Product
Last Report

Click here to browse the Windows compatibility database

Click here to browse the Linux compatibility database

Click here to browse the macOS compatibility database

Date: 2026-06-07 16:35 | Last update:



2026-06-07

Security 10959 Published by Philipp Esselbach 0

This week demands immediate action from every Linux system administrator because a massive wave of security patches just dropped across all major distributions. Critical vulnerabilities in Samba and the core kernel now allow attackers to execute remote code or escalate privileges without any user interaction. Web servers, mail daemons, and foundational crypto libraries like OpenSSL also receive urgent fixes that directly protect encrypted traffic from man-in-the-middle attacks. You must run the correct package manager commands for your exact release right now since skipping these updates leaves your entire infrastructure wide open to automated ransomware campaigns.

SUSE 5669 Published by Philipp Esselbach 0

OpenSUSE Tumbleweed has released a batch of moderate security updates targeting several widely used software packages across its general availability media. These patches address numerous common vulnerabilities including critical flaws in Grafana, OpenSSH, MariaDB development libraries, and FFmpeg alongside older issues affecting Perl modules and chemical data tools. Administrators should prioritize installing these fixes immediately since some remote code execution risks carry high CVSS scores that could compromise system integrity. Regular maintenance cycles will help keep your infrastructure secure while preventing potential exploitation of the newly disclosed CVE identifiers.

openSUSE-SU-2026:10938-1: moderate: perl-HTTP-Daemon-6.170.0-1.1 on GA media
openSUSE-SU-2026:10937-1: moderate: openssh-10.3p1-6.1 on GA media
openSUSE-SU-2026:10939-1: moderate: perl-IO-Compress-2.220.0-1.1 on GA media
openSUSE-SU-2026:10936-1: moderate: libopenbabel8-3.2.0-1.1 on GA media
openSUSE-SU-2026:10935-1: moderate: libmozjs-115-0-115.15.0-9.1 on GA media
openSUSE-SU-2026:10934-1: moderate: libmariadbd-devel-11.8.8-1.1 on GA media
openSUSE-SU-2026:10931-1: moderate: ffmpeg-4-4.4.7-3.1 on GA media
openSUSE-SU-2026:10933-1: moderate: hauler-1.4.3-5.1 on GA media
openSUSE-SU-2026:10932-1: moderate: grafana-11.6.14+security04-1.1 on GA media

Rocky Linux 926 Published by Philipp Esselbach 0

Administrators managing Rocky Linux environments should prioritize these critical patches for unbound, php, bind9.16, and thunderbird. The updates address multiple vulnerabilities across both version eight and version ten of the distribution. Each advisory includes a CVSS base score to help you evaluate the risk level before deployment. You can find complete installation details and official errata references by visiting the provided Rocky Linux links.

RLSA-2026:23231: Important: unbound security update
RLSA-2026:23388: Important: php security update
RLSA-2026:23360: Important: bind9.16 security update
RLSA-2026:22643: Important: thunderbird security update

Fedora Linux 9377 Published by Philipp Esselbach 0

Fedora administrators should immediately deploy these critical security patches across both version 43 and version 44 environments. The updates address several dangerous vulnerabilities within essential packages like Keylime, libssh2, perl-CryptX, and NASM. Each release tackles a distinct threat vector that could otherwise enable remote attackers to bypass authentication checks or trigger arbitrary code execution through malformed data inputs. System owners can quickly apply the necessary corrections by executing the standard dnf upgrade command with the specific advisory identifiers listed in the notification headers.

Fedora 43 Update: keylime-7.14.2-1.fc43
Fedora 43 Update: perl-CryptX-0.089-1.fc43
Fedora 43 Update: libssh2-1.11.1-6.fc43
Fedora 44 Update: nasm-3.01-3.fc44
Fedora 44 Update: keylime-7.14.2-1.fc44
Fedora 44 Update: perl-CryptX-0.089-1.fc44

Debian 10944 Published by Philipp Esselbach 0

Debian administrators must upgrade Dovecot, Request Tracker5, Apache2, and Tomcat9 to address a wave of critical vulnerabilities. These security advisories patch dangerous flaws ranging from denial of service crashes and path traversal errors to authentication bypasses and cross site scripting risks. Each package requires specific version updates tailored to either the oldstable or stable Debian releases, with some upgrades also demanding compatible native library revisions. System operators should verify their current configurations before applying these patches to ensure uninterrupted service across all affected components.

ELA-1751-1 dovecot security update
[DSA 6324-1] request-tracker5 security update
[DSA 6323-1] apache2 security update
[DLA 4619-1] tomcat9 security update
2026-06-06

Debian 10944 Published by Philipp Esselbach 0

Ondřej Surý just pushed PHP 8.4.22/8.5.7 packages for Debian Bullseye, Bookworm, and Trixie, bringing much needed stability fixes to the tracing JIT and OpenSSL 4.0 compatibility layers. The update also patches several URI parsing vulnerabilities and cleans up error reporting in the intl and date extensions so your scripts stop throwing cryptic constant names at you. Getting it onto a Debian machine means adding the debsury.org source, refreshing the package index, and running a standard apt install without breaking older PHP versions that might still be in use. Once installed, verifying the active version and checking opcache behavior will keep background jobs from crashing when they hit unexpected interrupts.

KDE 1733 Published by Philipp Esselbach 0

The Kdenlive 26.04.2 update drops today with a focused set of patches that finally clean up project file handling and fix timeline preview glitches on Linux systems. Anyone who has manually copied footage back to local storage just to bypass export failures will notice how the new path resolution logic stops those phantom missing media warnings from blocking renders. Flatpak and AppImage builds now skip the broken rnnoise module until developers actually finish implementing it, which keeps audio tracks from dropping out mid render. Grabbing the latest binaries through official channels ensures desktop environments like sway or Hyprland stop fighting with misaligned welcome dialogs and broken shortcut mappings.

Reviews 52657 Published by Philipp Esselbach 0

Today's reviews roundup highlights several standout PC components that recently caught the attention of tech reviewers. Builders looking for a clean aesthetic will appreciate the NZXT H6 RGB+ case, while enthusiasts seeking premium cooling can test out the ASUS ROG RYUO IV liquid cooler with its integrated AMOLED display. The ASRock Phantom Gaming X870 motherboard offers solid value under two hundred dollars alongside a highly efficient Enermax power supply that meets modern ATX standards. Finally, Apple users and storage seekers can explore the CalDigit Thunderbolt docks for expanded connectivity or grab the straightforward Acer MA200 SSD for reliable everyday performance.

Casing: NZXT H6 RGB+ review
Cooling: ASUS ROG RYUO IV 360 ARGB Review
Motherboards: ASRock Phantom Gaming X870 Riptide Wi-Fi Review
Power: ENERMAX Revolution III S 1000W ATX 3.1 Power Supply Unit Review
Storage: CalDigit TS5 and Element 5 Hub Review: Two Thunderbolt 5 Docks for Apple's Latest Macs, Acer MA200 1TB SSD Review: Good enough, and that’s the point

Software 44441 Published by Philipp Esselbach 0

Krita AI Diffusion 1.51.1 finally patches the stubborn setup errors that broke installations on macOS and older Linux environments. The plugin keeps generative AI right inside your canvas so artists can target specific layers or masks instead of flooding entire documents with random pixels. Running open source models locally gives full control over generation strength while keeping files private and avoiding cloud subscription traps. Updating now removes the usual setup friction and lets digital painters blend AI edits seamlessly into existing workflows.

Bazzite 38 Published by Philipp Esselbach 0

Bazzite Linux 44.20260605 lands on the stable branch with Kernel 7.0.9 and Valve's VRAM patch set, which prioritizes game memory to prevent crashes on both KDE and GNOME desktops. Nvidia-open drivers advance to version 610 while Mesa moves to 26.1, delivering smoother graphics performance and better support for modern hardware. The update also targets Steam Deck sleep state bugs, improves Xbox controller reliability, and bumps Bazaar to 0.8.1, though the new GUI updater gets temporarily pulled due to stability concerns. Switching to this release takes just one terminal command through the bazzite-rollback-helper tool, making it a straightforward upgrade for existing installations.

Ubuntu 7112 Published by Philipp Esselbach 0

Ubuntu has released security updates across multiple LTS releases to address critical flaws in YARD, Postfix, Tomcat, and Robocode. A path sanitization error inside the YARD documentation server could allow attackers to read sensitive files directly from the host machine. Meanwhile, Postfix risks a complete service disruption when handling malformed network traffic, and Tomcat suffers from several authentication bypasses that weaken account lockout protections alongside authorization rules. Developers using Robocode must apply these patches right away because multiple input validation failures currently leave systems open to arbitrary code execution and unauthorized file deletion.

[USN-8394-1] YARD vulnerability
[USN-8253-2] Postfix vulnerability
[USN-8383-1] Tomcat vulnerabilities
[USN-8385-1] Robocode vulnerabilities

SUSE 5669 Published by Philipp Esselbach 0

This collection of openSUSE and SUSE Linux Enterprise security bulletins delivers urgent patches for dozens of widely used software packages across multiple distribution versions. Administrators will find critical and important fixes targeting severe flaws in MariaDB, PostgreSQL, Unbound, Keybase Client, and the X Window System server that could allow remote code execution or privilege escalation. Moderate updates also address memory corruption bugs, header smuggling risks, and denial of service vulnerabilities in tools like Tor, Tomcat, Grafana, and various Python libraries. System owners should apply these recommended zypper patches immediately to close dangerous attack surfaces before threat actors can exploit the disclosed common vulnerability enumerations.

openSUSE-SU-2026:0188-1: moderate: Security update for tor
openSUSE-SU-2026:0191-1: moderate: Security update for perl-HTTP-Tiny
openSUSE-SU-2026:0189-1: moderate: Security update for cacti
openSUSE-SU-2026:20897-1: moderate: Security update for python-pyOpenSSL
openSUSE-SU-2026:20902-1: important: Security update for keybase-client
openSUSE-SU-2026:20895-1: moderate: Security update for libsoup2
openSUSE-SU-2026:20901-1: important: Security update for postgresql18
openSUSE-SU-2026:20896-1: important: Security update for xorg-x11-server
openSUSE-SU-2026:20898-1: important: Security update for frr
openSUSE-SU-2026:10928-1: moderate: vifm-0.14.4-1.1 on GA media
openSUSE-SU-2026:10929-1: moderate: weblate-5.17.1-1.1 on GA media
openSUSE-SU-2026:10927-1: moderate: tomcat11-11.0.22-1.1 on GA media
openSUSE-SU-2026:10920-1: moderate: cacti-1.2.30+git457.e55c2aea-1.1 on GA media
openSUSE-SU-2026:10925-1: moderate: tomcat-9.0.118-1.1 on GA media
openSUSE-SU-2026:10926-1: moderate: tomcat10-10.1.55-1.1 on GA media
openSUSE-SU-2026:10924-1: moderate: perl-Sereal-Decoder-5.6.0-1.1 on GA media
openSUSE-SU-2026:10922-1: moderate: grafana-11.6.14+security01-4.1 on GA media
openSUSE-SU-2026:10923-1: moderate: mcphost-0.34.0-8.1 on GA media
openSUSE-SU-2026:10921-1: moderate: google-guest-agent-20260529.00-1.1 on GA media
SUSE-SU-2026:2281-1: important: Security update for unbound
SUSE-SU-2026:2282-1: critical: Security update for mariadb
SUSE-SU-2026:2280-1: important: Security update for ignition
SUSE-SU-2026:2284-1: critical: Security update for mariadb
SUSE-SU-2026:2285-1: important: Security update for yq
openSUSE-SU-2026:0192-1: critical: Security update for kanidm

Rocky Linux 926 Published by Philipp Esselbach 0

Rocky Linux has issued a comprehensive set of security errata for versions eight through ten to patch multiple software vulnerabilities. The advisories cover widely used tools like vim, expat, openssl, php8.4, and thunderbird across both moderate and important severity ratings. Each entry includes specific CVSS base scores that help administrators quickly identify the most critical flaws requiring immediate attention. System owners can review the complete technical details and download instructions through the official errata links provided for every package update.

RLSA-2026:22315: Moderate: compat-openssl10 security update
RLSA-2026:22730: Moderate: vim security update
RLSA-2026:22721: Important: expat security update
RLSA-2026:23102: Important: delve security update
RLSA-2026:22528: Moderate: mod_http2 security update
RLSA-2026:22715: Important: expat security update
RLSA-2026:20613: Important: gnutls security update
RLSA-2026:22711: Moderate: vim security update
RLSA-2026:22529: Moderate: libexif security update
RLSA-2026:22314: Moderate: openssl security update
RLSA-2026:22937: Important: image-builder security update
RLSA-2026:22145: Important: .NET 10.0 security update
RLSA-2026:22141: Moderate: go-fdo-client and go-fdo-server security update
RLSA-2026:22450: Important: osbuild-composer security update
RLSA-2026:22325: Important: thunderbird security update
RLSA-2026:22649: Important: php8.4 security update
RLSA-2026:22717: Moderate: vim security update
RLSA-2026:23230: Important: expat security update
RLSA-2026:22551: Moderate: mod_http2 security update
RLSA-2026:22553: Moderate: libexif security update
RLSA-2026:23228: Important: image-builder security update

Fedora Linux 9377 Published by Philipp Esselbach 0

Fedora has pushed out a comprehensive security update cycle that impacts both version forty three and version forty four of the distribution. Administrators need to patch Thunderbird, Firefox, WebKitGTK, Rust, and libinput to close critical holes like local privilege escalation vectors and various rendering bugs. The release notes highlight performance tweaks and new language features alongside those urgent fixes. You can install everything right away by running a simple dnf upgrade command through your terminal interface.

Fedora 43 Update: thunderbird-149.0.1-3.fc43
Fedora 44 Update: firefox-151.0.3-1.fc44
Fedora 44 Update: webkitgtk-2.52.4-1.fc44
Fedora 44 Update: rust-1.96.0-1.fc44
Fedora 44 Update: libinput-1.31.3-1.fc44

Debian 10944 Published by Philipp Esselbach 0

Debian Long Term Support has released urgent security advisories addressing critical vulnerabilities across several widely used packages including haveged, exim4, gsasl, and dovecot. Security researchers uncovered dangerous weaknesses ranging from a credential validation bug that enables local privilege escalation to malformed proxy frame processing that leaks confidential information. Additional flaws within the authentication library and email client introduce denial of service risks alongside potential data exposure caused by weak input validation and flawed access control mechanisms

[DLA 4616-1] haveged security update
[DLA 4615-1] exim4 security update
ELA-1749-1 exim4 security update (by )
[DLA 4618-1] gsasl security update
[DLA 4617-1] dovecot security update
ELA-1750-1 gsasl security update (by )

AlmaLinux 2576 Published by Philipp Esselbach 0

AlmaLinux has released important security updates for PHP on version 10 and the real-time kernel on version 8 to patch several dangerous flaws. These patches address critical issues including denial of service attacks, cross-site scripting risks, and multiple memory corruption vulnerabilities that could crash systems or leak data. Server administrators should apply these fixes immediately since they were published on June fifth to stop potential exploitation. Complete technical details and updated package files are available through the official AlmaLinux errata portal.

ALSA-2026:23388: php security update (Important)
ALSA-2026:23259: kernel-rt security update (Important)

[ Archive ]