Canonical says Ubuntu kernel updates are available for DirtyClone, a high-severity Linux local privilege escalation flaw tracked as CVE-2026-43503.

The latest Asahi Linux progress report brings good news for Apple M3 Mac users, though installer support for these machines still needs more work.

The privacy-focused Tails 7.9.1 ships with Linux kernel 6.12.94, addressing DirtyClone and another privilege-escalation vulnerability.

Fwupd 2.16 fixes several security-related issues, including safer manifest validation, sealed memfd input handling, and device-version checks.

Arch Linux’s July 2026 ISO ships with Linux kernel 7.0.14, Archinstall 4.4, systemd 261.1, fresh firmware, and updated core packages.

System76’s new Lemur Pro weighs under 3 pounds, packs Intel Core Ultra Series 3 chips, and starts at $1,999 before the current $76 discount.

KDE Gear 26.04.3 delivers another round of maintenance fixes for KDE’s application suite, covering video editing, file transfers, audio output, and more.

Microsoft’s new WSL Containers feature brings a familiar Docker-like CLI and a native Windows API for running Linux containers through WSL.

The new OpenVPN update patches seven security vulnerabilities affecting DNS handling, TLS-Crypt-v2, NTLMv2 proxy responses, and more.

Immich 3.0 has been released with a broad set of improvements across mobile, web, backups, automation, and library management.

Calibre 9.11 introduces standalone HTML annotation exports with light/dark themes, search support, and filtering by highlight style.

The Fedora-based Ultramarine Linux 44 adds a Wayland-based Budgie experience, Plasma 6.7, Taidan installer improvements, and more.

ClamAV 1.5.3 open-source antivirus engine released with fixes for multiple security vulnerabilities affecting file parsing, archive scanning, and executable unpacking.

Apple’s Swift-powered container tool for macOS hits 1.0 with persistent Linux machines, host integration, and broader workflow improvements.

Greg Kroah-Hartman says Linux leads CVE counts for the first half of 2026, arguing the numbers reflect responsible reporting, not poor security.

The Guix team urges users to upgrade after vulnerabilities were found in its substitute handling and channel update mechanisms.

Woodpecker CI 3.16.0 lands with workflow concurrency limits, Unix socket support, Prometheus metrics, Kubernetes improvements, and security hardening.

Fedora’s top governance body says the Community Initiatives framework no longer provides an effective path for major project goals.

Ubuntu temporarily switched cp back to GNU Coreutils after a Rust Coreutils compatibility issue caused livecd-rootfs builds to fail.

KDE developers continue polishing Plasma 6.8 with smoother visual effects, a fixed multi-screen crash, and UI refinements.

Ladybird’s June update brings file downloads, searchable browsing history, DevTools storage inspection, and default Linux sandboxing.