Major changes: This document highlights major changes between Rocky Linux (RL) 9.7 and RL 9.8. If this is your first time migrating to RL 9, you might want to review the release notes for previous versions to get a feel for all the changes you will encounter. For a complete list of major changes, see the upstream listing here. Security: Listed below are security-related highlights in the latest RL 9.8: GnuTLS 3.8.10 providing ML-KEM hybrid key exchange and ML-DSA post-quantum (PQ) algorithms; OpenSSH 9.9 with extensive improvements over OpenSSH 8.7; upgraded p11-kit packages to upstream version 0.26.1, providing support for post-quantum cryptography (PQC) definitions in PKCS #11 headers clevis-pin-trustee package providing a new Clevis pin trustee that enables automatic; encryption and decryption of LUKS-encrypted volumes, by using remote attestation through the Trustee Key Broker Service (KBS); fapolicydpackages rebased to upstream version 1.4.3, providing filtering rules.
The most fundamental change in OviOS v6 is the transition of the init system from SysVinit to systemd. This was not a decision made lightly - it reflects a clear and unavoidable shift in the Linux ecosystem. Why we moved: SysVinit has been in maintenance-only mode for years. Distribution maintainers, package authors, and upstream projects have progressively dropped SysVinit support in favour of systemd's native unit files. Shipping a modern storage appliance on a legacy init system would have meant maintaining an ever-growing pile of compatibility shims - a cost that ultimately falls on you, the administrator. Specifically: new versions of Samba, NFS utilities, iSCSI tools, and security daemons ship with systemd unit files only. Backporting SysVinit scripts for each new upstream release added fragility and delayed security updates. The move to systemd eliminates this entirely.
AlmaLinux 10.2 introduces updated compiler toolsets, new language and database packages, and improved security. This release adds Python 3.14, PostgreSQL 18, MariaDB 11.8, Ruby 4.0 and PHP 8.4 as new packages, alongside SDL3, libkrun, trustee and FIDO Device Onboard tooling. The desktop sees GNOME 49. Container and virtualization support is updated with the latest versions of Podman, Buildah, libvirt, QEMU-KVM and skopeo. Security is improved with updates to OpenSSL, OpenSSH, SSSD, SELinux policies, crypto-policies, and Keylime. AlmaLinux 10.2 also brings i686 userspace packages - enabling legacy 32-bit software, CI pipelines, and containerized workloads on AlmaLinux 10. We first landed i686 in Kitten 10 back in April; 10.2 is where it crosses into stable. 10.2 continues to ship AlmaLinux's deviations from upstream that we've written about before: Btrfs support including the ability to boot from a Btrfs volume, the CRB repository enabled by default, and a parallel x86_64_v2 build with matching EPEL coverage for older hardware.
We would like to encourage to install this update as soon as possible to be protected against the unusually large amount of vulnerabilities that have been discovered recently in the Linux kernel as well as lots of other software components. Ensure to reboot your IPFire system afterwards. In this release, the IPFire kernel has been rebased on Linux 6.18.32 which most notably fixes a couple of prominent security vulnerabilities: Dirty Frag - a local privilege escalation flaw disclosed on May 7, 2026 in the kernel module providing support for ESP, one of the protocols used for IPsec, allowing an unprivileged local user to escalate to root; Copy Fail - a logic flaw in the Linux kernel's cryptographic subsystem, specifically within the algif_aead module of the AF_ALG interface, disclosed April 29, 2026, that lets any unprivileged local user gain root via a tiny exploit on essentially every distribution shipping kernels built since 2017. While these vulnerabilities are serious for Linux systems in general, IPFire is by design not exposed to the most common attack paths. Both flaws require an unprivileged local user with shell access to the system, and IPFire does not provide unprivileged shell accounts on the firewall.
We are happy to announce the release of our 2026.1 snapshot images. Since late 2025, our focus has primarily been centered around our partnership with the UBports team and bringing Lomiri to a wider range of devices. Following from the progress we previously shared in 2025, we are happy to announce that we have shipped our generic ISO images (x86_64/arm64) for Lomiri. This work has built upon our continued and increasing collaboration with the UBports team to improve and refine the Lomiri experience, as well as making Lomiri more accessible beyond mobile hardware. Those installing Rhino Linux on standard x86_64 or ARM64 systems can now choose to experience Lomiri as their desktop environment of choice. While Lomiri support on generic systems is still considered an evolving experience, we are excited by the progress made so far and are excited to continue working closely with the UBports team to provide improvements for Lomiri users on desktop and mobile.
MX Linux 25.2 is now available. All releases feature updated 6.12.90 Debian kernels, except for Xfce-AHS which has a 7.0.9 Liquorix kernel. In addition, the AHS-enabled releases now feature Mesa 26.0.1. The new release includes all Debian updates through Debian 13.5 and all updates from the MX repositories, including patches for all the latest 'meme bugs' in the Linux kernel. There are some specific updates of note this time around. antiX live systems updates: certain initial setup actions during live boots have been moved out of rc.local; improvements to the live-kernel-updater application, which will now supports multiple kernels being installed at the same time; kernels are selectable in the GRUB boot menus, used by default on UEFI boot and select-able on legacy/BIOS boots; thanks to changes in our version of init-diversity-tools package, semi-automatic persistence saving returns to SysV init live boots; systemd live boots will still fallback to 'automatic' in the event semi-automatic is enabled....
This version is a major release developed as a result of meticulous work carried out since version 3-0. Particular emphasis was placed on stability and lightness. It has been purged of leaking, conflicting or background processes. Healthy, functioning tools have been replaced with alternatives. Some software has been removed while others have been added. It was created with an 'install and use' approach, requiring minimal customization beyond user preferences. To this end, all software necessary for basic needs has been adapted to the system. Both GUI and CLI software have been added for the touchpad. Pavucontrol has been removed and replaced with Pasystray, which performs the same function. A separate process has been implemented for panel icons. Panel icon colors can be changed using the 'Panel Manager' tool. Icons can be added to the panel, menu and desktop. This version includes four different icon sets. Different-looking folders can be changed using the icon color change tool.
This release presents the new Linux kernel 7.0.6 as well as the new versions 148.0.7778.167-1 of the web browser Google-Chrome-Stable, 3.7.7+dfsg-1xtradeb1.2404.1 of the audio editor Audacity and 3.0.5-1xtradeb1.2404.1 of the drawing/painting program Pinta. In addition, among other things, Starbuntu has further improved its list manager, its desktop file interpreter and its general file opener.
The moment we have anticipated is finally here - PureOS 'Crimson' is released. All devices running PureOS 'Byzantium' will receive the PureOS Upgrade application with their regular software updates. As with many prior updates, reliability and stability continue to play a major role in Crimson. We found and fixed a corner case that could cause systems to suspend unexpectedly when suspend is enabled. We fixed a crash that could occur when disconnecting an external display on the Librem 5 and Librem 11. The Librem 5's hardware killswitches can disable the internal accelerometer and other sensors, but in some cases this could cause the system to act like the sensor reported a value that didn’t make any sense. That could cause an unexpected screen rotation. That's fixed now - we'll now keep the last value correctly. PureOS 'Crimson' is designed to be our best PureOS yet. All Purism devices can benefit from this update, including our earliest Librem 13 and 15 computers.
Proxmox VE 9.2 is built on the robust Debian 13.5 'Trixie' and ships with Linux kernel 7.0 as the new stable default. In addition to core system enhancements, this update integrates the latest versions of our key underlying technologies, including QEMU 11.0, LXC 7.0, and ZFS 2.4. Storage capabilities have also been advanced with Ceph Tentacle 20.2.1 as the new default stable release, and Ceph Squid 19.2.3 still available as an option. Here are some of the highlights in Proxmox VE 9.2: new Dynamic Load Balancer for improved cluster resource utilization; expanded SDN with WireGuard as a new fabric protocol; fine-grained BGP/EVPN filtering with route maps and prefix lists; management of custom CPU models from the GUI; new HA arm/disarm functionality; enrollment of Microsoft and Windows UEFI 2023 certificates via GUI and API. This release incorporates numerous bug fixes and performance improvements across the platform.