Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-09-24
ML4W OS Dotfiles v2.16 shipped today, moving the dock into a standalone repository and collapsing configuration into single JSON files for the first time. The update wraps up the project's switch to Quickshell, dropping Waybar and nwg-dock-hyprland to fix Fedora 44 breaks while adding a new command-line tool for managing the dock. New features include a sidebar blue light filter switch, an option to route right-click clock actions to a custom calendar app, and shortcuts for opening your dotfiles and backup folders. Old config paths are gone, so users upgrading from v2.15.1 need to check their settings before installing since the dock autohide toggle has also moved into the new dock dialog.
KDE released the second beta of Plasma 6.8 today, carrying the pre-release number 6.7.91 ahead of the stable launch later this year. The headline update expands Union theming to legacy QtWidgets apps like Dolphin and Kate, finishing the second half of the engine's public preview. Kup, the btrfs-based backup scheduler, joins Plasma as a first-class module, making automatic backups to an external disk straightforward. The build also cuts X11 login support, defaults NVIDIA triple buffering, and packs in HDR, screen recording, and remote desktop improvements.
Rails 7.2.4 shipped as the fourth patch in the 7.2 line, bringing performance and reliability fixes with no new features or security advisories. Active Record took the biggest changes, including a method_missing performance regression fix and better PostgreSQL connection resilience under timeouts. Action Pack now returns a proper 405 Method Not Allowed for unsupported HTTP verbs, and several components picked up smaller speedups and parsing corrections. The core team recommends upgrading since patch releases preserve API compatibility, so expect no code changes.
Ruby on Rails 8.1.4 shipped today as a maintenance patch signed by release manager Rafael Mendonça França. It updates every core gem to 8.1.4, requires Ruby 3.2 or newer, and adds no new features or breaking changes. The release's most notable fixes include a denial-of-service guardrail on integer string coercion in Active Model, database connection-pool timeout handling in Active Record, and corrections for composite primary keys. Because it breaks no APIs, it's a recommended low-risk update for anyone still running the 8.1 line.
PostgreSQL 19 Beta 4 shipped today as the penultimate pre-release ahead of an October release candidate and possible general availability. It introduces a unified REPACK maintenance command with a CONCURRENTLY option, a WAIT command for reliable read-your-writes replication, and parallel autovacuum with a new scoring system. In a rare move, the community reverted several ambitious features, including SQL/PGQ, online checksum toggling, and partition merge/split, to protect reliability and the schedule. Operators should weigh breaking changes like JIT now off by default, RADIUS authentication removed, and forced standard_conforming_strings before upgrading.
Amethyst, the open-source Linux-native mod manager, just shipped version 2.5.1, adding official modding support for Hades and Hades II. The update folds a long-separate mod importer directly into the app, bringing the supported-game roster to nearly 100 titles. It also packs faster Nexus browsing, pausable downloads, and fixes to real installation bugs that broke Baldur's Gate 3 and Wabbajack modlists. Developed solo by ChrisDKN, the GPL-3.0 app is available via AppImage, Flatpak, and AUR, with a built-in update notifier.
Today's daily Linux security roundup landed across eight distros, led by Fedora's massive Chromium update carrying 58 CVEs. Critical fixes went to the unbound DNS resolver in both Red Hat and Rocky Linux, while Apache Unbound, IPA, and the Ansible Automation Platform also drew top-severity flags. Firefox, PostgreSQL, and the container toolchain (podman, runc, containernetworking-plugins) show up across nearly every distro, though patch effort varies by release. And in a rare twist, USN-8287-2 is Ubuntu apologizing for regressing its own earlier XDG Desktop Portal fix.
Mir 2.30.0 has shipped, bringing Canonical's Wayland compositor one step closer to a Rust-first future by making Rust a hard requirement to build. The server library's ABI was bumped to 69 while every other library stayed stable, so only shells and apps linked against mirserver need recompiling. Beyond the language shift, the release adds wl_fixes support, a typed wl_array wrapper, and fixes a long-standing multi-monitor regression on GBM/KMS hardware. For the first time, Canonical also published a formal roadmap outlining plans from Ubuntu 26.10 onward, including a Rust-based compositor and hardware-accelerated video playback.
Fwupd 2.1.8, the open-source Linux firmware-update daemon, released on 24 September 2026 with new cryptographic checks and more than twenty bug fixes. Its two headline features are a plugin that syncs bootupd when the EFI System Partition changes, and RSA-3072 signature verification for Lenovo accessories. Most of the release closes memory-safety holes attackers love, including a Synaptics buffer overwrite, a FocalTech integer underflow, and an LZMA decompression cap. Users on Fedora, Ubuntu, Debian, RHEL and other distros get the fixes automatically through their normal update flow, or via the fwupdmgr command line.
Today's reviews split neatly between budget parts that punch above their weight and gear that charges a premium without much reward. The NZXT S5 RGB ($49.99) and Lian Li RBO750B ($69.99) deliver surprising value, while the Corsair Warthog RS and be quiet! 1200W PSU ask for a premium worth debating. Sony's INZONE M10S II OLED pushes 540Hz with a refresh-saving matte coating, and both the Razer Viper V4 Pro and Logitech G Pro X3 have driven mouse latency to a sub-0.02ms floor. The broader takeaway is that efficiency, noise, and latency gaps between budget and flagship hardware have never been narrower.
Valve has shipped SteamVR Beta 2.18.1, which rebrands the default VR environment as "Aurora" and makes it the new factory-default shell. The update adds content-aware color tinting, gamepad-driven system UI navigation, and a bunch of binding and streaming fixes for Input and Steam Link. Linux gamers get the most tangible benefits, with fixes for async reprojection on AMD GPUs, GPU selection, and systems without systemd. All signs point toward Valve staging the software for its upcoming standalone Steam Frame headset, though no date or price has been announced.
Wireshark shipped two coordinated security updates with version 4.6.9 for its current stable line and 4.4.19 for the older "old stable" branch. Together the two releases close at least 35 vulnerabilities across the protocol dissectors that power the tool, with 19 fixes in 4.6.9 and 16 in 4.4.19. Most bugs are local crashes that require opening a crafted capture file, but several can be triggered remotely and a handful carry RCE potential, including defects flagged by Trend Micro's Zero Day Initiative. The updates add no new features, so the guidance is to patch both installations while verifying the signed tarballs before install.
Debian has launched the Inference Portal at inference.debian.net, a new service giving contributors shared, free AI model access sponsored by Scaleway's credits. Only active Debian Developers and Maintainers can sign in with their Salsa accounts to get an OpenAI-compatible API key, with two models available: DeepSeek V4 Flash and Zhipu's GLM-5.2. It's the infrastructure payoff from a razor-thin August 2026 vote that narrowly permitted AI-assisted contributions, and it enforces fair-use budgets ($25/week for developers, $10 for maintainers) while keeping prompt data in France under Scaleway's zero-retention policy.
Node.js 22.23.3 hit the shelves on September 23, 2026, as the latest patch in the 'Jod' LTS line. Its headline fix closes a heap use-after-free in the HTTP/2 stack that could crash servers or enable remote code execution. The release also adds two Node-API functions hat help native addon authors.
AM, the open-source AppImage package manager, has released version 10.6, adding the ability to run multiple instances at once without installations colliding. The feature fixes a problem introduced in 10.5, where users clicking "Install" too quickly would trigger conflicting operations and break in-progress downloads. The release also coincides with a catalog milestone of 3,000 AppImages across 3,594 unique applications, grown largely by volunteer contributors.
SparkyLinux 2026.09 "Tiamat" shipped as a semi-rolling Debian testing release, adding its first official Wayland edition built around the lightweight Labwc compositor. The new Labwc image is a bare-bones MinimalGUI build for power users, reusing Openbox's familiar configs while leaving out admin tools like Synaptic and Calamares. Beyond Wayland, "Tiamat" refreshed the stack across the board with Linux kernel 7.2.6, GCC 16, Python 3.14, and fresh desktop versions for KDE Plasma, MATE, Xfce, and LXQt. All seven amd64 ISOs are available to download now, though the GameOver, Multimedia, and Rescue special editions are still pending their update.
System76 has published COSMIC Epoch 1.9.0, the latest point release for its Rust-based desktop that now ships as the default in Pop!_OS. The update focuses on two new first-class apps: a bundled on-screen keyboard called cosmic-osk and a native image viewer and markup tool called cosmic-viewer. It also adds git-lfs as a required dependency and refreshes dozens of underlying components. Pop!_OS 24.04 LTS users will get it through a normal system update, while other distros can track the tagged release on GitHub and community repos.
2026-09-23
Zed Industries just released Zed Editor 1.21.0. The headline move is an expanded AI stable that now reaches Claude Opus 5.5, OpenAI's GPT-6 "Astra," "Sol," and "Luna," DeepSeek Flash 4.1, and SuperGrok sign-in, plus bring-your-own-key support to dodge vendor lock-in. You'll also get a language-server command picker, a showDocument-based file-opening feature, and around 30 bug fixes.
OpenVPN 2.6.23 dropped today as a pure security patch, sealing seven vulnerabilities, with no new features in the mix. Five of the seven flaws are Windows-specific, covering command injection through cmd.exe, binary planting of netsh.exe, a local denial-of-service, a DHCP buffer overflow, and config-directory traversal. The release also closes a cross-platform pre-authentication crash that lets an unauthenticated peer force a client segfault. All fixes were backported from master, so existing 2.6.x users can patch without a major upgrade.
OpenSSL 4.1.0-beta1 has been released for testing. The two headline additions are native DTLS 1.3 support (RFC 9147) and deeper integration of NIST's finalized post-quantum algorithms, backed by architecture-specific performance optimizations. Other new features include GREASE support, DTLS in the SSL listener API, IKEv2 key derivation, and initial Elbrus2000 CPU support, alongside breaking changes like dropped Windows targets and a tsget dependency swap.
Zen Browser version 1.22.3b has been released. The new release syncing its engine to Firefox 156.0.1 and improving the command bar's ability to search through tabs and folders. The update also fixes a Windows handle leak, a macOS 27 window-restore quirk, a broken urlbar context menu, and add-on installs blocked in Compact Mode. It's the third quick point release in the 1.22 cycle, reflecting Zen's rapid tracking of Mozilla's upstream security patches. Available now at zen-browser.app, the open-source fork has earned praise for being free of Google code and for its Arc-inspired productivity features.
SteamOS 3.8.28 Beta contains a single change targeting degraded game performance on systems with AMD discrete GPUs after a sleep/resume cycle. The build drops the "Known Issues" banner that had flagged an FSR/composition regression across several recent betas, suggesting that issue may finally be resolved at the beta level. Though small on paper, the fix matters most for the growing crowd running SteamOS on third-party AMD-dGPU laptops and desktops rather than Valve's own Steam Deck.
PHP 8.6.0 RC2 was tagged on 23 September 2026, just about 18 hours after RC1, a gap that signals the next major release is near its finish line. The second candidate adds only three fixes on top of RC1, though its full build bundles roughly two dozen memory-safety and correctness fixes dating back to Beta 3. The feature set is already frozen, locking in additions like partial function application, clamp(), performance caches, and a fresh wave of deprecations for developers to plan around. It's available for testing now but shouldn't run in production, with stable 8.6.0 expected around November 2026.
Visual Studio Code 1.139 bringing large agent session lists that load up to 12x faster by using a central catalog instead of scanning every database. The release extends Dev Container support to remote SSH, Tunnel, and WSL hosts so agents can build and test projects with the correct toolchain without duplication. Alongside those agent upgrades, VS Code adds a compact session view, in-place renaming, word wrap indicators, and smarter bracket auto-closing to smooth out everyday editing. The update is available now for Windows, macOS, and Linux, with an Insiders build already at v1.140 for early testers.
KDE's Nate Graham published a permissive draft policy titled "Don't be lazy," asking AI-assisted contributors to use judgment rather than outsource their thinking. The thread drew nearly 50 contributors over a week, splitting developers over quality concerns, mandatory disclosure labels, and the environmental toll of training data centers. A grassroots group called KDE for People then demanded an outright ban on generative AI across Plasma, arguing the draft ignores ethics and bypasses wider community input. As of September 23, KDE has adopted neither the draft nor the ban, with a revised policy still expected.
NVIDIA has released Linux Display Driver 595.104.02 for 64-bit Linux, a stability-focused point update in its long-lived certified branch. The patch addresses two fixes: an integer-overflow bug that broke page-table allocations over 2 GiB on large-VRAM GPUs, and a crash caused by unvalidated HDR metadata being forwarded to the Wayland color-management protocol. These issues only bite users running heavy compute workloads or HDR-capable Wayland Vulkan sessions, so casual gamers may not feel the difference. You can download the roughly 423 MB package from NVIDIA's driver page or through your distribution's repositories.
Today's review batch spans six products, from budget cases to a WiFi 8 router that may outlive its own specs. The Corsair Warthog scores 8.5/10 for Halo styling but trips on noisy fans and tight storage, while the NZXT S5 RGB nails first-builders with a 92% value-focused rating. Tom's Hardware champions both the affordable Glorious GMMK Eternal keyboard and the loud-but-steal-priced Bambu Lab R1 CO₂ laser. Finally, the ASUS ROG Rapture GT-BN98 previews WiFi 8 ahead of real client hardware, and the compact Lian Li SX1000P tops its PSU group on transient response.
Today's Linux patch cycle is dominated by browser-rendering packages, with Chromium pulling 58 CVEs into a single Fedora build and Firefox 73 on SUSE. The same openssh, curl, and sudo advisories are turning up across nearly every distro, so managing multiple boxes means running the same patch twice. Beyond the browser numbers, RHEL's 38 errata, Ubuntu's reboot-required kernel updates, and a rare AlmaLinux libxml2 backport mishap round out a busy day. Browser packages and openssh go first if you're patching now, with kernels needing a separate reboot scheduled afterward.
[ Archive ]
