Linux Compatible

HestiaCP 1.10.2 Released: Security Patches and DNS Fixes

Software 44719 Published 2026-08-14 14:47 by Philipp Esselbach 0

HestiaCP 1.10.2 has arrived as a service release, dropping just 17 hours after the massive 1.10.0 major update to address three immediate regressions. The hotfix patches two session-isolation vulnerabilities in the bundled file manager that could allow cross-user access to batch downloads and chunked uploads. It also corrects the Bind DNS SOA EXPIRE value to 1,209,600 seconds for better compliance and fixes a regression where sourcing /etc/os-release could overwrite the internal version variable during upgrades. Users on the 1.10.x branch can apply the changes now via the standard upgrade path.

KDE neon 20260813: Plasma 6.7.4 Weekly ISO Refresh on Ubuntu 24.04 LTS

KDE 1763 Published 2026-08-14 08:25 by Philipp Esselbach 0

KDE has released the neon-user-desktop-20260813-0523 ISO, delivering a steady weekly refresh built on Ubuntu 24.04 LTS. The build maintains Plasma 6.7.4, KDE Gear 26.04.3, and Frameworks 6.28.0 while layering in HWE kernel 7.0.0-28, Mesa 25.2.8, and upstream Noble security patches. Notable additions include the long-awaited per-screen virtual desktops, simultaneous HDR and ICC color management, and restored parity for the classic Oxygen theme ahead of KDE's 30th anniversary. Users can pull the update via neon-upgrade, while developers tracking bleeding edge features should monitor the parallel Testing and Unstable build streams.

Hardware Roundup: $799 GEEKOM IT13 Mini PC, 1200W SFX-L PSU, and Budget Mice

Reviews 52716 Published 2026-08-14 08:11 by Philipp Esselbach 0

Today's hardware roundup covers a mix of compact builds and budget peripherals, highlighted by the $799 GEEKOM IT13 Max mini PC and the 1,200W FSP DAGGER PM SFX-L power supply. The GEEKOM IT13 Max delivers solid Meteor Lake performance for esports and productivity, though soldered RAM and a 500 GB SSD will limit long-term upgradability. Corsair's new Hall-effect controller and the Epomaker Nex Lite mouse chase low-latency and affordable gaming niches, while Alphacool's rebranded Apex 2 thermal paste proves compound consistency beats brand logos. XPG and MONTECH round out the showcase with clean RGB memory and a stepped mid-tower, but reviewers warn that Maxsun's new B850M motherboard is already priced above MSRP.

Epic Games Store Linux Client Coming Soon, But EOS Anti-Cheat Is the Real Hurdle

General 8075 Published 2026-08-14 07:53 by Philipp Esselbach 0

Epic Games confirmed via a Discord AMA that a native Linux client for the Epic Games Store is in development and coming "soon," though it will be excluded from the upcoming preview build due to necessary architectural changes. This move parallels GOG's own efforts to build a native Linux Galaxy client, signaling a broader industry shift toward official Linux support driven by the Steam Deck's success. While a native launcher will improve performance and simplify setup for Linux gamers, the availability of multiplayer titles like Fortnite hinges on whether Epic can successfully port its EOS anti-cheat system to the platform. Until that happens, users will continue relying on Heroic Games Launcher, the open-source tool that currently bridges the gap using Wine and Proton.

PHP 8.4.25RC1 and 8.5.10RC1 Now in Remi's RPM Repository for Fedora and RHEL

Fedora Linux 9451 Published 2026-08-14 07:35 by Philipp Esselbach 0

Remi Collet’s RPM repository has published Release Candidate 1 packages for PHP 8.4.25 and 8.5.10, targeting Fedora 43–44 and Enterprise Linux eight and newer. Administrators can install them as base system packages through the remi-modular-test repository or run them in parallel via the remi-test Software Collection. Since RC builds follow a strict freeze policy, these packages closely mirror the stable releases Remi expects to ship in March 2027. The repository also includes a beta build of PHP 8.6 alongside the official security-only status of the older 8.3 branch.

Kubuntu Focus Backs Plasma 6.6 LTS With $100K+ Funding to Solve Linux Desktop's Support Gap

KDE 1763 Published 2026-08-14 07:27 by Philipp Esselbach 0

Kubuntu Focus, Techpaladin Software, and KDE e.V. have launched a three-year sponsored LTS program for Plasma 6.6, committing over $100,000 to guarantee security patches and bug fixes through Kubuntu 26.04's lifecycle. Techpaladin, the engineers behind the Steam Deck's desktop UX, acts as the primary technical steward for the backports while KDE e.V. uses the funding to deploy three new CI nodes for hardware validation. The move targets enterprise and government buyers hungry for a stable, privacy-focused Windows alternative, though the inclusion of Kubuntu Focus's proprietary "Focus Tools" adds a layer of commercial tension to the digital sovereignty pitch. While the initiative successfully plugs a long-standing gap in Linux desktop support, it leaves the funding model for Plasma 7.x uncharted once the current Kubuntu release reaches end-of-life.

Liquorix Kernel 7.1-12 Kernel Released With Project-C Scheduler Optimizations

Debian 11039 Ubuntu 7183 Arch Linux 990 Published 2026-08-14 07:05 by Philipp Esselbach 0

Steven Barrett has released Liquorix Kernel 7.1-12, continuing a rapid four-day iteration cycle with eleven targeted patches to Project-C, the project's custom sched/alt scheduler. The update prioritizes reduced task-switching overhead through improved fork handling, hybrid CPU idle-mask tracking, and atomic operation reductions designed specifically for gaming and audio production workloads. While AMD64 users can upgrade immediately via the official repositories, the project currently hosts several open AMDGPU stability reports that may warrant monitoring before switching from stock kernels. Users looking to install the latest build can pull it directly from the Debian, Ubuntu, or Arch Linux repositories today.

Bottles 66.6 Drops Six Hotfixes in Under 28 Hours

Software 44719 Published 2026-08-14 06:48 by Philipp Esselbach 0

Bottles 66.0 lis now available, introducing UMU launcher integration, ProtoSoda as the default runtime, and an experimental cpak package format. Instead of letting the major release settle, the team pushed five consecutive hotfixes between August 12 and August 14 to patch Flatpak path regressions, Steam runtime argument handling, and DLL case sensitivity issues. The intense two-day sprint not only stabilized the new features but also brought two new developers into the contributor ranks.

Linux Kernel and Axios updates for Ubuntu

Ubuntu 7183 Published 2026-08-14 06:31 by Philipp Esselbach 0

Ubuntu issued a coordinated set of security notices, patching dozens of vulnerabilities across the Linux kernel and the Axios Node.js HTTP client. The kernel updates span Ubuntu 16.04 through 26.04 LTS and cover cloud, OEM, and specialized hardware variants including Oracle, AWS, Azure, Google Cloud, and NVIDIA Tegra distributions. Key fixes address WiFi mesh network packet injection, a logic flaw labeled Fragnesia that enables local privilege escalation and container escapes, and prototype pollution bugs in Axios that allow proxy restrictions to be bypassed.

[USN-8631-2] Linux kernel (Oracle) vulnerabilities
[USN-8637-1] Linux kernel (OEM) vulnerabilities
[USN-8630-2] Linux kernel vulnerabilities
[USN-8633-2] Linux kernel vulnerabilities
[USN-8631-3] Linux kernel (NVIDIA Tegra IGX) vulnerabilities
[USN-8529-2] Linux kernel vulnerabilities
[USN-8530-2] Linux kernel (HWE) vulnerabilities
[USN-8548-2] Linux kernel vulnerabilities
[USN-8638-1] Axios vulnerabilities

Kernel and OpenSSH updates for SUSE

SUSE 5737 Published 2026-08-14 06:29 by Philipp Esselbach 0

SUSE issued two important security advisories to patch major vulnerabilities in the Linux kernel and OpenSSH for SUSE Linux Enterprise 15 SP6 and 15 SP7 systems. The kernel advisory addresses 77 distinct vulnerabilities across networking, storage, virtualization, and graphics drivers, while the OpenSSH advisory resolves eight flaws tied to SFTP file placement bypasses, scp cross-server copy errors, and pre-authentication denial of service conditions.

SUSE-SU-2026:3602-1: important: Security update for the Linux Kernel
SUSE-SU-2026:3605-1: important: Security update for openssh

Rsync update for Slackware

Slackware 1286 Published 2026-08-14 06:27 by Philipp Esselbach 0

The Slackware Linux Security Team released package SSA:2026-225-01 to patch known vulnerabilities and resolve bugs in rsync 3.5.0. This update applies directly to both Slackware 15.0 and the ongoing -current branch. Users can download the official i586 and x86_64 builds from the standard Slackware FTP mirrors before installing them with the root upgradepkg command

rsync (SSA:2026-225-01)

Kernel, Python, PHP, Grafana, and FreeRDP updates for Rocky Linux

Rocky Linux 978 Published 2026-08-14 06:25 by Philipp Esselbach 0

Bind, .NET, Gstreamer, and Dracut updates for RHEL

Red Hat 9487 Published 2026-08-14 06:24 by Philipp Esselbach 0

Freerdp, Grafana, Kernel, and Python-idna updates for Oracle Linux

Oracle Linux 6533 Published 2026-08-14 06:22 by Philipp Esselbach 0

Oracle issued a new wave of updates for Oracle Linux 7, 8, 9, and 10, delivering critical security patches and bug fixes across a broad range of system components. Significant advisories include important security fixes for the Unbreakable Enterprise kernel, freerdp, java-17-openjdk, and python3.9, alongside moderate updates for python-idna, grafana, and libpng. The release also addresses stability issues through bug fix updates for makedumpfile, crash, kexec-tools, systemd, and perl-DBI across the supported operating system versions.

ELSA-2026-54486 Important: Oracle Linux 10 freerdp security update
ELSA-2026-54481 Moderate: Oracle Linux 10 python-idna security update
ELSA-2026-54178 Moderate: Oracle Linux 10 grafana security, bug fix, and enhancement update
ELSA-2026-36541 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update
ELBA-2026-500170 Oracle Linux 10 makedumpfile bug fix update
ELBA-2026-500168 Oracle Linux 10 crash bug fix update
ELSA-2026-54268 Important: Oracle Linux 9 python3.9 security update
ELSA-2026-42887 Important: Oracle Linux 9 java-17-openjdk security update
ELBA-2026-500163 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500169 Oracle Linux 9 kexec-tools bug fix update
ELBA-2026-500167 Oracle Linux 9 crash bug fix update
ELBA-2026-500163 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500164 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELSA-2026-54290 Moderate: Oracle Linux 8 python-idna security update
ELSA-2026-54243 Important: Oracle Linux 8 grafana security update
ELSA-2026-53848 Important: Oracle Linux 8 isns-utils security update
ELSA-2026-52772 Important: Oracle Linux 8 perl-DBI:1.641 security update
ELSA-2026-52765 Moderate: Oracle Linux 8 kernel security update
ELBA-2026-500164 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500148 Oracle Linux 8 systemd bug fix update
ELBA-2026-500164 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update
ELSA-2026-51183 Important: Oracle Linux 7 glib2 security update
ELSA-2026-51063 Important: Oracle Linux 7 libXfont2 security update
ELSA-2026-50808 Moderate: Oracle Linux 7 libpng security update
ELSA-2026-49603 Important: Oracle Linux 7 gstreamer1-plugins-good security update

Bubblewrap, Apache HTTPD, Exim, Flatpak, Dnsmasq, libinput, and rsync updates for Gentoo

Gentoo 2533 Published 2026-08-14 06:20 by Philipp Esselbach 0

Gentoo Linux released seven high-severity security advisories in mid-August 2026 targeting widely used system utilities and network services. The vulnerabilities span critical attack vectors, including root privilege escalation in Bubblewrap and rsync, remote code execution in Dnsmasq and Exim, sandbox escape in Flatpak, and input device handling flaws in libinput. Apache HTTPD received the largest single patch addressing 41 tracked issues ranging from denial of service to remote code execution.

[ GLSA 202608-09 ] Bubblewrap: Root privilege escalation
[ GLSA 202608-08 ] libinput: Multiple Vulnerabilities
[ GLSA 202608-06 ] Flatpak: Multiple Vulnerabilities
[ GLSA 202608-07 ] Exim: Multiple Vulnerabilities
[ GLSA 202608-05 ] Apache HTTPD: Multiple Vulnerabilities
[ GLSA 202608-04 ] Dnsmasq: Multiple Vulnerabilities
[ GLSA 202608-03 ] rsync: Multiple Vulnerabilities

Erlang-cowlib/cowboy, libnfs, Flatpak updates for Fedora

Fedora Linux 9451 Published 2026-08-14 06:18 by Philipp Esselbach 0

Fedora 43 pushes security updates for erlang-cowlib and erlang-cowboy that fix CVE-2026-59248, allowing unbounded HPACK and QPACK prefixed-integer decoding to cause a denial of service. Fedora 44 delivers the matching Erlang packages while adding cookie parsing limits, HTTP/2 CONTINUATION frame rejection, and the removal of concurrent pipelined HTTP/1.1 request processing to strengthen protocol handling. Fedora 44 administrators must also apply the flatpak 1.18.1 release and a libnfs update that resolves CVE-2026-57918 and CVE-2026-53689 to block information disclosure and data corruption in NFS connections.

Fedora 43 Update: erlang-cowlib-2.19.0-1.fc43
Fedora 43 Update: erlang-cowboy-2.18.0-1.fc43
Fedora 44 Update: flatpak-1.18.1-1.fc44
Fedora 44 Update: libnfs-6.0.2-9.fc44
Fedora 44 Update: erlang-cowlib-2.19.0-1.fc44
Fedora 44 Update: erlang-cowboy-2.18.0-1.fc44

Xorg-Server, Chromium, PostgreSQL 17, and more updates for Debian

Debian 11039 Published 2026-08-14 06:16 by Philipp Esselbach 0

Debian has released latest security patches to address flaws across xorg-server, Chromium, PostgreSQL 17, apr-util, xdg-dbus-proxy, and python-django. The advisories target race conditions, stack buffer overflows, use-after-free errors, and malformed request handling that could allow privilege escalation, arbitrary code execution, or data exposure. Each affected package now includes fixed versions for Debian 11, Debian 12, and the Debian 13 stable distribution.

[DLA 4738-1] xorg-server security update
[DLA 4737-1] xorg-server security update
[DSA 6433-1] xdg-dbus-proxy security update
ELA-1808-1 python-django security update (by )
[DSA 6437-1] apr-util security update
[DSA 6436-1] chromium security update
[DLA 4739-1] chromium security update
[DSA 6438-1] postgresql-17 security update

Kernel, Vim, FreeRDP, and Xwayland updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-14 06:14 by Philipp Esselbach 0

Amethyst Mod Manager v2.2.0 Adds Built-in Thunderstore Browser and Two-Way Nexus Support

Software 44719 Published 2026-08-13 20:12 by Philipp Esselbach 0

ChrisDKN has released v2.2.0 of Amethyst Mod Manager, the open-source Linux-native tool that competes with Windows-only managers like MO2 and Vortex. The update introduces a built-in Thunderstore browser and two-way Nexus Mods collection integration, giving Linux users a seamless way to manage mods across both major platforms. Five new games are now supported, including Risk of Rain 2, Inscryption, and R.E.P.O., bringing the total catalog to over 60 titles. The release also brings Linux-specific technical improvements such as case alias symlinks for Bethesda load times and multi-launcher detection for Steam, Heroic, Lutris, and Faugus.

Install Matomo on Debian 13: Complete Self-Hosted Analytics Guide

Guides 11795 Published 2026-08-13 19:56 by Philipp Esselbach 0

This tutorial walks through installing the latest Matomo 5.12.0 version on Debian 13, bypassing the outdated repository release to access features like AI chatbot detection, Dark Mode, and improved segment management. The setup process covers installing Apache or Nginx, configuring MariaDB, downloading the upstream build, setting file permissions, and applying secure virtual host configurations for either web server. Users complete the installation via a web wizard, set up automated archiving through cron jobs to keep reports current, and secure the instance using Let's Encrypt SSL certificates. The guide also addresses common issues such as permission errors, PHP memory limits, and database connection failures while emphasizing full data ownership and GDPR compliance without third-party telemetry.

Samba 4.24.6 Released: Ceph, CTDB, and AD Stability Fixes

Software 44719 Published 2026-08-13 19:21 by Philipp Esselbach 0

Samba 4.24.6 is now available as a stable maintenance release containing 10 bug fixes that prioritize stability for CephFS-backed shares and clustered deployments following the security-heavy 4.24.5 update. The patch resolves critical crashes in vfs_ceph_snapshots and vfs_ceph_new, while Martin Schwenke from DDN contributes fixes for CTDB protocol issues regarding IP takeovers and nested elections. Core developers also addressed a memory leak in the Directory Replication Service, a pthreadpool race condition during forking, and various encoding inconsistencies across the S3 DFS server and DRS modules. Alongside the stable release, Samba 4.25.0rc1 was announced, bringing experimental SMB3 Persistent Handles and cluster-wide rate limiting to the next major development branch.

HestiaCP 1.10.0 Ships with PHP 8.5, Security Overhaul, and Debian 13 Support

Software 44719 Published 2026-08-13 19:14 by Philipp Esselbach 0

HestiaCP 1.10.0 has shipped, delivering a major security overhaul alongside a substantial feature update for the open-source server panel. The release addresses a string of critical vulnerabilities from the previous 1.9.x cycle by enforcing parameterized queries, stripping out eval() calls, and adding ordered firewall rules across the codebase. Feature-wise, administrators get full PHP 8.5 support, official Debian 13 and Ubuntu 26.04 LTS compatibility, and six new one-click installer apps including Shopware and ClassicPress. Existing users should run the standard upgrade command while skipping the beta repository rename, and older installations will need to apply the provided migration scripts for their OS and jail setup.

Zen Browser 1.21.14b Lands: Firefox 153.0.4, FFmpeg 63, and Sync Bug Fixes

Software 44719 Published 2026-08-13 19:05 by Philipp Esselbach 0

Zen Browser 1.21.14b drops today, updating the Firefox fork to engine 153.0.4 and adding FFmpeg 63 for faster media decoding. The stable build finally squashes a Window Sync hang triggered by container ID mismatches and patches a dark-mode contrast bug for Live Folders.

PostgreSQL 19 Beta 3 and Critical Security Patches Released; PG 14 EOL Notice Issued

Software 44719 Published 2026-08-13 16:43 by Philipp Esselbach 0

PostgreSQL has shipped maintenance updates for every supported version, including 18.6, 17.11, 16.15, 15.19, and 14.24, to patch 30 security vulnerabilities involving heap buffer overflows and remote code execution risks. The third beta of PostgreSQL 19 is also available, bringing a unified REPACK command, SQL Property Graph query support, and temporal data handling via the FOR PORTION OF clause. Performance and optimizer enhancements in the upcoming release include automatic NOT IN to ANTI JOIN conversions, SIMD-accelerated COPY FROM operations, and a switch to LZ4 as the default TOAST compression method.

Exim 4.100-RC3 Ships With Native DMARC and Feature Freeze

Software 44719 Published 2026-08-13 13:52 by Philipp Esselbach 0

The Exim development team released 4.100-RC3 on August 13, marking the third and final release candidate before the stable major update ships. The new branch introduces native DMARC evaluation, expanded log selectors, and a musl DNS out-of-bounds read fix for containerized environments. Legacy malware scanner bridges and outdated protocol support have been removed alongside a new versioning structure that separates security patches onto a dedicated branch. Operators running mail infrastructure should test the release candidate now, with the official 4.100 tag expected within weeks.

Bottles 66.2 Releases Hours After 66.1, Patching Steam Runtime and NVK Vulkan on Linux

Software 44719 Published 2026-08-13 13:37 by Philipp Esselbach 0

Bottles 66.2 dropped less than 24 hours after version 66.1, patching six critical regressions and tightening network calls for the popular Linux Wine and Proton manager. The hotfix resolves a bottle-deletion crash for multi-drive setups, restores custom Steam Runtime launch flags, and finally handles case-sensitive DLL conflicts for the XACT audio dependency. Lead maintainer Mirko Brombin also merged patches that properly detect NVIDIA's open-source NVK Vulkan driver, move heavy network requests off the main UI thread, and revive the external executable launch workflow. The update is available now via Flatpak and cpak, keeping the 143,000-download-strong community on stable ground before the next major feature push lands.

New Hardware Reviews: Panther Lake Mini PC, QIDI Plus5, and Cases

Reviews 52716 Published 2026-08-13 07:39 by Philipp Esselbach 0

Today's hardware roundups cover the InWin Covalent and Cooler Master HAF II 500 chassis, plus a $1,959 GMKtec Evo-T2 packing Intel's Panther Lake. TechPowerUp and TweakTown break down the Logitech G Pro X2 Superstrike mouse and the D-Link F518 hotspot, while Tom's Hardware labels the QIDI Plus5 a genuine rival to Bambu Lab's 3D printers. Keep in mind that review scores often shift once firmware updates drop.

Shelly ALPM v3.0.5 Ships With a Polkit Warning Update, Signaling Post-Rewrite Stability

Software 44719 Published 2026-08-13 07:17 by Philipp Esselbach 0

Shelly ALPM v3.0.5 hit the GitHub releases today, bringing just an updated Polkit warning and a routine branch back-merge to the v3.x line. The release lands just one day after the feature-packed v3.0.4, signaling that the team behind the Zig rewrite is shifting focus from rapid-fire development to post-stabilization polish. The quiet bump sits on top of the core architecture introduced back in late July, where the project finally ditched its .NET runtime to link directly to libalpm for genuine native performance across its GTK4 UI, CLI, and TUI modes. You can grab the 6.8 MB UI bundle directly from the GitHub releases page, or sync it through the AUR if you're running a CachyOS or Arch-based install.

rsync 3.5.0 Drops 33 CVEs, Plugs Critical Symlink Race Conditions

Security 10977 Published 2026-08-13 07:08 by Philipp Esselbach 0

rsync 3.5.0 has arrived, delivering fixes for 33 CVEs across symlink race conditions, daemon protocol flaws, and authentication bypasses. The release introduces secure_relative_open(), a hardened path-resolution framework that pins directory file descriptors and blocks out-of-tree symlink hops. If you run rsync with elevated privileges or rely on it for CI/CD and cloud backups, updating immediately is non-negotiable. Backports for the 3.4.1 and 3.2.7 branches are rolling out alongside the main release this week.

AM 10.4 AppImage Manager Update: New -y Flag, Automation, and 3,388 Apps for Linux

Software 44719 Published 2026-08-13 06:46 by Philipp Esselbach 0

AM, the open-source AppImage package manager for GNU/Linux, has released version 10.4, expanding its supported app database to 3,388 entries with a major focus on headless automation. The headline update introduces a global -y flag and enhanced non-interactive installation support, making the tool far more suitable for CI/CD pipelines, container builds, and unattended deployments without requiring manual prompts. Driven by a surge in community contributions following the maintainer's reduced involvement, the release also adds useful utilities like a relocate option for preserving portable profiles, a downgrade command, and fuzzy search suggestions for typos. Unlike Flatpak or Snap, AM keeps apps running natively outside of system package managers, though users should note that the script-based database relies on community-maintained installers rather than strict sandboxes.

Python Security Updates: 3.12.14, 3.11.16, and 3.10.21 Patch tarfile Bypasses and DoS Vectors

Software 44719 Published 2026-08-13 06:39 by Philipp Esselbach 0

Python's core team has released security-only source-only updates for Python 3.10.21, 3.11.16, and 3.12.14, confirming all three versions are now in maintenance mode with no further release cadence. The updates prioritize critical path traversal bypasses in tarfile and ZIP extraction on Windows, while also blocking remote code execution vectors in webbrowser, cookie handling, and WSGI status fields. Denial-of-service protections have been strengthened against exponential complexity attacks in csv, HTML parsing, and XML modules, complemented by a bundle update to libexpat 2.8.3 for improved billion laughs and hash flooding defenses. Users should upgrade immediately, especially those processing untrusted archives or structured data, as these patches address high-severity CVEs including a tarfile link-target escape and cookie control character injection.

Yelp, node-follow-redirects, libgit2, and Linux Kernel updates for Ubuntu

Ubuntu 7183 Published 2026-08-13 06:28 by Philipp Esselbach 0

Ubuntu issued a series of security notices, addressing multiple flaws across the Yelp help browser, the node-follow-redirects module, the libgit2 library, and the Linux kernel. The patches correct weaknesses that could let attackers steal credentials via improperly stripped HTTP redirect headers, expose user data through lax content security policies in help documents, or trigger crashes and arbitrary code execution through malformed Git protocol packets. Kernel updates cover dozens of cloud, IoT, and real-time variants for Ubuntu 14.04 through 26.04 LTS, and the required system reboot combined with an ABI change means users must reinstall any third-party kernel modules they previously compiled.

[USN-8627-1] Yelp vulnerability
[USN-8632-1] follow-redirects vulnerability
[USN-8628-1] libgit2 vulnerabilities
[USN-8631-1] Linux kernel vulnerabilities
[USN-8635-1] Linux kernel (Azure) vulnerabilities
[USN-8629-1] Linux kernel vulnerabilities
[USN-8633-1] Linux kernel vulnerabilities
[USN-8636-1] Linux kernel vulnerabilities
[USN-8630-1] Linux kernel vulnerabilities
[USN-8634-1] Linux kernel vulnerabilities

Chromium Patches, Kernel Fixes, and Node.js, RPM, and OpenVPN updates for SUSE

SUSE 5737 Published 2026-08-13 06:26 by Philipp Esselbach 0

Kernel, isns-utils, fence-agents, and Core Package updates for Rocky Linux

Rocky Linux 978 Published 2026-08-13 06:24 by Philipp Esselbach 0

Firefox, Kernel, Python, and MariaDB updates for RHEL

Red Hat 9487 Published 2026-08-13 06:23 by Philipp Esselbach 0

Unbreakable Enterprise Kernel, OpenJDK, Sudo, Ruby, and GStreamer updates for Oracle Linux

Oracle Linux 6533 Published 2026-08-13 06:22 by Philipp Esselbach 0

FreeType update for Gentoo Linux

Gentoo 2533 Published 2026-08-13 06:19 by Philipp Esselbach 0

Gentoo Linux released security advisory GLSA 202608-02 to patch multiple vulnerabilities in media-libs/freetype for versions below 2.14.3. The flaws encompass an out-of-bounds read and information disclosure risk across nine CVE identifiers, with no known workaround available. Administrators must update the font engine to version 2.14.3 or later to resolve the issues. Install the fix by running emerge --sync and then emerge --ask --oneshot --verbose ">=media-libs/freetype-2.14.3".

[ GLSA 202608-02 ] FreeType: Multiple Vulnerabilities

Patches for cri-o, vaultwarden, sqlite, linux-firmware, apr-util, and libcupsfilters updates for Fedora

Fedora Linux 9451 Published 2026-08-13 06:18 by Philipp Esselbach 0

Fedora 43 and 44 received a coordinated batch of security-focused package updates. The release upgrades cri-o1.34 to version 1.34.11, vaultwarden to 1.37.1, sqlite to 3.51.2, linux-firmware to 20260810, apr-util to 1.6.5, and libcupsfilters to 2.1.1. These changes close multiple critical vulnerabilities, including arbitrary code execution flaws in sqlite FTS5, denial of service risks in vaultwarden and cri-o, and XML stack attacks in apr-util. Users can apply the patches immediately by running the standard dnf upgrade command paired with the corresponding Fedora advisory ID.

Fedora 43 Update: cri-o1.34-1.34.11-1.fc43
Fedora 43 Update: vaultwarden-1.37.1-1.fc43
Fedora 44 Update: sqlite-3.51.2-2.fc44
Fedora 44 Update: linux-firmware-20260810-1.fc44
Fedora 44 Update: apr-util-1.6.5-1.fc44
Fedora 44 Update: libcupsfilters-2.1.1-9.fc44
Fedora 44 Update: cri-o1.34-1.34.11-1.fc44
Fedora 44 Update: vaultwarden-1.37.1-1.fc44

BIND9, PHP, Django, Flatpak, and SPIP updates for Debian

Debian 11039 Published 2026-08-13 06:15 by Philipp Esselbach 0

Debian and Freexian LTS distributions released security patches addressing more than forty CVEs across BIND DNS, PHP, Django, Flatpak, and several other widely used packages. The BIND9 update backports the software from Debian 10 to stretch, which fixes thirteen CVEs but breaks binary compatibility and requires third-party applications to rebuild against the new libraries. PHP 7.0 and 7.3 patches eliminate stack exhaustion crashes in phar archives and close a SQL injection route in the psql extension, while Django updates block a denial-of-service trigger and cross-site scripting flaws in the admin interface. Additional fixes target Flatpak local privilege escalation, SPIP remote code execution, Neutron network state mutation, jq arbitrary code execution, and libgd2 malformed GIF processing.

ELA-1802-1 bind9 security update (by )
ELA-1801-1 jq security update (by )
ELA-1803-1 ca-certificates CA certificates update (by )
ELA-1802-1 bind9 security update (by )
ELA-1807-1 php7.0 security update (by )
ELA-1806-1 php7.3 security update (by )
ELA-1805-1 libgd2 security update (by )
ELA-1804-1 libconfig-inifiles-perl security update (by )
[DLA 4735-1] neutron security update
[DSA 6434-1] lemonldap-ng security update
[DSA 6432-1] flatpak security update
[DLA 4736-1] python-django security update
[DSA 6435-1] spip security update

Kernels, PostgreSQL, Firefox, and Networking Tools updates for AlmaLinux

AlmaLinux 2626 Published 2026-08-13 06:12 by Philipp Esselbach 0

Windows

Linux

macOS

Community