Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-09-26
Valve shipped SteamOS 3.9.2 Beta to the Steam Deck and Steam Machine, bundling every change since the stable 3.8 release. This 3.9 line is among the OS's heaviest updates yet, adding a new desktop environment, a Linux 7.2 kernel rebase, and a steamos- to holo- package rename. A separate SteamOS 0.4.1 Beta for the Steam Frame VR headset followed on September 26, paired with a matching Steam Client update.
Ondřej Surý's sury.org repository has repackaged four PHP security releases for Debian and Ubuntu users: 8.5.8, 8.4.26, 8.3.35, and 8.2.34. Three shipped on 24 September 2026, while 8.5.8 had already gone out on 2 July, so it has been sitting in the repos for a couple of months. All four are tagged as security releases, with many flaws facing the network and 8.4.26 carrying at least eleven assigned CVEs. Debian and Ubuntu admins can patch their systems through a standard apt upgrade.
Six Linux distributions shipped security updates today, with the biggest priorities being a DNS resolver called unbound and major browser patches. Unbound earned Critical ratings across three distros due to remote code execution and DNSSEC flaws that can expose entire networks. The browser bomb came from SUSE (63 vulnerabilities in Firefox ESR), Thunderbird (44 CVEs on AlmaLinux), and Debian's Chromium (108 CVEs), all driven by use-after-free and privilege-escalation bugs. Patch your resolver and browser first, then work through the smaller, more surgical advisories in the coming maintenance window.
GNOME released version 50.5, a deliberately "boring" bugfix update for the GNOME 50 "Tokyo" branch. The release packs in three notable security patches, including a gvfs privilege fix (CVE-2026-88924), a librsvg use-after-free flaw, and Epiphany injection and path-traversal fixes. Beyond security, GNOME Shell now enforces screen-time limits by refusing to unlock the screen once a limit is reached, while Mutter and GDM fix display, compositor, and login-session bugs. Since GNOME 51 is already stable, 50.5 extends the supported lifespan of GNOME 50 for distros that haven't yet upgraded.
Faugus, the open-source launcher that runs Windows games on Linux through UMU-Launcher, has released version 2.4.2 with a custom color picker for the Overview panel and app background. The update also trims the Flatpak build by dropping an unnecessary Wine dependency and bumping to GNOME 51, while fixing a broken "Stop" button and a system tray working-directory bug. Notably, the project moved fast, shipping 2.4.0 through 2.4.2 in a single week after 2.4.1 was forced to rework its backup notifications to pass a Flathub review. It's available as an AppImage, AUR package, RPM, deb, or via Flatpak, with the .deb format proving the most popular download so far.
Debian 14, codenamed "forky," has opened its official call for desktop artwork proposals, with the deadline set for November 26, 2026. The Debian Desktop Team re-sent the July 12 notice after it failed to reach the wider announce list and pushed the deadline out roughly two months. The winning theme would appear across the boot splash, login manager, wallpaper and installer branding. Forky is shaping up as a landmark release, being the first to mandate reproducible builds and add LoongArch64 as an official architecture.
PeaZip 11.3.0 shipped today as a security-focused release from developer Giorgio Tani that the project explicitly recommends you upgrade to. The biggest change makes a master password mandatory for the built-in Password Manager, closing a hole where stored credentials went unprotected. It also brings improved ZPAQ handling for encrypted archives, a new "Open With" picker behind Shift+F12, two new Blue-themed looks, and updated 7z/p7zip and PEA backends. You can grab it now from GitHub and SourceForge, or via Flathub on Linux — just download from the official repos and verify the SHA-256 hashes.
Five hardware reviews published in today's roundup, which spans a Strix Halo mini PC, a "world's fastest" gaming laptop, an AM5 Mini-ITX board, and two power supplies. Across them, bold marketing claims falter under bench scrutiny, from GIGABYTE's title narrowly edged by MSI to a Gamdias "Platinum" PSU measuring like Silver. Value emerges as the recurring battleground, with the $3,099 BOSGAME M5 winning on speed-per-dollar while the $270 ASUS B850I and Gamemax 750G get dinged for pricing. The takeaway is consistent: trust the test bench over the spec sticker before you buy.
XanMod shipped two new kernel builds on September 25, 2026, with 7.2.8-xanmod1 tracking the mainline 7.2 series and 6.18.54-xanmod1 following the 6.18 long-term-support line. Both mirror Greg Kroah-Hartman's upstream point releases of the same week and arrive together, letting enthusiasts grab the newest features or servers pull a more stable build. The dominant theme across both changelogs is security hardening, especially a major round of fixes to the SMB/CIFS client, along with Wi-Fi, IPsec, XFS, btrfs, and AMDGPU updates. Maintained by Alexandre Frade since 2015, the kernels install via a single apt install on supported Debian- and Ubuntu-based systems.
Shelly ALPM, the visual GTK4 package manager for Arch Linux from Seafoam Labs, shipped two releases in under 24 hours, starting with the feature-rich v3.1.5 on September 25. That release adds an optional Atoll-powered AUR browser, a shelly build --install command that chains dependency fetching, building, and installing into one step, and new repo-db tools for maintaining private repositories. The build system also gets broad compatibility fixes for tricky packages like snapd, CUPS, and Heroic, plus predictable PATH handling and new build.extra_path and build.env settings. A next-day v3.1.6 patch followed on September 26 with a single fix for a UI bug that called the wrong CLI command to fetch data.
2026-09-25
The Fedora RISC-V community published non-official Server, Cloud, and Container Beta images for Fedora 45 on September 25, giving developers a way to test the OS on real RISC-V hardware. The Server builds come in two flavors: a stable "Generic" kernel close to upstream and the broader "Omni" kernel that supports more boards at the cost of less-tested code. These images remain community-contributed rather than officially supported, so they're aimed at testing and building packages rather than production servers. If you've got a board like the VisionFive 2 sitting around, you can download them from Fedora's public infra and boot via QEMU or physical hardware.
Two Linux kernels have been released today. Kernel 7.2.8 bringing roughly 438 commits and LTS 6.18.54 around 397. Both are bug-fix and security backports led by Greg Kroah-Hartman, with the latest 6.18.54 supported until December 2028. The biggest changes target SMB/CIFS networking hardening, AMD GPU and IPsec fixes, and improved wireless and filesystem reliability.
A wave of distro security advisories landedtoday, and the same cluster of flaws is showing up across AlmaLinux, RHEL, Oracle Linux, Rocky Linux, and SUSE. The most urgent target is unbound, which received Critical ratings for DNSSEC remote code execution on nearly every major distribution. Fedora's webkitgtk 2.54.0 jump quietly fixed hundreds of ANGLE and Skia CVEs on top of its listed 26 WebKit bugs. If you run a DNSSEC resolver or a Chromium-based browser on any of these distros, point your patch commands at those two first.
VS Code 1.139.1 shipped on September 25, 2026 as a patch release, so the remote agent sessions and faster session lists you may have seen advertised had already arrived in 1.139. Only one of its four commits changes product behavior, fixing how managed settings behave when a server refresh fails. Before the patch, a failed refresh silently dropped enterprise policy controls for as long as the gap lasted, leaving restrictions quietly lifted every hour. The remaining three commits are release housekeeping: a version bump, a merge, and a skip for a flaky Linux test whose real fix sits on main.
Mageia 9 reached end of support on 30 September 2026, ending all security updates and patches for the ninth release of the community-run Linux distribution. The announcement, posted 25 September 2026 by contributor joselp on the official Mageia Blog, asked users to migrate to the current stable release, Mageia 10. Since unsupported releases stop receiving security advisories, devices still on 9 will remain exposed to any newly found vulnerabilities, especially servers. Users can upgrade in place through the system-tray tool or command line, or perform a clean install while being careful to back up any data first.
Amethyst Mod Manager 2.5.2 as a focused bug-fix release from independent developer ChrisDKN. The main fix repairs meson build files that were overlooked in 2.5.1 and would have broken collection installs, a core feature. Additional patches address UI scaling on handhelds like the Steam Deck, text legibility under certain themes, and regressions in the RDR2 and BSA/BA2 handlers.
The GMKtec Evo-X3 is the standout of today's reviews roundup, packing a Strix Halo chip and 128GB of unified memory into a mini PC that Tom's Hardware crowned its best AI machine, though $3,799.99 doubles its predecessor's price amid a market-wide RAM shortage. ASRock is making value headlines on two fronts: the X870E Challenger Wi-Fi White earns an Editors' Choice at $229 with flagship features, while the older X870 Challenger WiFi drops to just $170 at the cost of shared M.2 and USB4 lanes. On keyboards, the EPOMAKER HE75 V2 TMR takes Funky Kit's Editors' Choice at $129.99 with a versatile magnetic-mechanical hybrid design, beating out the faster but overpriced Razer Huntsman V3 Pro Low-Profile at €259.99. Meanwhile the MSI PRO B550M-P (2026) refreshes AM4 at $74.99 for budget rebuilders, and TechPowerUp's 35-GPU benchmark reveals Silent Hill: Townfall's lack of Intel XeSS and frame generation leaves AMD/Intel users needing DLSS or FSR.
Remi Collet refreshed his remi RPM repository on 25 September 2026, shipping patched PHP 8.5.11, 8.4.26, 8.3.35, and 8.2.34 for RHEL-family systems. The rebuild addresses a security cycle covering ten CVEs, including an FPM IPv6 ACL bypass, a TLS hostname-verification fallback, and cross-origin credential leaks, and Remi rates the update as strongly recommended. Packages are available in the remi-modular repository for RHEL 8 through 10 and Fedora 43 and up, built for both x86_64 and aarch64. Admins should verify the patched string across every SAPI after upgrading, and those still on the end-of-life PHP 8.1 should migrate to a supported branch.
openSUSE Leap 16.1 has entered its Release Candidate phase and is targeting a November 2026 general availability date. The project is running roughly a week behind its own roadmap but has no known release blockers as it produces about one build per week. The update brings major bumps across the stack, including KDE Plasma 6.6.4, QEMU 11, MariaDB 12, PHP 8.5, and LLVM 21. Most notably, Leap 16.1 will ship the same day as SLES 16.1, so users get enterprise-grade security patches immediately rather than waiting for a separate community update.
Faugus Launcher 2.4.1 has been released. The lightweight GTK4 app wraps the open-source UMU-Launcher to run Epic, GOG, and standalone non-Steam games on Linux without a terminal. Its main upgrade is a from-scratch backup system that lets you save individual games, prefixes, shortcuts, and Proton builds, plus layout tweaks, tabbed Settings, and per-game logging. Install 2.4.1 over 2.4.0 anyway since it's the version that actually cleared the store's review.
Samba 4.25.0 shipped as the first stable release of the new 4.25 series, opening the feature track for new deployments. The headline addition is experimental SMB3 persistent handles, which let clients keep open file handles valid after a server restart or outage to support transparent failover for VM storage and clustered databases. The release also adds a cluster functional level for safe rolling upgrades, cluster-wide rate limiting via a new ratelimitd daemon, and a Ceph RGW module that exports object storage buckets as SMB shares. Finally, AES encryption becomes the default for domain authentication under CVE-2026-20833, though the persistent handles remain experimental, carrying real performance costs and POSIX/NFS interoperability trade-offs.
Ungoogled Chromium 154.0.8037.57-1 has been released on top of Chromium 154.0.8037.57, the point release Google pushed to its stable channel two days earlier. That Chromium build carries an unusually large 108 security fixes, including a spread of Critical flaws in the GPU, graphics stack, and memory handling. The project strips out Google's web-service dependencies using a domain-substitution trick that reroutes every known Google domain to a dead qjz9zk address, though it keeps Safe Browsing off by default.
Goverlay 1.9.3 shipped today, adding native ReShade support to the popular open-source Linux gaming tool that wraps MangoHud, vkBasalt, and upscalers behind a clean GUI. The release also overhauls the bgmod launch wrapper to remove stray logs, preserves proxy DLLs, and fixes a Steam hang, while a new "Tweaks" tab manages per-game launch arguments. Maintainer Benjamim Gois, working with community contributors, tied the fixes directly to filed issues, closing requests on custom variables, launch commands, and ReShade duplicate effects.
[ Archive ]
