Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-10-02
Qubes OS 4.3.2 as a patch build folding in all security fixes and bugs since 4.3.1. It bumps the default Fedora template to Fedora 44 and the rolling kernel-latest to Linux 7.2. Two code-execution bulletins lead the package: QSB-119 in qvm-open-in-vm and QSB-118, the more serious dom0 flaw in qvm-copy-to-vm. If you're still on 4.2, upgrade now since it reached end of life on June 21, 2026.
Simple Taskbar released version 66, codenamed "Advanced Panel Customization." Rather than a new GNOME Shell version, the "V66" tag marks the extension's own 66th major release, which still targets GNOME Shell 48 through 51. The update adds dozens of granular tweaks—like custom app-grid row and column counts, icon progress bars, configurable dock thickness, and pressure-based auto-hide reveal, alongside polish and bug fixes for tray, sleep, and secondary-monitor issues. It's free on GNOME Extensions or Extension Manager, though expect a steep learning curve given how many knobs it puts in your hands.
LibreOffice 26.8.1 shipped on 2 October 2026 as the first minor maintenance release in the 26.8 cycle, bundling roughly 40 bug fixes with no new features. Most of the work targets reading Microsoft Office files more faithfully, fixing DOCX table-of-content links and text alignment, XLSX drawing objects and database ranges, and a PPTX crash that shut Impress shut entirely. The release also steadies text and CSV import across encodings like UTF-16, ISO Latin 1, Chinese and Japanese.
IPFire 2.29 Core Update 204 has reached the testing stage, headlined by a fix for a DNS regression that Core Update's Knot Resolver migration left for VPN users. The build repairs broken name resolution for IPsec, WireGuard, and OpenVPN clients and adds Julio Lira's preemptive anti-phishing ruleset to the Suricata IPS. It's also a routine maintenance pass, rebasing the kernel to Linux 6.18.54, fixing a WireGuard multi-subnet import bug, and sweeping dozens of packages. As always, IPFire wants testers to verify VPN DNS resolution on non-production systems and report findings through its Bugzilla tracker.
Chizhong Jin released v0.15.2 of Nginx CGI, fixing two bugs that could leave requests hung or leak memory. The hang fix resolves an issue where request bodies larger than client_body_buffer_size would stall indefinitely once the in-memory buffer was drained. The memory-safety patch closes a missing null-termination gap in constant cgi_set_var values, a follow-up to work from the previous release. Admins running CGI in production, especially those handling large POST bodies or constant config variables, should upgrade to close both gaps.
Gears of War: E-Day launches October 6, 2026, and early reviews praise its stunning Unreal Engine 5 visuals while flagging a punishing hardware appetite, with only seven GPUs clear 60 FPS at 1080p on Ludicrous settings. TechPowerUp's 35-GPU benchmark shows upscaling and frame generation are effectively required, and NVIDIA's RTX Mega Geometry option excludes much of the installed base by needing 12 GB of VRAM. On the hardware side, the ASRock Challenger 360 Digital AIO earns an 8.9/10 as a standout $89.99 value that tops pricier coolers at moderate noise levels. Finally, the Thrustmaster HOTAS WARTHOG MKII scores a 96% Editor's Award as a polished evolutionary upgrade, though it drops force feedback and twist rudder support.
Noctalia's team released version 5.2.1 as a deliberate step back from the feature sprint, focusing instead on stabilizing a shell that's gone through a fast v5 cycle. The patch lands a small batch of tweaks, notably usage-aware emoji handling and readline-style editing across the launcher, settings, and lock screen. It also ships an extensive fix list covering window-switcher glitches, startup deadlocks, audio suspension, and rendering artifacts worth the update. Two caveats apply: Triad support is dropped and palette JSON now requires the mHover and mOnHover colors, with builds available on most major distros.
MangoWC 0.17.5 has been released as a focused bug-fix release from maintainer DreamMaoMao rather than a feature update. It clears two regressions introduced by 0.17.4: abnormal game mouse behavior when the cursor crosses between monitors, and an inability to exit the compositor when run as a service. These fixes restore the multi-monitor gaming and service-based workflows that 0.17.4 had strengthened through rules like confine_pointer.
Samba Team member Björn Jacke announced 4.23.13 on Thursday, Oct. 1, 2026, as the latest point release of the maintained 4.23 stable branch. The update bundles seven bug fixes spanning file services, SMB3 signing, winbind, CTDB clustering, and Python tooling, including one that closes an out-of-bounds read. It also flagged that the 4.22 series is now end-of-life after 4.25.0 launched on September 24, though 4.23 keeps receiving security backports. Administrators on 4.22 should upgrade, while 4.23 users can safely install the release as-is.
Today's Linux security roundups from eight distros push a wave of updates where browser engines take the biggest hit, led by Debian stuffing 232 CVEs into a single webkit2gtk advisory and SUSE claiming 302 in a kernel update that turns out to be just build headers. Chromium, Thunderbird, and Firefox show up across nearly every bulletin, meaning a hostile webpage or email stays executable until you apply the fix. The real Criticals worth a reboot window include SUSE's Tomcat/libtcnative smuggling patch, Red Hat's Satellite 6.19.5 entry, and Oracle's eight-hole FreeIPA roll on OL10. Most of the hundreds-of-CVE counts are just upstream releases backported and inflated by design, so patch the WebKit and Chromium entries first, then clear the Important items during normal maintenance.
2026-10-01
Ubuntu Linux 26.10 "Stonking Stingray" beta shipped today, with Canonical targeting a final release on Oct. 15. The headline change is Ubuntu's first fully Rust-based coreutils, built on the uutils implementation. The release also folds in Sequoia PGP for memory-safe OpenPGP, splits OpenSSH to cut attack surface, and adds official RISC-V support for SpacemiT K3 and SiFive BigSky boards. As an interim release, 26.10 earns about nine months of free support before its July 2027 end-of-life.
Arch Linux has published its tenth monthly install image of the year, 2026.10.01, a 1.5 GB x86_64 snapshot built around the Linux 7.2.7 kernel. Because Arch is a rolling release, the image is really just a dated capture of the project's repositories, so existing users are told to stay current with a simple pacman -Syu rather than reinstalling. The same ISO bundles archinstall 4.5, which adds aarch64 bootloader support and fixes some long-standing installer annoyances. It arrives as a 24-year-old project with re-elected lead Levente Polyák and a package ecosystem spanning over 64,000 official and AUR entries.
Mesa 26.2.4 shipped October 1 as the fourth bugfix point release in the 26.2 cycle, bringing 103 commits from 41 contributors and deliberately no new features. Led by Samuel Pitoiset's 12 patches and Matt Turner's 11, the update cracks down on crashes, frame corruption, memory leaks, and video-decode faults across AMD, Intel, ARM Mali, Qualcomm, NVIDIA, and software rendering drivers alike. Several fixes target real-world pain points, including a binning workaround for Sunset Overdrive, a HiZ patch for DiRT 4, and a GPU-query fix for UnrealEngine 5.8. It lands near the end of the 26.2 cycle ahead of the 26.3 feature drop, expected around November.
OpenMandriva Lx has released its September 2026 rolling-release snapshot, ROME 26.09, with ISOs dated 2026-09-27/28. The release ships in KDE Plasma 6 (Wayland and X11, plus generic x86_64 and AMD Zen "znver1" builds), GNOME, and a release-candidate LXQt edition. Maintainers say the ISOs passed QA across VirtualBox, QEMU/KVM, and bare-metal hardware, calling them "probably the best ROME Isos we have made in a long time" and safe to upgrade on existing systems.
Apache HTTP Server 2.4.69 and stands out for a surprising reason: it ships with no new CVEs. Instead of chasing freshly patched vulnerabilities, the project focused on proactive hardening, dropping legacy RFC 2069 from its digest-auth rewrite, fixing a data-dropping HTTP/2 GOAWAY bug, and disabling a sensitive status handler by default. The release also ports the project's decades-old Perl test framework to Python and pytest, and adds OpenSSL 4 support plus a pile of smaller crash and protocol-abuse fixes. It's available now for download, requiring APR 1.5.x minimum, with no new features but a welcome return to maintenance-mode stability.
Rust 1.99.0 has been released today, landing in the language's usual six-month release cycle with a feature systems programmers have wanted for years. The headline change lets you finally define C-ABI variadic functions in stable Rust, closing a gap that previously forced developers to rely on inline-assembly shims. Alongside it arrives a batch of upgrades, including raw-pointer memory layout access, a fresh Box::leak recommendation, dozens of standard-library stabilizations, a new Cargo debug profile, and RISC-V Tier 2 support powered by LLVM 23.
Tom's Hardware lands the iBuyPower Slate as a standout mid-range gaming desktop, pairing attractive styling and solid performance with quality peripherals. Two Hall Effect keyboards round out the peripheral picks, IQUNIX's EC75 Shadowblade for a refined 75% build and Razer's Huntsman V3 HE Magnetic Mini for competitive 8KHz gaming. Furniture winners include FlexiSpot's surprisingly capable C3 chair and PCDOCK's easy-to-clean illuminated glass GlowMat. On the internals side, Chieftec's 1200W Stealth PSU and TeamGroup's efficient NV10000 2TB Gen5 SSD both offer smart value without the usual headaches.
Liquorix, the enthusiast Linux kernel, has shipped version 7.2-14, built on upstream Linux 7.2.8 and tagged October 1, 2026. The headline change lets a coupled waker/wakee thread pair alternate across busy cores instead of starving each other on one SMT slot, targeting fully loaded multithreaded systems where no core is idle. A secondary tweak enables VIDEO_INTEL_CVS for broader Intel camera and media support, while security fixes like CVE-2026-43494 get backported from upstream. Install it with the official script across Debian, Ubuntu, and Arch, though builds target AMD64 only.
Python 3.10.22 is the final release of the 3.10 series, which officially goes end of life on October 1, 2026, with no further security updates. The same coordinated drop also shipped 3.11.17, 3.12.15, 3.13.16, and 3.14.8, all built as maintenance releases carrying only bug fixes and security patches. Highlights include hardened tarfile and zipfile handling, a TLS hostname validation fix, a bundled OpenSSL bump to 3.5.9, and a credential-leak seal. If you're still on Python 3.10, the team's advice is simple: upgrade now before an unfixed vulnerability becomes a problem.
A broad wave of Linux security patches rolled out today across Debian, Fedora, Ubuntu, Red Hat, Rocky, Slackware, and SUSE, delivering a heavy multi-distro load rather than one standout critical. Mozilla's Thunderbird and Firefox-ESR dominate the CVE counts, with Debian shipping 62 flaws in Firefox-ESR and 44 in Thunderbird across most of the affected releases. The two fixes that could surprise admins are Debian's Python 3.7 parser, which now treats only ampersands as query separators, and Fedora's ruff and ty, which gained an arbitrary code execution risk when checking untrusted code. Big numbers like SUSE's 108 Chromium CVEs and Ubuntu's 101-CVE Oracle kernel are mostly about staying current, so prioritize the OpenSSL key-recovery and PHP TLS updates and fold the rest into normal maintenance.
[ Archive ]
