Trivalent 143.0.7499.109-441349 released: github.com/secureblue/T... Google is aware that an exploit for Bug 466192044 (no CVE issued yet) exists in the wild.

Trivalent 143.0.7499.40-441176 released: github.com/secureblue/T...

Our images are now rechunked using build-chunked-oci, reducing daily update sizes by ~40%. We expect this reduction to grow as we make further optimizations. The initial update to a rechunked image will be substantially larger, but this is a one-time event. For more info: github.com/blue-build/c...

This week we shipped ARM64 images for Beta testing. Please report any issues you encounter. For installation instructions, consult secureblue.dev/install#arm64

Trivalent 142.0.7444.175-440855 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/11/stab... This release includes upstream security fixes for multiple CVEs, including CVE-2025-13223. Google is aware of an exploit for CVE-2025-13223 that exists in the wild.

Trivalent 142.0.7444.162-440723 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/11/stab...

ISOs and Torrents for the F43-based secureblue images are now available! Please seed if you can: secureblue.dev/install#iso fosstorrents.com/distribution... Many thanks to @fosstorrents.bsky.social for providing torrent hosting!

Trivalent 142.0.7444.134-440598 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/11/stab...

Release v4.7 is out, based on Fedora 43. Thanks to everyone who helped test and fix issues. No action is needed to upgrade, you will get the new image automatically. github.com/secureblue/s...

Fedora 43 was released yesterday, but we're not switching to an F43 base yet. F43 includes a switch from RPM 4 to RPM 6. This includes a change that breaks upgrades on atomic. A fix is in the works: github.com/coreos/rpm-o... We'll switch to an F43 base once a fix is merged, tested, and shipped.

Trivalent 142.0.7444.59-440428 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.127-440331 released: This release pulls in V8 14.1.146.13, which fixes CVE-2025-12036. This V8 version was supposed to be pulled into Chromium in 141.0.7390.122. This issue has been ack'd by Google here: issues.chromium.org/issues/45435... github.com/secureblue/T...

Trivalent 141.0.7390.122-440271 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.107-440120 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.76-440020 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.65-439968 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.54-439843 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/09/stab...

Trivalent 140.0.7339.207-439665 released: This release includes a toggle in flags to enable DrumBrake. The toggle is disabled by default due to its experimental state. If the toggle is flipped on, it enables JIT-less WASM. github.com/secureblue/T... chromereleases.googleblog.com/2025/09/stab...

Trivalent 140.0.7339.185-439535 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/09/stab... This release includes upstream security fixes for several CVEs, including CVE-2025-10585. Google is aware of an exploit for CVE-2025-10585 that exists in the wild.

Trivalent 140.0.7339.127-439381 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/09/stab...

secureblue v4.6.1 has been released: github.com/secureblue/s... 𝑅𝑒𝑚𝑖𝑛𝑑𝑒𝑟: 𝑟𝑒𝑙𝑒𝑎𝑠𝑒𝑠 𝑎𝑟𝑒 𝑠𝑦𝑚𝑏𝑜𝑙𝑖𝑐. 𝐵𝑢𝑖𝑙𝑑𝑠 𝑎𝑟𝑒 𝑐𝑟𝑒𝑎𝑡𝑒𝑑 𝑎𝑛𝑑 𝑝𝑢𝑏𝑙𝑖𝑠ℎ𝑒𝑑 𝑖𝑚𝑚𝑒𝑑𝑖𝑎𝑡𝑒𝑙𝑦 𝑎𝑓𝑡𝑒𝑟 𝑛𝑒𝑤 𝑐𝑜𝑚𝑚𝑖𝑡𝑠 𝑎𝑟𝑒 𝑚𝑒𝑟𝑔𝑒𝑑.

Trivalent 140.0.7339.80-439219 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/09/stab...

Trivalent 139.0.7258.154-439061 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/08/stab...

Trivalent 139.0.7258.138-438928 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/08/stab...

Trivalent 139.0.7258.127-438758 released: github.com/secureblue/T... chromereleases.googleblog.com/2025/08/stab...

Discord has very good configurable server-side filtering and dramatically better mod tools. Matrix heavily enables abuse through federation and doesn't even support restricting inline media. Matrix also lacks channels within rooms so communities like ours rely on moderation bots.

This talk by @siosm.bsky.social covers the important work being done to enable verification for bootc images like ours. youtu.be/D7HqckeHlx8 "Using composefs and fs-verity, we can link a UKI to a complete read only filesystem tree, guaranteeing that every byte of every file is verified on load."

You can expect posts here to cover news, updates, and future plans. Critical information relating to releases will continue to be provided at Github Releases: secureblue.dev/faq#releases