secureblue

Release 141.0.7390.76-440020 · secureblue/Trivalent What's Changed chore: Revert "chore(build): switch back to github large runners unti… by @RoyalOughtness in #440 fix(supplychain): set subject correctly for provenance generation by @RoyalOughtnes...

Trivalent 141.0.7390.76-440020 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/10/stab...

Trivalent 141.0.7390.65-439968 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/10/stab...

Release 141.0.7390.54-439843 · secureblue/Trivalent What's Changed feat: enable drumbrake by default by @RKNF404 in #411 chore: adjust wording on DrumBrake flag by @RKNF404 in #412 chore: 141 port by @RKNF404 in #413 chore: pull 141 patches from Va...

Trivalent 141.0.7390.54-439843 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/09/stab...

Release 140.0.7339.207-439665 · secureblue/Trivalent What's Changed feat: add functional drumbrake toggle & enable drumbrake build option by @RKNF404 in #408 Full Changelog: 140.0.7339.185-439535...140.0.7339.207-439665

Trivalent 140.0.7339.207-439665 released:

This release includes a toggle in flags to enable DrumBrake. The toggle is disabled by default due to its experimental state. If the toggle is flipped on, it enables JIT-less WASM.

github.com/secureblue/T...
chromereleases.googleblog.com/2025/09/stab...

Trivalent 140.0.7339.185-439535 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/09/stab...

This release includes upstream security fixes for several CVEs, including CVE-2025-10585. Google is aware of an exploit for CVE-2025-10585 that exists in the wild.

Release 140.0.7339.127-439381 · secureblue/Trivalent What's Changed chore: re-enable audio sandbox by @RKNF404 in #393 fix: FTBFS patch by @RoyalOughtness in #394 chore: remove fedora patches from updater by @RKNF404 in #395 fix: search selection sc...

Trivalent 140.0.7339.127-439381 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/09/stab...

Release v4.6.1 - Polish and QOL release · secureblue/secureblue What's Changed fix: add LD_PRELOAD=libhardened_malloc.so to /etc/profile.d by @HastD in #1168 fix: missing timer preset by @RoyalOughtness in #1165 chore(deps): bump aquasecurity/trivy-action from...

secureblue v4.6.1 has been released:

github.com/secureblue/s...

𝑅𝑒𝑚𝑖𝑛𝑑𝑒𝑟: 𝑟𝑒𝑙𝑒𝑎𝑠𝑒𝑠 𝑎𝑟𝑒 𝑠𝑦𝑚𝑏𝑜𝑙𝑖𝑐. 𝐵𝑢𝑖𝑙𝑑𝑠 𝑎𝑟𝑒 𝑐𝑟𝑒𝑎𝑡𝑒𝑑 𝑎𝑛𝑑 𝑝𝑢𝑏𝑙𝑖𝑠ℎ𝑒𝑑 𝑖𝑚𝑚𝑒𝑑𝑖𝑎𝑡𝑒𝑙𝑦 𝑎𝑓𝑡𝑒𝑟 𝑛𝑒𝑤 𝑐𝑜𝑚𝑚𝑖𝑡𝑠 𝑎𝑟𝑒 𝑚𝑒𝑟𝑔𝑒𝑑.

Trivalent 140.0.7339.80-439219 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/09/stab...

Release 139.0.7258.154-439061 · secureblue/Trivalent What's Changed chore: add Vanadium patch to fix CFI crash by @RKNF404 in #368 chore: System toolchain by @RKNF404 in #370 Full Changelog: 139.0.7258.138-438928...139.0.7258.154-439061

Trivalent 139.0.7258.154-439061 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/08/stab...

Release 139.0.7258.138-438928 · secureblue/Trivalent What's Changed chore(deps): bump zizmorcore/zizmor-action from 0.1.1 to 0.1.2 by @dependabot[bot] in #353 chore: use autoninja instead of calling ninja directly by @RKNF404 in #357 docs: add refer...

Trivalent 139.0.7258.138-438928 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/08/stab...

Release 139.0.7258.127-438758 · secureblue/Trivalent What's Changed chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #347 chore(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] in #343 chore(...

Trivalent 139.0.7258.127-438758 released:

github.com/secureblue/T...
chromereleases.googleblog.com/2025/08/stab...

Discord has very good configurable server-side filtering and dramatically better mod tools. Matrix heavily enables abuse through federation and doesn't even support restricting inline media. Matrix also lacks channels within rooms so communities like ours rely on moderation bots.

YouTube video by DevConf UKIs and composefs support for Bootable Containers - DevConf.CZ 2025

This talk by @siosm.bsky.social covers the important work being done to enable verification for bootc images like ours. youtu.be/D7HqckeHlx8

"Using composefs and fs-verity, we can link a UKI to a complete read only filesystem tree, guaranteeing that every byte of every file is verified on load."

You can expect posts here to cover news, updates, and future plans. Critical information relating to releases will continue to be provided at Github Releases: secureblue.dev/faq#releases