Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-10-29
Today's review roundup spans five very different products, from a $179.99 military-themed Corsair Warthog case to a $400 Thermal Grizzly DeltaMate MPII water block. The Corsair scored on airflow and styling but was held back by pricey GPU cooling, while the Thermal Grizzly block matched the best-in-class Alphacoo despite a platform mismatch. Two input devices took opposing approaches: the Ducky Cushion 98's quiet, cushiony feel won an 87% Recommended rating, but GMK's adjustable TriggerKey keycaps drew criticism for narrow compatibility and no real analog gain. Topping it all off, igor'sLAB gave Fractal Design's Refine 2 gaming chair a strong first impression, though durability remains unproven.
Six major Linux distributions shipped security updates today, with the same X11 library bugs recurring across SUSE, Oracle, and Red Hat advisories. Debian's Firefox ESR picked up a massive 145 CVEs alongside Chromium (52) and OpenJDK 25 (40), all covered by a single apt upgrade. Red Hat flagged eight Critical items led by a certificate trust-stack bug on RHEL 6 ELS and four OpenShift platform releases that need real attention. Meanwhile SUSE's curl update closes 23 CVEs with DPDK topping 8.0, and AlmaLinux packed 16 kernel fixes into one advisory.
Node.js 24.22.2 of its "Krypton" LTS line shipped on October 28, 2026, assembled by core contributor Antoine du Hamel with just six commits. The headline change repairs a crash triggered when Error.stackTraceLimit is set to a huge value, including Infinity, a regression caused by an earlier performance optimization. The same patch also delivers that stack-frame speed-up requested for faster React development, a fix keeping wasm call traces consistent, and a restore of AsyncLocalStorage semantics for parked TransformStream writes. As the latest of three fast 24.x releases, it keeps the LTS branch current ahead of its April 2028 end of life.
D7VK 2.4 released as the project's final feature release before settling into maintenance mode. The update enforces historical early-Direct3D and DirectDraw resolution limits, capping the top "modern" resolution at 1080p, while also reworking Wayland back-buffer handling with a new aspect-ratio-preserving fit-to-screen mode. Its biggest surprise is GXVK, an early-alpha Glide-on-Vulkan port developed by CkNoSFeRaTU that can already run titles like Pandemonium 2. The solo DXVK fork continues to let old Windows games run on Linux, with older Vulkan 1.1 hardware still supported through the DXVK-Sarek port.
Manjaro shipped version 26.1.3 on October 28th, the third point release of its 26.1 "Bian-May" feature series and the latest stable build across its KDE, GNOME, and XFCE editions. The release defaults to the Linux 7.2 kernel since 7.1 reached end of life, while offering a 6.18 LTS build for older hardware. Each desktop got updates worth noting, including Plasma 6.7.5, GNOME 50.5 with a major parental-controls overhaul, and XFCE 4.20. Users should re-enroll their TPM2 after the Mkinitcpio 42 update and rebuild any Python 3.14 AUR packages before installing.
Fedora Linux 45 Candidate RC‑1.4 arrived today as an alternative to RC‑1.3, with both builds viable heading into a make-or-break Go/No‑Go meeting at 17:00 UTC. If it clears the bar, the long-delayed release is set to ship on Tuesday, 3 November 2026. The new build layers targeted fixes for the eMudhra certificate, stratisd encryption, and oo7 bugs that blocked two earlier NO‑GO votes. All RC‑1.4 test results fold back into RC‑1.3 except Stratis, giving QA essentially one shot to validate the final candidate this week.
2026-10-28
Node.js 26.13.0 'Lithium' entered Long Term Support today, adding no new code beyond v26.12.1 but locking in maintenance through the end of April 2029. The line carries the big 26.x features into LTS: the Temporal API enabled by default, a V8 14.6 upgrade, and Undici 8 as the HTTP layer. It also inherits an aggressive October security patch set of ten CVEs, headlined by a Brotli decoder RCE fixed just before Imperva's red team published a "Node2Shell" exploit. Notably, 26 is the last major under Node's old six-monthly schedule, with v27 switching to an annual release model.
BlueOnyx shipped new installation media for its three active RHEL-based control-panel lines, 5210R, 5211R and 5212R, today, a rare nine-day turnaround. The accelerated release closes two critical holes: the "php2shell" PHP remote-code-execution pair (CVE-2026-109618 and CVE-2026-109619) and the PwnEscape guest-to-host VM-escape flaw (CVE-2026-99999). New images bundle patched PHP, patched AlmaLinux kernels and hardened per-site PHP-FPM isolation, so a fresh server starts protected instead of requiring later patching. The same release also overhauls the first-boot experience, fixing installer wizard loops, session-cache bugs and boot-time service failures that used to trip up cold installs.
Microsoft and GitHub released Visual Studio Code 1.144 as a Stable build today, reframing the editor as a hub for coordinating teams of AI agents across machines and clouds. The architectural centerpiece is the new open Agent Host Protocol (AHP) 1.0, which keeps sessions alive through a background process so they carry over between VS Code, the Copilot app, GitHub.com, and the mobile client. Highlights include Copilot Fusion, image generation via GPT Image 2.5 Flare, experimental Computer Use and Working set features, GA assisted permissions, and a long-awaited native Markdown editor, much of it funneled toward paid Copilot subscriptions. The release also pairs a long-delayed UI modernization with a Compact layout option, while Microsoft reassures users that core editing features remain front and center.
Mesa 26.2.6 shipped today with 179 commits from 51 contributors, continuing the stable 26.2 series that launched on August 5. Like every .x bugfix release, it introduces no new features, focusing entirely on patches since 26.2.5. Most of the effort centered on Zink, Mike Blumenkrantz's 40 commits that keep older OpenGL apps running on Vulkan-only hardware, alongside Google's Venus virtual-GPU driver and AMD's RADV/RadeonSI stacks.
Zed Industries released version 1.26.2 today, a weekly patch that bundles Pyrefly, Microsoft's Python language server, as an opt-in built-in option. The release also lets you expand nested variable values directly in debugger hovers and adds DWARF support for debugging WebAssembly sources. On top of the headline features, it ships a long tail of fixes for agent integrations, SSH reconnections, macOS Display P3 color, and cross-platform file handling. Coming just weeks into Zed's steady 1.26 line, the patch nudges the Rust-native editor closer to IDE-grade tooling without sacrificing its speed-focused pitch.
Fedora and SUSE both pushed Chromium to 156.0.8078.47 with 353 CVEs crammed in, making the browser the day's biggest patch. Debian's OpenJDK update carried the heaviest count on its side with 40 flaws, though a regression fix restoring PGP mail is arguably the more useful piece. Fedora, RHEL, Oracle, and the others shipped routine kernel and daemon patches, with one LibreWAN advisory even listing a mismatched CVE that reporters would likely overlook. If you use any of these distros, patch the browsers first, reboot the servers on the kernel rows, and don't skip the Thunderbird fix.
VKD3D-Proton 3.1, the open-source library that lets Windows Direct3D 12 games run on Linux via Vulkan, was tagged on 28 October 2026 by maintainer Hans-Kristian Arntzen. Arntzen describes it as a deliberate "stable" checkpoint rather than a feature drop, existing mainly to set up the larger, riskier v3.2 release. It still lands key modern-DX12 capabilities including opt-in VK_EXT_descriptor_heap support, DXR 1.2 ray tracing, and Shader Model 6.9 with Shader Execution Reordering. The descriptor heap is intentionally held back from the default for now but is expected to enable by default in v3.2, which Arntzen calls "uncharted territory."
VSCodium published 1.143.17232 today, with a one-line patch that repairs broken settings dropdowns introduced by its previous release's UI changes. The tiny fix masks a bigger story: the privacy-focused rebuild deliberately strips Copilot, telemetry, and the "Modern UI" that Microsoft made default in VS Code 1.143. While Microsoft pushes an agent harness by default with no opt-out, VSCodium keeps things model-agnostic, still allowing Claude, Codex, and bring-your-own-key setups. Built from the same MIT source, the two projects now represent opposite philosophies on privacy and user control.
Hyprland maintainer Vaxry released v0.57.0 today, finalizing the project's migration to Lua by completely dropping support for the legacy hyprland.conf file. Anyone still running the old config format must convert to hyprland.lua by hand, since there's no automated converter. The release also adds the long-requested macOS-style window wobble, swappable blur variants, a "scene composition" renderer refactor, and a heavily expanded Lua API, all riding on a fixes list that runs well past a hundred entries. Funded under an exclusive sponsorship deal with the Omacom Foundation, it's the largest Hyprland release to date and a recommended upgrade for anyone already on Lua.
Fedora 45 has shipped its third and final release candidate, RC-1.3, as the last media the Quality team needs to clear before Thursday's Go/No-Go vote. The release has already slipped twice, moving from an October 20 target to a current goal of November 3, 2026. Two accepted blockers tied to headline features, an oo7 account-migration failure and a Stratis encrypted-pool boot problem, are the main remaining hurdle, though most testing has come back green. If RC-1.3 passes cleanly on October 29, the stable Fedora 45 ships on schedule; if not, the deadline slips again.
Today's daily roundup covers 13 reviews, ranging from PC cases and AIO coolers to a portable water purifier, with 8,000 Hz polling now landing on a $89.99 GameSir controller next to a $199.99 Razer. Value brands keep biting at premium's heels, from a €59 t.bone microphone that measurably beats a Sennheiser to the DeepCool LT360 Vision winning KitGuru's three-way AIO test. Meanwhile prices remain stung by the flash shortage, most glaringly in Samsung's $649.99 P9 SSD, while barebones like ASRock's $989.99 NUC and efficient PSUs like FSP's 1000W still earn their keep despite missing parts or mid-pack scores. The bottom line: premium features are trickling down fast, so it's worth checking the value picks before committing to the big-name names.
Scribus released two updates on the same day: 1.6.7 for the stable branch and 1.7.4 for development, both patched against the same seven memory-safety CVEs. The flaws live in the code that loads PSD, PICT, TIFF, DRW, and SVM files and could let a crafted image cause crashes or even arbitrary code execution. The 1.7.4 release additionally carries the long-criticized tables overhaul, right-to-left text improvements, and other features headed for the 1.8 stable release. All fixes came from responsible disclosure by Tristan Madani of Talence Security, and both builds are now available free under the GPL.
Ungoogled-chromium 156.0.8078.73-1 has been released, inheriting Chromium 156's massive 353-fix security haul that's roughly ten times larger than Chrome 155's. The privacy-focused fork strips every dependency on Google web services while keeping the vanilla Chromium experience intact. Most of the fixes are worth caring about, though the trade-off is real: no auto-updater, no Google Sync, and extensions need a manual workaround. You can grab it via the AUR, a PPA, a Flatpak, or Homebrew, but the safest move is still building from source.
KDE shipped Plasma 6.8.2 on Tuesday, October 27, 2026, as the second bugfix update in the current stable series, following the October 14 "30th Anniversary Edition" launch. The release sweeps up several multi-screen regressions, including disappearing desktop icons, wallpaper resets, and the Activity Switcher sidebar stretching wallpapers on non-16:9 panels. It also caps System Monitor chart history at 2,000 data points to prevent a misconfigured widget from freezing the desktop, and hardens KWin against crashes while fixing the built-in RDP server and KPipeWire H.264 encoding. With no new features, it's a low-risk maintenance update best saved for when you're tripping over one of these specific glitches.
[ Archive ]
