Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-11-12
Mesa 26.3.0 shipped as the open-source graphics stack's fourth-quarter feature release, completing OpenGL 4.6, Vulkan 1.4, and OpenCL 3.1 support across nearly every driver. The headline desktop wins are native VK_AMD_anti_lag in AMD's RADV driver, replacing the old layer, and Intel's new Jay shader compiler now default on Xe2 and Xe3 hardware, trimming Fossilize compile times up to 66 percent versus Intel's Windows path. Behind the scenes, the release also brings the first H.264 hardware video decode to the reverse-engineered NVK NVIDIA driver, DRM format modifiers reaching back to the Radeon HD 7000 series, and Torx, Mesa's first on-device NPU AI backend. It's available now through distros and the official tarball, though users prioritizing stability may want to wait for the 26.3.1 bugfix patch.
Rust 1.100.0 becoming the language's first three-digit stable release. Its headline feature is the never type (!), which stabilized after ten years, five failed attempts, and over two years of work by contributor waffle. The release also brings core custom allocators, a DropGuard helper, a conjure_zst constructor, and Cargo's supply-chain dependency cooldowns. However, a narrow never-type fallback change can break pre-2024 edition code, so testing against beta first is advised.
PostgreSQL shipped its biggest security release of the year today, closing 52 vulnerabilities across five supported versions plus a near-final PostgreSQL 19 RC 2. Almost all of the flaws carry a Critical rating of 8.8 and let an attacker with modest privileges run arbitrary code as the OS user behind the database server. The drop also marks end of life for PostgreSQL 14, prompting the PGDG to urge anyone still running it to upgrade to a supported version. Meanwhile, PostgreSQL 19 is set to reach general availability on November 19, just one week after this release.
LibreOffice 26.8.3 is now live as the third maintenance update in the current feature branch, bundling around 45 bug fixes aimed at crashes, hangs, macOS integration and Microsoft Office compatibility. The Document Foundation is pushing an aggressive upgrade, since the previous mature branch, 26.2, reaches end of life on 30 November 2026. Interestingly, the downloadable software is fully stable even though its documentation still sits under a release-candidate path while the official GA page returns a 404.
Zen Browser just shipped 1.24.2b, its most polished build yet. The patch folds in Mozilla's latest security fixes alongside quality-of-life touches like a downloads pause button, a semi-transparent address bar, and Metal-accelerated WebGL on macOS. Notably, it lands just as competitor Arc shuts down on December 22, 2026.
Apache NetBeans IDE 32 reached general availability today, with the 32 tag superseding its three release candidates. The catch is that GitHub still flags the official build under the "Pre-release" badge, meaning it won't appear under the "Latest release" tab where most users look. The feature-complete quarterly drop brings Gradle 9.8, Maven running on JDK 27, Tomcat 11, JavaFX FXML support, and signed Git commits over SSH. Fixing the single mislabel would fix visibility, with NB 33 expected around February 2027.
Node.js rolled out coordinated security updates, patching 16 CVEs across its three supported LTS lines: v26.13.1 "Lithium", v24.22.3 "Krypton", and v22.23.5 "Jod", with seven rated HIGH. Most flaws live in the HTTP/2 and TLS layer your servers expose to the internet, and several are remotely exploitable with no authentication at all. But the catch: end-of-life lines like Node 20 "Iron" got nothing, and third-party trackers note a small discrepancy in the CVE count. Upgrade to a patched release if you're still running older code.
Deepin 25.3.0 shipped as a maturity-focused point release for the Chinese Debian-based Linux desktop. Its standout features include freeze protection that keeps the taskbar and Launcher usable during system stalls, a whole-disk UOS AI knowledge base, flexible snapshot recovery for its "Solid" immutable system, and a bundled PC Manager utility. The update also bumps the default kernel to 6.6.159 (with a 6.18.56 option via Kernel Manager), adds GPU-accelerated Linyaps containers, and patches a wide range of security vulnerabilities. The free ISO is available for AMD64, ARM64, Loong64, and RISC-V builds, though readers should note lingering English-language polish gaps and transparency concerns around kernel CVE fixes.
Today's roundup covers seven reviews where value keeps colliding with compromise. The Montech King 95 3D PRO delivers premium-case looks and cooling for under $200, just not quietly at full fan speed. AMD's 9950X and 9900X get a two-year-later re-test that leans toward the steeper-discounted 9900X on value, while Next Level Racing's F-GT Shift lightens and stiffens its cockpit for around $550. And the NZXT C1200 Platinum Platinum PSU splits reviewers, praised for quiet efficiency but penalized for weak transient response.
Red Hat pushed past 230 errata across RHEL 7 through 10 today, with ten Critical advisories driving OpenShift, Ansible Automation Platform, and freerdp updates while the rest of the Important pile stays dominated by Java and .NET. Ubuntu's biggest single move was USN-9046-1, folding 73 CVEs into a MySQL update that shipped full upstream releases to 26.10 and 26.04 LTS but backported only security fixes to 24.04 and 22.04 LTS. Debian, Fedora, and Gentoo led their rounds with ImageMagick absorbing dozens of CVEs, Firefox 160.0 landing on Fedora 44 and 45, and curl carrying an absurd 71 CVEs on Gentoo. If you're triaging on a tight budget, patch the RHEL Critical set, Ubuntu's MySQL, Gentoo's curl, and SUSE's critical Pillow fix first, since SUSE alone shipped 34 CVEs in a single Pillow advisory.
Wireshark has shipped 5.0.0rc2, the second release candidate ahead of version 5.0, its first major version bump in years. The experimental build introduces a unified theme system to replace decades of individual color preferences, along with per-packet process tracking, Zstandard compression for capture files, a built-in Lua debugger, and a completed HTTP/3 dissector. It also drops Qt 5 support, removes several legacy features, and bumps Windows, Npcap, and Qt requirements. As a release candidate, it's intended for testers to hunt bugs rather than for production use, with the final 5.0 release still to come.
Ardour 9.10 bringing a wave of quality-of-life editing improvements rather than a major feature overhaul. The headline addition is live gain-envelope waveform updates, though the feature is disabled by default and must be toggled manually. Other notable changes include multi-lane automation dragging, a macOS GUI rendering revamp that boosts performance, and pattern-based track naming borrowed from Harrison's console OS. One caveat stands out: users still on versions older than 9.9 should upgrade before copying region-FX playlists, since doing so can irreversibly corrupt their session files.
PHP's team shipped php-8.6.0RC7 today as the last release candidate before the first stable 8.6 lands on November 19, 2026. The build is tiny by design, just an array_map() first-class callable fix and an OpenSSL TLS use-after-free patch, but it already includes the critical PHP2Shell remote-code-execution fixes from October. The headline feature most developers associate with 8.6 is partial function application, letting you pre-fill arguments with ? or ... placeholders to skip closure boilerplate.
Red Hat released RHEL 10.3 and RHEL 9.9 on November 11, 2026, delivering point updates to both supported mainlines in lockstep. The headline additions include sealed images for image mode now generally available in RHEL 10.3, plus an MCP server for RHEL that moved to general availability for production diagnostics. The releases also expand post-quantum cryptography around CNSA 2.0 compliance and refresh developer toolchains like GCC 16.2, LLVM 22.1.8, and Rust 1.97 across both lines. Available through the Red Hat Customer Portal for active subscribers, both ships come with validated Leapp upgrade paths and a 60-day evaluation edition for non-subscribers.
Bazzite Linux 45.20261112 shipped just one day after the major 45.20261111 update pushed the gaming distro onto the OGC Linux 7.3.3 kernel and Nvidia 620.70.06 drivers. Nearly every headline package was unchanged, making it a targeted stabilization patch rather than a feature wave. Universal Blue's team used it to patch regressions from that jump, fixing a boot hang on certain laptops, a Framework panel replay issue, a Konsole coloring glitch and a Bazaar/Homebrew trust problem, all closed the same day. The only real feature bump was PowerStation 0.10, joined by NSS/nspr security updates, while users can still roll back to any build from the last 90 days.
Noctalia 5.5.0, the open-source Wayland desktop shell, shipped today as a large feature dump spanning bars, dock, launcher, screenshots, lock screen, theming, and plugins. It doubles down on its single-TOML, no-QT-GTK-native pitch with upgrades like widget peek mode, screenshot zoom and pan, and a plugin API expansion built on Luau. Notably, the release includes a battery-friendly change that stops GPU sampling for CPU stats and a privacy fix that catches apps opening cameras through V4L2.
FEX-2611.1 is a small stable patch to the Valve-funded open-source x86-on-ARM emulator, tagged on 11 November 2026 five days after the FEX-2611 feature release. Its headline change moves SVE/AVX detection out of the host-feature hash and into a process-specific hash so Linux, WoW64, and ARM64EC share a correctly bucketed code cache. A second fix clamps an out-of-bounds CPUID index that crashed on Valve's upcoming Steam Frame when CPU affinity changes pushed a core index too high. The remaining commits round out the Windows side with a forced-assert fix, a newly wired volatile-metadata flag, and a RootFS path fix, all under the MIT license.
2026-11-11
Bootstrap, the CSS framework powering roughly 19% of websites, shipped version 5.3.9 today, ending a 14-month gap since the last patch. The headline feature is a new .modal-xxl size sized to 1320px, alongside accessibility fixes and a tooltip/popover literal-text correction. More importantly for security teams, the release introduced staged npm publishing that requires 2FA-gated maintainer approval and OIDC trusted publishing to eliminate stored tokens. It's a non-breaking patch on the actively supported 5.x line with no known CVEs, landing while the team pivoted to the just-announced Bootstrap 6 alpha.
Mesa 26.2.7 shipped today as a pure bug-fix release with no new features, led by release manager Eric Engestrom. The 142-commit update came from 55 contributors, making it one of the busiest point releases in recent memory and busier than both 26.2.6 and 26.2.5. Most of the work targeted crashes and corruption across AMD, Intel, Qualcomm, ARM, and Apple drivers, with Michael Blumenkrantz and Yiwei Zhang contributing the most patches. The next bugfix release, 26.2.8, is due November 25th.
Zed Industries released Zed 1.28.1 to its stable channel today, carrying the 1.28 line's feature set into production. The headline additions are workflow glue rather than a marquee feature: optional automatic Git fetching, a resizable Git Graph Refs column, drag-and-drop file handling, and mouse-wheel font zoom. A major thread is reliability, with fixes that smooth the Agent Client Protocol, cap the Agent's read_file output at 2,000 characters, and extend session compaction to external agents. Market data frames the stakes, with Zed as the fastest-growing editor in Stack Overflow's 2026 survey and an admiration score that outpaces both VS Code and Cursor.
Tails 7.17 shipped today as a routine maintenance release bundling three component updates: Tor Browser 16.0.1, Tor client 0.4.9.16, and Linux kernel 6.12.116. Notably, the Tor client jump to 0.4.9.16 is an emergency release aimed at relieving overload on the network's directory authorities. The browser upgrade pulls in Firefox ESR 153.7's large batch of remote code execution fixes, including ones backported from Firefox 160. There are no new features, and anyone on Tails 7.0 or later gets an automatic upgrade while older installs must go fresh, erasing Persistent Storage.
Red Hat led today's roundup with 180 advisories across RHEL 7 through 10, though the 131 Important ratings reflect broad channel coverage more than that many distinct flaws. The standout threat is a pre-boot RCE in the edk2 PXE driver (CVE-2026-97631), tagged Critical on AlmaLinux, Oracle, and Rocky Linux 10. Pillow drew the biggest single library hit with 39 CVEs on SUSE plus three Criticals on RHEL, while a recurring AMD SEV-SNP hole keeps getting re-published under fresh Ubuntu kernel releases. If you run RHEL 9 or 10, nearly everything applies in one pass, and Ubuntu is still patching its 2014-era 14.04 LTS release.
Apache released HTTP Server 2.4.71 today, calling it the best version of the web server they've ever shipped while urging everyone to upgrade. The headline fix is CVE-2026-119618, a critical remote code-execution flaw in the HTTP/2 module that affects anything from 2.4.55 through 2.4.70. Two smaller vulnerabilities also landed, including a crash bug in the auto-certificate module and a one-byte buffer overflow that only hits the two most recent releases. The project has been moving fast all year, so operators are being pushed to patch immediately and migrate off the end-of-life 2.2 branch.
Visual Studio Code 1.146.0 shipped today as the latest stable release, and its headline move is deprecating the legacy Local agent harness, which will be fully removed by February 2027. Microsoft is standardizing on the Copilot harness, the default for new sessions since 1.143, since it runs on the Agent Host and enforces managed sandbox policies the old runtime can't. Beyond the sunset, the update adds session triage tools like Inbox mode and OS-level chat windows, plus more granular permission prompts and environment-variable masking for sandboxed agents. As always under the now-weekly cadence, it lands as a consolidation step rather than a single marquee feature, cementing VS Code's shift from editor into an agent orchestration platform.
NZXT's coordinated launch of refreshed H5 and H7 cases plus C1000 and C1200 power supplies drove most of today's roundup, with curved single-piece glass and mesh-or-glass modularity winning praise. The H5 RGB+ earns top marks for looks at £119.90, while the H7 offers interchangeable Vista and Aero tops, though reviewers repeatedly flag the proprietary Control Hub Lite and weak value scores. Beyond NZXT, igor'sLAB's rigorous PCM thermal-pad testing, the budget-friendly Surface Mouse 2's Windows 11 haptics, and the surprisingly quiet Gigabyte PSU round out a day of mixed verdicts. Buyers should brace for grim news on memory, with a Patriot DDR5-6000 32GB kit landing at an eye-watering $695 as AI-driven demand hammers consumer DRAM prices.
Bazzite 45.20261111 shipped today as the latest stable image from Universal Blue, the team behind the gaming-focused Linux distro. The release's headline upgrades are a jump to the OGC Linux 7.3.3 kernel and an open Nvidia driver leap to the 620 series (620.70.06-1). Alongside those, the gaming stack gains Gamescope 3.17.0, MangoHUD 0.8.4, and a major PowerStation bump to 0.9.0-1. Because Bazzite is immutable with automatic rollback, updating is low-risk, and users can either rebase to stable or pin this exact release from the Universal Blue GitHub repo.
Python 3.16.0a2 shipped November 10 as the second of seven planned alphas, per release manager Savannah Ostrowski, and it remains a preview build not meant for production. It targets a final release on October 5, 2027, with feature freezing at beta 1 on May 4, 2027. This build delivers faster startup, a 15-to-30× speedup in UUID generation, and richer regex support with nested character sets and Unicode property escapes. Meanwhile, the biggest debates still loom: a possible ?? coalescing operator sponsored by Guido van Rossum, a withdrawn plan to formalize the JIT compiler, and a revived opt-in garbage collection scheme after 3.14's botched attempt.
Microsoft has shipped VS Code 1.145.3, a security-only patch covering 17 vulnerabilities, all of which were fixed on November 10, 2026. The biggest theme is the AI-agent attack surface, with six of the fixes addressing remote code execution holes in MCP integrations, the integrated browser and agent command execution. The most alarming is a JS debugger auto-attach flaw that lets a malicious folder run code with zero user interaction. Microsoft says the fix is already out, so updating to 1.145.3 or later is the obvious move.
XanMod shipped two simultaneous custom Linux kernel builds on Tuesday, November 10, 2026, placing MAIN at 7.3.4-xanmod1 and LTS at 6.18.63-xanmod1. Both track upstream stable releases that Greg Kroah-Hartman flagged with mandatory upgrade advisories, backed by unusually large batches of more than 1,250 and 860 patches respectively. The updates pack real security hardening, including a TSA mitigation for AMD Zen5 hardware and a series of NULL-pointer and refcount fixes. Installed on top of a heavily tuned patchset, XanMod remains a popular pick for gamers and tinkerers willing to rebuild kernel modules by hand.
Liquorix maintainer Steven Barrett released the 7.3-2 kernel build on Tuesday, November 10, folding the security-hardened Linux 7.3.4 into the distro's familiar low-latency configuration. He's deliberately calling it a "capstone" build, pausing months of experimental Project-C scheduler tweaks in favor of a stable, well-tested baseline. The kernel targets Debian, Ubuntu, Fedora, and Arch Linux on AMD64 only, tuned for gamers, audio/video producers, and desktop power users who value responsiveness over raw throughput.
Greg Kroah-Hartman released two Linux kernel updates on 10 November 2026, one each for the fast stable branch (7.3.4) and the 2025 LTS track (6.18.63). Both patches lean heavily on security, folding in two Xen netback advisories (XSA-531 and XSA-532), an AMD Zen 5 TSA_FILL CPU mitigation, and a cluster of AppArmor hardening fixes. The 6.18.63 LTS patch is the larger of the two, packing out-of-bounds-read and integer-overflow fixes into the Ceph client, BPF map handling, and the networking stack. While 7.3.4 sits in pure maintenance mode with mainline already on 7.4-rc2, both updates remain available to download from kernel.org.
[ Archive ]
