Posts by secureblue
Please update to pull in Trivalent 147.0.7727.55. This is a major release with numerous security fixes noted in the commit history.
This version of Trivalent includes a new upstream feature allowing Javascript JIT to be toggled via an icon present in the address bar.
github.com/secureblue/T...
Upstream release notes have been published. This release includes fixes for 21 CVES. Google is aware that an exploit for CVE-2026-5281 exists in the wild.
chromereleases.googleblog.com/2026/03/stab...
The Open Collective page for secureblue is now live! A new GitHub Sponsors profile for the secureblue organization is live and integrated with Open Collective. Existing sponsors via GitHub are encouraged to switch their donations over to one of the two options.
secureblue.dev/donate
Trivalent 146.0.7680.80 released:
github.com/secureblue/T...
CVE-2026-3909 was originally marked by Google as fixed in the previous upstream release. They have since revised those release notes and released for a third time this week, this time actually containing the fix for CVE-2026-3909.
Trivalent 145.0.7632.75-442755 released:
github.com/secureblue/T...
Google is aware that exploits for both CVE-2026-3909 & CVE-2026-3910 exist in the wild.
secureblue v4.8.2 has been released. There's a critical rpm-ostree regression in version 2026.1 causing upgrade failures. To confirm whether you're on the impacted version, check rpm-ostree --version. If the version shows 2026.1, follow the steps in the release notes:
github.com/secureblue/s...
California recently passed, and Colorado and NY recently introduced, age verification legislation targeting OS providers that is so imprecisely written that it's unclear how to comply. If you live in one of those states, contact your state senator and rep asking them to oppose this legislation.
Check out the new article on secureblue.dev covering secureblue's build architecture, especially supply chain security mechanisms:
secureblue.dev/articles/bui...
Trivalent 145.0.7632.75-442755 released:
github.com/secureblue/T...
Google is aware that an exploit for CVE-2026-2441 exists in the wild.
Trivalent 145.0.7632.67-442736 released:
github.com/secureblue/T...
This release includes upstream security fixes for 11 CVEs. It also features a new quick action toolbar button for our dark mode toggle. You can add it to your toolbar via Settings > Appearance > Customize your toolbar.
Release v4.8.1 is out, now with the Bazaar App Store. See the release notes for details: github.com/secureblue/s...
If you've installed dangerzone, you're likely having upgrade issues. Dangerzone abruptly moved their repo GPG key, which they will fix shortly. To unblock, you can simply run0edit /etc/yum.repos.d/dangerzone.repo and replace gpgkey with their new url: packages.freedom.press/yum-tools-pr...
And yes, daily updates are pulled automatically and applied on reboot.
Updates have nothing to do with releases. Releases are symbolic. Builds are created and published daily.