Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2026-05-02 06:47
2026-05-02 06:47
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-08-10
Here is a roundup of the latest reviews. TFTCentral breaks down RGB-stripe OLED panel technology and advises consumers on whether to purchase current models or wait for newer QD-OLED and WOLED options. Input device coverage features Funky Kit’s evaluation of the CORSAIR HARPOON v2 WIRELESS mouse alongside Tom’s Hardware’s hands-on tests of the Turtle Beach Command Series KB5 keyboard and the Pulsar Feinmann F01 Noctua Edition. System builders can review Wccftech’s full assessment of the Gigabyte X870 AORUS Infinity motherboard, while IgorsLAB examines the MSI MPG Ai1600TS PCIE5 power supply for its extreme wattage and quiet operation. Media enthusiasts can also find TweakTown’s assessment of Arrow Video’s 4K Ultra HD release of the 1995 Mortal Kombat film.
Linux Kernel 7.2-rc7 dropped on August 9, 2026, delivering 412 file changes across nearly 400 non-merge commits as Linus Torvalds closes out the feature merge window. The release prioritizes security hardening with significant improvements to the x86 Speculative Return Stack Overflow mitigation, a robust SELinux policy validation overhaul, and extensive bounds-checking for Open vSwitch, IPSet, and vmwgfx. Additional patches address GPU quirks for AMD and Intel Xe silicon, fix threading races in the Rust-based Android binder driver, and introduce new documentation guidelines for AI-assisted kernel development. With this bug-fix-only window, the project is now in the final refinement stage ahead of the 7.2 stable release, which will immediately trigger the 7.3-rc1 merge window.
XanMod released updated kernel builds today, introducing Linux 7.1.8-xanmod1 for the rolling mainline branch and Linux 6.18.44-xanmod1 for the long-term support line. The updates also include a real-time variant at 6.18.44-rt-xanmod1, featuring XanMod's custom optimizations such as LLVM ThinLTO compilation, AMD 3D V-Cache tuning, Cloudflare TCP Collapse, and native Steam Deck EC sensor support. Both branches incorporate extensive upstream fixes spanning graphics, networking, and security, with the LTS branch maintaining stability and support through December 2028. Users can install these builds via the XanMod APT repository across major Debian and Ubuntu derivatives, selecting from x86_64 ABI packages ranging from x64v1 to x64v3 to match their specific CPU generation.
Red Hat Product Security issued a series of advisories addressing vulnerabilities in nodejs:22, python3, osbuild-composer, xorg-x11-server-Xwayland, and mod_md. Five of these updates carry an "Important" impact rating, covering nodejs:22 for RHEL 9.6, python3 for RHEL 7, osbuild-composer for RHEL 8.8 and 8.4, and xorg-x11-server-Xwayland for RHEL 9.2 and 8.8. The remaining advisory rates the mod_md update for RHEL 10.0 as having a "Moderate" security impact. Users should review the Common Vulnerability Scoring System scores linked to each CVE in the References section to assess severity and apply the appropriate errata.
RHSA-2026:52399: Important: nodejs:22 security update
RHSA-2026:52400: Important: python3 security update
RHSA-2026:52389: Important: osbuild-composer security update
RHSA-2026:52397: Important: xorg-x11-server-Xwayland security update
RHSA-2026:52392: Important: xorg-x11-server-Xwayland security update
RHSA-2026:52390: Important: osbuild-composer security update
RHSA-2026:52393: Moderate: mod_md security update
RHSA-2026:52399: Important: nodejs:22 security update
RHSA-2026:52400: Important: python3 security update
RHSA-2026:52389: Important: osbuild-composer security update
RHSA-2026:52397: Important: xorg-x11-server-Xwayland security update
RHSA-2026:52392: Important: xorg-x11-server-Xwayland security update
RHSA-2026:52390: Important: osbuild-composer security update
RHSA-2026:52393: Moderate: mod_md security update
Fedora has released security updates for python-wsgidav version 4.3.5 targeting both Fedora 43 and Fedora 44. The new packages address two specific security flaws identified as CVE-2026-55509 and CVE-2026-55560. This Python-based WebDAV server provides SSL support, PAM authentication, and serves as a multi-threaded web server or WSGI middleware for virtual file systems and online document editing. Users can apply the patch using the command dnf upgrade --advisory FEDORA-2026-3808436c81 for Fedora 43 or dnf upgrade --advisory FEDORA-2026-348ad953b4 for Fedora 44.
Fedora 43 Update: python-wsgidav-4.3.5-1.fc43
Fedora 44 Update: python-wsgidav-4.3.5-1.fc44
Fedora 43 Update: python-wsgidav-4.3.5-1.fc43
Fedora 44 Update: python-wsgidav-4.3.5-1.fc44
Debian released three security updates to address critical vulnerabilities in kitty, xen, and ca-certificates. The kitty patch fixes four terminal emulator flaws that could let attackers run arbitrary code or overwrite files through malicious display content. System administrators must upgrade xen to close twenty-seven hypervisor vulnerabilities that risk privilege escalation, data exposure, or service outages. The ca-certificates advisory for Debian 11 and 12 refreshes Mozilla's trusted certificate bundle by adding twenty-four new authorities and removing fifteen expired ones.
[DSA 6423-1] kitty security update
[DSA 6424-1] xen security update
[DLA 4726-1] ca-certificates CA certificate update
[DSA 6423-1] kitty security update
[DSA 6424-1] xen security update
[DLA 4726-1] ca-certificates CA certificate update
2026-08-09
Greg Kroah-Hartman released Linux Kernel 7.1.8 today, delivering over 200 commits focused on networking use-after-free patches, Thunderbolt validation fixes, and AMD and Intel graphics driver refinements. The stable update also resolves UCSI Type-C race conditions and addresses several USB serial heap overflows, keeping production workloads running cleanly while the 7.2 release candidate cycle continues. Built on the June mainline, 7.1 introduced BPF-controlled io_uring event loops, container lifecycle flags like CLONE_AUTOREAP, and a swap table rewrite that trims roughly 30 percent of static metadata overhead. The 7.1.x branch will receive stable patches until approximately September 2026, after which distros will typically backport critical fixes into their own LTS tracks.
Greg Kroah-Hartman and Sasha Levin have pushed three new stable kernel releases into the tree, bringing you 6.18.44, 6.12.103, and 6.6.151. These point releases ship hundreds of targeted bug fixes and security patches across the block layer, networking stack, and major filesystems while deliberately avoiding new features. The 6.18 branch is the freshest of the group, having shipped in late 2025 and staying supported through December 2028, while the 6.6 line remains the longest-tested option, running until December 2027. Production teams should roll out the updates through their distro vendor after verifying driver compatibility, since stable kernels prioritize reliability over novelty.
CachyOS has shipped its August 2026 release, headlined by a full rewrite of the default GUI package manager, Shelly, from C# to the Zig programming language. The update pushes Rust into the handheld daemon's kernel backend and the systray updater, while quietly introducing experimental server edition installation profiles through the CLI. Existing users can upgrade immediately with sudo pacman -Syu, and the Noctalia desktop environment now adds mango and niri window manager variants alongside Hyprland. Desktop and Handheld ISOs are live now at iso.cachyos.org and rolling out across global mirrors.
Roundcube has released emergency updates for both its LTS and current stable branches, scrubbing eleven distinct security flaws from versions 1.6.18 and 1.7.3. The patch closes critical attack paths including unauthenticated RCE via the markasjunk plugin, pre-authentication IMAP command injection, Sieve and LDAP filter injection, plus multiple SSRF and persistent XSS bypasses. Security researchers note that the recurring HTML sanitization failures point to a deeper architectural flaw that incremental patches can no longer contain. Administrators should update immediately and disable the markasjunk plugin if it isn't actively needed.
Zen Browser has released version 1.21.13b as a targeted bug-fix update, marking the tenth drop in the 1.21.x series over just seven weeks. The build resolves a persistent sidebar loop that rendered infinite media players on complex pages and fixes a regression where restored pinned tabs incorrectly reverted to regular tabs. This quiet maintenance release continues the project's aggressive track of Mozilla's upstream Firefox 152 through 153.0.3 development, ensuring users get stability without waiting for major feature additions. Available across Windows, macOS, and Linux with GPG-signed commits, the update keeps the open-source fork running smoothly amid a heavy backlog of community-reported issues.
Linux distributions just pushed a massive wave of security advisories covering everything from the standard kernel and Thunderbird to niche tools like stunnel and goaccess. SUSE flagged a critical WebKit2GTK3 flaw, Fedora plugged a heap overflow in goaccess while trimming memory overhead, and Debian kept ELTS systems like kernel 5.10 and OpenJDK 8 patched for legacy deployments. The heavy overlap between AlmaLinux, Oracle, Rocky, and RHEL means a single maintenance window will likely clear most server fleets, though Slackware and Debian ELTS operators need to tackle their trees first. Pull the exact advisory numbers for your release, apply the updates, and verify your services before rolling out to the next cluster.
Triton, a full DirectX 11 driver stack for QEMU/KVM released by UTM developer osy, brings working GPU acceleration to Windows ARM64 virtual machines. By reverse-translating Windows DDI calls back into standard D3D11 API commands and routing them through Neptune’s VirtIO transport layer, the stack bypasses the DLL-replacement tricks that typically trigger anti-cheat systems. The project supports DXVK on Linux hosts and leverages Apple’s D3DMetal framework or DXMT for macOS, with developers already reporting playable runs of Crash Bandicoot and full 3DMark FireStrike benchmarks. Though still labeled a pre-release and awaiting shader-container polish, Triton stands as the first fully open-source, anti-cheat-compatible DirectX 11 GPU path in QEMU.
GNOME's Shotwell photo manager has officially entered its 33rd release cycle with the August 8 release of the "Elmshorn" release candidate. The update completely abandons the legacy "0." versioning scheme following a 19-month development push that fully ports the application to GTK4. Core functionality receives major upgrades, including a complete overhaul of the notoriously broken face detection system and a streamlined OAuth-based publishing workflow that removes outdated helper apps. The source tarball is already available for download, with a Flathub package expected to follow shortly.
Wine Staging 11.15 dropped today, bringing a substantial sync to the upstream Wine tree alongside a major overhaul of the vkd3d-latest patchset. The D3D12-to-Vulkan translation layer received roughly 9,100 lines of updates to keep pace with upstream API changes, which should improve compatibility for modern DirectX 12 games. Maintainer Alistair Leslie-Hughes also refined Codeweavers' DComp shared-visual-handle implementation to stabilize titles like Clip Studio Paint 4 and Corgi Warlock, while finally removing outdated workarounds for legacy d3dx9 functions. As an experimental branch, this release prioritizes bleeding-edge fixes and patch maintenance over major feature dumps, making it the go-to version for users needing the latest graphics driver improvements before they hit mainline.
openSUSE released a batch of moderate security advisories addressing vulnerabilities in the tekton-cli, libXfont2-2, Django 4, and gleam packages. The tekton-cli 0.46.0-1.1 and gleam 1.18.1-1.1 updates each fix a single CVE with lower risk profiles. Developers using libXfont2-2-2.0.7-3.1 should prioritize this release after SUSE assigned CVSS scores of 9.0 to 9.5 for CVE-2026-44950 and CVE-2026-59679. Django 4 developers must also apply the python313-Django4 4.2.30-5.1 package to resolve four flaws, including a critical CVSS 9.9 vulnerability in CVE-2026-15307.
openSUSE-SU-2026:11471-1: moderate: tekton-cli-0.46.0-1.1 on GA media
openSUSE-SU-2026:11463-1: moderate: libXfont2-2-2.0.7-3.1 on GA media
openSUSE-SU-2026:11465-1: moderate: python313-Django4-4.2.30-5.1 on GA media
openSUSE-SU-2026:11462-1: moderate: gleam-1.18.1-1.1 on GA media
openSUSE-SU-2026:11471-1: moderate: tekton-cli-0.46.0-1.1 on GA media
openSUSE-SU-2026:11463-1: moderate: libXfont2-2-2.0.7-3.1 on GA media
openSUSE-SU-2026:11465-1: moderate: python313-Django4-4.2.30-5.1 on GA media
openSUSE-SU-2026:11462-1: moderate: gleam-1.18.1-1.1 on GA media
Slackware Linux released updated wpa_supplicant packages to resolve multiple security vulnerabilities affecting Wi-Fi authentication. The new version 2.12 builds ship for both Slackware 15.0 and the rolling -current branch across i586, i686, and x86_64 architectures.
wpa_supplicant (SSA:2026-220-01)
wpa_supplicant (SSA:2026-220-01)
Fedora released security updates for Fedora 43 and Fedora 44 that update udisks2, pgadmin4, bird, and nghttp2 to address multiple vulnerabilities. The pgadmin4 update to version 9.17 patches four flaws including a remote code execution risk in the Import/Export Data tool and an OS command injection vector in the MASTER_PASSWORD_HOOK, while the bird update to 3.3.2 fixes a stack buffer overflow in the BGP Flowspec NLRI decoder. nghttp2 version 1.68.0-5 blocks HTTP request/response smuggling and response-queue poisoning caused by ambiguous HTTP/1.1 upgrade requests, which the bug tracker lists as CVE-2026-58055, and udisks2 advances to upstream release 2.11.2 for general enhancements. Users must run the appropriate dnf upgrade commands to install these packages and secure their environments against unauthenticated access, data manipulation, and potential information disclosure.
Fedora 43 Update: udisks2-2.11.2-1.fc43
Fedora 43 Update: pgadmin4-9.17-1.fc43
Fedora 43 Update: bird-3.3.2-1.fc43
Fedora 44 Update: nghttp2-1.68.0-5.fc44
Fedora 44 Update: pgadmin4-9.17-1.fc44
Fedora 44 Update: bird-3.3.2-1.fc44
Fedora 43 Update: udisks2-2.11.2-1.fc43
Fedora 43 Update: pgadmin4-9.17-1.fc43
Fedora 43 Update: bird-3.3.2-1.fc43
Fedora 44 Update: nghttp2-1.68.0-5.fc44
Fedora 44 Update: pgadmin4-9.17-1.fc44
Fedora 44 Update: bird-3.3.2-1.fc44
Debian published multiple security advisories to patch critical flaws across PowerDNS, Nginx, Chromium, and Bind9. The updates resolve CVE-2026-52682 in pdns-recursor, pdns, and dnsdist, which could trigger denial of service attacks through malformed DNS packets. The advisory also covers Nginx, which requires updates to patch proxy and charset module flaws, alongside Chromium, which addresses forty-one distinct vulnerabilities that could enable arbitrary code execution or memory disclosure. Bind9 receives the most extensive corrections, sealing flaws that previously enabled cache poisoning, DNSSEC validation bypass, and unbounded memory consumption.
[DSA 6421-1] pdns-recursor security update
[DSA 6420-1] pdns security update
[DSA 6419-1] dnsdist security update
ELA-1797-1 nginx security update (by )
[DSA 6422-1] chromium security update
[DLA 4725-1] bind9 security update
[DSA 6421-1] pdns-recursor security update
[DSA 6420-1] pdns security update
[DSA 6419-1] dnsdist security update
ELA-1797-1 nginx security update (by )
[DSA 6422-1] chromium security update
[DLA 4725-1] bind9 security update
[ Archive ]
