Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-10-28
Node.js 26.13.0 'Lithium' entered Long Term Support today, adding no new code beyond v26.12.1 but locking in maintenance through the end of April 2029. The line carries the big 26.x features into LTS: the Temporal API enabled by default, a V8 14.6 upgrade, and Undici 8 as the HTTP layer. It also inherits an aggressive October security patch set of ten CVEs, headlined by a Brotli decoder RCE fixed just before Imperva's red team published a "Node2Shell" exploit. Notably, 26 is the last major under Node's old six-monthly schedule, with v27 switching to an annual release model.
BlueOnyx shipped new installation media for its three active RHEL-based control-panel lines, 5210R, 5211R and 5212R, today, a rare nine-day turnaround. The accelerated release closes two critical holes: the "php2shell" PHP remote-code-execution pair (CVE-2026-109618 and CVE-2026-109619) and the PwnEscape guest-to-host VM-escape flaw (CVE-2026-99999). New images bundle patched PHP, patched AlmaLinux kernels and hardened per-site PHP-FPM isolation, so a fresh server starts protected instead of requiring later patching. The same release also overhauls the first-boot experience, fixing installer wizard loops, session-cache bugs and boot-time service failures that used to trip up cold installs.
Microsoft and GitHub released Visual Studio Code 1.144 as a Stable build today, reframing the editor as a hub for coordinating teams of AI agents across machines and clouds. The architectural centerpiece is the new open Agent Host Protocol (AHP) 1.0, which keeps sessions alive through a background process so they carry over between VS Code, the Copilot app, GitHub.com, and the mobile client. Highlights include Copilot Fusion, image generation via GPT Image 2.5 Flare, experimental Computer Use and Working set features, GA assisted permissions, and a long-awaited native Markdown editor, much of it funneled toward paid Copilot subscriptions. The release also pairs a long-delayed UI modernization with a Compact layout option, while Microsoft reassures users that core editing features remain front and center.
Mesa 26.2.6 shipped today with 179 commits from 51 contributors, continuing the stable 26.2 series that launched on August 5. Like every .x bugfix release, it introduces no new features, focusing entirely on patches since 26.2.5. Most of the effort centered on Zink, Mike Blumenkrantz's 40 commits that keep older OpenGL apps running on Vulkan-only hardware, alongside Google's Venus virtual-GPU driver and AMD's RADV/RadeonSI stacks.
Zed Industries released version 1.26.2 today, a weekly patch that bundles Pyrefly, Microsoft's Python language server, as an opt-in built-in option. The release also lets you expand nested variable values directly in debugger hovers and adds DWARF support for debugging WebAssembly sources. On top of the headline features, it ships a long tail of fixes for agent integrations, SSH reconnections, macOS Display P3 color, and cross-platform file handling. Coming just weeks into Zed's steady 1.26 line, the patch nudges the Rust-native editor closer to IDE-grade tooling without sacrificing its speed-focused pitch.
Fedora and SUSE both pushed Chromium to 156.0.8078.47 with 353 CVEs crammed in, making the browser the day's biggest patch. Debian's OpenJDK update carried the heaviest count on its side with 40 flaws, though a regression fix restoring PGP mail is arguably the more useful piece. Fedora, RHEL, Oracle, and the others shipped routine kernel and daemon patches, with one LibreWAN advisory even listing a mismatched CVE that reporters would likely overlook. If you use any of these distros, patch the browsers first, reboot the servers on the kernel rows, and don't skip the Thunderbird fix.
VKD3D-Proton 3.1, the open-source library that lets Windows Direct3D 12 games run on Linux via Vulkan, was tagged on 28 October 2026 by maintainer Hans-Kristian Arntzen. Arntzen describes it as a deliberate "stable" checkpoint rather than a feature drop, existing mainly to set up the larger, riskier v3.2 release. It still lands key modern-DX12 capabilities including opt-in VK_EXT_descriptor_heap support, DXR 1.2 ray tracing, and Shader Model 6.9 with Shader Execution Reordering. The descriptor heap is intentionally held back from the default for now but is expected to enable by default in v3.2, which Arntzen calls "uncharted territory."
VSCodium published 1.143.17232 today, with a one-line patch that repairs broken settings dropdowns introduced by its previous release's UI changes. The tiny fix masks a bigger story: the privacy-focused rebuild deliberately strips Copilot, telemetry, and the "Modern UI" that Microsoft made default in VS Code 1.143. While Microsoft pushes an agent harness by default with no opt-out, VSCodium keeps things model-agnostic, still allowing Claude, Codex, and bring-your-own-key setups. Built from the same MIT source, the two projects now represent opposite philosophies on privacy and user control.
Hyprland maintainer Vaxry released v0.57.0 today, finalizing the project's migration to Lua by completely dropping support for the legacy hyprland.conf file. Anyone still running the old config format must convert to hyprland.lua by hand, since there's no automated converter. The release also adds the long-requested macOS-style window wobble, swappable blur variants, a "scene composition" renderer refactor, and a heavily expanded Lua API, all riding on a fixes list that runs well past a hundred entries. Funded under an exclusive sponsorship deal with the Omacom Foundation, it's the largest Hyprland release to date and a recommended upgrade for anyone already on Lua.
Fedora 45 has shipped its third and final release candidate, RC-1.3, as the last media the Quality team needs to clear before Thursday's Go/No-Go vote. The release has already slipped twice, moving from an October 20 target to a current goal of November 3, 2026. Two accepted blockers tied to headline features, an oo7 account-migration failure and a Stratis encrypted-pool boot problem, are the main remaining hurdle, though most testing has come back green. If RC-1.3 passes cleanly on October 29, the stable Fedora 45 ships on schedule; if not, the deadline slips again.
Today's daily roundup covers 13 reviews, ranging from PC cases and AIO coolers to a portable water purifier, with 8,000 Hz polling now landing on a $89.99 GameSir controller next to a $199.99 Razer. Value brands keep biting at premium's heels, from a €59 t.bone microphone that measurably beats a Sennheiser to the DeepCool LT360 Vision winning KitGuru's three-way AIO test. Meanwhile prices remain stung by the flash shortage, most glaringly in Samsung's $649.99 P9 SSD, while barebones like ASRock's $989.99 NUC and efficient PSUs like FSP's 1000W still earn their keep despite missing parts or mid-pack scores. The bottom line: premium features are trickling down fast, so it's worth checking the value picks before committing to the big-name names.
Scribus released two updates on the same day: 1.6.7 for the stable branch and 1.7.4 for development, both patched against the same seven memory-safety CVEs. The flaws live in the code that loads PSD, PICT, TIFF, DRW, and SVM files and could let a crafted image cause crashes or even arbitrary code execution. The 1.7.4 release additionally carries the long-criticized tables overhaul, right-to-left text improvements, and other features headed for the 1.8 stable release. All fixes came from responsible disclosure by Tristan Madani of Talence Security, and both builds are now available free under the GPL.
Ungoogled-chromium 156.0.8078.73-1 has been released, inheriting Chromium 156's massive 353-fix security haul that's roughly ten times larger than Chrome 155's. The privacy-focused fork strips every dependency on Google web services while keeping the vanilla Chromium experience intact. Most of the fixes are worth caring about, though the trade-off is real: no auto-updater, no Google Sync, and extensions need a manual workaround. You can grab it via the AUR, a PPA, a Flatpak, or Homebrew, but the safest move is still building from source.
KDE shipped Plasma 6.8.2 on Tuesday, October 27, 2026, as the second bugfix update in the current stable series, following the October 14 "30th Anniversary Edition" launch. The release sweeps up several multi-screen regressions, including disappearing desktop icons, wallpaper resets, and the Activity Switcher sidebar stretching wallpapers on non-16:9 panels. It also caps System Monitor chart history at 2,000 data points to prevent a misconfigured widget from freezing the desktop, and hardens KWin against crashes while fixing the built-in RDP server and KPipeWire H.264 encoding. With no new features, it's a low-risk maintenance update best saved for when you're tripping over one of these specific glitches.
2026-10-27
Faugus Launcher 2.5.3 is a performance- and quality-of-life update for the open-source Linux game launcher that runs Windows and native games through UMU-Launcher. It ships real-time settings, smooth scrolling, and on-demand cover-art loading, with on-demand asset loading delivering the biggest gains for anyone with a large library. The team openly acknowledges the one trade-off, noting that CPU usage climbs while scrolling because thousands of images now load on demand instead of all at once. While it still lags behind Lutris and Heroic on bulk tools and sandboxing, Faugus keeps winning readers over with its clean, fast, good-looking interface.
Strata 0.2.7 focuses on speed and compatibility, with a default change that speeds up 12 GB NVIDIA cards by up to 37 percent on code answers. It adds Radeon RX 9000 and AI PRO R9700 support for faster Qwen decoding, lets DeepSeek run on Ryzen AI Max (Strix Halo) Windows PCs, and makes DeepSeek read prompts much faster across most machines. New features include picture-reading turned on by default for DeepSeek, up to 1M-token context support, layer-major prefill for two NVIDIA cards, and a redesigned web chat with saved chats, search, branching, and LaTeX rendering, plus French as a new interface language.
yserver 1.8.0 shipped today, adding variable refresh rate, hardware cursors, gamma control, and OpenBSD support to a from-scratch Rust rewrite of the ancient X11 display server. The release spans 259 commits from nine contributors and also splits the codebase into focused crates to keep things maintainable. The project, built largely with AI tools like Claude Code, offers real X11 without Xorg's decades of baggage — but only in a niche for holdouts and tinkerers while Wayland dominates. It targets near-Xorg performance and runs Steam games, though it still carries X11's inherited security flaws and remains an ambitious experiment rather than a mainstream choice.
Bottles 67.5 went live on October 27th with 176 commits and 135 files changed, making it one of the project's most code-heavy patches yet. It adds optional Eagle tracing and an identity bridge for its Soda runners, plus now displays playtime totals in hours. The release also patches a wide range of everyday issues, including offline component downloads, account restoration, UMU controller access, and the Wayland setting for Proton launches.
KDE developer Méven Car has fixed a 15-year-old bug in KIO, the I/O framework behind Dolphin, that made file copies report completion while data was still sitting in RAM instead of on the device. Filed in 2011 as bug 281270, it grew worst of all because moves deleted sources prematurely, prompting a solution built on sync_file_range() and an adaptive writeback window that keeps copies honest without slowing them down. The work ships in KDE Frameworks 6.32, scheduled to release November 13, and mainly benefits removable and network storage while leaving local disks untouched. It's a quiet but meaningful win, delivering a progress bar that finally means something rather than a shiny new feature.
JSAUX's FlipGo earns Tom's Hardware an Editor's Choice for its dual 16-inch touchscreens and built-in hub, though at 4.2 pounds it's a desk companion rather than a travel buddy. ID-Cooling's SL360 V2 AIO takes home a "best value" nod for its display block and strong fans at roughly $120. The ASUS ROG Maximus Z890 Apex earns praise for extreme memory overclocking and daily-driving polish, but sits $200 off launch amid questions about whether Intel still needs an Apex board. Corsair's 2026 RM1200e trades a switch from HEC to CWT OEM for better efficiency and quieter operation plus new PinProtect safety, while the SanDisk DC SN861 rounds out the roundup as a balanced 7.68 TB enterprise SSD built on a RISC-V controller.
This morning's Linux security roundup shows the same vulnerabilities appearing across nearly every major distro, with Brotli's CVE-2026-111497 alone patching Fedora, Oracle, and all supported Ubuntu releases in one motion. Grafana is the standout Critical, flagged by Oracle, Red Hat, and AlmaLinux on RHEL 9 even though the same package gets a lower rating on other channels. Kernels need the real reboots, especially AlmaLinux's Dirty Frag "Fragnesia" privilege-escalation fixes, while SUSE's python-social-auth-core auth bypass is the flaw worth worrying about most. Patch Brotli, Grafana, and the kernels first, then handle the rest as housekeeping.
Bazzite shipped version 44.20261026 of its stable branch on October 26, 2026, an incremental update that lifts the OGC kernel from 7.2.9 to 7.2.11-ogc4.1. The graphics stack sees the biggest gains, with Mesa hitting 26.2.4-1, Gamescope moving to the 3.17.0 line, and both open (615.78.08) and LTS (580.178.04) Nvidia drivers refreshed. GNOME 50.4 and KDE Plasma 6.7.5 also land, though the whole release was driven by just two commits, making it a lean stack refresh rather than a feature milestone. Existing users can jump on it with a single bazzite-rollback-helper rebase command, and rollback to this version stays possible since the image is retained for 90 days.
XanMod has shipped two new Linux kernels on October 26th, with MAIN branch 7.2.13-xanmod1 bringing the freshest features and LTS 6.18.59-xanmod1 offering long-term support through December 2027. Both builds follow closely behind the Liquorix kernel release and ride on the latest upstream stable point releases from Greg Kroah-Hartman. Rather than new features, the pair is dominated by a dense batch of memory-safety and security fixes targeting NTFS, SMB/CIFS, ksmbd, networking sockets, and KVM. Users can install via the APT repository or standalone .deb files, choosing from x64v1, x64v2, or x64v3 build tiers to match their CPU.
Liquorix maintainer Steven Barrett shipped kernel 7.2-22 on Monday, October 26, 2026, cleanly merging upstream Linux 7.2.13 with the project's usual low-latency Zen tuning and no experimental patches. The quiet release serves as a sensible capstone to a whirlwind fortnight during which Liquorix put out five builds, including 7.2-20, which briefly folded server-class MGLRU-FG memory research into a desktop gaming kernel. Liquorix is an AMD64-only, pre-patched kernel that trades raw throughput and battery life for snappier interactive responsiveness, making it a fit for gamers and A/V producers but not servers or real-time workloads. To install it, users can run the official one-line script or set up the amd64-only repo manually, keeping an older kernel in GRUB as a fallback.
[ Archive ]
