Qubes OS 4.2.4 is a stable patch release that consolidates all security updates, bug fixes, and improvements since the previous version. It includes an upgraded Fedora template (from Fedora 40 to 41) and provides an updated ISO for new installations or reinstallations. Users on Qubes 4.2.x can update normally without reinstalling, while those on Qubes 4.1 or earlier must upgrade due to end-of-life status. A new Release Signing Key (RSK) has been introduced for security reasons. The release follows semantic versioning, ensuring that a fully updated Qubes 4.2.0 system is functionally equivalent to Qubes 4.2.4.
The images come with a fresh version of apk-tools. This version finally supports several features that we began using, particularly variable expansion and being able to migrate most of its files into a system-wide /usr location. That means you finally have a way to properly change your mirror of choice without having to mess with the repository definitions. The process of doing that is in the relevant documentation section. The repository definitions have been updated to use the new v3-style index naming, though backwards compatibility is also provided. Linux kernel 6.13 is used in the new images. That means updated hardware support and other things. Both the GNOME and Plasma images (the latter is still experimental) come with the latest versions of their respective desktop environments. Various fixes have been made to allow the live system to work better and more seamlessly on more machines.
Mauna Linux 24.5 has been officially released as a minor update, featuring Debian 12.9 as its base. The update includes Calamares 3.3.8 with improvements in partition handling and bootloader installation, Xfce AHE with Linux Kernel 6.12.9, and updated firmware (20250211). System tools such as Hardinfo2, Mauna Update, and the Application Manager have received enhancements, including improved recovery features, better package management, and UI refinements. Desktop environments like Cinnamon 6.0.2, LXQt 1.2.0, MATE 1.26, and Xfce 4.18 are included. Users can update their existing Mauna 24 systems via Mauna Update or download the new version from the official website.
The 'Mercury' ISO image ships with the following packages for both the live environment and the offline install option: Calamares 25.02.1.4, Firefox 135.0, Linux kernel 6.13.1, Mesa 24.3.4, X.Org Server 21.1.15-1, NVIDIA 570.86.16. New features and improvements: the ISO image now has a memory test for EFI too; the issue with BIOS/Legacy installs is resolved; KDE Plasma, GNOME, Xfce, MATE, Budgie and Cinnamon use a dark theme by default; Xfce theme is now closer to the default setup; GNOME sets dark and light wallpapers on changing mode automatically; replacing empty space with the 'replace partition' option is working again; the installer showing double entries for the EFI selection dropdown is resolved; EndeavourOS branding is easier to find and use for artists and media usage; both mirror lists ranked now before installation will be copied to the target.
The Netrunner team is happy to announce the release of Netrunner 25 'Shockworm', a 64-bit ISO image. Netrunner 25 ships with all the latest security updates provided by Debian and a beautiful new wallpaper showing this release's new code name. Netrunner ships with various tools and applications that can be used daily. It features the Linux kernel 6.1.128, KDE Plasma 5.27.5, Qt 5.15.2, Firefox 128.6.0 ESR, LibreOffice 7.4.7 and VLC 3.0.21. As always, we provide our ISO images on our download page. If you need help or want to give feedback, don't hesitate to contact us via our forums.
Starbuntu has been published in the new version 24.04.1.17. This version contains important updates such as libc6-2.39-0ubuntu8.3, openjdk-21-jre-21.0.6+7-1-24.04.1, systemd-255.4-1ubuntu8.5 as well as google-chrome-stable-133.6943.53- 1 in which serious security gaps have been closed. In addition, the lists in Starbuntu have been supplemented by an editable header.
Tails 6.12 introduces crucial security fixes addressing vulnerabilities found in an external audit, particularly preventing attackers from monitoring Tor circuits and altering Persistent Storage settings. The update also includes usability improvements, such as a new upgrade check button, a terminal shortcut (Ctrl+Alt+T), and updates to Tor Browser (14.0.5) and Thunderbird (128.6.0esr). Several bugs were fixed, including issues with Python code isolation, upgrade troubleshooting, and time synchronization. Users can upgrade from Tails 6.0 or later automatically or perform a manual installation if needed. Some known issues remain, particularly with additional software installation notifications.
The central interface to the local system configuration Univention Config Registry (UCR) checks and validates input values now according to the type stored. This avoids errors before they occur. The validation can also be deactivated if necessary. Single sign-on & Single logout now enable conditional authentication flows (e.g. B. by network areas) and secure on-boarding and offboarding processes through OpenID Connect & SAML. Massive time savings for IT administrators in the configuration of the Active Directory Connection with new ones Allow and Deny filters for tailor-made synchronization. Block lists for attributes in the Univention Directory Manager (UDM) prevent the entry of incorrect data such as the use of already assigned mail addresses.
New parameters were added to the distribution when booting the kernel. These changes include the following: Mitigate spurious wake events in USB devices using the module xhci. Enable the Landlock Linux security module. Consolidate the Linux security modules (Capability, AppArmor, Yama, BPF, and Landlock) used in Nitrux in a single parameter. Enable Page Table Isolation to mitigate speculative execution attacks like Meltdown. Activate the amd_pstate module for power and performance management. Information: This module is not enabled in the kernel configuration of the Liquorix kernel, but we’re enabling it again. Enable the AMD Preferred Core functionality, ensuring tasks are scheduled on the CPU’s most performant cores. Nitrux SB Manager is a simple utility that creates machine owner keys (MOK) compatible with Secure Boot.
This release introduces support for several arm64 UEFI devices: Apple Silicon, Lenovo Thinkpad X13s, Pinebook Pro. Live ISOs for aarch64 and aarch64-musl should also support other arm64 devices that support UEFI and can run a mainline (standard) kernel. Additionally, this image release includes: Linux 6.12 in live ISOs; Xfce 4.20 in xfce-flavored live ISOs; Linux 6.6.69 in Raspberry Pi PLATFORMFSes and images; xgenfstab, a new script from xtools to simplify generation of /etc/fstab for chroot installs.