Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-10-17
The first release candidate for Fedora Linux 45 Candidate went live today for community testing, with general availability targeted for Friday, October 30. The release packs under-the-hood modernization like the kmscon console, Stratis storage in the installer, and the oo7 secret-management system, plus a wave of new toolchain versions. QA is in decent shape with no accepted 0-day blockers, but proposed issues cluster around oo7 and several images exceed their ISO size limits.
Systemd published two stable point releases Saturday, v261.4 at 13:12 UTC and v260.6 at 15:18 UTC, landing within hours of each other. Both are automated, immutable builds that fold in memory-safety and seccomp hardening, though neither announces a brand-new CVE.
Faugus Launcher, the small open-source front-end that lets Linux users run Windows games through UMU-Launcher, released a pre-release on October 17 titled "GPU Selector Testing." It introduces a per-GPU picker that lets you choose a specific graphics chip for each game, replacing the older on/off "Discrete GPU" toggle used for NVIDIA Prime hybrid laptops. The maintainer removed the familiar option and is openly asking users with laptops or multiple GPUs to test the change and report results in GitHub issue #1033 before it reaches the stable branch. The downloadable packages are tiny, but the update matters because it retools GPU selection from scratch, which is a long-standing headache for Windows-game compatibility on Linux.
GNOME 50.6 went live today as a stable bugfix update built on the GNOME 50 "Tokyo" desktop. Six modules received version bumps, with gnome-shell and mutter both jumping to 50.6 while glib also backported several security fixes. Since GNOME 50 entered "old-stable" status after 51 launched in September 2026, the release is pitched as a safe, low-risk upgrade for current users. Distros are encouraged to package the update, and source builders can pull the official BuildStream snapshot to compile it themselves.
UBports released Ubuntu Touch 24.04-2.1 and 24.04-1.5, headlined by a security patch that plugs a flaw letting unconfined apps gain root access without a password. The update adds eight new supported phones, including the Nothing Phone (1), OnePlus Nord models, and several Xiaomi Redmi Note and Poco devices. Morph Browser gets an engine bump to QtWebEngine 6.11.2 on Chromium 140, along with fixes for tab-switch jank, push notifications, and timezone display. Existing users can install via System Settings => Updates, though some devices on 24.04-1.4 should update to 24.04-1.5 first.
Fedora's QA bot has nominated the Branched nightly compose 20261017.n.0 for community testing as the project races to validate Fedora 45. The release missed its October 20 target, which was declared a NO-GO, pushing it to the October 27 contingency date. The headline change is an anaconda installer bump from 45.27 to 45.29, adding the web-based installer for Atomic desktops and Stratis storage support. Most tests pass, though a few Spin ISOs run over their size limits without breaking functionality.
Valve released SteamOS 3.9.3 Beta, shipping its heaviest pre-release build yet for the Beta and Preview channels. The cumulative update brings Linux 7.2, KDE Plasma 6.7.3, and a switch to the wpa_supplicant WiFi backend, plus fixes for games like ELDEN RING on Intel Panther Lake and Forza Horizon 6 on the Legion Go 2. A quiet package rename from steamos- to holo- signals Valve's push to spread the OS beyond its own devices. The beta installs manually via Settings => System => System Update Channel, but it remains pre-release software aimed at early adopters.
Tiling Shell v18.0 now supports GNOME 42 through 51 and adds the much-requested right-mouse-button activation key. The release also brings a one-click "untile everything" shortcut, workspace-wide layout propagation, and a fix for the fractional-scaling bug that bloated menus on 150% displays. More significantly, solo maintainer Domenico Ferraro has switched to shipping release candidates on GitHub first so the community can test them across many GNOME versions before they reach extensions.gnome.org. Installation is simplest through the official store, though manual installs may require compiling the GSettings schema and choosing the correct build for your GNOME version.
Strata 0.1.45, the MIT-licensed open-source AI engine shipped by maintainer Niko1221 today, lets you run a 125-billion-parameter model entirely offline on an ordinary gaming PC with 12 GB or more of VRAM. The release adds picture-reading vision to the smaller Qwen3.6-35B-A3B family, parallel requests for up to eight conversations, and decode speeds up to ~40% faster, while keeping flagship answers byte-identical to the previous build. The notes stand out for transparency, documenting exactly which speed tweaks got shipped and which were rejected or behind opt-in flags. Quality at aggressive quantization, high hardware requirements, and a lengthy first-run download remain the main trade-offs to keep in mind.
Wine Staging 11.20 was tagged today, rebaseing onto upstream Wine 11.20 that went out the day before. The release adds ARM64EC relay and replay debugging, improves XML validation, and moves CD-ROM handling into Wine's Mount Manager. Its 24 upstream fixes tighten up productivity tools like Office 2013, QuickBooks, and OneDrive, along with games such as Star Wolves 3 and Battlefield 1942. Carrying roughly 275 to 290 experimental patches, the 11.x line now points toward the Wine 12.0 stable milestone targeting early 2027.
PeaZip 11.4.0, released today by developer Giorgio Tani, is primarily a security-focused update that adds stricter input validation and enables range checking. Its biggest move drops the use of full console subprocesses for archiving and extraction, shutting down a class of command-injection flaws. The patch also improves file-browser auto-refresh, adds Windows .lnk navigation via Ctrl+P, and bumps backends to 7z/p7zip 26.04 and Pea 1.34. This follows 11.3.0's fixes for several exploitable RCE bugs, including a cross-platform out-of-bounds write (CVE-2026-102514).
NVIDIA's RTX Spark N1X chip arrives in two premium laptops, the HP OmniBook Ultra 16 and Microsoft Surface Laptop Ultra, earning praise for local AI performance but facing heavy criticism over steep pricing. Reviewers both call the machines powerful and beautifully built, yet flag weak battery life, fan noise, and Copilot+ features that aren't ready yet, leaving them hard to justify for non-AI users. Builder-friendly picks stand out on value: the LattePanda Mu Ultra module, be quiet!'s feature-packed Light Loop LCD cooler, and XPG's overclockable, recycled-material DDR5 kit all score well. If local AI is your goal, these are among the most capable machines available, but most buyers are better served by the cheaper, more practical components.
Debian's Freexian-managed kernel advisory for bullseye packs a staggering 597 CVEs into its 5.10.272-1 update, with trixie's stable kernel still carrying 273. AlmaLinux, Oracle Linux, and others shipped overlapping Critical FreeIPA fixes covering eight CVEs each, including an unauthenticated LDAP client that can grant itself administrator rights. A genuine guest-to-host VM escape, CVE-2026-99999 "PwnEscape," is already sitting in testing for AlmaLinux 8, 9, and 10 but hasn't hit production yet. Patch priorities include the FreeIPA directory fixes and the Freexian kernel, while Debian, Fedora, Rocky, RHEL, SUSE, Slackware, and Oracle all pushed their usual batch of routine updates you can apply through your familiar package manager.
Ungoogled Chromium, the community fork that strips Chromium of Google's web-service dependencies, published a new Linux build (155.0.8059.84-1) on 16 October 2026. The release tracks Google's Chrome Stable 155.0.8059.84, carrying the ten security fixes that patch a critical Prerender use-after-free (CVE-2026-110922) worth a 9.8 CVSS score. Because the fork shares Chromium's code, Linux users get those same vulnerabilities patched while keeping Google telemetry and hard-coded server calls removed. It's not a deep-security fork by design, so its safety largely rides on upstream fixes, but it's a low-effort way for privacy-focused users to stay current without phoning home.
Wine 11.20, the latest bi-weekly development release, shipped on 16 October 2026 with 24 bugs fixed. The headline feature is relay debugging for ARM64EC, letting developers trace calls across the ARM/x64 boundary on Windows 11 on ARM. It also tightens XML validation to unbreak installers like Office 2013 Click-to-Run, moves CD-ROM logic into the Mount Manager, and closes a stack buffer overflow in cmd. Lead contributor Alexandre Julliard tops the commit list as the project heads toward Wine 12.0 in early 2027.
Liquorix maintainer Steven Barrett released two kernels on Friday, October 16, 2026, within about an hour of each other. The first, 7.2-19, is a clean merge of the new Linux 7.2.11 stable release. The second, 7.2-20, adds Kairui Song's MGLRU Frequency Guided v4 patch set, a server-oriented memory-management technology reaching a desktop gaming kernel for the first time. Reported benchmarks show +10% to 40% gains, but those tests ran against database and Android workloads, leaving its real impact on gaming and audio boxes unproven.
Systemd v262.1 shipped on 16 October 2026 as a maintenance patch on top of the v262 feature release, totaling 229 commits across 330 files from 65 contributors. The update patches several memory-safety and sandboxing bugs, including a one-byte buffer overflow in logind, an overflow in sd-bus's memfd helpers, and tightened seccomp filtering. The real story, though, is that v262 deployed an "AI canary" that prompts coding agents to leave a marker line in README.md, flagging unreviewed AI-generated code before it merges. Most end users will simply get the patch weeks or months later through normal OS updates, with Debian, Fedora, and Ubuntu already tracking the upstream tags.
Zen Browser 1.23.3b shipped on October 16, 2026, as a maintenance build that upgrades its engine to Firefox 158.0, inheriting Mozilla's high-impact MFSA2026-106 advisory with dozens of critical security fixes. Alongside the security upgrades it adds practical touches: a new --space command-line flag, more accessible PDFs on Linux and macOS, and smoother scrolling on high-resolution displays. As a free, open-source Firefox fork pitched as the open alternative to Arc Browser, it rides Zen's unusually rapid weekly release cycle that has steadily hardened the newly introduced Library hub.
OBS Studio 33.0.0-rc2 shipped on GitHub October 16 as the near-final version of the major 33.0 update, before it's expected to go stable. The two headline changes are a two-year jump in the Chromium Embedded Framework from CEF 127 to CEF 150 and a complete rebuild of how plugins load, with legacy plugin locations still supported until OBS 34. Beyond that, the release adds NVENC on ARM64, improved source snapping and numeric spinboxes, and a stream-disconnect fix for AMD's AMF encoder. Since the jump from RC1 to RC2 was intentionally tiny, the project is essentially done, though OBS still recommends staying on stable build 32.2.2 for live streaming.
2026-10-16
The GNOME Project launched GNOME OS Preview, a new edition of its self-built Linux distro aimed at non-developer early adopters. Unlike the older Nightly image, Preview freezes GNOME OS to the latest stable release, GNOME 51.1, so it tracks the same versions shipped in Fedora and Ubuntu. It's an immutable, image-based system assembled with BuildStream and managed by systemd-sysupdate, running alongside the classic Nightly build. Though it's still early-stage and not promised for perpetuity, it represents the closest GNOME has come to shipping a complete, stock Free Software desktop built entirely on its own infrastructure.
X.Org's security team published a coordinated advisory covering 17 memory-safety flaws across libX11 1.8.14, libXi 1.8.4, libXpm 3.5.20, libXrender 0.9.13, and libXtst 1.2.6. The bugs all follow the same pattern: a malicious or compromised X server sends a crafted reply that the client library trusts without validating length fields, leading to out-of-bounds reads, heap overflows, or denial of service. Most were discovered by AISLE's AI-native scanning platform, while the most severe write bugs came through Trend Micro's Zero Day Initiative and maintainer Adam Bedard. Update to the fixed versions as soon as they reach your distro, though exploitation generally requires a hostile display server and often some user interaction.
SQLite 3.54.1 as a patch built on the 3.54.0 feature release from a week earlier. The headline fix addresses a possible heap-buffer overflow, but only on 32-bit builds—64-bit users are unaffected and benefit automatically once they update. The release also bundles assorted user-reported regressions from the 3.54.0 line, with the full commit trail available in SQLite's online check-in timeline.
KDE released Plasma 6.6.7 today, marking the first bugfix update in what's now a genuine three-year LTS track. Unlike earlier LTS attempts, this branch is backed by the Bullet-Proof KDE Initiative, funded by Kubuntu Focus and implemented by Techpaladin Software with over $100,000 over three years. The update fixes bugs across KWin, Discover, Klipper, and the screen locker, plus adds Intel A380 GPU monitoring. Support covers Plasma 6.6, KDE Frameworks 6.24, and KDE Gear 25.12, the exact versions shipped with Kubuntu 26.04 LTS.
Valve has shipped SteamOS 0.5.6 to the Steam Frame's beta channel, headlined by the ability to sideload Android apps with a simple right-click in Desktop mode, no cable or PC required. A parallel stable client update improves streaming reliability, fixing pairing issues, adapter sleep, and a driver crash. Lepton still lacks hardware video decoding, so video-heavy apps may rely on software decoding for now. The build follows Valve's usual pattern of beta features graduating to a general release, arriving just weeks after the headset's September launch.
SUSE just closed 110 vulnerabilities in a single SUSE Linux Enterprise 15 SP5 kernel update, the biggest single bump of the day. The week's only Critical ratings both point at the idm:DL1 identity-management module on RHEL 8 and Rocky Linux 8, with Oracle's lone Critical landing on 389-ds-base for OL7. Debian spent most of its bullets on browsers, shutting roughly 59 CVEs in firefox-esr and 37 in Chromium, while Oracle leaned on raw volume across its kernel and Thunderbird updates. Ubuntu wrapped up with three notices, including a reboot-required Azure kernel change on 16.04 LTS and a 12-issue RabbitMQ fix spanning 16.04 through 26.04.
Today's eleven reviews across nine categories have the consistent message was that you can still buy flagship features on a budget, but building anything has grown more expensive as DRAM and GPU costs keep climbing. Picks like the PCSpecialist Noble Extreme prebuild, Alienware's budget-friendly OLED, and Formlabs' consumer printer led the pack, while the cheapest options in each category carried real tradeoffs like short warranties or easily-scratched finishes. Software has quietly become the differentiator, with ecosystems from Corsair, Lofree, and EDIFIER now pulling as much weight as the raw specs.
Fedora has declared Fedora 45 Final a "NO-GO" because no suitable release candidate was available to test, leaving QA with nothing to grade. The announcement came from Operations Architect Aoife Moloney on the devel-announce mailing list on Thursday, October 15. With the original October 20 GA date abandoned, the project is now chasing a new target of October 27, with November 3 as a fallback, and the next Go/No-Go meeting is set for October 22. Unlike past Fedora NO-GOs that stemmed from open blocker bugs, this delay was a "NO-GO by default" with no candidate published at all, so users should hold off installing until the schedule confirms a shipable build.
XanMod shipped two tuning-kernel builds 6.18.57-xanmod1 and 7.2.11-xanmod1. Both are drop-in kernels for x86-64 Debian-based systems, letting you choose between the long-horizon stability of the LTS tree or the bleeding-edge features of the current mainline series. XanMod also maintains a companion NVIDIA driver repo, cautions that DKMS modules can lag the newest kernels by weeks, and already shipped an RT build earlier in the month.
Godot 4.8 Beta 1 shipped on October 15, 2026, pushing the free, open-source engine into feature freeze and its final testing phase ahead of a Q4 2026 stable release. The beta centers on regression hunting rather than new features, with 340 contributors already submitting 1,523 fixes since 4.7 went stable. Graphics and editor work stand out most, adding multi-bounce ambient occlusion, screen-space contact shadows, mip-level texture streaming, and a dockable, better-organized editor with community-requested symbol renaming. Developers should note the .NET builds now require .NET 10, plus a handful of breaking changes across core, GDScript, and input handling.
Rust's release team shipped 1.99.1 on October 15, 2026, clearing three serious regressions that had slipped into last month's stable release, 1.99.0. Two of the bugs are critical: a silent FFI bool miscompilation on x86_64 that returned garbage instead of clean booleans, and a macOS linker failure where rust-lld couldn't find libLLVM.dylib when invoking rustc directly. A third, rated high, caused link errors on UEFI targets due to a missing wcslen symbol born from a narrow code backport. All three were diagnosed and fixed in about two weeks, so simply running rustup update stable brings you up to date.
Devolutions released UniGetUI 2026.3.2 on October 15, and its headline feature is a new experimental Software Catalog that lets administrators build a curated list of approved software users can install with one click. The update also adds drag-and-drop sidebar reordering, a macOS Liquid Glass look, and small usability wins like scroll-position retention and better screen-reader announcements. Most practically, it fixes a bug that let pip updates corrupt Python environments by serializing those operations, alongside fixes for PowerShell module uninstalls, Chocolatey admin elevation, and several crashes. Built in about a week by six contributors, the release is the first major product milestone under Devolutions' 2026 acquisition and sits comfortably past the CVE-2026-10696 package-correlation fix from 2026.2.1.
Shelly ALPM 3.1.7, released today by Seafoam Labs, introduces RLPM, a native Zig reimplementation of Arch's libalpm that can dispatch package operations alongside the original library. Written under lead engineer Zoey Bauer, RLPM handles the full ALPM workflow while still letting users fall back to libalpm, though the authors openly admit complete compatibility remains unfinished. The project reached well beyond early adopters after CachyOS made Shelly its default GUI package manager in April 2026, amplifying RLPM's impact across a large out-of-the-box user base. With safety features like sealed memfd archives, Landlock/seccomp sandboxing, and openat2 path confinement, Shelly pairs an aggressive rewrite arc with surprisingly honest calls about its own limits.
Faugus Launcher 2.5.0 shipped on October 15, 2026, packing a batch of quality-of-life tweaks rather than any game-changing features. The headline additions are interface navigation sounds, an option to strip out cover art and banners, and a Proton Manager that now tracks the "Latest" builds. Under the hood, it reworks Prevent Sleep for broader system support, sheds its python-dbus dependency, and adds an Ubuntu 26.10 PPA build alongside a pile of bug fixes. The Linux game launcher keeps churning out monthly releases in a market already crowded by Lutris, Heroic, and Bottles.
[ Archive ]
