Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-09-23
Zed Industries just released Zed Editor 1.21.0. The headline move is an expanded AI stable that now reaches Claude Opus 5.5, OpenAI's GPT-6 "Astra," "Sol," and "Luna," DeepSeek Flash 4.1, and SuperGrok sign-in, plus bring-your-own-key support to dodge vendor lock-in. You'll also get a language-server command picker, a showDocument-based file-opening feature, and around 30 bug fixes.
OpenVPN 2.6.23 dropped today as a pure security patch, sealing seven vulnerabilities, with no new features in the mix. Five of the seven flaws are Windows-specific, covering command injection through cmd.exe, binary planting of netsh.exe, a local denial-of-service, a DHCP buffer overflow, and config-directory traversal. The release also closes a cross-platform pre-authentication crash that lets an unauthenticated peer force a client segfault. All fixes were backported from master, so existing 2.6.x users can patch without a major upgrade.
OpenSSL 4.1.0-beta1 has been released for testing. The two headline additions are native DTLS 1.3 support (RFC 9147) and deeper integration of NIST's finalized post-quantum algorithms, backed by architecture-specific performance optimizations. Other new features include GREASE support, DTLS in the SSL listener API, IKEv2 key derivation, and initial Elbrus2000 CPU support, alongside breaking changes like dropped Windows targets and a tsget dependency swap.
Zen Browser version 1.22.3b has been released. The new release syncing its engine to Firefox 156.0.1 and improving the command bar's ability to search through tabs and folders. The update also fixes a Windows handle leak, a macOS 27 window-restore quirk, a broken urlbar context menu, and add-on installs blocked in Compact Mode. It's the third quick point release in the 1.22 cycle, reflecting Zen's rapid tracking of Mozilla's upstream security patches. Available now at zen-browser.app, the open-source fork has earned praise for being free of Google code and for its Arc-inspired productivity features.
SteamOS 3.8.28 Beta contains a single change targeting degraded game performance on systems with AMD discrete GPUs after a sleep/resume cycle. The build drops the "Known Issues" banner that had flagged an FSR/composition regression across several recent betas, suggesting that issue may finally be resolved at the beta level. Though small on paper, the fix matters most for the growing crowd running SteamOS on third-party AMD-dGPU laptops and desktops rather than Valve's own Steam Deck.
PHP 8.6.0 RC2 was tagged on 23 September 2026, just about 18 hours after RC1, a gap that signals the next major release is near its finish line. The second candidate adds only three fixes on top of RC1, though its full build bundles roughly two dozen memory-safety and correctness fixes dating back to Beta 3. The feature set is already frozen, locking in additions like partial function application, clamp(), performance caches, and a fresh wave of deprecations for developers to plan around. It's available for testing now but shouldn't run in production, with stable 8.6.0 expected around November 2026.
Visual Studio Code 1.139 bringing large agent session lists that load up to 12x faster by using a central catalog instead of scanning every database. The release extends Dev Container support to remote SSH, Tunnel, and WSL hosts so agents can build and test projects with the correct toolchain without duplication. Alongside those agent upgrades, VS Code adds a compact session view, in-place renaming, word wrap indicators, and smarter bracket auto-closing to smooth out everyday editing. The update is available now for Windows, macOS, and Linux, with an Insiders build already at v1.140 for early testers.
KDE's Nate Graham published a permissive draft policy titled "Don't be lazy," asking AI-assisted contributors to use judgment rather than outsource their thinking. The thread drew nearly 50 contributors over a week, splitting developers over quality concerns, mandatory disclosure labels, and the environmental toll of training data centers. A grassroots group called KDE for People then demanded an outright ban on generative AI across Plasma, arguing the draft ignores ethics and bypasses wider community input. As of September 23, KDE has adopted neither the draft nor the ban, with a revised policy still expected.
NVIDIA has released Linux Display Driver 595.104.02 for 64-bit Linux, a stability-focused point update in its long-lived certified branch. The patch addresses two fixes: an integer-overflow bug that broke page-table allocations over 2 GiB on large-VRAM GPUs, and a crash caused by unvalidated HDR metadata being forwarded to the Wayland color-management protocol. These issues only bite users running heavy compute workloads or HDR-capable Wayland Vulkan sessions, so casual gamers may not feel the difference. You can download the roughly 423 MB package from NVIDIA's driver page or through your distribution's repositories.
Today's review batch spans six products, from budget cases to a WiFi 8 router that may outlive its own specs. The Corsair Warthog scores 8.5/10 for Halo styling but trips on noisy fans and tight storage, while the NZXT S5 RGB nails first-builders with a 92% value-focused rating. Tom's Hardware champions both the affordable Glorious GMMK Eternal keyboard and the loud-but-steal-priced Bambu Lab R1 CO₂ laser. Finally, the ASUS ROG Rapture GT-BN98 previews WiFi 8 ahead of real client hardware, and the compact Lian Li SX1000P tops its PSU group on transient response.
Today's Linux patch cycle is dominated by browser-rendering packages, with Chromium pulling 58 CVEs into a single Fedora build and Firefox 73 on SUSE. The same openssh, curl, and sudo advisories are turning up across nearly every distro, so managing multiple boxes means running the same patch twice. Beyond the browser numbers, RHEL's 38 errata, Ubuntu's reboot-required kernel updates, and a rare AlmaLinux libxml2 backport mishap round out a busy day. Browser packages and openssh go first if you're patching now, with kernels needing a separate reboot scheduled afterward.
2026-09-22
Liquorix shipped kernel 7.2-12 today, merging upstream Linux 7.2.7 and flipping its Debian ABI from 6-1 to 7-1. Unlike the frantic early-September sprints, this release restores a clean one-step cadence after 7.2-11 had skipped v7.2.5. The real story lives behind the scenes: a rebuilt Arch Linux CI pipeline featuring a new Jenkinsfile, Docker registry-mirror support, and a wget-to-curl switch.
Oracle released VirtualBox 7.2.20 today, shipping a fix for a regression that stopped virtual machines from starting on Windows hosts. The error, VERR_SUP_VP_FOUND_EXEC_MEMORY, was introduced by 7.2.18 and left Windows 11 users unable to launch any VM. Oracle responded quickly, releasing the patch just days after the breakage. Windows users on 7.2.18 or 7.2.19 should update now, or temporarily revert to 7.2.16 if they want to hold steady.
A new version of the open-source Nginx CGI module is available, fixing a crash in the cgi_set_var directive caused by unterminated string values bleeding into adjacent memory. The bug produced silent 500 errors and only surfaced under AddressSanitizer, since the project's normal test harness masks the out-of-bounds read. The fix took shape across three GitHub accounts, friendlyanon reported it, and package maintainer dvershinin refined the patch against stock Nginx 1.30.0 after the initial version both failed to compile and introduced its own buffer overflow. The release also rides on the security-focused v0.15, which deprecated the REMOTE_USER variable, and it offers native CGI support across Linux, macOS, BSD, and Solaris without requiring a reverse proxy.
PHP shipped five coordinated releases on 22 September 2026, spanning every actively supported line plus the first candidate for the next major version. The headline is 8.6.0 RC1 from Matteo Beccati, a feature-frozen preview not meant for production. The other four are practical: 8.5.11 and 8.4.26 bundle bug fixes and security patches, while 8.3.35 and 8.2.34 are security-only updates. This cycle fixes a wide range of vulnerabilities, including a FastCGI ACL bypass, OpenSSL hostname-downgrade flaws, and a cross-origin credential leak, so running 8.2 through 8.5 should probably be on your list this week.
Systemd 262 released as the third major version of the year, led by release manager Luca Boccassi. Its biggest moves push trust down to the silicon, binding TPM credentials to the Supreme Root Key and hardening boot PINs with Argon2id to block boot-time interposer attacks. It also deepens kexec-based live updates for zero-downtime reboots and quietly lets systemd run as a lone static binary inside a tiny container. As usual, the release bundles a long list of breaking changes that will break scripts, so admins should check the notes before upgrading.
YServer 1.6.0 has been released today, adding TCP transport, session reset, and XDMCP negotiation so it can replace Xorg in shared, networked desktops. The three headline capabilities let a remote display manager drive a YServer display the way a thin client logs in through Xorg. Both new features ship off by default, with IPv6, host access control, and GLX over TCP left unimplemented for now. Alongside those gains, the release packs a batch of rendering and GLX fixes that improve compatibility with picom, awesome, i3, KDE Plasma, and QtWebEngine.
Node.js 26.10.0 has been released today. The headline additions put two long-requested utilities directly into the platform: util.debounce() and util.throttle(), so developers no longer need to pull them from npm. It also adds crypto.parsePKCS12() for pulling keys and certs out of .p12/.pfx bundles, extends the experimental Virtual File System into node:ffi, and rounds out the release with synchronous Blob support, socket transfers, and SQLite's undefined-to-NULL binding. Alongside these, the release bundles a wide sweep of correctness and crypto-hardening fixes, though it sits in the Current line rather than LTS, meaning you get the newest APIs but no long-term frozen stability.
Mango, the popular open-source Wayland compositor built on dwl and wlroots, just shipped version 0.17.3, its fourth release of the 0.17.x series in just ten days. The update adds a float_full_to_top global option so floating and fullscreen windows can finally share a layer, plus the ability to dim focused versus unfocused windows for clearer focus. Fixes this round cover keyboard keycode bindings, config hot-reload crashes, tag animations, and screen sharing in the Wemeet video app. The rapid cadence once again highlights how this one-maintainer project, led by DreamMaoMao, keeps moving quickly.
Flatpak 1.18.3 released today as a maintenance update focused on security dependency updates and regression repairs rather than new features. It bumps bubblewrap to 0.12.0 and xdg-dbus-proxy to 0.1.8 to close two known CVEs affecting Flatpak's sandboxing and D-Bus communication. The release also fixes a build regression on SELinux systems tracked as issue #6818, along with a flatpak-spawn subsandbox fix and a bundle install crash. Users can install it through their normal package manager or Flathub, though local runtime builders on SELinux systems get the most out of it.
Ubuntu 26.10 "Stonking Stingray" has entered Beta Freeze, with the release team targeting Beta images for Thursday, September 24 and the final release for October 15. The interim release swaps the 22-year default dbus-daemon for dbus-broker, ships the Linux kernel 7.3, and makes coreutils 100% Rust-based. It also adds GNOME 51, a local-first AI speech tool called Myna, and a package-agnostic App Center, though its redesigned installer won't fully land until Ubuntu 28.04 LTS. Beta testers can pull an image from the Test Observer, but several experimental features remain unconfirmed as of the September 22 announcement.
BlueOnyx refreshed installation media for its three active server releases, 5210R, 5211R, and 5212R. The images bundle every DNF update available to date and ship as bootable ISOs, virtual appliance images (VDI/VMDK), and Incus/LXC containers. Highlights include an Easy-Migrate fix, relaxed CLI PHP limits, consistent Opcache defaults, and self-healing Jailkit integrity checks.
Six hardware reviews landed today, spanning Apple's M5 Ultra Mac Studio and M6 Mac mini, ROG audio and motherboards, a Lian Li power supply, and a Vantrue thermal camera. The day's central story is Apple's Mac mini, which jumped $300 to $899 as Tom's Hardware points to AI-driven demand spiking RAM and component costs. Performance keeps climbing across the board, with the M5 Ultra's local AI beating Nvidia's DGX Spark and the M6 delivering a 2nm generational leap. Value, though, is getting thinner, so price-conscious shoppers should hold for end-of-year sales especially on winding platforms like the Z890-I.
Matomo released version 5.14.0 with its headline feature being aggregated real-time counters that keep live dashboards running even when the Visits Log is disabled for privacy compliance. The update also improves the AI chatbot, adds period-level forecasting, fixes long-broken pie charts, and rolls out Tag Manager refinements. Since it contains no major database upgrade, moving from 5.13.x should be low-risk. The stable release arrives just days before the Matomo 6.0 beta, so it stands as the safe line while the team pushes toward the next major version.
XanMod released new stable kernel builds with the main branch at 7.2.7 and the LTS line jumping to 6.18.53. The real-time variant, 6.18.52-rt-xanmod1, landed earlier on 14 September running RT scheduling over the same 6.18 base. These performance-tuned kernels ship LLVM compiler optimizations, memory and scheduler tuning, and a pile of third-party patchsets like Cloudflare's TCP collapse fix and Google's BBRv3. Install them via the official APT repo at deb.xanmod.org, though note that NVIDIA, OpenZFS, VirtualBox, and VMware DKMS modules may lag the latest kernel.
Red Hat shipped 42 security errata across RHEL in a single round, nearly all graded Important, while Ubuntu's Raspberry Pi kernel fix alone tracked more than 200 vulnerabilities. The batch spans the major distros, with Oracle Linux kernels resolving up to 31 CVEs each, OpenSSH leading AlmaLinux's updates, and Fedora flagging a cross-site scripting hole in perl-HTML-FormHandler. A few issues stand out for urgency, especially strongSwan's authentication bypass in Ubuntu and a leaked file descriptor in Slackware's nsenter tool. If any of these packages run on hardware you manage, apply the updates, reboot where required, and check Extended Update Support channels before assuming you're already covered.
[ Archive ]
