中文 
Dear deepin users and community partners: Recently, we detected a time-window authorization bypass vulnerability in sudo. Under certain conditions, an attacker can cause expired or not-yet-effective sudo authorization rules to be incorrectly judged as valid, thereby obtaining root privileges outside the intended time period. At present, the technical details for exploiting this vulnerability have been made public. Given its severity and broad impact, to ensure the security of your system, we recommend that all users upgrade as soon as possible. Vulnerability Information Vulnerability ID: CVE-2026-96512 Vulnerability Description: This vulnerability originates from a flaw (CWE-863) in sudo’s authorization validation of time-based ...Read more
September Community Monthly Report | deepin 25.2.2 Liquid Glass Effects & XiaoU Multi-Agent Collaboration
September Community Data Overview Learn more about deepin on DistroWatch: https://distrowatch.com/table.php?distribution=deepin Community Products deepin 25.2.2 Update: Window Split-Screen · Liquid Glass Effect On September 8, the deepin 25.2.2 official release was launched. The two most noticeable new features in this update come from the Treeland desktop environment; Window split-screen supports quickly tiling windows to the left or right side of the screen, making multitasking more efficient; The liquid glass effect replaces simple blurring with physical refraction, enriching the desktop's visual hierarchy. The Treeland underlying layer has been synchronized with upstream, removing the qwlroots dependency and upgrading to wiroots 0.20, adding support for pointer-constraints and relative-pointer protocols, and improving mouse interaction in games and 3D applications. At the system level, this update fixes multiple issues in system updates, the Panshi system and file management, input methods, document viewers, screenshot and screen recording, and other commonly used applications; improves connectivity for some MTK wireless network cards; enhances compatibility and recognition capabilities for some domestic graphics card platforms, graphics audio devices, and LPDDR5X memory; and fixes multiple security vulnerabilities in foundational components such as GLib, GStreamer, Ghostscript, curl, X.Org, and XWayland. The Linglong application update on September 24 focused on fixing issues such as missing desktop and taskbar icons after some Linglong applications were upgraded, failure to start normally, and abnormal host resource mounting, while also optimizing the DBus service security mechanism. Xiao U: Unified Scheduling and Multi-Agent Collaboration · Scenario-Based Recommendations Xiao U released version 3.3.0, upgrading around "ondemand loading and faster response": Xiao U automatically selects the required tools or dedicated sub-agents based on the task, loading only the capabilities needed for the current task; built-in tools, MCP, Skills, and subagents are unified into a single capability catalog, and conversations no ...Read more
Linyaps 1.14 Released: Safer Upgrades, Smoother Debugging, Easier Management
Recently, Linyaps 1.14 was released. From 1.13.0 to 1.14.0, this update focused on fixing a set of real pain points—whether it is the “lost module” annoyance ordinary users encounter during upgrades, the trouble packagers have debugging applications, or operations teams’ needs around disk usage and compliance auditing, this version provides better solutions. The following sections are organized by role. Feel free to read the parts that matter to you. Ordinary Users : Everyday use is easier; no more worrying about minor issues. If you only use Linyaps to install and run applications, you will feel these changes directly after ...Read more