Greg Kroah-Hartman has released Linux kernel 6.12.117, the latest point update in the 6.12 LTS series, on November 10, 2026. It carries the "all users must upgrade" advisory, signaling that security and memory-safety fixes are included in this stable release. Building on 6.12.116's Xen virtualization fixes, it backports reviewed patches rather than adding new features. The 6.12 LTS series is supported until December 2028, giving users roughly two more years of updates.

PHP 8.6.0 RC6 was tagged today by release manager Joe Ferguson, arriving just nine days before the final stable PHP 8.6.0 release. As the sixth and last release candidate, it's a stabilization build carrying only four targeted fixes rather than new features. The changes span Core ABI padding, a timelib date bump, libmagic Fileinfo regressions, and a Streams use-after-free. Test it in non-production environments now, but hold off on production until GA ships on 19 November.

Rhe X.Org Foundation released emergency updates closing eight memory-safety vulnerabilities in xorg-server (21.1.26) and XWayland (24.1.15). Seven flaws affect both codebases, while the eighth, an out-of-bounds EDID write, bites only the full X.Org Server. Most bugs are integer overflows and length-check bypasses that could crash the display server or enable local privilege escalation, and they were found largely with AI/LLM assistance. Users should update to at least these versions, ideally verifying the package before rebuilding from source.

Intel released the first candidate for its Linux NPU driver, version 1.39.0, to give developers a chance to validate before the final tag. The drop upgrades the bundled NPU compiler and Level Zero to v1.33.1, ships firmware for the 37xx, 40xx, and 50xx chip families, and re-enables the Compiler-In-Plugin path that Intel favors for on-device runtime compilation. A highlighted addition is the intel-npu-smi monitoring tool, now formally documented so users can watch NPU power, frequency, and utilization from the terminal. Production users should test the RC first and hold off on broad rollout until the final v1.39.0 release lands.

KDE released Plasma 6.8.3 today, a maintenance update that patches the rough edges left by 6.8's switch to a Wayland-only desktop. The headline fix stops desktop icons from scrambling when you swap monitors, while Spectacle's background mode runs faster and a Create Folder shortcut is finally visible. Most of the real work happens beneath the surface in KWin, with fixes for triple-buffering, HDR color, and a jagged cursor in screen-sharing. The update is available now through rolling-release distros, live USB images, or a from-source build.

Eleven Linux distros shipped security updates in today's roundup, and one SUSE Firefox ESR change alone absorbed a staggering 147 CVEs. Red Hat's scariest move was a Critical patch for edk2 firmware on RHEL 10, where a hole sits below the boot process. Debian included a Telegram Desktop flaw that lets an attacker steal session keys and hijack an account with a single crafted link. Across the board, the same curl and glibc flaws surfaced on Oracle and Ubuntu, so network-facing services are the priority here.

Six recent hardware reviews from November 2026 converge on one surprising conclusion: buyers frequently pay a premium they don't need to. The Acer Predator Helios Neo 16S AI, Razer Reclusa Mini 65%, and XPG NIMBUS PLUS each ask for more money, yet a cheaper base model or a simple price drop usually delivers most of the value. Meanwhile, raw specs don't translate to quality, as the PCCooler SU2500 proves by topping out on paper while failing EMI tests and running loud, while the SIVGA M260 and GIGABYTE Z890 board punch far above their price. The consistent takeaway is that feel, fitment, and honest pricing matter far more than the biggest number on the spec sheet.

Shelly ALPM v3.2.1 adds Shelly-TUI, a brand-new terminal interface for installing, removing, and updating packages. The text-based UI is led by contributor VinnyQF and marks Shelly's third way to use the tool, joining its existing GTK4 app and command-line client. Alongside the release, the project keeps pushing RLPM, a from-scratch Zig rewrite of libalpm that brings security-conscious design but remains work in progress. As CachyOS's default package manager since April 2026, Shelly reaches far beyond hobbyist forums, making this update notably impactful for Arch Linux users.

Godot 4.8 beta 3 shipped today, leaving only a handful of blockers before the release candidate phase. It's a post-feature-freeze snapshot with 74 fixes from 51 contributors, not a wave of new features. The full 4.8 release is shaping up as one of the engine's biggest, with rendering upgrades like mip-level texture streaming and screen-space contact shadows, editor overhauls, and a .NET requirement bump to 10. A stable build is projected for late 2026, with download links, a web editor, and the interactive changelog now live.

Simple Taskbar 7.3.0 is now available, adding an Apple-inspired Dock with icon magnification and the "Magic Lamp" minimize animation to the popular GNOME extension. The project also hides unused panel settings, refreshes its logo, and localizes new options across nine languages alongside a stack of bug fixes. The extension collects no telemetry and accesses no network, while competing with Dash to Panel and Dash to Dock by auto-disabling them in most modes. You can grab it from the GNOME Extensions website or Extension Manager, where it supports GNOME Shell 48 through 51.

Strata 0.2.13 shipped today, delivering what may be the most practical update yet to the solo-developer engine that runs Qwen's 125-billion-parameter model on ordinary consumer PCs. The headline fix slashes Strix Halo launch times from nearly ten minutes down to 60 to 85 seconds, while also restoring Intel Arc determinism, cutting app startup latency, and reviving broken Linux expert-store loading. The MIT-licensed project, built by Slovenia's Niko Veit, has climbed past 42,000 GitHub stars. It runs fully offline with no account or cloud upload, and installers for Linux, Windows, and Mac are on the GitHub releases page.

Roundcube shipped two security updates at once: 1.7.6 for the mainline and 1.6.21 for its long-term-support branch, each fixing 17 recently disclosed flaws. The patches cover open redirects, IMAP command injection, header and Sieve script injection, SSRF, CSRF bypasses, a runaway-CPU denial-of-service, and an ImageMagick flaw that could lead to code execution. An anonymous collective known as Squirt1e, Atum, N0b0dy and Gh0u1L5 earned credit for eight of the seventeen fixes, building on a long history of working with the project. Lead developer Alec Machniak once again urged production sites to update immediately, while warning that the aging four-year-old 1.6 LTS line is being pushed toward retirement.

Hyprland 0.57.2 launched today as the second maintenance patch for the 0.57 series, delivering a straightforward round of bug fixes backported from the main branch instead of new features. The key change stops the compositor from grabbing real-time scheduling at startup, removing a crash trigger that appeared under heavy load while trading a small amount of theoretical responsiveness for session stability. These patches matter because 0.57, which debuted October 28, added popular eye-candy options like selectable blur variants, workspace sharing, and a Compiz-style window wobble, but also forced users off the old .conf config format and introduced regressions tied to that migration. The update covers 22 commits from seven contributors and resolves issues such as Lua window-reference crashes, keybind modifier problems, fullscreen column-width restoration, and build errors on non-Linux systems, so users still on 0.57 should install it and finally move to the Lua-based configuration.

After three years of silence, Slax has released 2026.11, a full desktop rebuild built on Debian 13 "Trixie" with the Linux 6.12 LTS kernel and packed into a 512 MB ISO. The most visible change is a modernized Fluxbox experience featuring a search-driven launcher, window previews, four workspaces, and a unified app look. It also gains three long-requested tools: a built-in Slax AI Assistant, a native Partition Manager, and a graphical installer that runs on both Windows and Linux.

This week's Linux security updates span five major distributions, and a few of the CVE counts are worth pausing on. The standout, by a mile, is openSUSE Tumbleweed cramming 353 fixes into a single chromium and chromedriver update with no individual severity scores attached. Debian led with a Ruby patch covering 19 issues and an rsync update with 35 fixes, while Red Hat shipped three Critical OpenShift patches out of 28 total advisories. Fedora spread its fixes in three waves across releases 43, 44, and 45, and Rocky Linux, SUSE, and the rest rounded out a busy patching week.

MSI's $699.99 MEG Maestro 900R is a heavyweight full-tower case that earns a 9/10 for its three-sided glass and detachable test-bench tray, though its price and 72-pound build make it a splurge. be quiet!'s $79 Dark Perk mouse scored an 8.6/10 for its silent clicks, 55-gram weight, and 32,000 DPI sensor, with one reviewer finding no real faults. Logitech's G502 X Lightspeed offers a solid Hero 44K sensor upgrade but stays overpriced at MSRP, earning best-value only when it drops below the Plus's price. Finally, the $334.99 TeamGroup GA Pro 2TB SSD misses the mark as a hot, inefficient PCIe 5.0 drive best avoided unless it lands on a deep discount.

Linux Kernel 7.4-rc2 shipped on November 9, 2026, as the second testing candidate following what Torvalds calls the largest merge window in kernel history at nearly 20,000 commits. Most of that record volume came from AMD GPU register dumps and deferred automated coccinelle conversions, so the actual changes are more ordinary than the diffstat suggests. A significant portion of the work is AI-generated, touching core memory management, BPF, and filesystem fixes, with maintainers reporting that AI-discovered fixes are now starting to outpace new bug reports in some areas. The final kernel is expected around late December 2026 and may become the next LTS release.

Liquorix has published its 7.3-1 release, moving the low-latency enthusiast kernel onto the fresh Linux 7.3.3 base. Maintainer Steven Barrett pushed the build November 8, and unlike recent versions it's a deliberately clean, well-tested capstone rather than a batch of experimental patches. It inherits Linux 7.3's record-setting features, including improved VRAM management, faster Btrfs fsync, and completed sched_ext support, all layered with Liquorix's usual 1,000 Hz tick rate and aggressive preemption tuning. The kernel remains AMD64-only with an install script for Debian, Ubuntu, Fedora, and Arch, though it favors interactive and gaming workloads over battery life or servers.