Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-09-29
Archinstall, the guided installer for Arch Linux, released version 4.5 on September 29, 2026, shipping 131 commits since its previous release. The headline addition is AArch64 support for GRUB and Limine EFI bootloaders, closing the installer's biggest platform gap and letting 64-bit ARM machines use the same guided flow. It also turns on TLS verification for network fetches, moves Wayland compositors to systemd-logind, adds real-time kernel variants, and introduces three new languages: Norwegian Bokmål, Serbian, and Vietnamese. With 21 contributors, including 14 first-timers, the update leans more on security, maintainability, and standardized releases than flashy new features.
Ubuntu 26.04.1 "Resolute Raccoon" is now the supported upgrade target for the tens of millions of systems still running Ubuntu 24.04 LTS. The 26.04.1 point release, shipped on August 27, 2026, consolidates all fixes and security patches since the original April 23 launch. Notable changes include GNOME 50, a fully rewritten app suite, a new post-quantum OpenSSH, MySQL 8.4 LTS, and a Linux kernel 7.0, though several server upgrades require manual attention. The upgrade is free and can be triggered through Update Manager or do-release-upgrade, with LTS support lasting until April 2031.
OpenSSL 4.0.3 shipped today, closing 14 vulnerabilities spanning the QUIC transport, DTLS, X.509 certificate handling, the SM2 cryptographic suite and core key-management code. The project rated its worst flaw High, yet two unnumbered bugs deserve attention: an AES-SIV authentication misreporting error that could mask tampered data, and a base64 BIO regression that might silently truncate output. Reading the fixes together reveals the themes of the release, with QUIC accounting for at least five of the CVEs and a cluster of timing side channels targeting SM2 on ARM64 and RISC-V. Timing matters because OpenSSL 4.1 is nearly here—Beta1 landed September 23 with a final release expected in October and DTLS 1.3 support—while OpenSSL 3.0 already reached end of life on September 16.
The first release candidate for the Apache webserver 2.4.69 has been released for testing. The new candidate carries no fresh CVEs, since the heavy security work already landed in 2.4.68 back in June. Its biggest change makes mod_http2 drain open streams instead of dropping them on a graceful GOAWAY, bringing HTTP/2 in line with RFC 9113. Alongside that, the release disables MDServerStatus by default, drops weak RFC 2069 digest auth, adds OpenSSL 4 support, and ports the test suite from Perl to Python.
WinterSnowfall shipped D7VK v2.3, the compatibility layer that runs old Direct3D 7, 6, 5, and 3 games on Linux via Vulkan. The headline change places shadow surfaces in system memory, boosting performance in Empire Earth while adding a config fix to counter a Star Trek: Armada regression. The changelog also fixes a batch of classic titles, including Dark Vengeance, Z.A.R., and Star Wars: X-Wing Alliance. Most significantly, the developer announced the project is entering maintenance mode, meaning fewer releases and bug fixes only from here on.
Eight hardware and software reviews hit the web together painting a picture of a PC market caught between old and new sockets. Standouts include a pocket-sized Ninkear L20 mini-PC with class-ready integrated graphics, and The Witcher 3 Remaster earning a flawless 5/5 for a facelift that's free for existing owners. Power supplies and storage split the week neatly: a thoroughly tested Cooler Master 1000W PSU against a €89.90 budget Sharkoon, and a fast-read Fanxiang SSD whose writes collapse after 240 GB of cache. The bottom line is that midrange value comes down to knowing which socket, link, or cache technology you're actually buying into.
4MLinux 53.0 BETA launched as a full desktop-and-miniserver image rather than a half-built prototype. It rides on a modern core built from source with what the project calls "a huge number of updated packages." The Polish distro sidesteps traditional package managers, delivering software as self-contained addons and rebuilding its tiny core on boot to stay comfortably light on old hardware. It is one step toward a November STABLE release, with old-stable support through March 2027 and end of life in July.
Git 2.56.0 has been released and adding a safer git add --resolved conflict workflow, major merge-base speedups, and path-wallet repacking that now works with server-side bitmaps. The quarterly release contains 748 non-merge commits from 104 contributors, including 39 first-timers. Real-world gains are striking: one monorepo merge-base traversal fell from 0.68 to 0.01 seconds, and a path-wallet repack came in roughly 71% smaller than the bitmapped alternative. Also notable is that Rust support is now on by default, with the project eyeing a mandatory switch at version 3.0.
Bazzite shipped 44.20260928.1, another new stable image for its Fedora 44-based gaming Linux distro. This is a minor patch release that fixes just one issue: a stray msedit desktop icon that Bazzite normally strips from terminal-based apps. Some background maintenance accompanied it, including default editor config tweaks, GNOME extension updates, and a Sunshine on Brew script fix. Existing users can move over using the bazzite-rollback-helper, while fresh installs and Fedora Atomic users can rebase through the official site or the terminal.
SUSE led today's Linux patch wave with a 133-CVE kernel update that still needs a reboot, though the real standouts were the bugs you'd expect to be long fixed. Debian shipped rsync with 33 CVEs and dovecot with 25, while Debian's OpenStack and Slackware's 26-year-old groff command-injection holes made the week feel oddly retro. Ubuntu's Exim brought proxy-protocol code execution, but the most awkward moment went to its curl cleanup notice targeting the still-supported 14.04 LTS. If any of this software runs on boxes you manage, the advisory tables are worth a scroll and the reboot is unavoidable.
2026-09-28
Flatpak 1.18.4 has been released today, closing six vulnerabilities, two of which let a malicious app empty or delete host files like /etc/passwd as root during an upgrade. The two headline bugs are a resolv.conf symlink overwrite (CVE-2026-97024) and a path-traversal deletion (CVE-2026-97023), which are both rated CVSS 7.1 High and require the root system-helper context. This continues a security-heavy stretch for the project, following 1.18.1's nine-vulnerability drop and a series of stability patches through September. Flatpak recommends updating to 1.18.4 or later, and keeping bundled bubblewrap and xdg-dbus-proxy current.
Debian, Fedora, Red Hat, Rocky Linux, SUSE, and Ubuntu all pushed fresh security updates this week. Red Hat flagged three Critical advisories led by the unbound DNS resolver, while Ubuntu's PyJWT notice adds a signature-bypass that lets attackers forge valid tokens. Debian's libheif update carries seven CVEs plus eleven non-numbered advisories, and Fedora's Chromium build quietly closes more than 100 CVEs in one release. The takeaway is simple: patch the DNS resolver and token forgery first, then clear the rest when convenient.
DreamMaoMao released version 0.17.4 of MangoWC, the lightweight "dwm but Wayland" tiling compositor built on dwl and wlroots. The headline change re-adds the confine_pointer window rule that pins the cursor to a focused window, accompanied by a batch of fixes targeting fullscreen scanout, XWayland scaling blurriness, monitor hot-swap crashes, and layer/overlay focus problems. Behind the scenes, the release also splits each scene layer into separate stacking and content nodes, laying smoother groundwork for future features. Framed around a "stability first" philosophy, 0.17.4 reads as a maturity release suited for daily driving, installable via the AUR or build-from-source across most major Linux distros.
Bazzite shipped its latest stable build, 44.20260928, today adding official support for the Anbernic Win600 handheld. The release bumps the Open Gaming Collective kernel to v7.2.7 while updating Gamescope to 3.16.29 and NVIDIA drivers to 615.71.09-2. It also swaps in the default editor msedit for a handheld-friendly option and pulls key packages from the Terra repository. Existing users can update with the rollback helper, and images stay available for ninety days, allowing easy rollbacks if something breaks.
Today's reviews span eight products, with the ASUS T1 RTX 5070 earning a strong 90% but a pricey tag, and the Sandisk Optimus GX Pro 850P drawing fire for costing $115 more than its WD Black cousin. The Gigabyte 1000GM PG5 leads the PSU pack at just $169.99 with genuine Platinum efficiency and T-Guard connector protection, while five power supplies in total cover everything from a €79.90 budget pick to an SFX-L 1200W flagship. Cooling gets a clever single-tower Cooler Master V8 ACE still awaiting full benchmarks, and the Ducky Cushion 98 stands out as an unusually quiet numpad TKL. Value buyers should test the Gigabyte PSU first, but the RTX 5070 and Sandisk SSD are buys only if the premiums don't stop you.
OpenShot released v4.0.1 yesterday, delivering a maintenance build that repairs the preview, recording, snapping, and logging regressions from the recent Qt6 rewrite. The update arrives just four weeks after v4.0.0, the major release that migrated the free video editor from Qt5 to Qt6 and added Color and Recording Views plus local AI workflows. Among the improvements you'll find a redesigned razor tool with ripple cuts, a critical macOS startup fix, smarter announcement banners, and a genuinely new addition: official Linux Snap support with automatic updates.
GNOME has released 49.10, the last bugfix update for the GNOME 49 "Brescia" series, which is now officially end-of-life following the September 16 launch of GNOME 51. The conservative release bumps roughly a dozen modules with stability and correctness fixes, touching GNOME Shell, Mutter, and smaller libraries like libsecret and gcr. The most important changes are security patches, including CVE-2026-88924 in GVFS and two web-security fixes for the Epiphany browser that were held back from the earlier 49.9 release.
Linux Kernel 7.3-rc5 has landed as the fifth release candidate of the 7.3 cycle, bringing 577 commits from 275 contributors. Linus Torvalds flagged an atypical diffstat where drivers make up less than a third and selftests claim roughly a quarter, though he attributes this to small driver patches and a few large test files rather than anything substantive. Networking and KVM architecture work dominate the tree, with around 101 commits touching memory-safety or concurrency concerns consistent with a normal release candidate.
[ Archive ]
