Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-10-23
Fedora Linux 45 Final was declared NO-GO at the October 22 meeting, pushing the release to a new target date of Tuesday, November 3, 2026. Release lead Aoife Moloney cited outstanding blocker bugs, headlined by an unresolved eMudhra certificate still sitting in the system trust store. This marks Fedora 45's second straight miss, following a first NO-GO on October 15 when no candidate media had been published in time. The team needs an updated ca-certificates landed in a new RC-3 and verified by QA, with the next gate on October 29 deciding whether the November 3 target holds.
Shelly 3.1.9, released 23 October 2026, adds "in-place file migration" to RLPM, its from-scratch Zig package engine that lets a new package adopt files already on your system without overwriting them. The feature matters most when one package replaces another, avoiding the old .pacnew/.pacsave nag-and-merge dance, though it only works on RLPM rather than the default libalpm backend. RLPM reached full native maturity just three weeks earlier in v3.1.7, anchoring Shelly as the package-management layer of Seafoam Labs' wider Devario desktop stack.
2026-10-22
Remi Collet released updated packages for PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 today for Fedora and RHEL based Linux distributions, just a day after upstream patched two critical unauthenticated remote-code-execution flaws affecting every supported branch. The bugs, one exploiting OOM corruption via longjmp() and the other stale global state, are especially dangerous on mod_php, where PHP validated a complete HTTP exploit, though the fix is simply to update. Packages are already live in Remi's remi-modular and remi-safe repositories for Fedora 43+ and Enterprise Linux 8+ on x86_64 and aarch64, with interim mitigations offered only as a stopgap.
Faugus Launcher 2.5.1 released today, adding a refined GPU selector and dropping two abandoned Proton backends. The update replaces the old "Discrete GPU" toggle with a more accurate per-device picker, which matters most for hybrid-graphics laptops running NVIDIA Prime offload. Faugus also retired Proton-EM and UMU-Proton because neither has been maintained in months, steering users toward GE-Proton and custom builds. Developed almost entirely by one person, the lightweight launcher sits alongside Lutris and Heroic by favoring a simple, fast, attractive interface over raw features.
NetBeans 32 IDE RC2 dropped today as the second of several weekly release candidates, carrying just four maintenance pull requests and a JDK 27 API warning. The real feature set lives in RC1, which shipped on the October 15 feature-freeze with Gradle 9.8.0, SSH-signed Git commits, a new JavaFX FXML library, and Tomcat jumping to 11.x. If the community vote passes cleanly in the November 7 to 15 window, the final GA release is slated for November 15 to 30. It's a textbook example of the project's quarterly cadence, and it's still free under the Apache License 2.0 with nothing feature-gated.
Valve shipped SteamOS 3.9.4 Beta today, primarily to repair regressions that crept into the feature-heavy 3.9 release. The update fixes several genuinely annoying issues, including apps hidden behind Steam's loading screen, screenshots captured at 720p, and a timezone bug that blocked access to Desktop Mode without a reboot. It also adds a security patch revoking certificates tied to the eMudhra private-key compromise, where the breached keys happened to be single-digit numbers like "4." Hibernation work continues but stays disabled on the Steam Deck, and the update points toward 3.9's eventual move to the Stable channel.
Alpine Linux issued four simultaneous stable point releases on today: 3.21.9, 3.22.7, 3.23.7, and 3.24.3 are fixing security issues across five core components. The updates address the eMudhra CA key compromise in ca-certificates, a musl regex heap overflow (CVE-2026-107891), a large OpenSSL advisory dominated by DoS flaws, and a zlib heap overflow (CVE-2026-85091). The most serious fix is a critical "php2shell" unauthenticated RCE pair (both 9.2/Critical) that ships only on the 3.23 and 3.24 branches, since older branches pin an unaffected PHP version. With v3.21 reaching end-of-support on November 1, 2026, the team says it's time to update now and plan a migration.
ARCTIC just shipped its BioniX P12 and P14 ARGB fans, value-oriented units pitched just below its Pro line that earn an EnosTech Performance Award for their daisy-chain design and strong cooling, though they get loud and need care on 1A fan headers. MelGeek's Made68 Ultra V2 is a $239 wired 65% Hall-effect keyboard praised for premium build, quiet acoustics, and fast magnetic switches, but its faint purple legends vanish under backlighting. ASRock's Z890 Taichi Aqua flagship got a massive price cut to about US$500, earning TechPowerUp's Recommended award for water-cooled VRMs and a monstrous spec sheet despite dated software and painful memory overclocking. Together, the three reviews point to the same takeaway: value is where PC hardware stands out right now.
Wireshark 5.0.0rc1 is the first major version bump for the packet analyzer in years. The release candidate drops Qt 5 support, ends the odd/even numbering scheme, and adds a new theme engine alongside Zstandard-compressed captures and per-packet process attribution. Deep HTTP/3 dissection rounds out the headline features, though some of it has been available since 4.7.2. The team expects a final 5.0.0 date after SharkFest EU (November 2–6), and packagers should note several breaking changes worth tracking.
Zed 1.25.2 landed on the Stable channel on October 21, 2026, leading with a big cut to executable size that trims 33% on macOS, 28% on Windows, and 7% on Linux. The Rust-based editor strips debug symbols to hit those numbers, quietly answering years of complaints about bloated 220 MB installers on macOS. Security gets real attention too, with a fix that stops secrets like API keys from leaking into your local process list when passed to external agents. On top of the size and safety wins, the patch adds double-clickable inlay hints, faster SSH connections, and compaction for long-running agent sessions.
Node.js shipped a coordinated security release on October 21, 2026, patching ten vulnerabilities across all three supported lines at once, v26.12.1, v24.22.1, and v22.23.4. Four of those are rated High, headlined by a Brotli decompression flaw (CVE-2026-111497) that enables remote code execution and is easy to trigger since fetch() and Express 5 auto-decompress Brotli responses. The release also carries a second meaning, landing the day Node abandons its two-majors-a-year model in favor of one annual, year-numbered release starting with Node 27. With Node 20 and Node 25 already end-of-life and no fixes coming, teams are urged to upgrade to 22.23.4, 24.22.1, or 26.12.1 and rebuild any container or snapshot that embeds the runtime.
Eleven Linux distros shipped overlapping security patches today, and the same three stories repeat across nearly all of them. PHP's two arbitrary code execution flaws (CVE-2026-109618 and CVE-2026-109619) turned up on Arch, Debian, Fedora, Gentoo, RHEL, Rocky, Slackware, SUSE, and Ubuntu. A compromised eMudhra root CA forced distros to blacklist the emSign ECC Root CA and Comodo AAA entries, though patching only one of the affected stores leaves you half-protected. .NET claims the largest Critical ratings with patches for 8.0, 9.0, and 10.0, while Ubuntu's batch also sneaks in a .NET 11 release candidate inside a normal security update.
Matomo 5.14.2 is core release shipped today, in response to two critical, actively exploited PHP vulnerabilities collectively nicknamed "php2shell." The release closed just two tickets, one flagging vulnerable PHP inside the Matomo UI and another hardening a certificate dependency.
Liquorix 7.2-21 released on October 21, 2026, built on top of stable Linux 7.2.12 with maintainer Steven Barrett's usual low-latency tuning. Its headline change upgrades the compressed-swap system to "zswap v4 and zram v5," folding in four upstream patches that cut lock contention and speed up memory swapping when RAM runs tight. It's deliberately the most conservative of the project's recent builds, stepping away from the experimental MGLRU-FG memory code shipped in 7.2-20. Gamers and multimedia users can install it via a one-line script.
[ Archive ]
