A

AlmaLinux Blog

A
AlmaLinux Blog OS

AlmaLinux Day: LA & SIGGRAPH Recap

AlmaLinux Day: LA happened just over a week ago, on Saturday, July 18, at the E-Central Downtown Los Angeles Hotel, and it was a genuinely great day. We got to hang out with some of our new best friends, and I left with the strong sense that we’re doing something right. The dayDoors opened just before 9, and we had a real rush: a big chunk of attendees showed up to the event in that first hour. Th…

A
AlmaLinux Blog OS

Microsoft 2011 Secure Boot certificates have expired — AlmaLinux users are covered!

You may have seen news that the Microsoft UEFI Secure Boot certificates from 2011 have expired. The short version for AlmaLinux users: everything is covered, and your systems will not stop booting. There is nothing you have to do right now, but a quick check will make sure you are ready for future shim updates. Here is what happened and what we recommend. What happened?The Microsoft certificates t…

A
AlmaLinux Blog OS

GhostLock (CVE-2026-43499) kernel privilege escalation: Patch released

Update: The fix is now in productionThe patched kernel for GhostLock (CVE-2026-43499) has been released to the production repositories for every affected AlmaLinux release — 8, 9, and 10. You no longer need to enable the testing repo. Just run: sudo dnf clean metadata && sudo dnf upgrade sudo reboot The fixed versions released to production are kernel-4.18.0-553.141.2.el8_10 (AlmaLinux 8), kernel-…

A
AlmaLinux Blog OS

Januscape and Bad Epoll: Patches released

Update: All patches are now in productionThe patched kernels for Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242) have been released to the production repositories for every affected AlmaLinux release — 8, 9, and 10. You no longer need to enable the testing repo. Just run: sudo dnf clean metadata && sudo dnf upgrade sudo reboot The fixed versions released to production are kernel-4.18.0-5…

A
AlmaLinux Blog OS

IPV6_FRAG_ESCAPE vulnerability: Fixed!

Update: The fix is now in productionThe patched AlmaLinux 10 kernel has been released to the production repositories. You no longer need to enable the testing repo to get it. Just run: sudo dnf clean metadata && sudo dnf upgrade sudo reboot The fixed version released to the public is kernel-6.12.0-211.29.1.el10_2 (or higher). Confirm you are running it with uname -r after rebooting. Most mirrors s…

A
AlmaLinux Blog OS

AlmaLinux OS is Common Criteria certified

We announced earlier today that AlmaLinux OS 9.2 is now certified under Common Criteria, the international standard (ISO/IEC 15408) for independently evaluating the security of IT products. I keep coming back to how big this is for a community project. AlmaLinux is a community-owned non-profit foundation, with no corporate owner. For an operating system that is built in the open and given away for…

A
AlmaLinux Blog OS

The AlmaLinux Day: LA schedule and speakers are here!

The schedule is live, the speakers are confirmed, and I’m genuinely excited to finally show you what the day looks like. We’re gathering Saturday, July 18, 2026 at the E-Central Downtown Los Angeles Hotel, the day before SIGGRAPH. Registration is open, it’s free, but the room is capped. So if you were waiting to see the lineup before grabbing your seat, here it is! It goes both waysThe thing I kee…

A
AlmaLinux Blog OS

New bylaws, New election process: What to expect in 2026

Last September, we cancelled an election in progress because we found inconsistencies in how our own processes, bylaws, and committee guidelines fit together. We wanted to fix that properly, and then to come back to you when the work was done. The work is done. I’m happy to share that as of the April Board meeting, we have adopted new bylaws, along with a reworked election process and a predictabl…

A
AlmaLinux Blog OS

CIFSwitch (CVE-2026-46243) Patches Released

Update: CVE assigned and patched kernels are now in production 2026-06-02 15:31 UTC: The vulnerability has been assigned CVE-2026-46243, and the patched kernels have been released to the production repositories/mirrors. You no longer need to enable the testing repo to get them. Just run: sudo dnf clean metadata && sudo dnf upgrade sudo reboot Thanks to everyone in the community who helped verify t…

A
AlmaLinux Blog OS v9.8

General Availability of AlmaLinux OS 9.8 and 10.2 Stable!

AlmaLinux OS 9.8 and 10.2 Stable Now AvailableHello Community! The AlmaLinux OS Foundation is announcing the general availability of two stable releases at once: AlmaLinux OS 9.8 codenamed “Olive Jaguar” and AlmaLinux OS 10.2 codenamed “Lavender Lion”! This is the first time we have ever shipped two AlmaLinux releases on the same day, and it’s a milestone we’re proud of. It’s the direct result of…

A
AlmaLinux Blog OS

AlmaLinux Day: LA — Venue Confirmed at E-Central Downtown LA

We have a venue! AlmaLinux Day: Los Angeles will take place Saturday, July 18, 2026, at the E-Central Downtown Los Angeles Hotel at 1020 S Figueroa St — and you can register now. These are the seats waiting for you. The room is real, the date is locked, and there’s enough space for a great conversation but not enough for everyone who’ll want in — which brings us to the rest of the announcement.

A
AlmaLinux Blog OS

ssh-keysign-pwn (CVE-2026-46333) Patches Released

Update: Patched kernels are now in production2026-05-16 15:05 UTC: The patched kernels are now rolling out to production repositories/mirrors. You no longer need to enable the testing repo to get them. Just run: sudo dnf clean metadata && sudo dnf upgrade sudo reboot Most mirrors have a sync frequency of 3 hours. If the updates are not available to you yet we recommend trying again in about an hou…

A
AlmaLinux Blog OS

NGINX Rift (CVE-2026-42945) Patches Released

Update: Patched nginx is now in production2026-05-14 22:41 UTC: Patched nginx packages are now rolling out to the AlmaLinux production repositories for every supported release. This covers the default nginx package on AlmaLinux 8, 9, 10, and Kitten 10, and every nginx module stream we ship on AlmaLinux 8 (nginx:1.16, nginx:1.18, nginx:1.20, nginx:1.22, nginx:1.24) and AlmaLinux 9 (nginx:1.24, ngin…

A
AlmaLinux Blog OS

Fragnesia (CVE-2026-46300) Patches Released

Update: Patched kernels are now in production2026-05-16 15:05 UTC: The patched kernels are now rolling out to production repositories/mirrors. You no longer need to enable the testing repo to get them. Just run: sudo dnf clean metadata && sudo dnf upgrade sudo reboot Most mirrors have a sync frequency of 3 hours. If the updates are not available to you yet we recommend trying again in about an hou…

A
AlmaLinux Blog OS

Dirty Frag (CVE-2026-43284, CVE-2026-43500) Patches Released

Update: Patched kernels are now in production2026-05-08 15:22 UTC — The patched kernels are now rolling out to production repositories/mirrors. You no longer need to enable the testing repo to get them. Just run: sudo dnf clean metadata && sudo dnf upgrade sudo reboot Most mirrors have a sync frequency of 3 hours. If the updates are not available to you yet we recommend trying again in about an ho…

A
AlmaLinux Blog OS v10.2

AlmaLinux 10.2 Beta Now Available!

Hello Community! The AlmaLinux OS Foundation is announcing the availability of AlmaLinux 10.2 Beta “Lavender Lion” for all supported architectures: Intel/AMD (x86_64) Intel/AMD (x86_64_v2) Intel/AMD 32-bit (i686) ARM64 (aarch64) IBM PowerPC (ppc64le) IBM Z (s390x) Beta ISOs are available at repo.almalinux.org. A usual reminder: this is a BETA release. It should not be used for production installat…

A
AlmaLinux Blog OS

Copy Fail (CVE-2026-31431) Patches Released

Update: Patched kernels are now in production2026-05-01 21:07 UTC — The patched kernels are now rolling out to production repositories/mirrors. You no longer need to enable the testing repo to get them. Just run: sudo dnf clean metadata && sudo dnf upgrade sudo reboot Most mirrors have a sync frequency of 3 hours. If the updates are not available to you yet we recommend trying again in about an ho…

A
AlmaLinux Blog OS v6.18

Linux Kernel 6.18 testing for Raspberry Pi

As announced in the Raspberry Pi Forum, the kernel of Raspberry Pi OS is planning a move to 6.18, the next upstream LTS kernel version, in the near future. We are also considering migrating our AlmaLinux images for Raspberry Pi to the 6.18 kernel, and we now offer a pre-release Raspberry Pi kernel for users interested in these cutting-edge updates. The testing kernel is available for AlmaLinux OS…

A
AlmaLinux Blog OS v9.8

AlmaLinux 9.8 Beta Now Available!

Hello Community! The AlmaLinux OS Foundation is announcing the availability of AlmaLinux 9.8 Beta “Olive Jaguar” for all supported architectures: Intel/AMD (x86_64) ARM64 (aarch64) IBM PowerPC (ppc64le) IBM Z (s390x) Beta ISOs are available at repo.almalinux.org. A usual reminder: this is a BETA release. It should not be used for production installations. The provided upgrade instructions should n…

A
AlmaLinux Blog OS

California's New Age Verification Law: What It Means for AlmaLinux

Some of you may have seen news about California’s AB-1043, the “Digital Age Assurance Act,” (DAAA) and are wondering what it means for AlmaLinux. To help answer that, I want to share what we know and where we stand. What we thinkWhether or not we like this legislation (we don’t) we believe that the DAAA may require operating systems to implement digital age verification, and communicate the result…

A
AlmaLinux Blog OS

ELevating to AlmaLinux 10 x86_64_v2

ELevate NG (the development branch of ELevate) now supports the upgrade path from AlmaLinux OS 9 to AlmaLinux OS 10 (or AlmaLinux OS Kitten) x86_64_v2. We need your help to verify that the upgrade works smoothly. Please give it a try and report your results! Caution: Do not use it on production machines. We highly recommend making backups and/or snapshots of your system before proceeding, and perf…

A
AlmaLinux Blog OS

AlmaLinux OS Kitten 10 expands community support with i686 userspace

We have added i686 support to AlmaLinux OS Kitten 10 — package repositories and official container images for 32-bit x86. There is no installer ISO for i686; this is only about userspace. If you have used i686 packages on AlmaLinux 8 or 9, the setup is the same. Why ship i68632-bit x86 has not gone away. Software that only ships as i686, CI pipelines that need a specific 32-bit glibc, containers t…

A
AlmaLinux Blog OS

AlmaLinux Day: Germany 2026 — Full Schedule Announced

We’re just 9 days out from AlmaLinux Day: Germany 2026, and the full schedule is here! On Thursday, March 26, we’ll be taking over the Convento room at Europa-Park in Rust, Germany for a full day of talks, a panel, and the kind of hallway conversations that make these events so worthwhile. AlmaLinux Day: Germany happens during the final day of CloudFest 2026, so you’ll also have access to the lege…

A
AlmaLinux Blog OS

AlmaLinux goes RISC-V: Kitten 10 now available for riscv64

RISC-V is a free and open instruction set architecture (ISA) based on RISC principles. Unlike proprietary ISAs such as x86 or ARM, the RISC-V specification is openly available, allowing anyone to implement it without licensing fees. Hardware platforms based on RISC-V are becoming more widely available, from microcontrollers to application-class processors capable of running full Linux distribution…

A
AlmaLinux Blog OS

Call for testing - firewalld ipset performance fix for AlmaLinux 8

For years, firewalld users across multiple Linux distributions have been hitting a painful performance issue: reloading the firewall with large ipsets (10,000+ entries) and the nftables backend takes minutes instead of seconds, often causing network disruption. The problem has been reported upstream as well as in Debian, Red Hat Bugzilla, and by our community. We’ve investigated the root cause, de…

A
AlmaLinux Blog OS

Introducing AlmaLinux Astra: Self-Service Memberships and Elections Portal

Today we’re rolling out AlmaLinux Astra: a new self-service platform for identity, organizations, memberships, and elections for the AlmaLinux OS Foundation. Astra is built to keep workflows clear, accountable, and easy to audit. It helps contributors and communities move from “who are you?” to “you can participate” with fewer manual handoffs and more transparent status updates. Astra will replace…

A
AlmaLinux Blog OS

AlmaLinux in 2026

Every year, around FOSDEM, the AlmaLinux SIG leaders, ALESCo members, and board members are invited to attend the AlmaLinux Leadership Summit. The goal of the summit is to get everyone in a room to have discussions around the major problems we’re facing, ensure that what we’re doing in the year to come is focused on our goals, work out any friction between SIGs, and make sure that everyone in lead…

A
AlmaLinux Blog OS

AlmaLinux and NVIDIA Streamline Driver and CUDA Updates

Last August we started shipping NVIDIA’s open GPU kernel modules, and saw incredible amounts of adoption and excitement about that announcement! Today we are excited to share that with the release of version 13.2, NVIDIA has added official support for enterprise Linux compatible distributions, including AlmaLinux, to CUDA. That means that users of NVIDIA hardware can receive support for NVIDIA dri…

A
AlmaLinux Blog OS

AlmaLinux Days in two great cities!

AlmaLinux days have been a fantastic way for us to gather parts of our community together. Whether adjacent to other events, or completely independent, we are always so happy to connect and hear from the users who are impacted by what we do every day. I’m so excited to announce the next two AlmaLinux days for 2026: Germany (in just under a month), and Los Angeles. Why AlmaLinux days existAlmaLinux…

A
AlmaLinux Blog OS

2025 AlmaLinux Year in Review

2025 was another year of growth and excitement for AlmaLinux. Here’s a look back at what we achieved, all thanks to our amazing community! Whether you’ve been involved from the start, just recently joined us, or have yet to start contributing, we’d like to thank you for being a part of this community. AlmaLinux OS versions and AlmaLinux OS Kitten UpdatesOur main goal is to provide stable, secure,…