Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-11-13
Devolutions shipped UniGetUI v2026.3.4 today, rolling up 66 commits from 13 contributors into a patch that reaches into AI coding tools for the first time. The headline additions are an "Agent Skills" extension for Claude Code, Codex, Copilot, and Cursor, plus a new Xcode manager for macOS 13 and later, both off by default. The release also hardens security by checking downloaded installers against published hashes and displaying their signer, while finally fixing a long-standing leak that let the operation history file balloon into gigabytes of RAM. UniGetUI, the open-source package-manager front end originally created by Martí Climent, is available now via GitHub, winget, or the Microsoft Store.
HestiaCP released version 1.10.7 today, a service release built mostly around security fixes that plug privilege-escalation and command-injection paths letting low-privilege users grab root. The most consequential fix stops symlink attacks by root and stages restores in root-only directories, addressing flaws first disclosed in a Nov. 8 batch of advisories. It also updates Roundcube, SnappyMail, MariaDB, and Zlib, adds a password-visibility toggle and .xz archive support, and bumps the panel's PHP-FPM pool. Automatic updates are on by default, existing boxes upgrade via apt, and Hestia strongly recommends patching any public-facing server.
Valve released SteamOS 3.9.6 Beta today, targeting testers on the Beta and Preview channels with its headline fix for a framerate limiter that silently dropped 30 FPS games down to 24 FPS on high-refresh displays. The maintenance build also patches a batch of real-world bugs, including a green-screen Remote Play issue on Nvidia GPUs, black screens in RPG Maker titles like Waste Walkers, and broken gamemode libraries under gamescope. In a minor slip, Valve's changelog still references the 3.8 stable baseline, though 3.9.5 is actually the latest stable release, which explains why a couple of fixes appear repackaged from an earlier build.
Five outlets reviewed the transparent Corsair HX1000i SHIFT CRYSTAL today, praising its Cybenetics Platinum efficiency and innovative per-pin GPU protection while warning that Elite capacitors hold it back from its opaque sibling. NVIDIA's DGX Spark, a GB10 Grace Blackwell AI machine that launched at €4,399, now lists near €7,999 amid the memory and storage market crunch. Apple's $299 HomeView smart-home hub already drew heavy criticism over its iPad-like value proposition, with a Siri fix promised in an upcoming update. The roundup also covered the Formula V-Line G9 Duo case, Sennheiser's Momentum True Wireless 5, Corsair's HS80 v2 MAX headset, the Baseus Spacemate RD1 Plus dock, and the EnGenius ESG620 router.
Six major distros shipped fresh security fixes today, with Ubuntu stacking 48 notices and Red Hat delivering 82 advisories across RHEL 7 through 10. Ubuntu's Pillow update took a particularly heavy hit with 39 CVEs, while RHEL's fence-agents patch warrants attention since it controls node power in clusters. Debian's batch centers on Firefox ESR with roughly 80 patches and a 23-CVE Apache 2 fix, and Fedora bundled nine Rust crypto crates plus major updates for RabbitMQ and strongSwan. Several fixes require a reboot, so admins should scan their platform versions, flag the Critical entries, and schedule downtime accordingly.
Libreboot 26.11 "Rubber Duck," released November 12, 2026 by Leah Rowe, has switched nearly all supported boards to EDK2-UEFI-only firmware, which finally enables Windows boot support. The release drops GRUB, MemTest86plus, and CSMWrap payloads while adding ReBIOS for legacy boot and enabling TPM 2.0, though Rowe calls discrete TPM chips "security theatre."
Liquorix maintainer Steven Barrett tagged version 7.3-3 on November 12, 2026, built on the security-hardened Linux 7.3.4 base. Hours later he released 7.3-4, but it's just an errata to fix patch application rather than a substantive new release. The four changes in 7.3-3 are surgical and defensive, removing redundant scheduler code, fixing a zram short-read bug, correcting a memory-counter accounting error, and hardening page-table walks. It's aimed at gamers and media desktops on AMD64, though the low-latency tuning trades away some power efficiency and throughput.
2026-11-12
Mesa 26.3.0 shipped as the open-source graphics stack's fourth-quarter feature release, completing OpenGL 4.6, Vulkan 1.4, and OpenCL 3.1 support across nearly every driver. The headline desktop wins are native VK_AMD_anti_lag in AMD's RADV driver, replacing the old layer, and Intel's new Jay shader compiler now default on Xe2 and Xe3 hardware, trimming Fossilize compile times up to 66 percent versus Intel's Windows path. Behind the scenes, the release also brings the first H.264 hardware video decode to the reverse-engineered NVK NVIDIA driver, DRM format modifiers reaching back to the Radeon HD 7000 series, and Torx, Mesa's first on-device NPU AI backend. It's available now through distros and the official tarball, though users prioritizing stability may want to wait for the 26.3.1 bugfix patch.
Rust 1.100.0 becoming the language's first three-digit stable release. Its headline feature is the never type (!), which stabilized after ten years, five failed attempts, and over two years of work by contributor waffle. The release also brings core custom allocators, a DropGuard helper, a conjure_zst constructor, and Cargo's supply-chain dependency cooldowns. However, a narrow never-type fallback change can break pre-2024 edition code, so testing against beta first is advised.
PostgreSQL shipped its biggest security release of the year today, closing 52 vulnerabilities across five supported versions plus a near-final PostgreSQL 19 RC 2. Almost all of the flaws carry a Critical rating of 8.8 and let an attacker with modest privileges run arbitrary code as the OS user behind the database server. The drop also marks end of life for PostgreSQL 14, prompting the PGDG to urge anyone still running it to upgrade to a supported version. Meanwhile, PostgreSQL 19 is set to reach general availability on November 19, just one week after this release.
LibreOffice 26.8.3 is now live as the third maintenance update in the current feature branch, bundling around 45 bug fixes aimed at crashes, hangs, macOS integration and Microsoft Office compatibility. The Document Foundation is pushing an aggressive upgrade, since the previous mature branch, 26.2, reaches end of life on 30 November 2026. Interestingly, the downloadable software is fully stable even though its documentation still sits under a release-candidate path while the official GA page returns a 404.
Zen Browser just shipped 1.24.2b, its most polished build yet. The patch folds in Mozilla's latest security fixes alongside quality-of-life touches like a downloads pause button, a semi-transparent address bar, and Metal-accelerated WebGL on macOS. Notably, it lands just as competitor Arc shuts down on December 22, 2026.
Apache NetBeans IDE 32 reached general availability today, with the 32 tag superseding its three release candidates. The catch is that GitHub still flags the official build under the "Pre-release" badge, meaning it won't appear under the "Latest release" tab where most users look. The feature-complete quarterly drop brings Gradle 9.8, Maven running on JDK 27, Tomcat 11, JavaFX FXML support, and signed Git commits over SSH. Fixing the single mislabel would fix visibility, with NB 33 expected around February 2027.
Node.js rolled out coordinated security updates, patching 16 CVEs across its three supported LTS lines: v26.13.1 "Lithium", v24.22.3 "Krypton", and v22.23.5 "Jod", with seven rated HIGH. Most flaws live in the HTTP/2 and TLS layer your servers expose to the internet, and several are remotely exploitable with no authentication at all. But the catch: end-of-life lines like Node 20 "Iron" got nothing, and third-party trackers note a small discrepancy in the CVE count. Upgrade to a patched release if you're still running older code.
Deepin 25.3.0 shipped as a maturity-focused point release for the Chinese Debian-based Linux desktop. Its standout features include freeze protection that keeps the taskbar and Launcher usable during system stalls, a whole-disk UOS AI knowledge base, flexible snapshot recovery for its "Solid" immutable system, and a bundled PC Manager utility. The update also bumps the default kernel to 6.6.159 (with a 6.18.56 option via Kernel Manager), adds GPU-accelerated Linyaps containers, and patches a wide range of security vulnerabilities. The free ISO is available for AMD64, ARM64, Loong64, and RISC-V builds, though readers should note lingering English-language polish gaps and transparency concerns around kernel CVE fixes.
Today's roundup covers seven reviews where value keeps colliding with compromise. The Montech King 95 3D PRO delivers premium-case looks and cooling for under $200, just not quietly at full fan speed. AMD's 9950X and 9900X get a two-year-later re-test that leans toward the steeper-discounted 9900X on value, while Next Level Racing's F-GT Shift lightens and stiffens its cockpit for around $550. And the NZXT C1200 Platinum Platinum PSU splits reviewers, praised for quiet efficiency but penalized for weak transient response.
Red Hat pushed past 230 errata across RHEL 7 through 10 today, with ten Critical advisories driving OpenShift, Ansible Automation Platform, and freerdp updates while the rest of the Important pile stays dominated by Java and .NET. Ubuntu's biggest single move was USN-9046-1, folding 73 CVEs into a MySQL update that shipped full upstream releases to 26.10 and 26.04 LTS but backported only security fixes to 24.04 and 22.04 LTS. Debian, Fedora, and Gentoo led their rounds with ImageMagick absorbing dozens of CVEs, Firefox 160.0 landing on Fedora 44 and 45, and curl carrying an absurd 71 CVEs on Gentoo. If you're triaging on a tight budget, patch the RHEL Critical set, Ubuntu's MySQL, Gentoo's curl, and SUSE's critical Pillow fix first, since SUSE alone shipped 34 CVEs in a single Pillow advisory.
Wireshark has shipped 5.0.0rc2, the second release candidate ahead of version 5.0, its first major version bump in years. The experimental build introduces a unified theme system to replace decades of individual color preferences, along with per-packet process tracking, Zstandard compression for capture files, a built-in Lua debugger, and a completed HTTP/3 dissector. It also drops Qt 5 support, removes several legacy features, and bumps Windows, Npcap, and Qt requirements. As a release candidate, it's intended for testers to hunt bugs rather than for production use, with the final 5.0 release still to come.
Ardour 9.10 bringing a wave of quality-of-life editing improvements rather than a major feature overhaul. The headline addition is live gain-envelope waveform updates, though the feature is disabled by default and must be toggled manually. Other notable changes include multi-lane automation dragging, a macOS GUI rendering revamp that boosts performance, and pattern-based track naming borrowed from Harrison's console OS. One caveat stands out: users still on versions older than 9.9 should upgrade before copying region-FX playlists, since doing so can irreversibly corrupt their session files.
PHP's team shipped php-8.6.0RC7 today as the last release candidate before the first stable 8.6 lands on November 19, 2026. The build is tiny by design, just an array_map() first-class callable fix and an OpenSSL TLS use-after-free patch, but it already includes the critical PHP2Shell remote-code-execution fixes from October. The headline feature most developers associate with 8.6 is partial function application, letting you pre-fill arguments with ? or ... placeholders to skip closure boilerplate.
Red Hat released RHEL 10.3 and RHEL 9.9 on November 11, 2026, delivering point updates to both supported mainlines in lockstep. The headline additions include sealed images for image mode now generally available in RHEL 10.3, plus an MCP server for RHEL that moved to general availability for production diagnostics. The releases also expand post-quantum cryptography around CNSA 2.0 compliance and refresh developer toolchains like GCC 16.2, LLVM 22.1.8, and Rust 1.97 across both lines. Available through the Red Hat Customer Portal for active subscribers, both ships come with validated Leapp upgrade paths and a 60-day evaluation edition for non-subscribers.
Bazzite Linux 45.20261112 shipped just one day after the major 45.20261111 update pushed the gaming distro onto the OGC Linux 7.3.3 kernel and Nvidia 620.70.06 drivers. Nearly every headline package was unchanged, making it a targeted stabilization patch rather than a feature wave. Universal Blue's team used it to patch regressions from that jump, fixing a boot hang on certain laptops, a Framework panel replay issue, a Konsole coloring glitch and a Bazaar/Homebrew trust problem, all closed the same day. The only real feature bump was PowerStation 0.10, joined by NSS/nspr security updates, while users can still roll back to any build from the last 90 days.
Noctalia 5.5.0, the open-source Wayland desktop shell, shipped today as a large feature dump spanning bars, dock, launcher, screenshots, lock screen, theming, and plugins. It doubles down on its single-TOML, no-QT-GTK-native pitch with upgrades like widget peek mode, screenshot zoom and pan, and a plugin API expansion built on Luau. Notably, the release includes a battery-friendly change that stops GPU sampling for CPU stats and a privacy fix that catches apps opening cameras through V4L2.
FEX-2611.1 is a small stable patch to the Valve-funded open-source x86-on-ARM emulator, tagged on 11 November 2026 five days after the FEX-2611 feature release. Its headline change moves SVE/AVX detection out of the host-feature hash and into a process-specific hash so Linux, WoW64, and ARM64EC share a correctly bucketed code cache. A second fix clamps an out-of-bounds CPUID index that crashed on Valve's upcoming Steam Frame when CPU affinity changes pushed a core index too high. The remaining commits round out the Windows side with a forced-assert fix, a newly wired volatile-metadata flag, and a RootFS path fix, all under the MIT license.
[ Archive ]
