PTIR — Daily Briefing — November 4, 2026
by
Executive Summary
Fedora Linux 45 reached general availability on November 3. The official Workstation download has replaced the beta with a 2.7 GiB x86_64 image and published OpenPGP-verifiable checksums. This is the material status change anticipated in the November 1 briefing: the useful next step is a verified VM evaluation, not an immediate workstation migration.
Action Queue
Verify the Fedora 45 image, then test the security changes in a VM
Fedora 45 adds enforced RPM signature checking by default, tighter ptrace restrictions for unprivileged users, updated developer toolchains, GNOME 51 on Workstation, and Stratis support in the Anaconda installer. Those changes make the release a useful teaching and compatibility target even for people who do not plan to replace their current Linux desktop.
The official x86_64 Workstation image is Fedora-Workstation-45-1.4-x86_64. Fedora publishes both the signed checksum file and commands using sq or gpgv; signature verification plus the SHA-256 match is the stronger check. A plain hash comparison detects corruption but does not authenticate the publisher.
Recommended action: download the Workstation image from Fedora, verify the signed checksum, and boot it in a disposable VM. Check package installation, ptrace-dependent debugging, secret storage, and one representative development workload before considering any upgrade.
Urgency: This week
Importance: ★★★★☆
Verified active: November 4, 2026
Deadline: None; Fedora supports each release for approximately 13 months
Cost: Free and open source
Requirements: x86_64 or aarch64 system, at least 4 GB RAM and 40 GB storage for a typical installation; a VM can be used instead of bare metal
Download: Fedora Workstation 45 · Release announcement
Audit legacy VPN plugins before upgrading an existing Fedora system
Fedora 45 obsoletes NetworkManager-vpnc and NetworkManager-fortisslvpn; an upgrade removes them automatically. Fedora recommends NetworkManager-libreswan for Cisco IPsec/IKEv1 and NetworkManager-openconnect for Fortinet SSL VPN. Existing Fedora 43 and 44 installations retain the old plugins, but Fedora says they will receive no further feature or security updates.
Recommended action: on any Fedora machine, check whether either retired package is installed. If so, test the supported replacement before starting the Fedora 45 upgrade and preserve the old connection details until the replacement works.
Urgency: Immediate if upgrading; otherwise this week
Importance: ★★★★★ for affected users; ★★☆☆☆ otherwise
Verified active: November 4, 2026
Deadline: Before upgrading to Fedora 45
Cost: Free and open source
Requirements: Administrative access and the VPN gateway settings; IKEv1 remains deprecated and may require explicit Libreswan configuration
Guide: Fedora’s VPN migration instructions
Linux & Self-Hosting
The release is also relevant beyond the desktop. Fedora 45 updates core compilers and runtimes and adds installer-level Stratis support for pooled, encrypted, snapshot-capable storage. Treat it as an evaluation target first: Fedora’s own download page explicitly supports live testing without changing the host, and a VM gives a clean place to observe the new package-signature and debugging defaults.
PKb Candidates
- Signed ISO verification: publisher certificate → signed checksum file → image hash; record all three before using installation media.
- Linux major-release preflight: removed packages, VPN/authentication dependencies, debugger behavior, package-signature policy, secrets backend, rollback path, and known issues.