2026-10-20
Simple Taskbar V71 reached GNOME users today, and this release is more about polish than new features. Developer Sultech rebuilt the settings panel into visual "settings hubs," added a Spanish translation, and capped window previews at 2000 ms while locking application labels to a 30px minimum. The update also kills several nagging bugs, including a preferences-window crash on profile import and sliders that silently overwrote restored settings. It's a free, GPL-2.0 extension supporting GNOME Shell 48 through 51, and this marks the third month of rapid weekly releases for a project created just in mid-July.
SparkyLinux released SparkyOS onUSB 2026.10 today, its first-ever Arch Linux-based image, bringing the rolling-rolling AUR experience to a portable Linux setup. The system boots entirely off a USB flash drive as a pre-configured .img, so it works like a normally installed desktop without partitioning or installing anything on the host. It runs Xfce on Linux 7.2.11, ships with a default sparky/sparky login, and needs an x86_64 UEFI machine plus a 16 GB+ stick (USB 3.0 recommended).
KDE shipped Plasma 6.8.1, its first Wayland-exclusive point release. The bugfix-only update packs fixes across roughly 40 projects, with the heaviest work landing in KWin, remote desktop, and power management. Most users will feel the change in daily tasks: Windows RDP connections connect cleanly, cursor flicker disappears, and multi-GPU setups stop crashing. It sits between the 6.8.0 milestone and the 6.9 feature release due late February 2027.
Strata 0.2.1 letting you run Qwen3.8-Flash-Next, a 125-billion-parameter model, on an ordinary gaming PC. It fixes the crashes, stuck downloads, and settings-overwriting bugs from the beta while adding vision support for macOS and Intel Arc, faster downloads, and Docker images. The biggest move is a fixed, checksummed benchmark suite that lets users verify results instead of trusting author-only numbers. But speed and quality still depend heavily on your hardware, quantization tier, and workload, so independent reports range from enthusiastic to skeptical depending on the rig.
Floxlor 2.3.16 shipped today as a standard bugfix release in the project's 2.3 line. The update adds PHP 8.5 support, honors a customer's traffic-privacy setting in the listing endpoint, fixes symlink path handling, and bumps dependencies, but introduces no new features. It lands roughly a couple of weeks after 2.3.15 and nearly two months after 2.3.12, which closed most of the security holes Froxlor picked up in 2026. Those CVEs included a critical symlink-based root-escalation bug and triggered a warning from Germany's CERT-Bund agency.
BlueOnyx published fresh installation media for all three of its active releases, 5210R, 5211R and 5212R, on 19 October 2026. The update is a roll-up of all recent DNF maintenance packages combined with a targeted first-boot bug fix sweep the team called "Four Days of Chasing First-Boot Ghosts." The headline improvement is that fresh DHCP installs now flow straight into the setup wizard and GUI, dropping the old ritual of manually running network_settings.sh in the shell. The refreshed content ships as Netboot and Complete ISOs, VirtualBox and VMware appliance images, and Incus/LXC container images across a global mirror network.
SUSE led today's Linux security roundup with nearly 190 CVEs across 17 updates, most of them funneling through Mozilla Thunderbird 153.5's 86 vulnerabilities. Red Hat issued 40 advisories for RHEL 8, 9, and 10, with bubblewrap alone accounting for ten of them as container sandboxing updates swept every support channel. Ubuntu came in with roughly 53 vulnerabilities spanning 5 notices, while curl and OpenSSH drew the most attention with 18 and 9 CVEs respectively. Administrators should prioritize the updates repeated across multiple vendors, webkit2gtk3, curl, OpenSSH, and reboot-required kernel patches, before tackling the rest.
TechPowerUp's review of AMD's Ryzen AI Max+ 395 Strix Halo mini-PC argues it's a local-AI workstation built to run frontier models a 32 GB RTX 5090 physically cannot hold. MSI's MEG CoreLiquid E15 360 pairs a 6.67-inch curved AMOLED with flagship cooling, though its performance verdict is still pending. The rest of the batch is mixed: the IQUNIX EC75 earns a strong 90% Recommended, but the Sennheiser Profile USB carries an unresolved boot-blocking issue while the Cooler Master Elite Gold 850W hides a warranty discrepancy. Taken together, the reviews suggest capacity, real-world compatibility, and fine-print details now matter more than raw spec-sheet numbers.
2026-10-19
GE-Proton 11-11 shipped as a "Hotfix Release" today, addressing a video playback deadlock, an Easy Anti-Cheat "Untrusted system file" block in Star Citizen and Hunt: Showdown, and a string of protonfixes nits. Tagging commit c0c2ee35, the patch touched three targeted areas within hours of the fuller 11-10 release, with @aderumier credited as the sole contributor. It follows the monumental 11-1 rebase that rebuilt the fork's video pipeline and sparked an AI-assisted-development controversy over CodeWeavers' no-AI-code policy. As always, the only supported build comes from GloriousEggroll's official GitHub repo, with both x86_64 and aarch64 archives available.
SUSE's openSUSE Leap 16.0 leads today's batch with a Critical webkit2gtk3 update carrying 243 vulnerabilities, while its kernel adds 401 more across a massive changelog. Red Hat isn't far behind, posting two Critical WebKit fixes plus 32 total errata, most tied to packages that need separate builds per lifecycle path. Debian's LTS sweep pushes 260-plus kernel CVEs and PHP credential flaws under two advisory numbers, and Ubuntu's PyJWT fix addresses six researchers' distinct token-forging methods in one standard update. Meanwhile Fedora, Oracle, and a lighter Slackware round out the day, with Oracle's 200-CVE UEK advisory hinting at a caught-up backlog.
Weston 16.0.1 just shipped as a bug-fix point release, restoring Intel's i915 GPU driver to its native DRM backend after a regression broke it on fairly recent Linux kernels. The update bundles about two months' worth of fixes across 17 commits from 8 contributors. It also brings back correct HDR detection for certain Samsung ATNA OLED panels via the libdisplay-info 0.4.0 bump, alongside quieter wins in tearing, tracing, and framebuffer lifecycle handling. There are no new features, and you can grab the tarball right now from the official GitLab release page.
The Free Software Foundation Latin America has released GNU Linux-libre 7.3-gnu, a 100% free rebuild of the just-upstream Linux 7.3 kernel that landed one day earlier. Its main job was clearing proprietary binary blobs out of drivers like the Tyr Mali GPU, Morse Micro and NXP Wi-Fi, plus a longer list of pre-existing graphics and network components. Freedom comes at a cost: some sound, video, and especially Wi-Fi and hardware won't work, and the kernel doesn't push CPU microcode updates tied to security fixes. It's available via git, tarballs, or compiled .deb and .rpm packages for anyone building a fully auditable GNU/Linux system.
Roundcube released two security updates today, version 1.6.20 for its LTS line and 1.7.5 for mainline, only a minute apart, each fixing 20 recently reported vulnerabilities. Both went out from lead developer Aleksander Machniak, who strongly recommends updating every production installation. The fixes center on email-sanitization bypasses, IMAP and header injection, SSRF, ImageMagick limits, session injection, CSRF and XSS, with a single collective (Squirt1e, Atum, N0b0dy, Gh0u1L5) credited on 8 of the 20. Roundcube says no CVEs are assigned yet but expects them soon, and urges admins to back up first then move to 1.6.20 on LTS or 1.7.5 on mainline.
GloriousEggroll released GE-Proton 11-10 today, a fix release that builds directly on GE-Proton 11-9. The update's Wine upgrade adds syscall emulation and native-syscall handling for Easy Anti-Cheat launchers, advancing the years-long effort to run anti-cheat-protected multiplayer games on Linux. It also repairs a controller regression that dragged Path of Exile down to roughly 50 FPS and cuts ntdll CPU time in Microsoft Flight Simulator 2024 from 24.5% to 19.1%. The community-maintained fork, run by a Red Hat engineer, remains a manual install that trades bleeding-edge fixes for a higher chance of regressions.
Linux kernel 7.3 shipped today, marking the fifth major release of the 7.x era. With 15,267 commits, it logged the second busiest merge window ever behind Linux 6.7, pushing the kernel to roughly 40.98 million lines of code. Torvalds credits AI and LLM coding agents for both the growth and the accelerating removal of stale drivers. The update brings AMD Zen 6 prep, faster Btrfs, stable Intel Nova Lake integrated graphics, and new controller support, as maintainers weigh whether 7.3 or 7.4 takes this year's LTS crown.
Today's roundup spans ten fresh reviews across audio, displays, gaming software and hardware, headphones, and input devices. The standout is Comu's $169.99 Action Pro recorder, which transcribes unlimited audio with no subscription, joined by a comfortable $149.99 HyperX Cloud Alpha Air open-back headset. Two monitors lead the displays, an ASUS G-Sync Pulsar LCD delivering OLED-like smoothness and an LG-WOLED Alienware AW3226Q, while Control: Resonant and MOZA's AY210 FF base with MFY yoke earn the Editor's Choice treatment. A recurring theme across this year's input gear is modularity and 8000Hz polling, peaking with Pulsar's fan-cooled Feinmann F01 Noctua Edition.
Shelly ALPM v3.1.8 has been released as a stability patch that fixes an undefined sqlite3_open_v2 symbol which had broken its from-scratch Zig reimplementation of Arch's libalpm engine, known as RLPM. The fix lands on top of the feature-heavy 3.1.7 release, making the native engine actually runnable in the binaries users install. Developed by Seafoam Labs, Shelly is a GTK4-native package manager that has become the default GUI front-end on CachyOS and gathered roughly 1.2k GitHub stars. The project remains honest that complete libalpm parity is unfinished, tracked in a public compatibility ledger, and it ships as split packages with both dual-backend and RLPM-only builds.
[ Archive ]