Trivalent 148.0.7778.178-444807 released: github.com/secureblue/T...

Trivalent 148.0.7778.167-444655 was released and shipped in secureblue on May 12th: github.com/secureblue/T... Upstream CVE information was released today May 14th: chromereleases.googleblog.com/2026/05/stab... This version includes upstream fixes for 79 CVEs, including 14 Critical and 37 High.

Trivalent 148.0.7778.96-444507 released: github.com/secureblue/T...

ISOs and torrents for the F44-based secureblue images are now available! If you're already using secureblue, you are already on a F44-based image and do not need to do anything. secureblue.dev/install#iso fosstorrents.com/distribution... Thanks to @fosstorrents.bsky.social for torrent hosting!

Trivalent 147.0.7727.137 released: github.com/secureblue/T...

Trivalent 147.0.7727.116-444222 released: github.com/secureblue/T...

Trivalent 147.0.7727.101-444070 released: github.com/secureblue/T...

Please update to pull in Trivalent 147.0.7727.55. This is a major release with numerous security fixes noted in the commit history. This version of Trivalent includes a new upstream feature allowing Javascript JIT to be toggled via an icon present in the address bar. github.com/secureblue/T...

Upstream release notes have been published. This release includes fixes for 21 CVES. Google is aware that an exploit for CVE-2026-5281 exists in the wild. chromereleases.googleblog.com/2026/03/stab...

Trivalent 146.0.7680.177-443748 released: github.com/secureblue/T...

The Open Collective page for secureblue is now live! A new GitHub Sponsors profile for the secureblue organization is live and integrated with Open Collective. Existing sponsors via GitHub are encouraged to switch their donations over to one of the two options. secureblue.dev/donate

Trivalent 146.0.7680.164-443581 released: github.com/secureblue/T...

Trivalent 146.0.7680.153-443470 released: github.com/secureblue/T...

Trivalent 146.0.7680.80 released: github.com/secureblue/T... CVE-2026-3909 was originally marked by Google as fixed in the previous upstream release. They have since revised those release notes and released for a third time this week, this time actually containing the fix for CVE-2026-3909.

Trivalent 145.0.7632.75-442755 released: github.com/secureblue/T... Google is aware that exploits for both CVE-2026-3909 & CVE-2026-3910 exist in the wild.

Trivalent 146.0.7680.71-443298 released: github.com/secureblue/T...

secureblue v4.8.2 has been released. There's a critical rpm-ostree regression in version 2026.1 causing upgrade failures. To confirm whether you're on the impacted version, check rpm-ostree --version. If the version shows 2026.1, follow the steps in the release notes: github.com/secureblue/s...

California recently passed, and Colorado and NY recently introduced, age verification legislation targeting OS providers that is so imprecisely written that it's unclear how to comply. If you live in one of those states, contact your state senator and rep asking them to oppose this legislation.

Trivalent 145.0.7632.159-443143 released: github.com/secureblue/T...

Trivalent 145.0.7632.116 released: github.com/secureblue/T...

Check out the new article on secureblue.dev covering secureblue's build architecture, especially supply chain security mechanisms: secureblue.dev/articles/bui...

Trivalent 145.0.7632.109-442868 released: github.com/secureblue/T...

Trivalent 145.0.7632.75-442755 released: github.com/secureblue/T... Google is aware that an exploit for CVE-2026-2441 exists in the wild.

Trivalent 145.0.7632.67-442736 released: github.com/secureblue/T... This release includes upstream security fixes for 11 CVEs. It also features a new quick action toolbar button for our dark mode toggle. You can add it to your toolbar via Settings > Appearance > Customize your toolbar.

Release v4.8.1 is out, now with the Bazaar App Store. See the release notes for details: github.com/secureblue/s...

Trivalent 144.0.7559.132-442539 released: github.com/secureblue/T...

If you've installed dangerzone, you're likely having upgrade issues. Dangerzone abruptly moved their repo GPG key, which they will fix shortly. To unblock, you can simply ⁨run0edit /etc/yum.repos.d/dangerzone.repo⁩ and replace ⁨gpgkey⁩ with their new ⁨url: packages.freedom.press/yum-tools-pr...

Trivalent 144.0.7559.109-442393 released: github.com/secureblue/T...

Release v4.8 is out, containing a number of major improvements. See the release notes for details: github.com/secureblue/s...

Trivalent 144.0.7559.96-442238 released: github.com/secureblue/T...

Trivalent 144.0.7559.59-442111 released: github.com/secureblue/T...

Trivalent 143.0.7499.192-441933 released: github.com/secureblue/T...

Trivalent 143.0.7499.169-441525 released: github.com/secureblue/T...

Trivalent 143.0.7499.146-441480 released: github.com/secureblue/T...

Trivalent 143.0.7499.109-441349 released: github.com/secureblue/T... Google is aware that an exploit for Bug 466192044 (no CVE issued yet) exists in the wild.

Trivalent 143.0.7499.40-441176 released: github.com/secureblue/T...

Our images are now rechunked using build-chunked-oci, reducing daily update sizes by ~40%. We expect this reduction to grow as we make further optimizations. The initial update to a rechunked image will be substantially larger, but this is a one-time event. For more info: github.com/blue-build/c...

This week we shipped ARM64 images for Beta testing. Please report any issues you encounter. For installation instructions, consult secureblue.dev/install#arm64

Trivalent 142.0.7444.175-440855 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/11/stab... This release includes upstream security fixes for multiple CVEs, including CVE-2025-13223. Google is aware of an exploit for CVE-2025-13223 that exists in the wild.

Trivalent 142.0.7444.162-440723 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/11/stab...

ISOs and Torrents for the F43-based secureblue images are now available! Please seed if you can: secureblue.dev/install#iso fosstorrents.com/distribution... Many thanks to @fosstorrents.bsky.social for providing torrent hosting!

Trivalent 142.0.7444.134-440598 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/11/stab...

Release v4.7 is out, based on Fedora 43. Thanks to everyone who helped test and fix issues. No action is needed to upgrade, you will get the new image automatically. github.com/secureblue/s...

Fedora 43 was released yesterday, but we're not switching to an F43 base yet. F43 includes a switch from RPM 4 to RPM 6. This includes a change that breaks upgrades on atomic. A fix is in the works: github.com/coreos/rpm-o... We'll switch to an F43 base once a fix is merged, tested, and shipped.

Trivalent 142.0.7444.59-440428 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.127-440331 released: This release pulls in V8 14.1.146.13, which fixes CVE-2025-12036. This V8 version was supposed to be pulled into Chromium in 141.0.7390.122. This issue has been ack'd by Google here: issues.chromium.org/issues/45435... github.com/secureblue/T...

Trivalent 141.0.7390.122-440271 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.107-440120 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.76-440020 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.65-439968 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...