secureblue

secureblue

@secureblue.dev

A security-focused desktop and server linux operating system. https://secureblue.dev

246 followers1 following98 posts

secureblue
@secureblue.dev

Trivalent 153.0.8010.36 was released for x86_64 on September 9th and for aarch64 today. This post was delayed by our work to move aarch64 builds to cross-compilation. Now that this work is complete, the maintenance burden for aarch64 builds will be substantially reduced. github.com/secureblue/T...

github.comRelease 153.0.8010.36-447235 · secureblue/TrivalentWhat's Changed chore(deps): bump step-security/harden-runner from 2.21.0 to 2.21.1 by @dependabot[bot] in #879 chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 by @dependabot[bot] in...
secureblue
@secureblue.dev

Release v4.9.1 is out, featuring new upgrade-on-boot functionality and `main` images that are completely free of SUID and SGID executables! See the release notes for details. github.com/secureblue/s...

github.comRelease v4.9.1 - Secureblue goes SUID-less! · secureblue/securebluev4.9.1 - Secureblue goes SUID-less! Reminder: releases are symbolic. Builds are created and published immediately after new commits are merged. SUID-less All secureblue main images (non-nvidia imag...
secureblue
@secureblue.dev

Trivalent 148.0.7778.167-444655 was released and shipped in secureblue on May 12th: github.com/secureblue/T... Upstream CVE information was released today May 14th: chromereleases.googleblog.com/2026/05/stab... This version includes upstream fixes for 79 CVEs, including 14 Critical and 37 High.

github.comRelease 148.0.7778.167-444655 · secureblue/TrivalentWhat's Changed chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 by @dependabot[bot] in #725 chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #...
secureblue
@secureblue.dev

Please update to pull in Trivalent 147.0.7727.55. This is a major release with numerous security fixes noted in the commit history. This version of Trivalent includes a new upstream feature allowing Javascript JIT to be toggled via an icon present in the address bar. github.com/secureblue/T...

github.comRelease 147.0.7727.55-443903 · secureblue/TrivalentWhat's Changed feat(selinux): Get rid of all file WX of Trivalent's Selinux trivalent_domain by @PhysicsIsAwesome in #666 chore(deps): bump github/codeql-action from 4.34.0 to 4.35.1 by @dependabo...
secureblue
@secureblue.dev

Upstream release notes have been published. This release includes fixes for 21 CVES. Google is aware that an exploit for CVE-2026-5281 exists in the wild. chromereleases.googleblog.com/2026/03/stab...

chromereleases.googleblog.comStable Channel Update for DesktopThe Stable channel has been updated to 146.0.7680.177/178 for Windows/Mac  and  146.0.7680.177 for Linux, which will roll out over the comin...
secureblue@secureblue.dev

Trivalent 146.0.7680.177-443748 released: github.com/secureblue/T...

github.comRelease 146.0.7680.177-443748 · secureblue/TrivalentWhat's Changed chore(singleton): add singleton hostname fix by @RKNF404 in #674 Full Changelog: 146.0.7680.164-443579...146.0.7680.177-443748
secureblue
@secureblue.dev

Trivalent 146.0.7680.80 released: github.com/secureblue/T... CVE-2026-3909 was originally marked by Google as fixed in the previous upstream release. They have since revised those release notes and released for a third time this week, this time actually containing the fix for CVE-2026-3909.

github.comRelease 146.0.7680.80-443379 · secureblue/TrivalentWhat's Changed chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by @dependabot[bot] in #654 chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in #...
secureblue
@secureblue.dev

secureblue v4.8.2 has been released. There's a critical rpm-ostree regression in version 2026.1 causing upgrade failures. To confirm whether you're on the impacted version, check rpm-ostree --version. If the version shows 2026.1, follow the steps in the release notes: github.com/secureblue/s...

github.comRelease v4.8.2 - Mitigate rpm-ostree regression · secureblue/securebluev4.8.2 - Mitigate rpm-ostree regression Reminder: releases are symbolic. Builds are created and published immediately after new commits are merged. There is a critical rpm-ostree regression in vers...
secureblue
@secureblue.dev

California recently passed, and Colorado and NY recently introduced, age verification legislation targeting OS providers that is so imprecisely written that it's unclear how to comply. If you live in one of those states, contact your state senator and rep asking them to oppose this legislation.