Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-10-16
The GNOME Project launched GNOME OS Preview, a new edition of its self-built Linux distro aimed at non-developer early adopters. Unlike the older Nightly image, Preview freezes GNOME OS to the latest stable release, GNOME 51.1, so it tracks the same versions shipped in Fedora and Ubuntu. It's an immutable, image-based system assembled with BuildStream and managed by systemd-sysupdate, running alongside the classic Nightly build. Though it's still early-stage and not promised for perpetuity, it represents the closest GNOME has come to shipping a complete, stock Free Software desktop built entirely on its own infrastructure.
X.Org's security team published a coordinated advisory covering 17 memory-safety flaws across libX11 1.8.14, libXi 1.8.4, libXpm 3.5.20, libXrender 0.9.13, and libXtst 1.2.6. The bugs all follow the same pattern: a malicious or compromised X server sends a crafted reply that the client library trusts without validating length fields, leading to out-of-bounds reads, heap overflows, or denial of service. Most were discovered by AISLE's AI-native scanning platform, while the most severe write bugs came through Trend Micro's Zero Day Initiative and maintainer Adam Bedard. Update to the fixed versions as soon as they reach your distro, though exploitation generally requires a hostile display server and often some user interaction.
SQLite 3.54.1 as a patch built on the 3.54.0 feature release from a week earlier. The headline fix addresses a possible heap-buffer overflow, but only on 32-bit builds—64-bit users are unaffected and benefit automatically once they update. The release also bundles assorted user-reported regressions from the 3.54.0 line, with the full commit trail available in SQLite's online check-in timeline.
KDE released Plasma 6.6.7 today, marking the first bugfix update in what's now a genuine three-year LTS track. Unlike earlier LTS attempts, this branch is backed by the Bullet-Proof KDE Initiative, funded by Kubuntu Focus and implemented by Techpaladin Software with over $100,000 over three years. The update fixes bugs across KWin, Discover, Klipper, and the screen locker, plus adds Intel A380 GPU monitoring. Support covers Plasma 6.6, KDE Frameworks 6.24, and KDE Gear 25.12, the exact versions shipped with Kubuntu 26.04 LTS.
Valve has shipped SteamOS 0.5.6 to the Steam Frame's beta channel, headlined by the ability to sideload Android apps with a simple right-click in Desktop mode, no cable or PC required. A parallel stable client update improves streaming reliability, fixing pairing issues, adapter sleep, and a driver crash. Lepton still lacks hardware video decoding, so video-heavy apps may rely on software decoding for now. The build follows Valve's usual pattern of beta features graduating to a general release, arriving just weeks after the headset's September launch.
SUSE just closed 110 vulnerabilities in a single SUSE Linux Enterprise 15 SP5 kernel update, the biggest single bump of the day. The week's only Critical ratings both point at the idm:DL1 identity-management module on RHEL 8 and Rocky Linux 8, with Oracle's lone Critical landing on 389-ds-base for OL7. Debian spent most of its bullets on browsers, shutting roughly 59 CVEs in firefox-esr and 37 in Chromium, while Oracle leaned on raw volume across its kernel and Thunderbird updates. Ubuntu wrapped up with three notices, including a reboot-required Azure kernel change on 16.04 LTS and a 12-issue RabbitMQ fix spanning 16.04 through 26.04.
Today's eleven reviews across nine categories have the consistent message was that you can still buy flagship features on a budget, but building anything has grown more expensive as DRAM and GPU costs keep climbing. Picks like the PCSpecialist Noble Extreme prebuild, Alienware's budget-friendly OLED, and Formlabs' consumer printer led the pack, while the cheapest options in each category carried real tradeoffs like short warranties or easily-scratched finishes. Software has quietly become the differentiator, with ecosystems from Corsair, Lofree, and EDIFIER now pulling as much weight as the raw specs.
Fedora has declared Fedora 45 Final a "NO-GO" because no suitable release candidate was available to test, leaving QA with nothing to grade. The announcement came from Operations Architect Aoife Moloney on the devel-announce mailing list on Thursday, October 15. With the original October 20 GA date abandoned, the project is now chasing a new target of October 27, with November 3 as a fallback, and the next Go/No-Go meeting is set for October 22. Unlike past Fedora NO-GOs that stemmed from open blocker bugs, this delay was a "NO-GO by default" with no candidate published at all, so users should hold off installing until the schedule confirms a shipable build.
XanMod shipped two tuning-kernel builds 6.18.57-xanmod1 and 7.2.11-xanmod1. Both are drop-in kernels for x86-64 Debian-based systems, letting you choose between the long-horizon stability of the LTS tree or the bleeding-edge features of the current mainline series. XanMod also maintains a companion NVIDIA driver repo, cautions that DKMS modules can lag the newest kernels by weeks, and already shipped an RT build earlier in the month.
Godot 4.8 Beta 1 shipped on October 15, 2026, pushing the free, open-source engine into feature freeze and its final testing phase ahead of a Q4 2026 stable release. The beta centers on regression hunting rather than new features, with 340 contributors already submitting 1,523 fixes since 4.7 went stable. Graphics and editor work stand out most, adding multi-bounce ambient occlusion, screen-space contact shadows, mip-level texture streaming, and a dockable, better-organized editor with community-requested symbol renaming. Developers should note the .NET builds now require .NET 10, plus a handful of breaking changes across core, GDScript, and input handling.
Rust's release team shipped 1.99.1 on October 15, 2026, clearing three serious regressions that had slipped into last month's stable release, 1.99.0. Two of the bugs are critical: a silent FFI bool miscompilation on x86_64 that returned garbage instead of clean booleans, and a macOS linker failure where rust-lld couldn't find libLLVM.dylib when invoking rustc directly. A third, rated high, caused link errors on UEFI targets due to a missing wcslen symbol born from a narrow code backport. All three were diagnosed and fixed in about two weeks, so simply running rustup update stable brings you up to date.
Devolutions released UniGetUI 2026.3.2 on October 15, and its headline feature is a new experimental Software Catalog that lets administrators build a curated list of approved software users can install with one click. The update also adds drag-and-drop sidebar reordering, a macOS Liquid Glass look, and small usability wins like scroll-position retention and better screen-reader announcements. Most practically, it fixes a bug that let pip updates corrupt Python environments by serializing those operations, alongside fixes for PowerShell module uninstalls, Chocolatey admin elevation, and several crashes. Built in about a week by six contributors, the release is the first major product milestone under Devolutions' 2026 acquisition and sits comfortably past the CVE-2026-10696 package-correlation fix from 2026.2.1.
Shelly ALPM 3.1.7, released today by Seafoam Labs, introduces RLPM, a native Zig reimplementation of Arch's libalpm that can dispatch package operations alongside the original library. Written under lead engineer Zoey Bauer, RLPM handles the full ALPM workflow while still letting users fall back to libalpm, though the authors openly admit complete compatibility remains unfinished. The project reached well beyond early adopters after CachyOS made Shelly its default GUI package manager in April 2026, amplifying RLPM's impact across a large out-of-the-box user base. With safety features like sealed memfd archives, Landlock/seccomp sandboxing, and openat2 path confinement, Shelly pairs an aggressive rewrite arc with surprisingly honest calls about its own limits.
Faugus Launcher 2.5.0 shipped on October 15, 2026, packing a batch of quality-of-life tweaks rather than any game-changing features. The headline additions are interface navigation sounds, an option to strip out cover art and banners, and a Proton Manager that now tracks the "Latest" builds. Under the hood, it reworks Prevent Sleep for broader system support, sheds its python-dbus dependency, and adds an Ubuntu 26.10 PPA build alongside a pile of bug fixes. The Linux game launcher keeps churning out monthly releases in a market already crowded by Lutris, Heroic, and Bottles.
2026-10-15
Osy, the developer behind UTM, has shipped v0.4 of Triton, the first fully open-source DirectX 11 graphics driver that runs inside QEMU/KVM. Rather than faking the API like DXVK, Triton implements the real DirectX Device Driver Interface, letting Windows talk to a legitimate WDDM driver and giving every guest app real acceleration. The v0.4 release on October 15, 2026, adds three kernel-mode fixes, a use-after-free reference-counting patch, synchronous host mapping for blob windows, and EDID-derived refresh rates, though osy warns the drivers are still unstable. Demonstrated running Crash Bandicoot: The Trilogy and a full 3DMark Fire Strike in a Windows 11 ARM64 guest, the project was also built largely with Anthropic's Claude models, drawing sharp debate about AI-assisted systems programming.
Simple Taskbar, a feature-heavy GNOME Shell extension by maintainer Sultech, has reached version 70 with a new Windows 10 theme as its headline addition. The October 15, 2026 release also adds running-app buttons to the plain panel, a fullscreen-revealing auto-hide mode, and a long list of bug fixes. The project grew from its July 19 creation to 70 releases in roughly three months, one tagged update about every four to five days, and sits at around 155 GitHub stars and 9,300 downloads. It's a privacy-first, telemetry-free tool for users who want a real taskbar without abandoning GNOME's own panel logic.
The open-source rescue tool Antivirus Live CD released version 53.0-1.5.4 today, built on a rebuilt 4MLinux base. Its newest ClamAV patch shuts eight vulnerabilities living in the exact ZIP, PDF, PE, and archive parsers that rescuers hit most often. It boots without an OS, mounts Windows and Linux partitions alike, and runs lean on about 1 GB of RAM. The project remains free under GPLv3, with the full STABLE release still targeted for November 2026.
Noctalia, the independent MIT-licensed Wayland desktop shell, released v5.3.0 today, continuing its rapid cadence since reaching stable. The headline change is a redesigned launcher that keeps the old minimal layout as a "simple" mode, alongside deeper bar, dock, and desktop personalization like per-monitor docks and media-artwork backgrounds. More distinctively, the build hardens security by stopping the built-in calculator from running programs or reading files and keeping revealed passwords out of the clipboard and undo history. The shell, which now brands itself as part of the "Noctalia Family" with Umbriel and Greeter, remains a toolkit-free C++ alternative for slimmer Wayland stacks.
Apache NetBeans 32 RC1 has been released today, landing exactly on the project's feature-freeze date and tagging the build as 32-rc1. The candidate packs 196 commits across 2,246 files from 19 contributors, with standout work in Gradle 9.8.0, JDK 27 Maven fixes, a new JavaFX FXML library, and signed Git commits over SSH. It also deepens JDK 27 compatibility, moves bundled Tomcat to 11.0.26, and modernizes a chunk of security dependencies. If the Apache release vote passes cleanly, the final NetBeans 32 is slated for the November 15–30 window.
PostgreSQL 19 RC 1 shipped today as the first candidate toward a November 19 GA date, packing roughly 200 new features. The headline additions include a native REPACK CONCURRENTLY command, parallel autovacuum, online logical replication, and a new WAIT command for read-your-writes on standbys. But the upgrade isn't a no-op: JIT is now off by default, TOAST compression flips to LZ4, RADIUS support is gone, and a few compatibility landmines like btree_gist inet/cidr indexes can block a clean pg_upgrade. RC 2 lands November 12 and GA is targeted for November 19, so test before you move.
Greg Kroah-Hartman signed off on four LTS kernels, 6.6.159, 6.1.190, 5.15.223 and 5.10.272, each carrying the same small set of backported networking and security fixes. The updates close a TCP use-after-free, harden IPv4 checksum validation and restore SCTP traffic through nfnetlink_queue, clearing the thresholds of Canadian advisory AV26-970. Two of the branches, 5.10 and 5.15, sit just two months from end of life on December 31, 2026, intensifying migration pressure for Ubuntu 22.04 and RHEL 9 users. The other two, 6.1 and 6.6, remain safe through the end of 2027, making this a planning window rather than a panic.
Ubuntu Linux 26.10 "Stonking Stingray" released today, as an interim build supported for nine months until July 2027. The release centers on security, trimming the signed GRUB to shrink the boot attack surface and completing a full migration of core utilities to Rust. On the desktop, it brings GNOME 51 and Myna, an opt-in on-device speech-to-text tool, while dropping WEP Wi-Fi support entirely.
Three Linux kernel point releases, 7.2.11, 6.18.57, and 6.12.113, has been released today, within minutes of each other and signed off by Greg Kroah-Hartman. All three carry the same shared fixes for the Steam controller driver, sched_ext, AMD display, and the CAN subsystem, but each branch also brings its own standout patches. The newest LTS (6.18.57) leads with a fix for the XFS "refluxfs" data-corruption bug and s390 zcrypt memory-disclosure hardening, while 6.12.113 includes a netfilter fix that stops OpenWrt routers from dropping WiFi after ~300 seconds. The updates also carry "Assisted-by: Claude" tags, underscoring how AI-assisted review has become routine, and the advice is the same as always: patch the branch you run and reboot.
Mango, the wlroots-based Wayland compositor billed as "dwm but for Wayland," has shipped version 0.18.1 on 15 October 2026, just six days after its feature-heavy 0.18.0 release. The patch adds right-click-to-close in monocle mode and a smarter client-kill dispatcher while trimming GPU cost from its blur path and simplifying config syntax by dropping required double quotes. A dozen bug fixes round out the update, including a fix for the classic quirk where Alt+Space pauses Chrome and corrections for Electron rendering glitches in the overview. With nearly 3.8k GitHub stars and a brisk weekly release cadence, Mango continues to position itself as a lightweight alternative to heavier compositors like Hyprland.
Seven Linux distros rolled out security updates this week, led by SUSE's Critical WebKit2GTK3 patch packing 233 CVEs and pushing the package to 2.54.1. Debian and Ubuntu came hot on the heels of that haul, with Firefox ESR absorbing 59 CVEs and curl plus Bind stacking up 27 and 24 respectively. Exim tops Fedora's October 15 batch with RCE and SMTP smuggling fixes, while Red Hat, AlmaLinux, and Rocky round out a heavy round of kernel, domain-controller, and package patches. The practical advice is to patch the remote-facing stack first, curl, Bind, and exim before everything else—rather than reacting to severity badges alone.
Six new reviews landed today, and four of them make the case for buying the less-expensive version of something premium. ID-Cooling's $50 Frozn A620 SLK delivers dual-tower cooling in a slim chassis, MSI's $749.99 34-inch QD-OLED wins an Editor's Choice award, and KEMOVE's sub-£100 K94 keyboard packs enthusiast features that rival far pricier boards. The standouts include Warhammer 40,000: Boltgun 2, a four-out-of-five boomer-shooter worth the price of a takeout coffee. The Welax S9 Pro chair and Lian Li's L-shaped EG0850Gv2 PSU are the notable misfires, offering adjustability and silence but stumbling on build quality and raw electrical performance.
Visual Studio Code 1.142 quietly makes the Copilot agent harness the default for new sessions and auto-migrates enterprise workspaces that use sandboxing or permissions. The update introduces preview Canvases for co-editing artifacts with agents and lets you move a chat between folders and Git worktrees without rebuilding its context. Smaller upgrades include a substantially expanded Markdown editor, harness names in chat titles, background shell controls, and a redesigned model picker. Taken together, the release cements Microsoft's strategy of steering developers toward its own SDK runtime while leaving third-party harnesses like Claude and Codex as opt-in alternatives.
Heroic Games Launcher released version 2.22.4 today, a terse little hotfix that resolves two real headaches: a broken GOG login triggered by GOG's Cloudflare anti-bot check, and native Linux games being silently rerouted through Proton/UMU. The GOG fix matters most, since a failed sign-in disables library syncing, cloud saves, and deal browsing for one of the launcher's three core stores. It also quietly adds ARM64 Flatpak build support, stops Heroic from chmod-ing native binaries on exit, and rolls in fresh translation updates across 40-plus languages. With these issues cleared, the release wraps up a rocky 2.22 series and clears the runway for Heroic's next major update, which is expected to deepen its itch.io, Humble Bundle, and Steam integrations.
[ Archive ]
