Product
Last Report

Click here to browse the Windows compatibility database

Click here to browse the Linux compatibility database

Click here to browse the macOS compatibility database

Date: 2026-05-29 18:24 | Last update:



2026-05-29

Software 44414 Published by Philipp Esselbach 0

Flowblade 2.24.2 patches a nasty crash triggered when the underlying MLT framework jumped to version 7.38, keeping your timeline from throwing fatal errors during rendering. The update leaves the multitrack editing workflow and compositor tools exactly as they were, which means no unnecessary bloat or interface changes to relearn. GPU acceleration through Vaapi and NVENC stays fully functional for faster exports, while custom FFmpeg arguments still let power users tweak compression settings without guesswork. Grab the patch through your package manager or AppImage to keep Linux video editing running smoothly without chasing proprietary workarounds.

Reviews 52650 Published by Philipp Esselbach 0

Here is a roundup of today's hardware reviews. The HYTE X50 computer case brings a distinct aesthetic to custom builds while the GIGABYTE Z890I AORUS Ultra motherboard proves that Mini ITX form factors can handle serious thermal loads without sacrificing space. Enterprise storage gets a major boost from the Memblaze PBlaze7 7A46 drive, which leverages advanced NAND technology to deliver exceptional random write speeds and reliable performance for data intensive workflows. Gamers looking to gain an edge in competitive matches will appreciate the SCUF Omega Smoke controller since its magnetic thumbsticks and customizable paddles are built specifically for rapid input and console compatibility. Finally, homelab enthusiasts can streamline their server management with the GL.iNet Comet Pro KVM, which provides a sleek rack mounted solution for effortless remote device access.

Casing: HYTE X50 Review
Gaming: SCUF Omega Smoke review: New e-sports controller for PS5 and PC with TMR sticks, paddles and 1,000 Hz polling
Motherboards: GIGABYTE Z890I AORUS Ultra Motherboard Review - Mini-ITX with surprisingly good thermals
Storage: Memblaze PBlaze7 7A46 6.4 TB Review - Random Write King
Other: GL-iNet Comet Pro KVM review - Remote access at your fingertips

KDE 1729 Published by Philipp Esselbach 0

KDE Plasma 6.7 Beta 2 launches with a primary focus on stress-testing the upcoming Union theming system through System Settings or targeted environment variables. The update raises the Frameworks dependency to version 6.26.0 and delivers numerous backend improvements, including fixed task manager badge positioning, improved clipboard handling, and smoother KWin window management. Testers are advised to avoid global styling overrides to prevent Flatpak application crashes while comparing visual changes against the standard Breeze theme. This release prioritizes stability and bug resolution over flashy new features, making it a solid choice for early adopters ready to help refine the desktop before the final launch.

Qubes OS 66 Published by Philipp Esselbach 0

The Qubes team just dropped the first candidate for version 4.3.1, packing in essential security patches and upgrading the default Fedora template to forty three since the older release already hit end of life. Testing this build properly means running a clean install rather than an in place upgrade, which actually exercises the installer routines that often hide stubborn bugs. Users restoring older backups should watch for a known quirk where templates might still point at outdated repository mirrors until they manually update their sources. If testers keep things stable over the next couple of weeks, expect the official release to drop before long.

Security 10955 Published by Philipp Esselbach 0

HestiaCP 1.9.5 delivers a critical patch that closes two severe vulnerabilities allowing unauthenticated remote code execution and IP address spoofing. Automated attack scripts have already been targeting these flaws since mid-May, making immediate action essential for any live server. Although the official release notes quietly skip mentioning the security fixes, upgrading is non-negotiable to prevent full system compromise. After applying the update, administrators should purge old session files and audit authentication logs to ensure no malicious activity slipped through before the patch went live.

Rocky Linux 918 Published by Philipp Esselbach 0

Rocky Linux 9.8 drops today and pushes existing nine.x systems forward with a straightforward dnf upgrade while demanding fresh installs for anyone still running version eight. The release leans heavily into cryptographic readiness, shipping OpenSSH 9.9, post-quantum algorithm support in GnuTLS and p11-kit, and automated LUKS volume encryption through Clevis. Kernel updates bring sharper performance tracing, broader hardware driver coverage, and more reliable crash dumps for encrypted storage, while the developer stack jumps to GCC 15, Rust 1.92, Go 1.26, and modern database streams like PostgreSQL 18 and MariaDB 11.8. Administrators should verify third-party module compatibility before applying the update and retire any deprecated application streams that just lost their security patches.

Fedora Linux 9366 Published by Philipp Esselbach 0

Fedora Linux 42 officially hits end of life today, meaning all security patches and package updates have completely stopped flowing to stable repositories. Staying on this release leaves systems exposed to unpatched vulnerabilities while creating dependency headaches for anyone trying to maintain older software stacks. The official upgrade path points users toward Fedora 43 or newer versions that will keep receiving support until roughly a month after Fedora 45 launches.

Software 44414 Published by Philipp Esselbach 0

Rust 1.96.0 finally delivers copyable range types that let developers store slice accessors without fighting the compiler or splitting start and end values. The release also adds assert_matches macros that actually print failing values, which saves hours of debugging compared to wrapping everything in standard assertion calls. WebAssembly builds just got stricter since the linker now rejects undefined symbols outright instead of quietly converting them into env imports. Two registry security patches fix symlink extraction and URL normalization flaws, though crates.io users can safely ignore those particular warnings.

Ubuntu 7103 Published by Philipp Esselbach 0

Ubuntu released a major batch of security notices to patch critical flaws across dozens of widely used system packages. These updates address severe weaknesses in Java runtimes, web servers, scripting languages, and text processing tools. Attackers could exploit these vulnerabilities to execute arbitrary code, bypass authentication mechanisms, or trigger severe denial of service conditions through crafted files or network requests. System administrators should apply the recommended package versions immediately using standard update commands or enable Ubuntu Pro for extended maintenance support on older releases.

[USN-8316-1] CableSwig vulnerabilities
[USN-8329-1] FFmpeg vulnerability
[USN-8341-1] OpenJDK 26 vulnerabilities
[USN-8342-1] Vim vulnerability
[USN-8229-2] sed vulnerability
[USN-8339-1] OpenJDK 25 vulnerabilities
[USN-8344-1] pip vulnerabilities
[USN-8340-1] LibreOffice vulnerability
[USN-8343-1] multipart vulnerability
[USN-8338-1] Apache HTTP Server vulnerabilities
[USN-8328-1] OpenJDK 21 vulnerabilities
[USN-8327-1] OpenJDK 17 vulnerabilities
[USN-8333-1] CRaC JDK 21 vulnerabilities
[USN-8334-1] CRaC JDK 25 vulnerabilities
[USN-8332-1] CRaC JDK 17 vulnerabilities
[USN-8330-1] OpenJDK 8 vulnerabilities
[USN-8331-1] OpenJDK 11 vulnerabilities
[USN-8337-1] QtSvg vulnerabilities
[USN-8336-1] PHP vulnerabilities
[USN-8335-1] pyOpenSSL vulnerability

SUSE 5661 Published by Philipp Esselbach 0

SUSE has rolled out a significant wave of critical security advisories covering essential packages like Apache2, Xen, Firefox, and Trivy across multiple openSUSE releases. Attackers could potentially exploit these flaws to bypass authentication controls, trigger remote code execution, or crash services through malformed network requests and memory corruption bugs. IT teams should apply the recommended zypper patches without delay because unpatched endpoints remain highly vulnerable to automated scanning tools and targeted intrusion attempts. You will need to restart affected systems after installation to fully activate the security fixes and restore normal operational stability.

SUSE-SU-2026:2102-1: important: Security update for xen
SUSE-SU-2026:2103-1: important: Security update for apache2
openSUSE-SU-2026:20816-1: important: Security update for alloy
openSUSE-SU-2026:20815-1: important: Security update for google-osconfig-agent
openSUSE-SU-2026:20813-1: important: Security update for xz
openSUSE-SU-2026:20814-1: important: Security update for docker-stable
openSUSE-SU-2026:20812-1: important: Security update for cups
openSUSE-SU-2026:20810-1: important: Security update for apache2
openSUSE-SU-2026:20809-1: important: Security update for trivy
openSUSE-SU-2026:20811-1: important: Security update for bubblewrap
openSUSE-SU-2026:20803-1: moderate: Security update for patterns-glibc-hwcaps
openSUSE-SU-2026:20798-1: important: Security update for trivy
openSUSE-SU-2026:10865-1: moderate: beets-2.11.0-1.1 on GA media
openSUSE-SU-2026:10863-1: moderate: MozillaFirefox-151.0.1-1.1 on GA media
openSUSE-SU-2026:10867-1: moderate: ffmpeg-7-7.1.4-2.1 on GA media
openSUSE-SU-2026:10864-1: moderate: MozillaThunderbird-140.11.1-1.1 on GA media
openSUSE-SU-2026:10866-1: moderate: ffmpeg-4-4.4.7-2.1 on GA media

Rocky Linux 918 Published by Philipp Esselbach 0

Rocky Linux just pushed out a fresh wave of security advisories that cover both version eight and version nine systems. You will find patches for widely used packages ranging from several .NET framework releases to essential networking tools like BIND and QEMU KVM. Each advisory includes detailed CVSS ratings so system administrators can quickly gauge the threat level before deploying the fixes. Applying these updates promptly keeps your server environment secure while maintaining compatibility with existing workflows.

RLSA-2026:21295: Important: .NET 10.0 security update
RLSA-2026:20586: Important: thunderbird security update
RLSA-2026:21294: Important: .NET 9.0 security update
RLSA-2026:20929: Moderate: libexif security update
RLSA-2026:21382: Important: firefox security update
RLSA-2026:20589: Important: dnsmasq security update
RLSA-2026:21291: Important: .NET 8.0 security update
RLSA-2026:20585: Important: compat-libtiff3 security update
RLSA-2026:20611: Important: gnutls security update
RLSA-2026:20587: Moderate: glibc security update
RLSA-2026:20579: Moderate: freeipmi security update
RLSA-2026:19167: Important: pcs security update
RLSA-2026:18705: Moderate: mingw-glib2 security update
RLSA-2026:19365: Important: jq security update
RLSA-2026:19366: Important: python-markdown security update
RLSA-2026:18824: Moderate: luksmeta security update
RLSA-2026:18786: Important: bind security update
RLSA-2026:18931: Moderate: unbound security update
RLSA-2026:18597: Low: NetworkManager security update
RLSA-2026:18772: Moderate: qemu-kvm security update

Red Hat 9423 Published by Philipp Esselbach 0

Red Hat recently published several security advisories that patch known vulnerabilities across its enterprise Linux distribution. System administrators will need to apply these fixes to core components including the kernel, Cockpit management interface, Xorg display server modules, Flatpak runtime environments, and Firefox web browser. The patches cover multiple release branches ranging from version 8 up to version 10 with most rated as important severity levels.

RHSA-2026:21718: Important: xorg-x11-server security update
RHSA-2026:21716: Important: xorg-x11-server-Xwayland security update
RHSA-2026:21712: Important: xorg-x11-server-Xwayland security update
RHSA-2026:21700: Important: cockpit security update
RHSA-2026:21699: Important: xorg-x11-server security update
RHSA-2026:21682: Important: python3.9 security update
RHSA-2026:21686: Moderate: libsoup security update
RHSA-2026:21676: Important: cockpit security update
RHSA-2026:21647: Important: cockpit security update
RHSA-2026:21556: Important: kernel security update
RHSA-2026:21755: Important: flatpak security update
RHSA-2026:21757: Important: flatpak security update
RHSA-2026:21756: Important: flatpak security update
RHSA-2026:21754: Important: .NET 9.0 security update
RHSA-2026:21745: Important: kernel-rt security update
RHSA-2026:21743: Important: firefox security update
RHSA-2026:21742: Important: xorg-x11-server security update
RHSA-2026:21741: Important: tigervnc security update
RHSA-2026:21392: Important: cockpit security update
RHSA-2026:21715: Important: xorg-x11-server security update
RHSA-2026:21706: Important: kernel security update

Oracle Linux 6489 Published by Philipp Esselbach 0

Oracle has released a comprehensive batch of security advisories and bug fix updates for both Oracle Linux 8 and Oracle Linux 9 environments. These patches address critical vulnerabilities across essential development and system packages, including major upgrades to .NET 9.0 and 10.0 runtimes alongside Ruby 3.3 and glibc components. Administrators will also find important fixes for Thunderbird email client preferences, GNOME desktop utilities, Unbound DNS resolution, and updated timezone data reflecting upcoming regional changes.

ELSA-2026-21294 Important: Oracle Linux 8 .NET 9.0 security update
ELBA-2026-50289 Oracle Linux 9 oracle-ai-database-preinstall-26ai bug fix update
ELSA-2026-21295 Important: Oracle Linux 8 .NET 10.0 security update
ELSA-2026-20614 Important: Oracle Linux 8 ruby:3.3 security update
ELSA-2026-20587 Moderate: Oracle Linux 8 glibc security update
ELSA-2026-20586 Important: Oracle Linux 8 thunderbird security update
ELBA-2026-20930 Oracle Linux 8 gnome-shell bug fix and enhancement update
ELBA-2026-20928 Oracle Linux 8 unbound bug fix and enhancement update
ELBA-2026-20927 Oracle Linux 8 gnome-screenshot bug fix and enhancement update
ELBA-2026-20538 Oracle Linux 8 tzdata bug fix and enhancement update

Fedora Linux 9366 Published by Philipp Esselbach 0

Fedora 43 and Fedora 44 administrators need to install a fresh wave of security patches that touch core system tools like the Linux kernel, OpenBao, PoDoFo, and Perl Sereal libraries right away. These releases tackle serious flaws ranging from cross-site scripting bugs in MapServer to dangerous double-free memory errors inside PDF readers and privilege escalation holes in the Haveged entropy daemon. You will also find critical patches for image processing suites including Gmic, CImg, Libpng, and Jpegxl that block denial of service attacks while serialization modules get hardened against buffer overflows.

Fedora 43 Update: kernel-7.0.10-101.fc43
Fedora 43 Update: mapserver-8.6.3-1.fc43
Fedora 43 Update: podofo-1.0.4-1.fc43
Fedora 43 Update: mingw-qt6-qtsvg-6.10.3-2.fc43
Fedora 43 Update: openbao-2.5.4-1.fc43
Fedora 43 Update: perl-Sereal-Encoder-5.005-1.fc43
Fedora 43 Update: perl-Sereal-Decoder-5.005-1.fc43
Fedora 43 Update: perl-Sereal-5.005-1.fc43
Fedora 43 Update: gmic-3.7.6-3.fc43
Fedora 43 Update: CImg-3.7.6-2.fc43
Fedora 44 Update: jpegxl-0.11.2-1.fc44
Fedora 44 Update: libpng-1.6.58-1.fc44
Fedora 44 Update: podofo-1.0.4-1.fc44
Fedora 44 Update: openbao-2.5.4-1.fc44
Fedora 44 Update: perl-Sereal-Encoder-5.005-1.fc44
Fedora 44 Update: perl-Sereal-Decoder-5.005-1.fc44
Fedora 44 Update: perl-Sereal-5.005-1.fc44
Fedora 44 Update: haveged-1.9.21-1.fc44

Debian 10932 Published by Philipp Esselbach 0

Debian issued a comprehensive security update to patch critical flaws across multiple essential software packages. The Linux kernel receives fixes for privilege escalation and information disclosure vulnerabilities while krb5 and nghttp2 address remote denial of service risks. Web infrastructure faces serious threats from newly disclosed cross site scripting and SQL injection bugs in Roundcube alongside authentication bypass issues in lemonldap ng and python flask httpauth. Administrators should apply these patches immediately to prevent unauthorized access and system compromise across their networks.

[DLA 4603-1] krb5 security update
ELA-1735-1 nghttp2 security update
[DLA 4604-1] roundcube security update
[DSA 6308-1] nagios4 security update
[DLA 4602-1] lemonldap-ng security update
[DLA 4605-1] python-flask-httpauth security update
[DSA 6307-1] kitty security update
[DSA 6306-1] linux security update
[DSA 6305-1] linux security update

AlmaLinux 2570 Published by Philipp Esselbach 0

AlmaLinux just pushed out a major security update that targets critical weaknesses across several widely used packages. The release fixes dangerous flaws in flatpak, cockpit, various kernel builds, .NET 8.0, and Apache httpd where malicious actors could trigger arbitrary code execution or force system crashes. Server administrators need to apply these patches right away because the unpatched vulnerabilities leave environments open to remote exploitation and privilege escalation. Full technical breakdowns along with direct download links are available through the standard AlmaLinux errata portal.

ALSA-2026:21756: flatpak security update (Important)
ALSA-2026:21700: cockpit security update (Important)
ALSA-2026:21745: kernel-rt security update (Important)
ALSA-2026:21293: .NET 8.0 security update (Important)
ALSA-2026:21291: .NET 8.0 security update (Important)
ALSA-2026:21468: cockpit security update (Important)
ALSA-2026:21706: kernel security update (Important)
ALSA-2026:21286: .NET 8.0 security update (Important)
ALSA-2026:21433: httpd security update (Important)
2026-05-28

Software 44414 Published by Philipp Esselbach 0

Visual Studio Code 1.122 finally drops the GitHub login requirement for Bring Your Own Key setups, letting developers run local language models completely offline without forced cloud handshakes. The built-in browser now ships with device emulation and screenshot sharing, which cuts down on context switching when debugging responsive layouts or mobile touch interactions. Sandbox execution got tightened to only trigger during Default Approvals, fixing that annoying automatic retry behavior that used to defeat the whole safety net. A guided issue reporting wizard now captures screenshots and video clips automatically, though teams running 32-bit ARM Linux hosts will need to stick with older builds since support just ended.

Reviews 52650 Published by Philipp Esselbach 0

Tech enthusiasts can find solid value in today's hardware roundup, which highlights a diverse selection of new peripherals and components. The Arctic Freezer 36-S A-RGB cooler delivers impressive thermal performance and remarkably quiet operation without breaking the bank. Gamers looking for premium input devices will appreciate the compact IQUNIX EV63 keyboard, while audio lovers can enjoy the versatile Edifier S355DB speaker system that easily bridges desktop computing and home entertainment setups. Storage options round out the collection with TerraMaster's rugged NVMe enclosure and Seagate's highly efficient drive designed specifically for handheld gaming consoles.

Cooling: Arctic Freezer 36-S A-RGB Review
Input: IQUNIX EV63 Hall Effect Keyboard Review: Compact, Premium, and Built for Speed
Speakers: Edifier S355DB 2.1 Audio Speaker System Review - Powerful Multi-Source Talent, Wireless Subwoofer and Solid Sound | Update
Storage: TerraMaster D1 SSD Enclosure Review: A Rugged DIY Portable SSD Enclosure

Software 44414 Published by Philipp Esselbach 0

Zed editor 1.4.2 finally swaps out the clunky rules library for a proper agent skills system and adds a global AGENTS.md file to keep project instructions consistent across repositories. Git workflows get a much-needed boost with a base branch selector in diff views, a toggle-all-hunks shortcut, and cleaner visual stats that actually make reviewing changes faster. The release patches several stubborn Linux Wayland crashes, fixes broken AI provider integrations for OpenAI and Gemini, and resolves MCP OAuth registration failures that have been blocking automation pipelines. Upgrading requires swapping the old @rule syntax to @skill in your agent chats, but all other configuration files carry over without forcing a manual rewrite.

Software 44414 Published by Philipp Esselbach 0

Zen Browser 1.20.1b drops as a stable update built on Firefox 151.0.2, bringing routine security patches alongside some genuinely useful tweaks. The standout addition lets you type New Boost straight into the address bar to instantly configure site-specific rules without digging through nested menus. Several annoying bugs finally get squashed, including that pesky tab duplication glitch when hitting u and the fullscreen video controls that kept vanishing off screen on certain displays. macOS users also get a fix for smart card certificate loading, making this a solid maintenance release worth installing if you actually use Zen as your daily driver.

Software 44414 Published by Philipp Esselbach 0

Mesa 26.0.8 arrives as the final patch for the 26.0 driver branch before everything migrates to 26.1, fixing actual headaches like older AMD crashes, broken SPIR-V debug logging, and Windows GLX compilation errors that waste hours of debugging time. The release also patches memory access bugs on Intel Xe2+ hardware and forces better texture handling for Forza Horizon 6 and Dragon Dogma 2 without requiring manual config tweaks. Installing it through your package manager or compiling from source works fine, but clearing the shader cache immediately afterward prevents temporary display flickering from leftover driver state mismatches. Since this update officially ends bugfix support for the current series, users should start planning their migration to 26.1 before the next round of patches leaves them stranded on outdated graphics stacks.

Ubuntu 7103 Published by Philipp Esselbach 0

Ubuntu released a batch of security notices that address critical flaws across numerous widely used software packages. These patches resolve serious vulnerabilities in applications ranging from instant messaging clients and caching systems to PDF viewers and database utilities. Attackers could potentially exploit these weaknesses to execute arbitrary code, trigger system crashes, or leak sensitive network data without proper authorization.

[USN-8314-1] Ayttm vulnerabilities
[USN-8313-1] XML-RPC for C and C++ vulnerabilities
[USN-8311-1] Dnsmasq vulnerability
[USN-8321-1] Papers vulnerability
[USN-8319-1] Libgcrypt vulnerabilities
[USN-8320-1] Memcached vulnerabilities
[USN-8317-1] GStreamer Good Plugins vulnerabilities
[USN-8318-1] libcaca vulnerability
[USN-8315-1] MediaWiki vulnerabilities
[USN-8322-1] Apache Commons BeanUtils vulnerability
[USN-8326-1] Foomuuri vulnerabilities
[USN-8325-1] tgt vulnerability
[USN-8324-1] Apache Tika vulnerabilities
[USN-8323-1] Postorius vulnerability

SUSE 5661 Published by Philipp Esselbach 0

Red Hat 9423 Published by Philipp Esselbach 0

Red Hat has released a batch of important security advisories for 2026 that address vulnerabilities across multiple enterprise software packages. These updates target widely used components like the Linux kernel, .NET frameworks, cockpit management tools, and OpenShift Container Platform on various RHEL versions. You should review the specific CVE references before applying any patches to your systems. Every advisory carries an Important severity rating from Red Hat Product Security while providing detailed CVSS scores for thorough evaluation.

RHSA-2026:21296: Important: .NET 9.0 security update
RHSA-2026:21295: Important: .NET 10.0 security update
RHSA-2026:21254: Important: libcap security update
RHSA-2026:20322: Important: Red Hat build of MicroShift 4.19.32 security update
RHSA-2026:21209: Important: kernel security update
RHSA-2026:21297: Important: .NET 10.0 security update
RHSA-2026:21294: Important: .NET 9.0 security update
RHSA-2026:21293: Important: .NET 8.0 security update
RHSA-2026:21298: Important: openssh security update
RHSA-2026:21291: Important: .NET 8.0 security update
RHSA-2026:21286: Important: .NET 8.0 security update
RHSA-2026:21557: Important: kernel security update
RHSA-2026:20436: Important: Red Hat build of MicroShift 4.16.63 security update
RHSA-2026:21517: Important: fence-agents security update
RHSA-2026:21516: Important: cockpit security update
RHSA-2026:21515: Important: cockpit security update
RHSA-2026:21468: Important: cockpit security update
RHSA-2026:21431: Important: fence-agents security update
RHSA-2026:21433: Important: httpd security update
RHSA-2026:21391: Important: httpd security update
RHSA-2026:21398: Important: openssh security update
RHSA-2026:21394: Important: cockpit security update
RHSA-2026:21395: Important: cockpit security update
RHSA-2026:21378: Important: firefox security update
RHSA-2026:21390: Important: cockpit security update
RHSA-2026:21381: Important: thunderbird security update
RHSA-2026:21380: Important: firefox security update
RHSA-2026:21382: Important: firefox security update
RHSA-2026:20040: Important: OpenShift Container Platform 4.19.32 bug fix and security update

Oracle Linux 6489 Published by Philipp Esselbach 0

Oracle has released a batch of critical security advisories for Oracle Linux 8 and 9 to address multiple vulnerabilities across essential system packages. The updates patch serious flaws in the Unbreakable Enterprise kernel, Firefox browser, Dnsmasq DNS server, and compatibility libraries by fixing memory corruption issues and preventing denial of service attacks. Administrators should also apply recent bug fixes that improve firewall configuration handling and ensure FIPS compliance for secret management tools. Installing these patches promptly will protect your infrastructure from known exploits while maintaining system stability across x86_64 and aarch64 architectures.

ELSA-2026-50288 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update : Fragnesia
ELBA-2026-20931 Oracle Linux 8 firewalld bug fix and enhancement update
ELSA-2026-20566 Important: Oracle Linux 8 firefox security update
ELSA-2026-20589 Important: Oracle Linux 8 dnsmasq security update
ELSA-2026-20579 Moderate: Oracle Linux 8 freeipmi security update
ELSA-2026-20585 Important: Oracle Linux 8 compat-libtiff3 security update
ELSA-2026-50287 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update : Fragnesia
ELBA-2026-20559 Oracle Linux 8 volume_key bug fix and enhancement update

Fedora Linux 9366 Published by Philipp Esselbach 0

Fedora has rolled out a batch of security patches across versions 42, 43, and 44 to address several critical vulnerabilities in widely used system packages. The updates target essential components like the Linux kernel, Xen hypervisor, poppler PDF library, and various nginx modules while also fixing memory corruption issues and remote code execution flaws. Developers relying on the Rust-based uv toolchain will find their dependencies refreshed with important stability improvements alongside the security fixes. Administrators can quickly deploy these changes by running a standard dnf upgrade command with the specific advisory identifiers provided in each notification.

Fedora 42 Update: rrdtool-1.9.0-8.fc42
Fedora 44 Update: kernel-7.0.10-201.fc44
Fedora 44 Update: nginx-mod-naxsi-1.6-18.fc44
Fedora 44 Update: nginx-mod-modsecurity-1.0.4-11.fc44
Fedora 44 Update: nginx-mod-headers-more-0.39-10.fc44
Fedora 44 Update: nginx-1.30.2-1.fc44
Fedora 44 Update: nginx-mod-vts-0.2.4-10.fc44
Fedora 44 Update: nginx-mod-fancyindex-0.6.0-5.fc44
Fedora 44 Update: nginx-mod-js-challenge-0^20230517.gitda6852d-8.fc44
Fedora 44 Update: nginx-mod-brotli-1.0.0~rc-10.fc44
Fedora 44 Update: rrdtool-1.9.0-11.fc44
Fedora 44 Update: rust-astral_async_zip-0.0.18~rc4-2.fc44
Fedora 44 Update: rust-astral-tokio-tar-0.6.2-1.fc44
Fedora 44 Update: uv-0.11.15-1.fc44
Fedora 44 Update: rust-astral_async_http_range_reader-0.11.0-2.fc44
Fedora 44 Update: python-uv-build-0.11.15-1.fc44
Fedora 44 Update: perl-Imager-1.031-1.fc44
Fedora 44 Update: xen-4.21.1-3.fc44
Fedora 43 Update: rust-astral-tokio-tar-0.6.2-1.fc43
Fedora 43 Update: rust-astral_async_zip-0.0.18~rc4-2.fc43
Fedora 43 Update: python-uv-build-0.11.15-1.fc43
Fedora 43 Update: rrdtool-1.9.0-8.fc43
Fedora 43 Update: uv-0.11.15-1.fc43
Fedora 43 Update: rust-astral_async_http_range_reader-0.11.0-2.fc43
Fedora 43 Update: xen-4.20.3-3.fc43
Fedora 43 Update: poppler-25.07.0-5.fc43

Debian 10932 Published by Philipp Esselbach 0

Recent security advisories address critical flaws in several widely used Debian packages like unbound, varnish, starlette, roundcube, and erlang. Attackers could exploit these weaknesses to trigger denial of service attacks, poison DNS caches, bypass authentication checks, or inject malicious code directly into affected systems. Patches have already been rolled out for older stable releases and current testing branches to resolve the listed CVE identifiers.

[DSA 6304-1] unbound security update
[DSA 6303-1] varnish security update
[DSA 6302-1] starlette security update
[DSA 6301-1] roundcube security update
ELA-1736-1 erlang security update (by )

AlmaLinux 2570 Published by Philipp Esselbach 0

[ Archive ]