2026-10-24
Eight reviews dropped in a single day, led by the iPhone 18 Pro Max, which earned HotHardware's Editor's Choice for its A20 Pro chip, variable aperture camera, and Google-matching Siri AI at prices from $1,299. Call of Duty: Modern Warfare 4 drew the boldest praise, with a reviewer calling it "possibly the best Call of Duty ever" thanks to its cinematic campaign, revived DMZ, and classic multiplayer. The loudest trend came from two AI peripherals, the $99.99 Logitech MX Keypad and the $169.99 Razer Basilisk V4 Pro, each adding programmable AI shortcuts to their designs. Tying the batch together are a push toward efficiency over raw specs, heavy reliance on ecosystem lock-in, and rising prices that make even strong drives like the Golden Award-winning KIOXIA EXCERIA G3 feel pricey.
BakAndImgCD 53.0 shipped October 23, 2026 as the newest update to a tiny 4MLinux-based Linux backup-and-imaging distribution. At just 84.9 MB, it boots in BIOS or UEFI and does two things well: saving files and disk images, and rescuing failing drives, powered by tools like FSArchiver, GNU ddrescue, and Partclone. The version tracks the upstream 4MLinux release cycle and inherits its beta-era toolchain, though the announcement itself is deliberately terse with no changelog. It remains a niche tool with modest weekly downloads, competing against Clonezilla and friends by trading size and flexibility for a much smaller footprint.
KDE Plasma 6.9 is locking in several meaningful features, chief among them stable Picture-in-Picture support under Wayland, per-screen window memory, and tighter controls over legacy X11 apps. This momentum comes as Plasma 6.8, the 30th Anniversary Edition, absorbs a flood of bugs users found after upgrading to its X11-free, Wayland-first design. The week also delivered broad performance and polish fixes across System Monitor, the login screen, and the built-in remote desktop server.
Bazzite has pushed a new stable image tagged 44.20261023, built October 23 and landing on its usual brisk weekly cadence. The build bumps the core gaming stack, moving Gamescope to 3.16.31^6. On the same day, the project opened public testing for the ASUS ROG Xbox Ally X20 and the Acer Predator Atlas 8, both still missing features like RGB lighting and gyroscope support. Existing users can rebase to the new image via bazzite-rollback-helper or the Bazzite Portal, with images retained for 90 days.
Strata, the open-source local AI engine, released version 0.2.4 today, letting you run the 763-billion-parameter DeepSeek V4.1-Flash model on a PC with a single 12 GB graphics card and 46 to 64 GB of RAM. It does this by spreading the workload across your GPU, CPU, RAM and SSD, keeping the most-used parts in memory and streaming the rest from your drive. The model is Terminal-only in this release, comes in three heavily compressed sizes from 239 GB to 274 GB, and tops out at roughly 8 to 10 tokens per second on a mid-range RTX 3060. It's free under MIT with no telemetry, though output stays slow on 12 GB cards and the desktop app doesn't get DeepSeek until a later update.
OBS Studio 33.0.0 went stable on October 23, capping off a major milestone release that most users won't even notice directly. The biggest changes are a massive CEF browser-engine jump from version 127 to 150 and a complete redesign of how plugins load and install. Casual users get small-but-real perks like improved source snapping, better numeric input fields, and new audio-monitoring hotkeys, while plugin authors get a harder deadline since legacy plugins must be updated by 34.0.
MangoWM, the lightweight Wayland compositor built on dwl and wlroots, published its 0.18.3 patch release on October 24th. The update brings no new features or breaking changes, just two optimizations to multi-monitor animations and fullscreen blur, alongside three targeted bug fixes. Those fixes address scratchpad ratio sizing, drag-and-drop lag under global VRR, and a community-patched pointer enter issue that had broken slurp's crosshair. Buildable from source, MangoWM also ships packages through Arch, Fedora, Gentoo, Void, and Guix.
2026-10-23
Samba 4.25.1 shipped today as a routine point release, but it fixes a genuine access-control bypass flagged as CVE-2026-109411. The team deliberately skipped a coordinated security embargo because the flaw lives only in vfs_ceph_rgw, a module that landed just last month in 4.25.0 and that most servers don't use. Beyond the CVE, the patch bundles twelve more fixes, including three CTDB clustering fixes and build regressions from 4.25.0. Anyone on 4.25.0 using vfs_ceph_rgw should upgrade now, while all 4.23, 4.24, and 4.25 users get the usual bugfix updates.
Tails 7.15.1 is a security emergency from the Tor Project that updates Tor Browser to 15.0.26 and blocks the compromised certificates of Indian CA eMudhra. The incident stems from eight eMudhra intermediate keys that had only three to eight bits of entropy, letting researcher Scott Helme crack them in under a second. Mozilla, Apple, and Microsoft raced to revoke the affected certs, and Google confirmed Certificate Transparency limited real-world exploitation. If you're running Tails 7.0 or newer, upgrade now to protect against forged clearnet sites over Tor.
Nine Linux distributions shipped security updates today, with Debian handing its 6.12 kernel more than 500 CVEs and SUSE folding 237 into a single webkit2gtk3 release. A trust-store purge landed across Fedora, RHEL and Rocky after emSign Root CS CA G3 was found signing compromised certificates. The same pair of PHP RCE flaws (CVE-2026-109618 and CVE-2026-109619) turned up in Fedora, SUSE and Oracle, while Oracle's eight Critical .NET advisories are the top priority for managed-code users. Patch the trust-store cut and .NET first, then clear the rest before your next maintenance window.
OpenSSL 4.1.0 shipped today as a feature release that stays API- and ABI-compatible with the OpenSSL 4.0 line, so existing users can upgrade without recompiling. The headline addition is full DTLS 1.3 support (RFC 9147), including a rebuilt listener API and tunables for pending connections and datagram sizes. But the release also documents four known DTLS bugs and had earlier gone to a beta-as-final after two DTLS security issues forced a pause. Alongside that, it adds post-quantum optimizations, GREASE and IKEv2 KDF support, new MSVC 2013 build targets, and drops Windows Itanium and CE builds.
fwupd 2.1.9 has been released from lead developer Richard Hughes, closing a near-monthly feature-release cycle. Of its 54 commits, the bulk are defensive memory-safety fixes aimed at fuzzed device protocol parsers, continuing fwupd's long hardening push. The public-facing changes are modest, adding server telemetry, per-device Redfish instance IDs, a libusb 1.0.27 build floor, and a single PixArt touchpad.
Strata 0.2.3 shipped today, giving the open-source engine that runs a roughly 125-billion-parameter model on a gaming PC a genuine Intel Arc package plus a 6% to 19% speed boost on AMD's Strix Halo chips. The update also tames coding agents choking on oversized contexts, with a scripted 64K test keeping peak prompt usage at 61% of the window versus 83%, while a new opt-in DFlash2 drafter nominally trades a 1.6 to 1.8x speedup the maintainers still treat cautiously. Minimum specs remain steep at 32 GB of combined RAM and VRAM, though 64 GB unlocks every model size and quantization. It's MIT-licensed with no telemetry and local-only storage, but there's still no external security audit and the Windows installer isn't code-signed.
XanMod released 7.3.0-xanmod1 today, the first build of its rolling EDGE branch built on the freshly shipped mainline Linux 7.3. Maintained since 2015 by Brazilian developer Alexandre Frade, the kernel layers scheduling, I/O, networking and compiler-optimization patches onto near-vanilla mainline for Debian-based systems. The update rides on Linux 7.3's record-breaking 18,765 commits, adding sched_ext, failfs sandboxing and filesystem gains on top of XanMod's familiar gaming and performance tweaks. Installable via apt for 64-bit Debian distros, it's aimed at enthusiasts who want the latest mainline fastest and are comfortable rebuilding external modules.
With Dell's CEO warning that the DRAM shortage won't ease until 2029 or 2030, value dominates this month's hardware reviews. Three products win outright on price-to-performance: the HYTE Y50 RGB case at $99, the AMD Ryzen 5 5500F CPU, and the BIWIN Amber ME300 microSD card. But not everything is a bargain, since the Formula V Line G10's pivoting fans deliver no real thermal gain and the CORSAIR SABRE v2 PRO's 8,000 Hz claim shows no measurable advantage. The one exception to the skepticism is the FSP MEGA PM 1200W PSU, which earns its "industrial-grade" reputation through quiet operation and top-tier ripple control.
Fedora Linux 45 Final was declared NO-GO at the October 22 meeting, pushing the release to a new target date of Tuesday, November 3, 2026. Release lead Aoife Moloney cited outstanding blocker bugs, headlined by an unresolved eMudhra certificate still sitting in the system trust store. This marks Fedora 45's second straight miss, following a first NO-GO on October 15 when no candidate media had been published in time. The team needs an updated ca-certificates landed in a new RC-3 and verified by QA, with the next gate on October 29 deciding whether the November 3 target holds.
Shelly 3.1.9, released 23 October 2026, adds "in-place file migration" to RLPM, its from-scratch Zig package engine that lets a new package adopt files already on your system without overwriting them. The feature matters most when one package replaces another, avoiding the old .pacnew/.pacsave nag-and-merge dance, though it only works on RLPM rather than the default libalpm backend. RLPM reached full native maturity just three weeks earlier in v3.1.7, anchoring Shelly as the package-management layer of Seafoam Labs' wider Devario desktop stack.
[ Archive ]