting you run heavier workloads without buying new hardware. The engine also optimizes vector distance calculations directly in storage, which means retrieval augmented generation pipelines can scale inside the same database instead of forcing you to maintain separate AI stacks. Legacy migration headaches drop significantly thanks to native caching_sha2_password support and Oracle syntax compatibility, though DBAs should still test query plans since optimizer hints like JOIN_FIXED_ORDER change how the engine routes complex joins. Backed by a three year maintenance window through June 2029, this release trades quarterly feature churn for predictable security patches that actually matter when production clusters are under pressure.

Software 44424 Published by Philipp Esselbach 0

Godot 4.7 Beta 4 arrives as the final development snapshot before the release candidate phase, shifting focus entirely to squashing regressions from earlier builds. The update tackles editor performance bottlenecks by optimizing file searches and fixing threading deadlocks that previously froze asset loading. Rendering stability gets a major boost with patches for Adreno GPU shader failures, material race conditions, and broken 3D autosmoothing. Interface glitches, import pipeline errors, and layout clipping issues round out the fixes as the engine prepares for its stable launch.

Software 44424 Published by Philipp Esselbach 0

Goverlay 1.8.2 finally replaces the abandoned vkbasalt stack with vksumi for smoother runtime color grading and better HDR compatibility on Linux. The update adds dedicated management controls for Heroic and Lutris titles while renaming the cluttered proton tweaks menu to a cleaner EnvVars section focused on latency reduction. Several quiet but important patches fix broken variable injection, restore missing sync buttons, and prevent file name write errors that used to crash launches. Players should test their custom overlays after updating since the new shader layer handles scaling differently than the old deprecated tools.

Software 44424 Published by Philipp Esselbach 0

Visual Studio Code 1.122.1 finally patches a bug that forced Linux users into an unwanted screen sharing permission loop every time the editor launched. The culprit was core workbench code triggering media capture requests during startup, which completely broke normal boot behavior on KDE Plasma 6 Wayland sessions. Updating to this release fixes the issue by tying the prompt strictly to explicit user actions like recording bug reports instead of firing automatically. Staying on version 1.122.0 guarantees repetitive permission dialogs that waste time and annoy privacy focused workflows, so grabbing the update is the only sensible move.

Ubuntu 7104 Published by Philipp Esselbach 0

Ubuntu issued a batch of security notices on May 28 and 29, 2026 to patch critical flaws across several widely used packages. The Apache HTTP Server correction finally restores the mod_http2 module after an earlier update accidentally broke its loading process. Meanwhile, developers temporarily rolled back a pip fix for CVE-2025-66471 because the initial patch triggered installation failures on Ubuntu 22.04 through 26.04. A separate vulnerability in the LibTIFF library also required immediate attention since malformed TIFF metadata could crash QT WebEngine, GDAL, or Texmaker and potentially allow attackers to execute arbitrary code.

[USN-8338-2] Apache HTTP Server regression
[USN-8344-2] pip regression
[USN-8347-1] QT WebEngine vulnerability
[USN-8345-1] GDAL vulnerability
[USN-8346-1] Texmaker vulnerabilities

SUSE 5662 Published by Philipp Esselbach 0

SUSE rolled out a massive wave of security advisories to patch dozens of critical flaws across their Linux distributions. The kernel update dominates this release by fixing more than two hundred distinct issues that span memory corruption bugs, network stack race conditions, and hardware virtualization gaps. Enterprise applications including Samba, GnuTLS, PostgreSQL, and Vim also received urgent corrections for remote code execution risks alongside several authentication bypass vulnerabilities. System administrators need to deploy these patches right away using standard zypper commands or the YaST interface before attackers can exploit the unmitigated weaknesses in live environments.

SUSE-SU-2026:2105-1: moderate: Security update for xdg-desktop-portal
SUSE-SU-2026:2108-1: critical: Security update for samba
SUSE-SU-2026:2107-1: important: Security update for podman
SUSE-SU-2026:2115-1: important: Security update for gnutls
SUSE-SU-2026:2116-1: moderate: Security update for csync2
SUSE-SU-2026:2119-1: important: Security update for python-urllib3
SUSE-SU-2026:2121-1: moderate: Security update for frr
SUSE-SU-2026:2117-1: important: Security update for postgresql14
openSUSE-SU-2026:0179-1: important: Security update for chromium
openSUSE-SU-2026:20827-1: important: Security update for python-mistune
openSUSE-SU-2026:20826-1: important: Security update for the Linux Kernel
openSUSE-SU-2026:20839-1: important: Security update for python-pytest-html
openSUSE-SU-2026:20833-1: important: Security update for trivy
openSUSE-SU-2026:20831-1: important: Security update for python-Pillow
openSUSE-SU-2026:20834-1: important: Security update for apptainer
openSUSE-SU-2026:20828-1: important: Security update for vim
openSUSE-SU-2026:20838-1: important: Security update for hauler
openSUSE-SU-2026:20821-1: moderate: Security update for localsearch
openSUSE-SU-2026:10874-1: moderate: bind-9.20.23-1.1 on GA media
openSUSE-SU-2026:10878-1: moderate: gdk-pixbuf-loader-libheif-1.22.2-1.1 on GA media
openSUSE-SU-2026:10879-1: moderate: libredwg-devel-0.13.4.8200-1.1 on GA media
openSUSE-SU-2026:10876-1: moderate: helm-4.2.0-3.1 on GA media
openSUSE-SU-2026:10875-1: moderate: hauler-1.4.3-4.1 on GA media
openSUSE-SU-2026:10873-1: moderate: azure-storage-azcopy-10.32.4-1.1 on GA media
openSUSE-SU-2026:10872-1: moderate: amazon-ssm-agent-3.3.4515.0-1.1 on GA media
openSUSE-SU-2026:10877-1: moderate: helm3-3.21.0-2.1 on GA media
openSUSE-SU-2026:10871-1: moderate: amazon-ecs-init-1.103.2-1.1 on GA media

Rocky Linux 920 Published by Philipp Esselbach 0

Rocky Linux administrators need to install multiple security patches across versions eight and ten to address newly discovered vulnerabilities in widely used software packages. The advisory list covers essential tools like flatpak, cockpit, systemd, and golang alongside specialized libraries such as python-gevent and edk2. CVSS ratings help operators prioritize these fixes quickly. These releases also deliver necessary bug corrections and performance enhancements that keep the operating system running smoothly without unnecessary downtime.

RLSA-2026:21756: Important: flatpak security update
RLSA-2026:21700: Important: cockpit security update
RXSA-2024:3138: Moderate: kernel security, bug fix, and enhancement update
RLSA-2025:11884: Important: unbound security update
RLSA-2024:8834: Important: python-gevent security update
RLBA-2025:0736: dnssec-trigger bug fix update
RLBA-2024:3238: shim bug fix and enhancement update
RLBA-2024:6979: stunnel bug fix update
RLSA-2026:18480: Important: linux-sgx security update
RLSA-2026:18344: Moderate: mingw-glib2 security update
RLSA-2026:19151: Important: jq security update
RLSA-2026:18162: Moderate: iputils security update
RLSA-2026:19155: Important: python-markdown security update
RLSA-2026:18153: Moderate: systemd security update
RLSA-2026:19054: Important: tomcat security update
RLSA-2026:19022: Important: golang security update
RLSA-2026:19042: Low: python-jwcrypto security update
RLSA-2026:18142: Low: NetworkManager security update
RLSA-2026:19020: Moderate: crun security update
RLSA-2026:19034: Moderate: python-tornado security update
RLSA-2026:19024: Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update
RLSA-2026:18465: Important: edk2 security update

Red Hat 9424 Published by Philipp Esselbach 0

Red Hat just pushed out OpenShift Container Platform version 4.16.63, which tackles multiple bugs while rolling in fresh enhancements for daily operations. The update focuses on the 4.16 branch and carries an important security rating from the product security team. You can find exact severity breakdowns by following the CVE links that point to detailed Common Vulnerability Scoring System metrics.

RHSA-2026:20087: Important: OpenShift Container Platform 4.16.63 bug fix and security update

Oracle Linux 6490 Published by Philipp Esselbach 0

Oracle recently pushed out a comprehensive set of security advisories for Linux versions seven through nine that tackle serious vulnerabilities across core system utilities and popular development frameworks. These releases fix critical weaknesses in the Cockpit management console, Firefox web browser, Flatpak container platform, and .NET runtime while also patching numerous memory handling bugs inside the Unbreakable Enterprise Kernel. System administrators need to apply these updates right away because multiple disclosed CVEs create direct pathways for attackers to execute arbitrary code or steal elevated privileges on vulnerable machines. You should always double check your installed package versions after rebooting to confirm that every security fix actually made it onto x86_64 and aarch64 servers without any leftover conflicts.

ELSA-2026-21700 Important: Oracle Linux 8 cockpit security update
ELSA-2026-21291 Important: Oracle Linux 8 .NET 8.0 security update
ELSA-2026-7292 Important: Oracle Linux 7 freerdp security update
ELSA-2026-21756 Important: Oracle Linux 8 flatpak security update
ELSA-2026-21382 Important: Oracle Linux 8 firefox security update
ELSA-2026-20929 Moderate: Oracle Linux 8 libexif security update
ELSA-2026-50275 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELSA-2026-50275 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
ELSA-2026-50275 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update

Fedora Linux 9367 Published by Philipp Esselbach 0

Fedora has released a batch of critical security patches for both version 43 and 44 that address several high-risk vulnerabilities across essential system packages. Administrators should prioritize updating xrdp to close an unauthenticated remote access flaw while also upgrading pdns to resolve multiple DNS protocol weaknesses. The release also includes important fixes for docker-compose, libssh2, giflib, djvulibre, and haveged to prevent privilege escalation, buffer overflows, and arbitrary code execution. You can apply these necessary security improvements immediately by running the standard dnf upgrade command with the provided advisory identifiers on your affected systems.

Fedora 43 Update: haveged-1.9.22-1.fc43
Fedora 43 Update: djvulibre-3.5.30-1.fc43
Fedora 43 Update: xrdp-0.10.6-2.fc43
Fedora 43 Update: pdns-5.0.5-1.fc43
Fedora 43 Update: docker-compose-5.1.4-1.fc43
Fedora 44 Update: xrdp-0.10.6-2.fc44
Fedora 44 Update: libssh2-1.11.1-6.fc44
Fedora 44 Update: djvulibre-3.5.30-1.fc44
Fedora 44 Update: pdns-5.0.5-1.fc44
Fedora 44 Update: docker-compose-5.1.4-1.fc44
Fedora 44 Update: giflib-6.1.3-2.fc44

Debian 10933 Published by Philipp Esselbach 0

Recent Debian security advisories address multiple critical vulnerabilities across essential system packages including libexif, corosync, php-twig, imagemagick, the Linux kernel, and exim4. Attackers could exploit these flaws to trigger application crashes or leak sensitive memory data through malformed inputs. The updates resolve dozens of tracked CVEs by patching integer overflows, improper input validation, and protocol handling errors that previously left systems exposed. System administrators should immediately apply the recommended package upgrades to their Debian stable environments before malicious actors can leverage these weaknesses.

ELA-1737-1 libexif security update (by )
[DLA 4608-1] corosync security update
[DSA 6311-1] php-twig security update
[DSA 6310-1] imagemagick security update
[DLA 4607-1] linux-6.1 security update
[DLA 4606-1] linux security update
[DSA 6309-1] exim4 security update

AlmaLinux 2571 Published by Philipp Esselbach 0

AlmaLinux recently distributed a significant wave of important security patches for versions eight through ten across several essential software packages. These updates resolve serious flaws inside the .NET framework, Mozilla browsers, Apache httpd modules, Cockpit administration tools, and Flatpak desktop packaging systems. Malicious actors could leverage these weaknesses to crash services, break out of sandboxed environments, run unauthorized code, or slip past standard security controls.

ALSA-2026:21297: .NET 10.0 security update (Important)
ALSA-2026:21381: thunderbird security update (Important)
ALSA-2026:21296: .NET 9.0 security update (Important)
ALSA-2026:21391: httpd security update (Important)
ALSA-2026:21754: .NET 9.0 security update (Important)
ALSA-2026:21380: firefox security update (Important)
ALSA-2026:21676: cockpit security update (Important)
ALSA-2026:21382: firefox security update (Important)
ALSA-2026:21295: .NET 10.0 security update (Important)
ALSA-2026:21294: .NET 9.0 security update (Important)
ALSA-2026:21757: flatpak security update (Important)
ALSA-2026:21755: flatpak security update (Important)
ALSA-2026:21378: firefox security update (Important)
2026-05-29

Software 44424 Published by Philipp Esselbach 0

Flowblade 2.24.2 patches a nasty crash triggered when the underlying MLT framework jumped to version 7.38, keeping your timeline from throwing fatal errors during rendering. The update leaves the multitrack editing workflow and compositor tools exactly as they were, which means no unnecessary bloat or interface changes to relearn. GPU acceleration through Vaapi and NVENC stays fully functional for faster exports, while custom FFmpeg arguments still let power users tweak compression settings without guesswork. Grab the patch through your package manager or AppImage to keep Linux video editing running smoothly without chasing proprietary workarounds.

Reviews 52651 Published by Philipp Esselbach 0

Here is a roundup of today's hardware reviews. The HYTE X50 computer case brings a distinct aesthetic to custom builds while the GIGABYTE Z890I AORUS Ultra motherboard proves that Mini ITX form factors can handle serious thermal loads without sacrificing space. Enterprise storage gets a major boost from the Memblaze PBlaze7 7A46 drive, which leverages advanced NAND technology to deliver exceptional random write speeds and reliable performance for data intensive workflows. Gamers looking to gain an edge in competitive matches will appreciate the SCUF Omega Smoke controller since its magnetic thumbsticks and customizable paddles are built specifically for rapid input and console compatibility. Finally, homelab enthusiasts can streamline their server management with the GL.iNet Comet Pro KVM, which provides a sleek rack mounted solution for effortless remote device access.

Casing: HYTE X50 Review
Gaming: SCUF Omega Smoke review: New e-sports controller for PS5 and PC with TMR sticks, paddles and 1,000 Hz polling
Motherboards: GIGABYTE Z890I AORUS Ultra Motherboard Review - Mini-ITX with surprisingly good thermals
Storage: Memblaze PBlaze7 7A46 6.4 TB Review - Random Write King
Other: GL-iNet Comet Pro KVM review - Remote access at your fingertips

KDE 1729 Published by Philipp Esselbach 0

KDE Plasma 6.7 Beta 2 launches with a primary focus on stress-testing the upcoming Union theming system through System Settings or targeted environment variables. The update raises the Frameworks dependency to version 6.26.0 and delivers numerous backend improvements, including fixed task manager badge positioning, improved clipboard handling, and smoother KWin window management. Testers are advised to avoid global styling overrides to prevent Flatpak application crashes while comparing visual changes against the standard Breeze theme. This release prioritizes stability and bug resolution over flashy new features, making it a solid choice for early adopters ready to help refine the desktop before the final launch.

Qubes OS 66 Published by Philipp Esselbach 0

The Qubes team just dropped the first candidate for version 4.3.1, packing in essential security patches and upgrading the default Fedora template to forty three since the older release already hit end of life. Testing this build properly means running a clean install rather than an in place upgrade, which actually exercises the installer routines that often hide stubborn bugs. Users restoring older backups should watch for a known quirk where templates might still point at outdated repository mirrors until they manually update their sources. If testers keep things stable over the next couple of weeks, expect the official release to drop before long.

Security 10956 Published by Philipp Esselbach 0

HestiaCP 1.9.5 delivers a critical patch that closes two severe vulnerabilities allowing unauthenticated remote code execution and IP address spoofing. Automated attack scripts have already been targeting these flaws since mid-May, making immediate action essential for any live server. Although the official release notes quietly skip mentioning the security fixes, upgrading is non-negotiable to prevent full system compromise. After applying the update, administrators should purge old session files and audit authentication logs to ensure no malicious activity slipped through before the patch went live.

Rocky Linux 920 Published by Philipp Esselbach 0

Rocky Linux 9.8 drops today and pushes existing nine.x systems forward with a straightforward dnf upgrade while demanding fresh installs for anyone still running version eight. The release leans heavily into cryptographic readiness, shipping OpenSSH 9.9, post-quantum algorithm support in GnuTLS and p11-kit, and automated LUKS volume encryption through Clevis. Kernel updates bring sharper performance tracing, broader hardware driver coverage, and more reliable crash dumps for encrypted storage, while the developer stack jumps to GCC 15, Rust 1.92, Go 1.26, and modern database streams like PostgreSQL 18 and MariaDB 11.8. Administrators should verify third-party module compatibility before applying the update and retire any deprecated application streams that just lost their security patches.

Fedora Linux 9367 Published by Philipp Esselbach 0

Fedora Linux 42 officially hits end of life today, meaning all security patches and package updates have completely stopped flowing to stable repositories. Staying on this release leaves systems exposed to unpatched vulnerabilities while creating dependency headaches for anyone trying to maintain older software stacks. The official upgrade path points users toward Fedora 43 or newer versions that will keep receiving support until roughly a month after Fedora 45 launches.

Software 44424 Published by Philipp Esselbach 0

Rust 1.96.0 finally delivers copyable range types that let developers store slice accessors without fighting the compiler or splitting start and end values. The release also adds assert_matches macros that actually print failing values, which saves hours of debugging compared to wrapping everything in standard assertion calls. WebAssembly builds just got stricter since the linker now rejects undefined symbols outright instead of quietly converting them into env imports. Two registry security patches fix symlink extraction and URL normalization flaws, though crates.io users can safely ignore those particular warnings.

Ubuntu 7104 Published by Philipp Esselbach 0

Ubuntu released a major batch of security notices to patch critical flaws across dozens of widely used system packages. These updates address severe weaknesses in Java runtimes, web servers, scripting languages, and text processing tools. Attackers could exploit these vulnerabilities to execute arbitrary code, bypass authentication mechanisms, or trigger severe denial of service conditions through crafted files or network requests. System administrators should apply the recommended package versions immediately using standard update commands or enable Ubuntu Pro for extended maintenance support on older releases.

[USN-8316-1] CableSwig vulnerabilities
[USN-8329-1] FFmpeg vulnerability
[USN-8341-1] OpenJDK 26 vulnerabilities
[USN-8342-1] Vim vulnerability
[USN-8229-2] sed vulnerability
[USN-8339-1] OpenJDK 25 vulnerabilities
[USN-8344-1] pip vulnerabilities
[USN-8340-1] LibreOffice vulnerability
[USN-8343-1] multipart vulnerability
[USN-8338-1] Apache HTTP Server vulnerabilities
[USN-8328-1] OpenJDK 21 vulnerabilities
[USN-8327-1] OpenJDK 17 vulnerabilities
[USN-8333-1] CRaC JDK 21 vulnerabilities
[USN-8334-1] CRaC JDK 25 vulnerabilities
[USN-8332-1] CRaC JDK 17 vulnerabilities
[USN-8330-1] OpenJDK 8 vulnerabilities
[USN-8331-1] OpenJDK 11 vulnerabilities
[USN-8337-1] QtSvg vulnerabilities
[USN-8336-1] PHP vulnerabilities
[USN-8335-1] pyOpenSSL vulnerability

SUSE 5662 Published by Philipp Esselbach 0

SUSE has rolled out a significant wave of critical security advisories covering essential packages like Apache2, Xen, Firefox, and Trivy across multiple openSUSE releases. Attackers could potentially exploit these flaws to bypass authentication controls, trigger remote code execution, or crash services through malformed network requests and memory corruption bugs. IT teams should apply the recommended zypper patches without delay because unpatched endpoints remain highly vulnerable to automated scanning tools and targeted intrusion attempts. You will need to restart affected systems after installation to fully activate the security fixes and restore normal operational stability.

SUSE-SU-2026:2102-1: important: Security update for xen
SUSE-SU-2026:2103-1: important: Security update for apache2
openSUSE-SU-2026:20816-1: important: Security update for alloy
openSUSE-SU-2026:20815-1: important: Security update for google-osconfig-agent
openSUSE-SU-2026:20813-1: important: Security update for xz
openSUSE-SU-2026:20814-1: important: Security update for docker-stable
openSUSE-SU-2026:20812-1: important: Security update for cups
openSUSE-SU-2026:20810-1: important: Security update for apache2
openSUSE-SU-2026:20809-1: important: Security update for trivy
openSUSE-SU-2026:20811-1: important: Security update for bubblewrap
openSUSE-SU-2026:20803-1: moderate: Security update for patterns-glibc-hwcaps
openSUSE-SU-2026:20798-1: important: Security update for trivy
openSUSE-SU-2026:10865-1: moderate: beets-2.11.0-1.1 on GA media
openSUSE-SU-2026:10863-1: moderate: MozillaFirefox-151.0.1-1.1 on GA media
openSUSE-SU-2026:10867-1: moderate: ffmpeg-7-7.1.4-2.1 on GA media
openSUSE-SU-2026:10864-1: moderate: MozillaThunderbird-140.11.1-1.1 on GA media
openSUSE-SU-2026:10866-1: moderate: ffmpeg-4-4.4.7-2.1 on GA media

Rocky Linux 920 Published by Philipp Esselbach 0

Rocky Linux just pushed out a fresh wave of security advisories that cover both version eight and version nine systems. You will find patches for widely used packages ranging from several .NET framework releases to essential networking tools like BIND and QEMU KVM. Each advisory includes detailed CVSS ratings so system administrators can quickly gauge the threat level before deploying the fixes. Applying these updates promptly keeps your server environment secure while maintaining compatibility with existing workflows.

RLSA-2026:21295: Important: .NET 10.0 security update
RLSA-2026:20586: Important: thunderbird security update
RLSA-2026:21294: Important: .NET 9.0 security update
RLSA-2026:20929: Moderate: libexif security update
RLSA-2026:21382: Important: firefox security update
RLSA-2026:20589: Important: dnsmasq security update
RLSA-2026:21291: Important: .NET 8.0 security update
RLSA-2026:20585: Important: compat-libtiff3 security update
RLSA-2026:20611: Important: gnutls security update
RLSA-2026:20587: Moderate: glibc security update
RLSA-2026:20579: Moderate: freeipmi security update
RLSA-2026:19167: Important: pcs security update
RLSA-2026:18705: Moderate: mingw-glib2 security update
RLSA-2026:19365: Important: jq security update
RLSA-2026:19366: Important: python-markdown security update
RLSA-2026:18824: Moderate: luksmeta security update
RLSA-2026:18786: Important: bind security update
RLSA-2026:18931: Moderate: unbound security update
RLSA-2026:18597: Low: NetworkManager security update
RLSA-2026:18772: Moderate: qemu-kvm security update

Red Hat 9424 Published by Philipp Esselbach 0

Red Hat recently published several security advisories that patch known vulnerabilities across its enterprise Linux distribution. System administrators will need to apply these fixes to core components including the kernel, Cockpit management interface, Xorg display server modules, Flatpak runtime environments, and Firefox web browser. The patches cover multiple release branches ranging from version 8 up to version 10 with most rated as important severity levels.

RHSA-2026:21718: Important: xorg-x11-server security update
RHSA-2026:21716: Important: xorg-x11-server-Xwayland security update
RHSA-2026:21712: Important: xorg-x11-server-Xwayland security update
RHSA-2026:21700: Important: cockpit security update
RHSA-2026:21699: Important: xorg-x11-server security update
RHSA-2026:21682: Important: python3.9 security update
RHSA-2026:21686: Moderate: libsoup security update
RHSA-2026:21676: Important: cockpit security update
RHSA-2026:21647: Important: cockpit security update
RHSA-2026:21556: Important: kernel security update
RHSA-2026:21755: Important: flatpak security update
RHSA-2026:21757: Important: flatpak security update
RHSA-2026:21756: Important: flatpak security update
RHSA-2026:21754: Important: .NET 9.0 security update
RHSA-2026:21745: Important: kernel-rt security update
RHSA-2026:21743: Important: firefox security update
RHSA-2026:21742: Important: xorg-x11-server security update
RHSA-2026:21741: Important: tigervnc security update
RHSA-2026:21392: Important: cockpit security update
RHSA-2026:21715: Important: xorg-x11-server security update
RHSA-2026:21706: Important: kernel security update

Oracle Linux 6490 Published by Philipp Esselbach 0

Oracle has released a comprehensive batch of security advisories and bug fix updates for both Oracle Linux 8 and Oracle Linux 9 environments. These patches address critical vulnerabilities across essential development and system packages, including major upgrades to .NET 9.0 and 10.0 runtimes alongside Ruby 3.3 and glibc components. Administrators will also find important fixes for Thunderbird email client preferences, GNOME desktop utilities, Unbound DNS resolution, and updated timezone data reflecting upcoming regional changes.

ELSA-2026-21294 Important: Oracle Linux 8 .NET 9.0 security update
ELBA-2026-50289 Oracle Linux 9 oracle-ai-database-preinstall-26ai bug fix update
ELSA-2026-21295 Important: Oracle Linux 8 .NET 10.0 security update
ELSA-2026-20614 Important: Oracle Linux 8 ruby:3.3 security update
ELSA-2026-20587 Moderate: Oracle Linux 8 glibc security update
ELSA-2026-20586 Important: Oracle Linux 8 thunderbird security update
ELBA-2026-20930 Oracle Linux 8 gnome-shell bug fix and enhancement update
ELBA-2026-20928 Oracle Linux 8 unbound bug fix and enhancement update
ELBA-2026-20927 Oracle Linux 8 gnome-screenshot bug fix and enhancement update
ELBA-2026-20538 Oracle Linux 8 tzdata bug fix and enhancement update

Fedora Linux 9367 Published by Philipp Esselbach 0

Fedora 43 and Fedora 44 administrators need to install a fresh wave of security patches that touch core system tools like the Linux kernel, OpenBao, PoDoFo, and Perl Sereal libraries right away. These releases tackle serious flaws ranging from cross-site scripting bugs in MapServer to dangerous double-free memory errors inside PDF readers and privilege escalation holes in the Haveged entropy daemon. You will also find critical patches for image processing suites including Gmic, CImg, Libpng, and Jpegxl that block denial of service attacks while serialization modules get hardened against buffer overflows.

Fedora 43 Update: kernel-7.0.10-101.fc43
Fedora 43 Update: mapserver-8.6.3-1.fc43
Fedora 43 Update: podofo-1.0.4-1.fc43
Fedora 43 Update: mingw-qt6-qtsvg-6.10.3-2.fc43
Fedora 43 Update: openbao-2.5.4-1.fc43
Fedora 43 Update: perl-Sereal-Encoder-5.005-1.fc43
Fedora 43 Update: perl-Sereal-Decoder-5.005-1.fc43
Fedora 43 Update: perl-Sereal-5.005-1.fc43
Fedora 43 Update: gmic-3.7.6-3.fc43
Fedora 43 Update: CImg-3.7.6-2.fc43
Fedora 44 Update: jpegxl-0.11.2-1.fc44
Fedora 44 Update: libpng-1.6.58-1.fc44
Fedora 44 Update: podofo-1.0.4-1.fc44
Fedora 44 Update: openbao-2.5.4-1.fc44
Fedora 44 Update: perl-Sereal-Encoder-5.005-1.fc44
Fedora 44 Update: perl-Sereal-Decoder-5.005-1.fc44
Fedora 44 Update: perl-Sereal-5.005-1.fc44
Fedora 44 Update: haveged-1.9.21-1.fc44

Debian 10933 Published by Philipp Esselbach 0

Debian issued a comprehensive security update to patch critical flaws across multiple essential software packages. The Linux kernel receives fixes for privilege escalation and information disclosure vulnerabilities while krb5 and nghttp2 address remote denial of service risks. Web infrastructure faces serious threats from newly disclosed cross site scripting and SQL injection bugs in Roundcube alongside authentication bypass issues in lemonldap ng and python flask httpauth. Administrators should apply these patches immediately to prevent unauthorized access and system compromise across their networks.

[DLA 4603-1] krb5 security update
ELA-1735-1 nghttp2 security update
[DLA 4604-1] roundcube security update
[DSA 6308-1] nagios4 security update
[DLA 4602-1] lemonldap-ng security update
[DLA 4605-1] python-flask-httpauth security update
[DSA 6307-1] kitty security update
[DSA 6306-1] linux security update
[DSA 6305-1] linux security update

AlmaLinux 2571 Published by Philipp Esselbach 0

AlmaLinux just pushed out a major security update that targets critical weaknesses across several widely used packages. The release fixes dangerous flaws in flatpak, cockpit, various kernel builds, .NET 8.0, and Apache httpd where malicious actors could trigger arbitrary code execution or force system crashes. Server administrators need to apply these patches right away because the unpatched vulnerabilities leave environments open to remote exploitation and privilege escalation. Full technical breakdowns along with direct download links are available through the standard AlmaLinux errata portal.

ALSA-2026:21756: flatpak security update (Important)
ALSA-2026:21700: cockpit security update (Important)
ALSA-2026:21745: kernel-rt security update (Important)
ALSA-2026:21293: .NET 8.0 security update (Important)
ALSA-2026:21291: .NET 8.0 security update (Important)
ALSA-2026:21468: cockpit security update (Important)
ALSA-2026:21706: kernel security update (Important)
ALSA-2026:21286: .NET 8.0 security update (Important)
ALSA-2026:21433: httpd security update (Important)

[ Archive ]