2026-10-04
Darktable 5.6.2 launched today as a bug-fix release for the 5.6 stable series, bringing no new features. The update focuses on crash corrections, OpenCL fixes for Intel graphics drivers, and closes a bad-tarball hole for Linux users who build from source. Camera support stays thin with just two new white-balance presets, though the project still asks photographers to donate CC0 raw files.
Strata v0.1.39 makes the MIT-licensed local inference engine for the 125-billion-parameter Qwen3.8-Flash-Next model decode faster while keeping output byte-identical to 0.1.38. The update adds opt-in multi-GPU offload, parallel request handling, and an OpenAI Responses API so Codex CLI can drive a local instance. It also extends life to abandoned hardware, including Pascal and Volta NVIDIA cards, older AMD GPUs, Intel Arc, and CPUs without AVX2. Real-world gains are meaningful for RTX 20-series cards and up, though the older-gpu and experimental paths are compile-checked but not tested on actual hardware.
ML4W OS 2.16.1, Stephan Raabe's popular Hyprland dotfiles package, splits its power menu into a standalone app and separate repository. The new ml4w-powermenu installs independently and runs through a wrapper command, meaning old qs ipc call power toggle keybindings must be swapped over. The update also adds full up/down-and-Return keyboard navigation to the shutdown menu, a customizable config.json, reorganized autostart logging, a sidebar Keybinds button, and a Walker versus Rofi launcher switch.
Floxlor 2.3.15 shipped today as a bugfix release, but six of its thirteen changes are actually security fixes touching authentication, API access control, and path traversal. It closes gaps that started surfacing in 2026, including a reseller able to fetch admin records, customers deleting parent domains, and API keys exposed system-wide. The smaller bugfixes stop SSH keys from vanishing on shared FTP homes and fix a spurious database error, plus a sensible nginx body-size tweak.
AnduinOS 2.0.4 is now available for AMD64 PCs and ARM64 UEFI systems, marking the latest point release in its LTS "Resolute Raccoon" branch. The highlight is a graphical Rescue Center that recovers unbootable systems, from exporting files and resetting passwords to restoring Btrfs snapshots. It also adds an optional HyperFluent GRUB theme, a redesigned full-screen installer with live command logs, and reliability fixes for Live USB verification and Rufus boot problems. As a small, donation-funded distro aimed at Windows migrants, its real value lies in friction-reducing features rather than dramatic new capabilities.
xorgproto 2026.1 shipped on October 3, 2026, maintained by Alan Coopersmith, and most of its twelve commits are keyboard keysym updates. The bulk of the work, authored by Pierre Le Marre, syncs X11's symbol table with newer Linux kernel key-code tables (6.18 and 7.0) so modern keys and language-specific characters get proper names. Notable additions include SSHARP for the German capital sharp-S, a promoted ISO_Group_Shift, and a documentation-only RandR padding fix.
XanMod released three performance-tuned kernel builds, rebuilding the latest upstream Linux stable code as 7.2.9-xanmod1, 6.18.55-xanmod1, and 6.18.55-rt-xanmod1. These builds keep the project's signature optimizations, including LLVM compiler tuning, workload-adjusted scheduling, and default BBRv3 and Cloudflare TCP networking patches. The changelogs are dominated by security and correctness hardening, with heavy KVM, networking, XFS, and GPU driver fixes sourced largely from syzbot findings.
2026-10-03
Ubuntu shipped 101 CVEs in a single kernel update for its Google Container Engine image on 26.04 LTS, hitting 38 subsystems and pointing more to a cleared backlog than a fresh emergency. Red Hat and Rocky Linux both tagged freerdp Critical for version 10, making it the top fix for anyone running remote desktop protocols. Debian leads with a sprawling 62-CVE Firefox ESR patch alongside a redis advisory and a "fix for the fix" for webkit2gtk, while Fedora, SUSE, and the rest close out the day with notable items including Fedora's WordPress RCE and SUSE's high-rated python-anyio flaw. Patch the Critical and high-severity fixes first, then work through the Important and Moderate updates at your next maintenance window.
Strata v0.1.38 is an open-source inference engine that spreads the 125-billion-parameter Qwen3.8-Flash-Next model across your GPU, CPU, RAM, and SSD so it runs on an ordinary gaming PC with a 12 GB card. The release's biggest change is a security fix that blocks DNS-rebinding and cross-site attacks against its local server by rejecting requests from untrusted hosts. In hands-on testing on Debian with ROCm and a Radeon 7900 XTX, output reached up to 120 tokens per second with a realistic 75 per-second average. Everything runs locally and privately, with no cloud dependency and nothing charged per token after purchase.
Zen Browser 1.23b built on Firefox 157.0, with its headline feature being Library, a consolidated hub for history, media, downloads, and Spaces. It adds hardware-accelerated AV1 decoding for WebRTC video calls, a resizable auto-hiding sidebar, and faster startup with many tabs open. Most importantly, it patches more than 70 vulnerabilities from Mozilla's high-impact MFSA2026-97 advisory, making the upgrade strongly recommended.
The Linux kernel project just shipped seven stable releases in under twenty minutes, all landing today. Greg Kroah-Hartman signed off on 7.2.9 down to 5.10.271, a batch spanning the newest 7.x line all the way back to the oldest still-supported 5.10 LTS tree. Memory-safety fixes dominate the changelog, with use-after-free and out-of-bounds bugs found largely by fuzzers like syzbot and AI-assisted tooling. All seven are live now at kernel.org, so distro security updates should roll out over the coming days.
Six fresh reviews landed today, spanning an HP ZGX Nano G1n mini AI workstation running local coding models, a be quiet! AIO and ARCTIC fan controller that expose how software can make or break hardware, and value plays like the Asustor AS6702T v2 NAS. The standout is HP's tiny GB10-based "AI Station," where 128GB of unified memory and strong cooling let it run large models and image generation at home, though generated text still comes out as gibberish. Connectivity is climbing across the board, from dual 5GbE ports to USB4 motherboards, while design premiums at Gigabyte's Dark Wood board and Next Level Racing's MSFS cockpit ask whether themed touches are worth the extra cash. If you're chasing value, several reviewers note you can often skip the branded variant and grab the same frame or specs for less.
Valve released two beta builds timed to land a minute apart, signaling that it now treats the Steam Frame glasses and the PC's SteamVR runtime as a single connected system. The most concrete change targets the "Error 17" streaming connection fault, but Valve warns the fix only works if you update both SteamOS 0.4.3 and SteamVR 2.18.2, since an update on one side alone leaves the bug intact. Other highlights include up to 12% better battery life, eye-openness data exposed via OSC with a later OpenVR SDK upgrade, and a wireless adapter fix for users in certain countries. You can opt into either beta through the Steam client or the Frame's update settings, and should report issues in the SteamVR Bug Report forum rather than the news thread.
KDE Plasma 6.8 is set to launch on 14 October 2026, deliberately timed to land on KDE's 30th anniversary. The star of the release is the "Union" theming system, which now extends styling to classic QtWidgets apps like Dolphin and Kate. At the same time, 6.9 has already entered early development with no beta and only a handful of features merged so far. Plasma 6.8 also closes out KDE's transition to a Wayland-only desktop, while the 6.6 LTS line remains supported until 2029 for stability-focused users.
Wine Staging 11.19 dropped today, maintained by Alistair Leslie-Hughes and built on the freshest version of Wine's development branch. It's a maintenance rebase rather than a feature drop, shipping an identical set of 119 patch-sets with none added or removed. A couple of stages did get refreshed, most notably vkd3d-latest and odbc32-fixes. Source code and pre-built packages are live on WineHQ, separate from the standalone Wine 11.19 release.
Wine 11.19 has been released and adding vertical text rendering to GDIPlus, a DNS query cache, Unicode 18.0.0 tables, and fixes to the VBScript parser. The release also closed 23 bugs, including crashes in ArcGIS Pro, Final Fantasy XI, and Paint.net, plus fixes for .NET rounding and slow wineboot startups. About 48 contributors made roughly 350 commits since the previous version, with Alex Henrie, Rémi Bernon, and Conor McCarthy leading the pack. The 44.6 MiB source tarball is available on the WineHQ servers now, though production users may want to wait for the next stable release.
Amethyst Mod Manager v2.5.3 shipped today, broadening its native Linux support to nearly 90 games with titles like Voices of the Void, The Witcher 3: Remastered, and Balatro. The update introduces mod-update rollbacks and a script-extender version warning, plus privacy hardening that redacts system usernames from generated logs. A long-standing LOOT sorting bug that stalled large lists for minutes has been fixed alongside Wabbajack and Oblivion crashes. Maintained by a single developer, the free GPL-3.0 tool installs via AppImage, Flatpak, AUR, and distro repos, though its one-person backing remains a notable risk.
Python's core team dropped a surprise third release candidate, 3.15.0rc3, moving the stable build to October 9, 2026. The late candidate folds in last-minute lazy-import fixes, and the team stresses there will be no ABI changes from here on so existing binary wheels stay compatible. Highlights include explicit lazy imports, new frozendict and sentinel types, UTF-8 as the default encoding, a faster JIT, and a new Tachyon sampling profiler. Maintainers are urged to test on CI ahead of launch, though macOS 27.0 users should hold off as tkinter apps like IDLE can hang.
[ Archive ]