Linux Compatible

Linux Security Roundup for Week 33, 2026

Security 10978 Published 2026-08-16 09:06 by Philipp Esselbach 0

Major distributions delivered a synchronized wave of security errata this past week, with the EL derivatives moving in lockstep to patch the kernel, .NET stack, and BIND DNS server across versions seven through ten. The sheer volume is exhausting, as identical .NET and BIND bumps hit four major distributions while Ubuntu shipped twelve separate advisories just for its kernel variants. Privilege escalation dominated the higher severity ratings, with critical patches targeting local trust boundaries in bubblewrap, systemd, haveged, and a lingering ProFTPD use-after-free on Slackware. The patch window is tight and the queue is long, so apply the kernel and network-stack updates first, verify your version numbers after reboot, and stagger your rollouts if you are running a multi-node cluster.

GNOME 51 Beta Released: Freeze Begins with Web Login, Wayland Blur, and Missed GTK 4 Rewrites

GNOME 3731 Published 2026-08-16 08:20 by Philipp Esselbach 0

GNOME 51.beta is now available, kicking off the comprehensive freeze period with over 47 updated modules across the stack. The stable 51.0 release is locked for September 12, leaving roughly a month for final bug fixes before the deadline. Headline features include web-based authentication in GNOME Shell, a new Wayland protocol for blurred window backgrounds, and full SVG cursor support. The release team confirmed that the long-rumored GTK 4 rewrites of GNOME Boxes and Disks slipped past the freeze deadline once again.

Mango Wayland Compositor 0.16.1 Adds Per-Device Input Rules and Tidy Tag Management

Software 44726 Published 2026-08-16 07:47 by Philipp Esselbach 0

Mango Wayland Compositor released version 0.16.1, introducing a forced separation of mouse and trackpad configuration that requires users to prefix options with mouse_ or trackpad_. The update adds devicerule support for per-device input customization, alongside new touch-to-monitor mapping, tag_gather for auto-removing empty tags, and a fresh mmsg get layouts IPC command. Beyond the breaking change, the release patches several critical issues including a client kill crash, incorrect screenshot rotation on display twists, and disrupted frame-skipping logic. Available on Meson and packaged across Arch, Fedora, Gentoo, NixOS, and other major distros, the dwl-based compositor continues to mature as a serious daily-driving alternative for Wayland power users.

ProFTPD update for Slackware

Slackware 1287 Published 2026-08-16 07:37 by Philipp Esselbach 0

The Slackware Linux Security Team released updated proftpd 1.3.9d packages for both Slackware 15.0 and -current to patch critical vulnerabilities. The update resolves a use-after-free flaw triggered by the FTP STAT command and corrects how the server handles default AllowForeignAddress settings during passive data transfers.

proftpd (SSA:2026-227-01)

.NET 8.0, 9.0, 10.0, bind, and dracut updates for Rocky Linux

Rocky Linux 980 Published 2026-08-16 07:35 by Philipp Esselbach 0

Rocky Linux issued five security errata to patch .NET 8.0, .NET 9.0, .NET 10.0, bind, and dracut. The .NET 8.0 patch targets Rocky Linux 9, while the remaining four packages update Rocky Linux 8 systems. Each release contains security fixes, bug resolutions, and performance improvements, with CVSS severity ratings linked to specific CVE identifiers. Administrators should review the official Rocky Linux errata page to apply these patches before vulnerable versions enter production.

RLSA-2026:54574: Important: .NET 8.0 security, bug fix, and enhancement update
RLSA-2026:54550: Important: .NET 9.0 security, bug fix, and enhancement update
RLSA-2026:54542: Important: .NET 10.0 security, bug fix, and enhancement update
RLSA-2026:54654: Important: bind security update
RLSA-2026:54575: Important: dracut security update

Ksplice, .NET, Kernel, OpenSSH, Node.js, and oVirt updates for Oracle Linux

Oracle Linux 6535 Published 2026-08-16 07:33 by Philipp Esselbach 0

Portage and NTFS-3G updates for Gentoo Linux

Gentoo 2535 Published 2026-08-16 07:30 by Philipp Esselbach 0

Gentoo Linux issued two high-severity security advisories, to patch multiple flaws in the Portage package manager and the NTFS-3G filesystem driver. The Portage update resolves bugs that allow malicious ebuilds to bypass sandbox restrictions and write files outside their designated work directories. NTFS-3G requires an immediate update to address ten separate vulnerabilities, with the most severe flaws potentially granting attackers elevated system privileges. Administrators should sync their system trees and install Portage 3.0.81.2 and NTFS-3G 2026.7.7 to close these security gaps.

[ GLSA 202608-12 ] Portage: Multiple Vulnerabilities
[ GLSA 202608-13 ] NTFS-3G: Multiple Vulnerabilities

Stunnel 5.80, Libgsasl, Jrnl 4.6, and Rust updates for Fedora

Fedora Linux 9453 Published 2026-08-16 07:29 by Philipp Esselbach 0

Fedora 43 and 44 delivered a wave of security patches addressing critical vulnerabilities across stunnel, libgsasl, and several Rust-based developer tools. The stunnel update moves the software to version 5.80, fixing CVE-2026-70368 to prevent out-of-bounds memory access from long protocol messages and CVE-2026-70367 to block a SOCKS server bypass using IPv6 destinations. The update rebuilds Rust tools such as rust-pretty-git-prompt, rust-lsd, and rust-bat to link against the system libgit2 library, replacing statically bundled versions tied to multiple CVEs including CVE-2026-5917 and CVE-2026-53586. Additional changes include advancing jrnl to version 4.6 to resolve GHSA-rhx6-37mm-5q9r and patching libgsasl against CVE-2026-48829, a denial-of-service flaw caused by NULL pointer dereference in DIGEST-MD5.

Fedora 44 Update: rust-pretty-git-prompt-0.2.2-11.fc44
Fedora 44 Update: rust-lsd-1.2.0-8.fc44
Fedora 44 Update: rust-tokei-14.0.0-7.fc44
Fedora 44 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc44
Fedora 44 Update: rust-git-delta-0.19.1-7.fc44
Fedora 44 Update: rust-bat-0.26.1-3.fc44
Fedora 44 Update: jrnl-4.6-1.fc44
Fedora 44 Update: libgsasl-1.10.0-17.fc44
Fedora 44 Update: stunnel-5.80-1.fc44
Fedora 43 Update: jrnl-4.6-1.fc43
Fedora 43 Update: libgsasl-1.10.0-17.fc43
Fedora 43 Update: stunnel-5.80-1.fc43

KDE Plasma 6.8 Development Update: Bi-Directional RDP Clipboard Sync and Discover Fixes

KDE 1765 Published 2026-08-15 15:37 by Philipp Esselbach 0

KDE's Plasma team confirmed that Plasma 6.8 will ship later this year with fully bi-directional remote desktop clipboard syncing, finally letting users copy-paste freely between host and client machines. The August 15 development update also introduces kscreenctl for custom display modelines, inline event descriptions on the digital clock, and precise scroll-speed spinboxes in mouse and touchpad settings. Beyond the interface tweaks, the cycle focuses heavily on stability for immutable Linux distributions like Fedora Kinoite, alongside performance gains for large PNG pasting, Spectacle captures, and Baloo file indexing. All listed features are currently in testing and subject to change before the official 6.8 release, though corresponding Frameworks 6.30 patches are already landing for immediate distribution.

Bazaar 0.9.4 released

GNOME 3731 Published 2026-08-15 15:05 by Philipp Esselbach 0

Bazaar 0.9.4 arrives as the third release in ten days, featuring integration of libdex 1.2.beta for improved async I/O handling and a revert of a texture caching change that caused performance regressions. The app store maintains its split-binary architecture introduced in 0.9.2, keeping the main GUI separate from the low-memory daemon to significantly reduce idle RAM usage. UI updates in this cycle bring zoom shortcuts to the screenshot viewer, smoother navigation for app detail pages, and accessibility fixes for keyboard and screen reader users.

BlueOnyx Hosting Control Panel Ships Three Updates Including AlmaLinux 10 Build with PHP 8.5 support

Software 44726 Published 2026-08-15 10:27 by Philipp Esselbach 0

BlueOnyx has refreshed its server distribution lineup with three concurrent generations, headlined by the new 5212R branch built on AlmaLinux 10 with PHP 8.5 and OpenSSL 4.x. The free, open-source hosting panel traces its lineage to Cobalt Networks and Sun Microsystems, offering a no-per-account-licensing alternative to cPanel across AlmaLinux 8, 9, and 10 bases. Recent updates include a newly released AI Assistant for server troubleshooting, a complete overhaul of 2FA implementation, and updated ISOs rebuilt with reproducible tooling for all three branches. Maintained by Michael Stauber, the project continues to provide a stable, multi-tenant web hosting platform complete with email, DNS, and database management without recurring licensing fees.

Hardware Roundup: Geekom GeekBook M16, Z Fold8, 6K Monitors, and Budget Gaming Gear

Reviews 52717 Published 2026-08-15 09:29 by Philipp Esselbach 0

Today's hardware roundup covers everything from Samsung’s passport-style Z Fold8 to a stripped-down 16-inch Geekom laptop that keeps Intel’s 16-core chip while cutting display and storage capacity. Desktop builders will find the Scythe Magoroku cooler worth a look for its standout RAM cooling, while G.Skill’s new EXPO-optimized DDR5 kit finally gives Ryzen users tighter memory sub-timings out of the box. The Samsung Odyssey G80HS 6K monitor delivers impressive pixel density and fast refresh rates, though you’ll need a serious GPU to push it at that resolution. Tying it all together is Corsair’s HS35 v3 Wireless headset, a budget pick that somehow nails sound, comfort, and mic quality without breaking the bank.

Raspberry Pi Imager 2.0.11 Adds Network Installer and Exclusive Drive Locks

Software 44726 Published 2026-08-15 09:02 by Philipp Esselbach 0

Raspberry Pi Imager 2.0.11 has arrived, introducing an embedded network installer and multi-frame .img.zst support in its latest stable update. This release doubles down on write reliability with exclusive drive locks on Windows and macOS, alongside a centralized credential hashing system for safer OS customisation. The build pipeline now supports rootless multi-arch builds and properly bundles transitive libraries for AppImages, though the intentional performance trade-off for data integrity remains in effect. You can grab the full set of assets, including CLI and embedded variants, from the official GitHub releases page.

D7VK 2.1 Brings Major Load-Time Optimizations and Surprising Performance Gains to Legacy DDraw Games on Linux

Software 44726 Published 2026-08-15 08:42 by Philipp Esselbach 0

D7VK 2.1 pivots from chasing raw FPS numbers to delivering deep load-time and startup optimizations for legacy Direct3D titles on Linux. Single developer WinterSnowfall reports that the update slashes loading screens by over 50% in select games while producing 3DMark scores on a 37-watt laptop that rival an RTX 4070 running older software builds. The patch also resolves long-standing compatibility issues, eliminating startup crashes in Arx Fatalis and fixing rendering artifacts in Resident Evil 2 and Empire Earth. You can grab the updated ddraw.dll directly from the project's GitHub repository and verify the layer is active using the DXVK_HUD=1 environment variable.

Shelly ALPM v3.0.6 Ships Valgrind and Leak Fixes for Arch

Software 44726 Published 2026-08-15 08:36 by Philipp Esselbach 0

Seafoam Labs released Shelly ALPM v3.0.6 on August 14, 2026, with a maintenance build that prioritizes code quality over new features. The update integrates Valgrind into the CI pipeline, patches the small heap leaks it uncovered, and corrects .desktop file and submenu ID handling for cleaner desktop environment integration. This patch follows the project's massive v3.0.0 overhaul in late July, which stripped the C# and .NET backend to rebuild the core, CLI, GTK4 frontend, and keyring natively in Zig.

OBS Studio 32.2.2 Drops: What Linux Users Need to Know Right Now

Software 44726 Published 2026-08-15 08:22 by Philipp Esselbach 0

OBS Studio 32.2.2 dropped on August 14 to patch a Windows plugin loading bug and unblock the app on macOS 12, but Linux users should hold their breath on package managers. The official Ubuntu PPA and Flathub Flatpak are still serving version 32.2.1, though direct .deb downloads are already live on GitHub for Ubuntu 24.04 and 26.04. Linux streamers will actually benefit more from the 32.2 feature wave, which finally fixes PipeWire drops on NVIDIA GPUs, restores VAAPI AV1 encoding over WHIP, and bumps OpenGL performance on low-end hardware.

KDE Frameworks 6.29.0 Released: KIO Redesign, Vi-Mode Overhaul, and Zip64 Support

KDE 1765 Published 2026-08-15 08:09 by Philipp Esselbach 0

KDE Frameworks 6.29.0 landed on Friday, August 14, 2026, bringing a comprehensive vi-mode overhaul to KTextEditor alongside zip64 archive handling and Hebrew calendar support in KArchive and KHolidays. The release features a fundamental restructuring of KIO's connection backend, routing in-process workers through a new thread-based transport to eliminate unnecessary IPC overhead, while KDav and KCodecs received significant network policy and encoding detection upgrades. Security and modernization improvements include a critical overflow fix in KFileMetaData, a KWallet refactoring that strips dead integrations, and expanded image format support for AVIF, JPEG XL, and HEIF. The update requires Qt 6.9.0 and is available now through standard distribution packages or the official KDE source mirrors.

AM 10.4.1 Fixes Silent Data Loss During AppImage Reinstall

Software 44726 Published 2026-08-15 08:01 by Philipp Esselbach 0

AppMan 10.4.1 resolves a critical data-loss regression introduced in the 10.4 release, where the reinstall command failed to preserve .home and .config directories for portable AppImages. The fix extends the backup-and-restore logic from the relocate option to reinstall, copying portable data to a temporary location before wiping the app directory to ensure a safety net for users. Alongside the hotfix, the update adds three new packages contributed by the community: PanConvert for document conversion, boris for behavioral observation, and t3-code for AI-assisted coding.

Chromium, Linux Kernel RT, Dracut updates for SUSE

SUSE 5738 Published 2026-08-15 07:45 by Philipp Esselbach 0

SUSE issued a coordinated set of important and moderate security patches across openSUSE Leap, Tumbleweed, and SUSE Linux Enterprise environments to address dozens of active CVEs. The releases neutralize high-risk flaws ranging from use-after-free memory corruption in Chromium and a root code execution vulnerability in Dracut to seventy-five kernel defects affecting real-time system stability. Additional updates resolve authentication bypasses in the himmelblau directory service, heap corruption in pgadmin4, and multiple command injection risks tied to ansible and 7zip utilities.

openSUSE-SU-2026:0284-1: important: Security update for chromium
SUSE-SU-2026:3611-1: important: Security update for dracut
SUSE-SU-2026:3612-1: important: Security update for dracut
SUSE-SU-2026:3617-1: important: Security update for the Linux Kernel
openSUSE-SU-2026:21573-1: important: Security update for himmelblau
openSUSE-SU-2026:11506-1: moderate: kernel-devel-7.1.8-1.1 on GA media
openSUSE-SU-2026:11509-1: moderate: python3-ansible-compat-26.8.0-1.1 on GA media
openSUSE-SU-2026:11502-1: moderate: 7zip-26.02-2.1 on GA media
openSUSE-SU-2026:11510-1: moderate: python313-nltk-3.10.2-1.1 on GA media
openSUSE-SU-2026:11503-1: moderate: ansible-lint-26.8.0-1.1 on GA media
openSUSE-SU-2026:11508-1: moderate: pgadmin4-9.17-1.1 on GA media
openSUSE-SU-2026:11507-1: moderate: molecule-26.8.0-1.1 on GA media
openSUSE-SU-2026:11504-1: moderate: dracut-112+suse.29.gc0c5e1d-1.1 on GA media

Kernel, .NET 8/9, BIND, and Dracut updates for Rocky Linux

Rocky Linux 980 Published 2026-08-15 07:39 by Philipp Esselbach 0

Red Hat OpenStack Platform update for RHEL

Red Hat 9488 Published 2026-08-15 07:37 by Philipp Esselbach 0

Red Hat has released RHSA-2026:54757, a security update for OpenStack Platform 16.2 (Train). Product Security classified this patch with an Important impact rating to address known vulnerabilities in the distribution.

RHSA-2026:54757: Important: Red Hat OpenStack Platform 16.2 security advisory

.NET, OpenJDK, BIND, UEK, and FreeRDP updates for Oracle Linux

Oracle Linux 6535 Published 2026-08-15 07:36 by Philipp Esselbach 0

Haveged and HTTP-Daemon updates for Gentoo Linux

Gentoo 2535 Published 2026-08-15 07:33 by Philipp Esselbach 0

Gentoo Linux issued two security advisories this month to address distinct software vulnerabilities. GLSA 202608-11 fixes a high-severity privilege escalation flaw in haveged that could allow local attackers to gain root access. GLSA 202608-10 corrects a header handling inconsistency in HTTP-Daemon that risks API abuse or cache poisoning. Users need to upgrade haveged to version 1.9.21 and HTTP-Daemon to version 6.160.0 to resolve both issues.

[ GLSA 202608-11 ] haveged: Privilege escalation
[ GLSA 202608-10 ] HTTP-Daemon: Improper header handling

Chromium, pdns, PHP CodeSniffer, libsoup3, and perl-Archive-Tar updates for Fedora

Fedora Linux 9453 Published 2026-08-15 07:31 by Philipp Esselbach 0

Fedora shipped security patches for Fedora 43 and 44 targeting five major packages. Chromium 151.0.7922.137 closes five use-after-free vulnerabilities spanning V8, TabStrip, Extensions, HTML, and Blink. PHP CodeSniffer 4.0.4 squashes a shell injection flaw in blame reporting tools and adds tokenizer support for PHP 8.5. Remaining updates bring PowerDNS to 5.0.7, lock three additional CVEs inside libsoup3, and bump perl-Archive-Tar to block a tar header parsing denial-of-service bug.

Fedora 43 Update: chromium-151.0.7922.137-1.fc43
Fedora 43 Update: pdns-5.0.7-1.fc43
Fedora 43 Update: php-pear-PHP-CodeSniffer-4.0.4-1.fc43
Fedora 43 Update: perl-Archive-Tar-3.12-1.fc43
Fedora 44 Update: libsoup3-3.6.6-9.fc44
Fedora 44 Update: chromium-151.0.7922.137-1.fc44
Fedora 44 Update: pdns-5.0.7-1.fc44
Fedora 44 Update: php-pear-PHP-CodeSniffer-4.0.4-1.fc44

Python-httplib2, Unzip, Zip, Util-Linux, Postgresql, and CA-Certificates-Java updates for Debian

Debian 11040 Published 2026-08-15 07:25 by Philipp Esselbach 0

Debian published six security and bugfix advisories, delivering updated packages for python-httplib2, unzip, zip, util-linux, postgresql-15, and ca-certificates-java across the stable trixie and bookworm distributions. The python-httplib2 patch resolves an unbounded decompression flaw that could cause a denial of service, while refreshed unzip and zip utilities block arbitrary code execution and command injection attacks triggered by malformed archive inputs. Operators need to upgrade util-linux to neutralize multiple privilege escalation risks, and postgresql-15 administrators must apply a configuration tweak to lock down logical decoding output plugins after patching over two dozen CVEs that previously allowed unauthorized access or data leaks. Applying these package updates immediately will close the newly disclosed vulnerabilities and keep affected systems aligned with current security baselines.

[DSA 6441-1] python-httplib2 security update
[DSA 6440-1] unzip security update
[DSA 6439-1] zip security update
ELA-1809-1 ca-certificates-java bugfix update (by )
[DSA 6442-1] util-linux security update
[DLA 4740-1] postgresql-15 security update

.NET, BIND, FreeRDP, and Kernel updates for AlmaLinux

AlmaLinux 2627 Published 2026-08-15 07:22 by Philipp Esselbach 0

Windows

Linux

macOS

Community