Package Updates 2026-10-23
A new round of package updates is now available for BlankOn Linux 26.09 Sinambung. This round updates 7 packages.
Update your system from the terminal:
sudo apt update && sudo apt full-upgrade
Or update via GNOME Software.
What's in this update
This update brings new versions of the following packages, all of which are fixes for critical security vulnerabilities disclosed this week:
| Package | Version |
|---|---|
| ca-certificates | 20260816+nmu1 |
| libapache2-mod-php8.4 | 8.4.27-1 |
| php-common | 2:99 |
| php8.4-cli | 8.4.27-1 |
| php8.4-common | 8.4.27-1 |
| php8.4-opcache | 8.4.27-1 |
| php8.4-readline | 8.4.27-1 |
We strongly recommend installing this update as soon as possible.
Security notes
- ca-certificates: eMudhra / emSign certificate incident. The private keys of eight intermediate certificate authorities operated by eMudhra were compromised, and browsers and operating systems are removing trust in the affected certificates (The Hacker News, eMudhra's statement). This update stops trusting the "emSign ECC Root CA - G3" and "Comodo AAA Services root" certificates, so certificates issued through the compromised intermediates are no longer accepted by applications that use the system certificate store.
- php8.4: PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Two critical flaws in PHP may let an unauthenticated attacker run code on a web server that uses PHP. Details leaked ahead of the planned disclosure, and exploitation attempts have been reported (Help Net Security, watchTowr). PHP 8.4.27 fixes both. Workarounds circulating online do not fully protect you (Datadog Security Labs), so updating is the only complete fix.
We want your feedback
We monitor security vulnerabilities reported upstream through security.blankonlinux.id, and track the state of every package in our repositories through packages.blankonlinux.id. Both are open to everyone, so you can see for yourself what is affected and which version fixes it.
If you run into a problem after updating, or have suggestions, please tell us in our Telegram group. Your reports from real machines are the most valuable testing we can get.
How to Support Us
If you or your organization would like to support technological independence in Indonesia, there are several ways to help:
- Become a sponsor. We welcome support in the form of funding or infrastructure. Reach us at humas@blankon.id or visit the sponsorship page.
- Donate. We accept one-time and recurring monthly donations. Donate to BlankOn Foundation.
Every contribution, big or small, helps sustain Indonesia's open source ecosystem and the communities building it.
Salam merdeka!