stable-20260721: LTS
Variants promoted
| Variant | Tag | Digest |
|---|---|---|
bluefin-lts |
:stable |
sha256:181501c51dd9 |
bluefin-lts-nvidia |
:stable |
sha256:17ba4d0853aa |
bluefin-lts and bluefin-lts-nvidia use the Fedora CoreOS stable kernel. The Kernel (LTS) version above applies to both.
Key components
| Component | Version | Change |
|---|---|---|
| Kernel (LTS) | 7.0.12-201 |
|
| GNOME Shell | 50.0-3.el10 |
|
| Flatpak | 1.18.0-1.el10 |
|
| bootc | 1.16.2-1.el10 |
94 updated, 7 added, 36 removed since the previous release. 1468 packages total.
Package changes
↑ 94 updated packages
| Package | From | To |
|---|---|---|
attr |
2.5.2-5.el10 |
2.6.0-2.el10 |
bind-libs |
9.18.33-18.el10 |
9.18.33-19.el10 |
bind-license |
9.18.33-18.el10 |
9.18.33-19.el10 |
bind-utils |
9.18.33-18.el10 |
9.18.33-19.el10 |
bluez |
5.86-2.el10 |
5.86+1.git220f102c8db9-1.el10 |
bluez-libs |
5.86-2.el10 |
5.86+1.git220f102c8db9-1.el10 |
bluez-obexd |
5.86-2.el10 |
5.86+1.git220f102c8db9-1.el10 |
checkpolicy |
3.10-1.el10 |
3.11-1.el10 |
containers-common |
5.8-2.el10 |
6.0-2.el10 |
containers-common-extra |
5.8-2.el10 |
6.0-2.el10 |
criu |
4.2-4.el10 |
4.2-7.el10 |
criu-libs |
4.2-4.el10 |
4.2-7.el10 |
crypto-policies |
20260525-1.gitf5f5370.el10 |
20260708-1.git988eb15.el10 |
crypto-policies-scripts |
20260525-1.gitf5f5370.el10 |
20260708-1.git988eb15.el10 |
device-mapper |
1.02.215-2.el10 |
1.02.215-3.el10 |
device-mapper-event |
1.02.215-2.el10 |
1.02.215-3.el10 |
device-mapper-event-libs |
1.02.215-2.el10 |
1.02.215-3.el10 |
device-mapper-libs |
1.02.215-2.el10 |
1.02.215-3.el10 |
dnf |
4.20.0-24.el10 |
4.20.0-26.el10 |
dnf-bootc |
4.20.0-24.el10 |
4.20.0-26.el10 |
dnf-data |
4.20.0-24.el10 |
4.20.0-26.el10 |
expat |
2.7.3-1.el10 |
2.7.3-2.el10 |
freerdp-libs |
3.27.1-2.el10 |
3.28.0-1.el10 |
fwupd |
2.0.19-2.el10 |
2.1.6-1.el10 |
fwupd-efi |
1.6-7.el10 |
1.8-1.el10 |
glibc |
2.39-126.el10 |
2.39-130.el10 |
glibc-all-langpacks |
2.39-126.el10 |
2.39-130.el10 |
glibc-common |
2.39-126.el10 |
2.39-130.el10 |
glibc-devel |
2.39-126.el10 |
2.39-130.el10 |
glibc-gconv-extra |
2.39-126.el10 |
2.39-130.el10 |
glibc-minimal-langpack |
2.39-126.el10 |
2.39-130.el10 |
grub2-common |
2.12-49.el10 |
2.12-51.el10 |
grub2-tools |
2.12-49.el10 |
2.12-51.el10 |
grub2-tools-minimal |
2.12-49.el10 |
2.12-51.el10 |
highway |
1.3.0-2.el10 |
1.3.0-1.el10_2 |
ima-evm-utils |
1.6.2-5.el10 |
1.6.2-6.el10 |
insights-core |
3.7.6-1.el10 |
3.7.7-1.el10 |
insights-core-selinux |
3.7.6-1.el10 |
3.7.7-1.el10 |
ipp-usb |
0.9.27-5.el10 |
0.9.27-6.el10 |
kernel-headers |
6.12.0-248.el10 |
6.12.0-250.el10 |
kernel-tools |
6.12.0-248.el10 |
6.12.0-250.el10 |
kernel-tools-libs |
6.12.0-248.el10 |
6.12.0-250.el10 |
libaio |
0.3.111-22.el10 |
0.3.112-1.el10 |
libattr |
2.5.2-5.el10 |
2.6.0-2.el10 |
libnfsidmap |
2.8.3-7.el10 |
2.8.3-8.el10 |
libnvme |
1.16.1-3.el10 |
1.16.1-4.el10 |
libselinux |
3.10-2.el10 |
3.11-1.el10 |
libselinux-utils |
3.10-2.el10 |
3.11-1.el10 |
libsemanage |
3.10-1.el10 |
3.11-1.el10 |
libsepol |
3.10-2.el10 |
3.11-1.el10 |
libstdc++ |
14.3.1-4.4.el10 |
14.4.1-1.el10 |
libwinpr |
3.27.1-2.el10 |
3.28.0-1.el10 |
libxmlb |
0.3.24-1.el10 |
0.3.28-1.el10 |
lvm2 |
2.03.41-2.el10 |
2.03.41-3.el10 |
lvm2-libs |
2.03.41-2.el10 |
2.03.41-3.el10 |
mdadm |
4.4-3.el10 |
4.4-4.el10 |
mokutil |
0.7.2-4.el10 |
0.7.2-5.el10 |
netavark |
1.17.2-2.el10 |
2.0.0-1.el10 |
nfs-utils |
2.8.3-7.el10 |
2.8.3-8.el10 |
openssh |
9.9p1-26.el10 |
9.9p1-27.el10 |
openssh-clients |
9.9p1-26.el10 |
9.9p1-27.el10 |
openssh-server |
9.9p1-26.el10 |
9.9p1-27.el10 |
openssl |
3.5.5-3.el10 |
3.5.7-2.el10 |
openssl-devel |
3.5.5-3.el10 |
3.5.7-2.el10 |
openssl-fips-provider |
3.5.5-3.el10 |
3.5.7-2.el10 |
openssl-libs |
3.5.5-3.el10 |
3.5.7-2.el10 |
ostree |
2026.1-1.el10 |
2026.2-1.el10 |
ostree-libs |
2026.1-1.el10 |
2026.2-1.el10 |
p11-kit |
0.26.2-1.el10 |
0.26.4-1.el10 |
p11-kit-server |
0.26.2-1.el10 |
0.26.4-1.el10 |
p11-kit-trust |
0.26.2-1.el10 |
0.26.4-1.el10 |
podman |
5.8.3-1.el10 |
6.0.0-1.el10 |
policycoreutils |
3.10-3.el10 |
3.11-1.el10 |
policycoreutils-python-utils |
3.10-3.el10 |
3.11-1.el10 |
python3-dnf |
4.20.0-24.el10 |
4.20.0-26.el10 |
python3-libselinux |
3.10-2.el10 |
3.11-1.el10 |
python3-libsemanage |
3.10-1.el10 |
3.11-1.el10 |
python3-perf |
6.12.0-248.el10 |
6.12.0-250.el10 |
python3-policycoreutils |
3.10-3.el10 |
3.11-1.el10 |
python3-setools |
4.6.0-3.el10 |
4.7.0-1.el10 |
rpcbind |
1.2.7-3.el10 |
1.2.9-0.el10 |
rpm-ostree |
2026.1-4.el10 |
2026.2-1.el10 |
rpm-ostree-libs |
2026.1-4.el10 |
2026.2-1.el10 |
rpm-sequoia |
1.10.2.1-1.el10 |
1.10.2.3-1.el10 |
sequoia-sq |
1.4.0.1-2.el10 |
1.4.0.2-2.el10 |
socat |
1.7.4.4-8.el10 |
1.7.4.4-9.el10 |
sos |
4.11.0-1.el10 |
4.11.2-1.el10 |
vim-common |
9.1.083-13.el10 |
9.1.083-15.el10 |
vim-data |
9.1.083-13.el10 |
9.1.083-15.el10 |
vim-enhanced |
9.1.083-13.el10 |
9.1.083-15.el10 |
vim-filesystem |
9.1.083-13.el10 |
9.1.083-15.el10 |
vim-minimal |
9.1.083-13.el10 |
9.1.083-15.el10 |
xxd |
9.1.083-13.el10 |
9.1.083-15.el10 |
yum |
4.20.0-24.el10 |
4.20.0-26.el10 |
+ 7 added packages
| Package | Version |
|---|---|
grub2-efi-aa64 |
2.12-51.el10 |
imath |
3.1.10-4.el10 |
libasan |
14.4.1-1.el10 |
libatomic |
14.4.1-1.el10 |
libubsan |
14.4.1-1.el10 |
opencsd |
1.6.1-0.el10 |
shim-aa64 |
16.1-1.el10 |
− 36 removed packages
| Package | Last version |
|---|---|
alsa-sof-firmware |
2025.12.2-1.el10 |
cpuinfo |
24.09.26-1.git1e83a2f.el10_1.1 |
flashrom |
1.3.0-8.el10 |
fprintd |
1.94.5-1.el10 |
fprintd-pam |
1.94.5-1.el10 |
fwupd-plugin-flashrom |
2.0.19-2.el10 |
grub2-efi-x64 |
2.12-49.el10 |
grub2-pc |
2.12-49.el10 |
grub2-pc-modules |
2.12-49.el10 |
hypervfcopyd |
0-0.51.20220731git.el10 |
intel-mediasdk |
23.2.2-1.el10 |
intel-vpl-gpu-rt |
26.1.6-1.el10_3 |
kmod-zfs |
2.3.8-1 |
libfprint |
1.94.9-3.el10 |
libnvpair3 |
2.3.8-1 |
libuutil3 |
2.3.8-1 |
libvmaf |
3.0.0-2.el10_0 |
libvpl |
2.17.0-1.el10_3 |
libzfs6 |
2.3.8-1 |
libzpool6 |
2.3.8-1 |
lm_sensors-libs |
3.6.0-20.el10 |
mcelog |
210-1.el10 |
microcode_ctl |
20260210-1.el10 |
pcp-conf |
7.1.5-2.el10 |
pcp-libs |
7.1.5-2.el10 |
python3-pyzfs |
2.3.8-1 |
python3.14 |
3.14.5-1.el10 |
python3.14-cffi |
2.0.0-2.el10 |
python3.14-libs |
3.14.5-1.el10 |
python3.14-pip-wheel |
25.2-5.el10 |
python3.14-pycparser |
2.22-4.el10 |
shim-x64 |
16.1-1.el10 |
svt-vp9-libs |
0.3.0-13.el10_1 |
sysstat |
12.7.6-4.el10 |
thermald |
2.5.10-1.el10 |
zfs |
2.3.8-1 |
Desktop Screenshot
Captured from bluefin-lts:testing during automated e2e validation — testsuite
Supply chain verification
Supply chain
This image is signed, attested, and ships a full SPDX-JSON SBOM.
Every artifact below is verifiable without trusting this release page.
Tools required — install via Homebrew or see links in each section:
brew install cosign oras slsa-verifier1 — Verify the image signature
cosign (Sigstore) verifies the keyless
OIDC signature created by GitHub Actions at build time.
cosign verify \
--certificate-identity-regexp '^https://github\.com/projectbluefin/(bluefin-lts|actions)/\.github/workflows/' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
ghcr.io/projectbluefin/bluefin-lts@sha256:181501c51dd96724553d798070276af5af69a0d59edacebc908e7344f6dfceadA valid response lists the certificate subject and OIDC issuer. Any tampered
image will produce a verification error.
2 — Fetch and inspect the SBOM
The SBOM (SPDX 2.3 JSON) is attached to the image as an
OCI referrer using
ORAS (CNCF graduated project).
# Discover the attached SBOM referrer
oras discover \
--artifact-type application/vnd.spdx+json \
ghcr.io/projectbluefin/bluefin-lts@sha256:181501c51dd96724553d798070276af5af69a0d59edacebc908e7344f6dfcead
# Pull the SBOM to disk (replace SBOM_DIGEST with the digest from above)
oras pull \
--artifact-type application/vnd.spdx+json \
ghcr.io/projectbluefin/bluefin-lts@<SBOM_DIGEST>The SBOM is also attached to this release as
bluefin-lts.spdx.json.
3 — Verify the SBOM attestation
The SBOM is also stored as a signed
GitHub SBOM attestation
in the Sigstore transparency log.
cosign verify-attestation \
--type https://spdx.dev/Document \
--certificate-identity-regexp '^https://github\.com/projectbluefin/(bluefin-lts|actions)/\.github/workflows/' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
ghcr.io/projectbluefin/bluefin-lts@sha256:181501c51dd96724553d798070276af5af69a0d59edacebc908e7344f6dfcead \
| jq -r '.payload | @base64d | fromjson | .predicate.name'4 — Verify SLSA Build L2 provenance
slsa-verifier (OpenSSF)
checks that this image was built by the expected workflow on the expected
source repository — not on a developer's laptop or a forked CI runner.
slsa-verifier verify-image \
ghcr.io/projectbluefin/bluefin-lts@sha256:181501c51dd96724553d798070276af5af69a0d59edacebc908e7344f6dfcead \
--source-uri 'github.com/projectbluefin/bluefin-lts' \
--source-versioned-tag 'stable-20260721'You can also inspect the raw provenance:
cosign verify-attestation \
--type slsaprovenance1 \
--certificate-identity-regexp '^https://github\.com/projectbluefin/(bluefin-lts|actions)/\.github/workflows/' \
--certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
ghcr.io/projectbluefin/bluefin-lts@sha256:181501c51dd96724553d798070276af5af69a0d59edacebc908e7344f6dfcead \
| jq -r '.payload | @base64d | fromjson | .predicate'Full changelog and verification guide → https://docs.projectbluefin.io/changelogs
Full changelog → https://docs.projectbluefin.io/changelogs