Linux Compatible

COSMIC Epoch 1.2.0 Lands with Rust-Native Desktop Polish, AVIF Support, and Wayland Fixes

Software 44516 Published 2026-07-01 08:45 by Philipp Esselbach 0

System76 has released COSMIC Epoch 1.2.0, the second stable update to its all-Rust, Wayland-native desktop environment, arriving on June 30, 2026. The new tag brings a suite of usability improvements, including fixed workspace and launcher flickering, AVIF wallpaper support, proper MAC address validation in settings, and archive extraction stability in the file manager. Built entirely from scratch using the Iced toolkit and libcosmic, the desktop is now available across Pop!_OS, Arch, Fedora, NixOS, openSUSE, and Gentoo with over 6,400 GitHub stars. While the project is still iterating fast, these polish-focused changes mark a solid step toward a production-ready, modular Linux desktop that no longer relies on third-party frameworks.

Roundup: Creative AE-X Sound Card, CORSAIR 2800X Case, Lenovo Yoga Slim 7i, ASRock Steel Legend AIO, and more

Reviews 52678 Published 2026-07-01 08:05 by Philipp Esselbach 0

Creative Sound Blaster AE-X PCIe sound card targets dedicated audio enthusiasts, while Corsair's HS35 v3 Wireless headphones deliver solid gaming audio and extended battery life at a budget price point. Corsair launched the compact 2800X RS-R ARGB Micro-ATX case with support for up to ten cooling fans, and ASRock released the Steel Legend 360 LCD liquid cooler featuring an integrated screen and high-speed LCP fans. The Lenovo Yoga Slim 7i Gen 11 Aura Edition pairs Panther Lake processing with an OLED panel for strong mobile productivity, be quiet! launched the ergonomic and symmetrical Dark Perk gaming mice built around a PixArt PAW3950 sensor, and Oukitel introduced the durable WP500 Ultra rugged smartphone. ASUS rounded out the lineup with the TUF Gaming X870-Pro WiFi7 W NEO motherboard, which provides reliable core features and a clean design at a lower price than ROG models.

Audio: Creative Sound Blaster AE-X PCIe Sound Card review
Casing: CORSAIR 2800X RS-R ARGB Review
Computers: Lenovo Yoga Slim 7i Gen 11 Aura Edition (14IPH11) Review - Panther Lake & OLED on the Go
Cooling: ASRock Steel Legend 360 LCD Review
Headphones: Corsair HS35 v3 Wireless Review – Budget Done Right?
Input: be quiet! Dark Perk Ergo / Sym Gaming Mice Review
Mobile: Oukitel WP500 Ultra rugged phone review tested and benchmarked
Motherboards: ASUS TUF Gaming X870-Pro WiFi7 W NEO Review - Tuffed up

VirtualBox 7.2.12 Released: DX11 Upgrades, Linux Kernel Fixes and Download

Software 44516 Published 2026-07-01 07:53 by Philipp Esselbach 0

Oracle has released VirtualBox 7.2.12 as a targeted maintenance patch for its hosted hypervisor. The update prioritizes stability over new features, leading with DX11 performance optimizations for Windows guests and resolving two specific Linux host kernel panics tracked on GitHub. Additional changes clean up NASM assembly build issues affecting both host and guest environments, keeping local compilation pipelines smooth. The release continues Oracle's rapid maintenance cadence for the 7.2.x branch, which originally launched in August 2025 with expanded ARM virtualization support.

PHP Releases 8.5.8 and 8.4.23 with Security Patches

Software 44516 Published 2026-07-01 07:37 by Philipp Esselbach 0

PHP has released PHP 8.5.8 and 8.4.23, delivering critical security patches and stability improvements to its active branches. The 8.4 update addresses a heap corruption vulnerability in openssl_encrypt using AES-WRAP-PAD, while both releases fix a Phar directory protection bypass and Opcache inheritance cache replay issues. The updates arrive as PHP maintains its dominance over 70.8% of known websites, with the 8.x branch now capturing 61.3% of the PHP ecosystem share.

Roundcube, libyang, HPLIP, libssh2, GD.pm, tar, Ruby, and curl updates for Ubuntu

Ubuntu 7134 Published 2026-07-01 07:23 by Philipp Esselbach 0

Ubuntu released security patches to address critical flaws in Roundcube Webmail, libyang, HPLIP, libssh2, GD.pm, tar, Ruby, and curl. Attackers could exploit these bugs to run unauthorized commands, steal session cookies, bypass TLS encryption, or crash services through specially crafted files and network traffic. The updates cover Ubuntu releases from 14.04 LTS all the way to 26.04 LTS, with Extended Security Maintenance packages handling older versions.

[USN-8482-1] Roundcube Webmail vulnerability
[USN-8485-1] libyang vulnerability
[USN-8483-1] HPLIP vulnerabilities
[USN-8486-1] libssh2 vulnerabilities
[USN-8484-1] GD.pm vulnerability
[USN-8477-1] tar vulnerability
[USN-8478-1] Ruby vulnerabilities
[USN-8487-1] curl vulnerabilities

Mozilla Thunderbird, mbedtls, Gimp, and more updates for SUSE

SUSE 5694 Published 2026-07-01 07:21 by Philipp Esselbach 0

MariaDB 10.11, Ruby 2.5, and Ruby 3.3 updates for Rocky Linux 8

Rocky Linux 943 Published 2026-07-01 07:18 by Philipp Esselbach 0

Rocky Linux 8 administrators should apply three new errata packages to address security vulnerabilities, bug fixes, and performance improvements. RLSA-2026:33464 delivers a security, bug fix, and enhancement update for the MariaDB 10.11 database module. The Ruby ecosystem receives parallel patches through RLSA-2026:33514 for version 2.5 and RLSA-2026:33515 for version 3.3, covering multiple gems including mysql2, pg, abrt, bundler, bson, and mongo.

RLSA-2026:33464: Important: mariadb:10.11 security, bug fix, and enhancement update
RLSA-2026:33514: Important: ruby:2.5 security update
RLSA-2026:33515: Important: ruby:3.3 security update

Kernel, Ruby, MariaDB, Redis, PostgreSQL, and PHP updates for RHEL

Red Hat 9450 Published 2026-07-01 07:16 by Philipp Esselbach 0

Python, Firefox, Tomcat, libxml2, and rsync updates for Oracle Linux

Oracle Linux 6506 Published 2026-07-01 07:15 by Philipp Esselbach 0

Chromium, Varnish, Python Jupytext, and MaraDNS updates for Fedora

Fedora Linux 9402 Published 2026-07-01 07:13 by Philipp Esselbach 0

The Fedora Project released a batch of security advisories on July 1, 2026, targeting both Fedora 43 and Fedora 44 distributions. These updates cover chromium, collectd, python-jupytext, python-django-haystack, the varnish cache stack, and maradns. Each package patches specific vulnerability exposures, including integer overflows, memory disclosure flaws, and a DNS-over-TCP bug.

Fedora 43 Update: chromium-149.0.7827.200-1.fc43
Fedora 43 Update: collectd-5.12.0-57.fc43
Fedora 43 Update: python-jupytext-1.19.4-1.fc43
Fedora 43 Update: python-django-haystack-3.4.0-1.fc43
Fedora 43 Update: varnish-modules-0.26.0-4.fc43
Fedora 43 Update: vmod-querystring-2.0.3-11.fc43
Fedora 43 Update: varnish-7.7.3-2.fc43
Fedora 44 Update: python-jupytext-1.19.4-1.fc44
Fedora 44 Update: python-django-haystack-3.4.0-1.fc44
Fedora 44 Update: maradns-3.5.0037-1.fc44

Nginx, Librabbitmq, and Debian-Security-Support updates for Debian

Debian 10973 Published 2026-07-01 07:11 by Philipp Esselbach 0

Debian released four security advisories on June 30, 2026, to patch critical vulnerabilities in nginx and librabbitmq across multiple operating system versions. The nginx patches address two distinct flaws that could allow unauthenticated attackers to trigger heap buffer overflows or memory leaks, affecting both Debian 11 and Debian 13. Administrators must also update librabbitmq to resolve an underflow issue and a handshake overflow that compromise AMQP connections on Debian 11 and Debian 12. The advisory tracker update simultaneously marks the end of long-term security support for pagure, suricata, webkit2gtk, spip, and zulucrypt, while placing epiphany-browser and libsoup2.4 under limited protection.

[DLA 4660-1] nginx security update
[DLA 4659-1] debian-security-support update
[DLA 4658-1] librabbitmq security update
[DSA 6374-1] nginx security update

Glibc, MariaDB, Kernel, Thunderbird, and Perl updates for AlmaLinux

AlmaLinux 2594 Published 2026-07-01 07:08 by Philipp Esselbach 0

Samba 4.24.4 Released: Critical Fixes for RODC, Trusts, and Use-After-Free Bug

Software 44516 Published 2026-06-30 22:45 by Philipp Esselbach 0

Samba 4.24.4 has been released as the latest stable point update, bringing essential patches for Active Directory Domain Controllers and Windows trust relationships. The release resolves a use-after-free vulnerability in ACL handling with claims and conditions, alongside a regression where restricting anonymous access broke RODC functionality. Administrators running NTLMv2-enforced environments will also see fixes for trust handshake failures and winbindd loops that previously caused connection timeouts. Signed source tarballs and patches are now available for download from the official Samba stable directory.

KDE Plasma 6.7.2 Bugfix Release: KWin Stability, AMD Fixes, and Wayland Updates

KDE 1744 Published 2026-06-30 22:31 by Philipp Esselbach 0

KDE Plasma 6.7.2 has landed today, as the latest bugfix update following the 6.7 feature release just days prior. The update delivers critical KWin improvements for Wayland stability, including fixes for AMD hardware rotation, SDR color profiles, and multi-GPU copy handling. Users can also expect resolved issues with the keyboard overlay, Bigscreen TV shell features, and various applet layout corrections. With the X11 session scheduled for removal in the upcoming 6.8 release, this patch reinforces KDE's shift toward a fully functional Wayland experience.

Krita AI Diffusion 1.52.1 Released to Fix Server Connection Bug in Local AI Art Plugin

Software 44516 Published 2026-06-30 15:44 by Philipp Esselbach 0

Krita AI Diffusion 1.52.1 has launched to resolve a server connection bug that left users stuck at the "Starting Server" screen after upgrading from version 1.52.0. The free, open-source plugin continues to bridge Krita's painting interface with a local ComfyUI backend, offering native support for models like Stable Diffusion XL, Flux 2 Klein, and Z-Image without requiring a monthly subscription. While the new patch smooths out the launch loop, the initial configuration still demands patience, as driver conflicts and Python environment paths can easily consume the first hour of use.

Rust 1.96.1 Released: Critical Cargo Security Patches and Compiler Fix

Software 44516 Published 2026-06-30 15:32 by Philipp Esselbach 0

The Rust team has released version 1.96.1, addressing a compiler miscompilation bug in the MIR optimization pass and a silent failure issue in Cargo's HTTP client. The most critical updates include three CVEs patched in libssh2, which Cargo bundles for SSH transport, protecting users from heap over-reads, out-of-bounds writes, and CPU exhaustion attacks. This point release lands as OpenAI recently joined the Rust Foundation as a platinum member, cementing the language's growing footprint in modern infrastructure and cloud computing.

PHP 8.6 Alpha Released: New clamp() Function and Performance Boosts

Software 44516 Published 2026-06-30 15:19 by Philipp Esselbach 0

The PHP team has released the first alpha of PHP 8.6.0, introducing a new clamp() function, first-class callable caching, and TAILCALL VM support for Windows builds. While PHP 8.5 remains the current stable release, this alpha offers early access to experimental features like nullable return type deprecations and performance optimizations. PHP continues to power roughly 70.8% of websites globally, with major platforms like Facebook and Wikipedia relying on the language despite ongoing "PHP is dead" memes. Developers can test the new version now, though production use is not recommended until the alpha phase concludes.

SteamOS 3.8.20 Beta Adds Ray-Tracing Boosts and Smarter VRAM Management

Linux 3381 Published 2026-06-30 14:00 by Philipp Esselbach 0

Valve has pushed SteamOS 3.8.20 to the Beta and Preview channels for the Steam Deck, bundling the fixes already shipped to stable as version 3.8.12. The new update delivers a major Mesa graphics driver release that brings wider ray-tracing performance improvements alongside significantly smarter VRAM management for devices with limited memory. Alongside these graphical upgrades, the stable track resolves lingering issues with Steam streaming in fullscreen Desktop Mode, a rendering bug in Sniper Elite 5, and SD card reader errors on select Legion Go S models.

Roundup: Lenovo IdeaPad Slim 3i, Geekom Mini PC, GIGABYTE 240Hz OLED, MSI Claw 8 EX, and more

Reviews 52678 Published 2026-06-30 09:04 by Philipp Esselbach 0

The Lenovo IdeaPad Slim 3i puts Intel’s Core Series 3 chip against Apple’s upcoming MacBook Neo, while KitGuru discovered the upgraded Geekom A9 Max 2026 mini PC actually delivers worse performance than the 2025 model despite its newer Ryzen AI 9 HX 470 processor. GIGABYTE competes for budget gamers with a 27-inch GO27Q24G WOLED display hitting 240Hz, and TechPowerUp highlights the MSI Claw 8 EX AI+ handheld for its powerful Panther Lake G3 Extreme silicon and comfortable build. SteelSeries rolls out the Arctis Nova Pro Omni headset with a GameHub that merges multiple audio inputs into one stream, and The FPS Review questions whether the budget-friendly MSI MAG Z890 TOMAHAWK WiFi II motherboard actually matches its high-end chipset claims. Lexar invited reporters into its Chinese factories for its 30th anniversary to demonstrate the manufacturing, testing, and compatibility workflows that happen before any storage drive ships.

Computers: Lenovo IdeaPad Slim 3i Review: Can Wildcat Lake Overtake The MacBook Neo?, Geekom A9 Max 2026 Mini PC Review (Ryzen AI 9 HX 470)
Displays: GIGABYTE GO27Q24G Gaming Monitor Review: Glossy OLED Gaming at 240Hz
Gaming: MSI Claw 8 EX AI+ CG3EM Review - Panther Lake FTW
Headphones: SteelSeries Arctis Nova Pro Omni Gaming Headset Review
Motherboards: MSI MAG Z890 TOMAHAWK WiFi II Motherboard Review
Other: Lexar's China Tour: 30 Years of Storage, Quality, and AI

Wine Staging 11.12 Shipped: Rebases on Latest Wine Development with New Guard Page and VKD3D Updates

Software 44516 Published 2026-06-30 08:52 by Philipp Esselbach 0

Wine Staging 11.12 has shipped, bringing a rebased patchset built on the latest Wine 11.12 development release with updates to the VKD3D, TIFF support, and MIDI patches alongside a new ntdll guard page improvement. The project continues to serve as an experimental incubator for Linux compatibility, applying a collection of aggressive bug fixes and performance enhancements, like CSMT and esync, that target gaming workloads before eventually landing in upstream Wine. Maintained by Alistair Leslie-Hughes since the original team disbanded in 2018, the release includes refreshed components for window codecs and animation while removing the obsolete winex11-ime-thread-data patch.

QEMU qcow2 Regression, NSS Parsing Flaw, SQLite FTS5 Bugs, and libheif HEIF updates for Ubuntu

Ubuntu 7134 Published 2026-06-30 08:30 by Philipp Esselbach 0

Ubuntu issued USN-8412-3 to resolve a QEMU regression on Ubuntu 20.04 LTS that blocked boot volume creation from qcow2 images following an incomplete CVE-2024-4467 patch. USN-8481-1 corrects a Network Security Service parsing error that could crash software or expose sensitive data when processing malformed PKCS#11 URI escape sequences across four supported releases. USN-8480-1 fixes memory handling flaws in SQLite’s FTS5 extension that attackers could trigger for denial of service or arbitrary code execution on the same Ubuntu versions. USN-8479-1 patches two libheif vulnerabilities in Ubuntu 25.10 and 26.04 LTS that allow denial of service or code execution through malicious HEIF image files.

[USN-8412-3] QEMU regression
[USN-8481-1] NSS vulnerability
[USN-8480-1] SQLite vulnerabilities
[USN-8479-1] libheif vulnerabilities

Libsoup, Bind, Libsolv, and Jq updates for SUSE

SUSE 5694 Published 2026-06-30 08:26 by Philipp Esselbach 0

Perl 5.32 update for Rocky Linux

Rocky Linux 943 Published 2026-06-30 08:21 by Philipp Esselbach 0

Rocky Linux published advisory RLSA-2026:30851 to push a Perl 5.32 security patch for its version 8 operating system. The release updates dozens of core Perl packages, including CPAN, JSON-PP, HTTP-Tiny, Encode, Storable, and Archive-Zip, to address reported security flaws. Administrators can review the Common Vulnerability Scoring System ratings for each affected CVE to gauge the exact risk level before deployment.

RLSA-2026:30851: Important: perl:5.32 security update

Kernel, glibc, gnutls, PostgreSQL, JBoss, and Git LFS updates for RHEL

Red Hat 9450 Published 2026-06-30 08:19 by Philipp Esselbach 0

ySQL, FreeRDP, Thunderbird, Xwayland, Cockpit, Opencryptoki, and SOS updates for Oracle Linux

Oracle Linux 6506 Published 2026-06-30 08:15 by Philipp Esselbach 0

Oracle Linux 9 administrators can now apply a batch of security and bug fix advisories that address vulnerabilities across multiple system packages. The security updates target MySQL, FreeRDP, Thunderbird, and Xwayland with patches for dozens of assigned CVE identifiers. System management and diagnostic tools receive corresponding bug fix advisories to resolve reference duplicates, enable Btrfs storage support, and improve data deduplication.

ELSA-2026-23332 Moderate: Oracle Linux 9 mysql security update
ELSA-2026-19349 Important: Oracle Linux 9 freerdp security update
ELSA-2026-19348 Important: Oracle Linux 9 thunderbird security update
ELSA-2026-19344 Important: Oracle Linux 9 xorg-x11-server-Xwayland security update
ELBA-2026-19347 Oracle Linux 9 opencryptoki bug fix and enhancement update
ELBA-2026-21387 Oracle Linux 9 cockpit bug fix and enhancement update
ELBA-2026-50344 Oracle Linux 9 sos bug fix update

Perl-DBI and Perl-Socket updates for Fedora

Fedora Linux 9402 Published 2026-06-30 08:13 by Philipp Esselbach 0

Fedora 43 released two new security advisories, updating the perl-DBI and perl-Socket modules to address critical flaws. The perl-DBI bump to version 1.648 resolves CVE-2026-9698, which allows an attacker to execute arbitrary code via a buffer overflow in error handling, alongside the fix for CVE-2026-10879. Meanwhile, perl-Socket advances to 2.041 to close CVE-2026-12087, an out-of-bounds read that leaks information through a bug in the pack_ip_mreq_source() function.

[SECURITY] Fedora 43 Update: perl-DBI-1.648-1.fc43
[SECURITY] Fedora 43 Update: perl-Socket-2.041-1.fc43

Sogo and Yelp updates for Debian

Debian 10973 Published 2026-06-30 07:36 by Philipp Esselbach 0

Debian LTS released advisory DLA-4657-1 addressing six vulnerabilities in the Sogo webmail server, including SQL injection flaws affecting PostgreSQL and MariaDB backends, XSS issues in calendar and contact views, and TOTP implementation problems. The update also resolves an arbitrary JavaScript execution risk caused by malicious .ICS files, SQL injection in ACL management allowing data extraction by authenticated users, and an XSS flaw in message subject rendering, pushing the package to version 5.8.0-2+deb12u3. Separate guidance via ELA-1760-1 targets Yelp, the GNOME help browser, by correcting CVE-2026-13601 which enables crafted documents to read local user files and exfiltrate them to remote servers through the embedded web view. This vulnerability also permits a sandbox escape when launching the application via Flatpak, affecting versions 3.22.0-1+deb9u2 for Debian stretch and 3.31.90-1+deb10u2 for Debian buster.

[DLA 4657-1] sogo security update
ELA-1760-1 yelp security update

TigerVNC, Go, Perl IO-Compress, runc, Archive::Tar, urllib3, and git-lfs updates for AlmaLinux

AlmaLinux 2594 Published 2026-06-30 07:34 by Philipp Esselbach 0