Incus 7.3 fixes 13 security issues (9 critical host-level exploits) and introduces shared GPU acceleration for VMs via virglrenderer, letting multiple guests share one GPU without passthrough.
Proxmox VE is being optimized for NVIDIA's ARM-based Grace and Vera CPUs as part of a new partnership that integrates the open-source hypervisor into NVIDIA's AI data center management stack.
Valve is sponsoring the port of Mesa's open-source RADV Vulkan driver to Windows, with Counter-Strike 2 already running in early demos.
YSERVER 1.4, a Rust reimplementation of X11 built largely with AI, now runs Chrome and Steam with GPU acceleration and supports KDE Plasma, Cinnamon, and NVIDIA hardware.
OpenWrt 24.10.8 fixes a critical stack buffer overflow and over a dozen remotely exploitable vulnerabilities in services enabled by default on every installation.
UBports jumps Morph Browser from Chromium 87 to 134 in Ubuntu Touch 24.04-2.0, adds Widevine DRM, printing, and a Lomiri screenshot editor.
Plasma 6.7.3 restores NVIDIA triple buffering in KWin and patches a use-after-free security flaw, two weeks into the feature-packed 6.7 cycle.
Forgejo 16.0 ships JWT-based Authorized Integrations for secretless CI/CD auth, fixes long-broken PR comment placement with git blame --reverse, and adds workflow log and artifact APIs.
Bazzite stable jumps a full kernel generation to Linux 7.1.3, with refreshed Mesa, Nvidia, and Wayland stack updates plus new Razer peripheral support.
Debian 12's final point release patches an expired UEFI Secure Boot CA, ships fwupd 2.0.20, and delivers a massive wave of security fixes before handing off to LTS.
Incus 7.0.1 LTS fixes seven critical container escape CVEs including symlink-based host file access and project restriction bypasses, plus backports CPU topology, per-instance SELinux, and LINSTOR support.
KDE Frameworks 6.28 delivers a major KIO file-handling overhaul with leak fixes and ACL support, adds modifier-only keyboard shortcuts, and improves KTextEditor's vi-mode.
Debian 13.6 addresses an expired UEFI Secure Boot CA that could prevent systems from booting, ships fwupd 2.0.20 for certificate updates, and patches over 100 CVEs across curl, QEMU, Apache, Mesa, and Python 3.13.
incus-compose 1.0 brings Docker Compose workflows to Incus with cross-platform support, GPU passthrough, and native system container orchestration.
TUXEDO ditches Ubuntu for Debian Testing over Snap and AI frustrations, Cinnamon 6.8 fully supports Wayland, and SteamOS 3.8.14 fixes a Wi-Fi throttle bug on Steam Deck.
The final KDE Plasma 6.6 maintenance release fixes an XWayland clipboard freeze, a KWin memory leak, and a security path-traversal issue.
Pi-hole FTL 6.7 patches six security vulnerabilities including a remote code execution flaw, updates dnsmasq to v2.93, and adds a proper DHCP static leases editor.
KDE Gear 26.04.3 closes the series with targeted fixes for Kdenlive's playhead tracking, Elisa's audio output switching, and KDE Connect file transfers.
System76's ultralight Lemur Pro now comes in 14- and 16-inch sizes with Intel Panther Lake chips, Arc B390 graphics on open-source drivers, and Pop!_OS with COSMIC.
KDE Plasma 6.7.2 lands with a week of fixes and new translations for the desktop that powers Steam Deck's desktop mode and countless Linux mini PCs.