Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-09-28
Flatpak 1.18.4 has been released today, closing six vulnerabilities, two of which let a malicious app empty or delete host files like /etc/passwd as root during an upgrade. The two headline bugs are a resolv.conf symlink overwrite (CVE-2026-97024) and a path-traversal deletion (CVE-2026-97023), which are both rated CVSS 7.1 High and require the root system-helper context. This continues a security-heavy stretch for the project, following 1.18.1's nine-vulnerability drop and a series of stability patches through September. Flatpak recommends updating to 1.18.4 or later, and keeping bundled bubblewrap and xdg-dbus-proxy current.
Debian, Fedora, Red Hat, Rocky Linux, SUSE, and Ubuntu all pushed fresh security updates this week. Red Hat flagged three Critical advisories led by the unbound DNS resolver, while Ubuntu's PyJWT notice adds a signature-bypass that lets attackers forge valid tokens. Debian's libheif update carries seven CVEs plus eleven non-numbered advisories, and Fedora's Chromium build quietly closes more than 100 CVEs in one release. The takeaway is simple: patch the DNS resolver and token forgery first, then clear the rest when convenient.
DreamMaoMao released version 0.17.4 of MangoWC, the lightweight "dwm but Wayland" tiling compositor built on dwl and wlroots. The headline change re-adds the confine_pointer window rule that pins the cursor to a focused window, accompanied by a batch of fixes targeting fullscreen scanout, XWayland scaling blurriness, monitor hot-swap crashes, and layer/overlay focus problems. Behind the scenes, the release also splits each scene layer into separate stacking and content nodes, laying smoother groundwork for future features. Framed around a "stability first" philosophy, 0.17.4 reads as a maturity release suited for daily driving, installable via the AUR or build-from-source across most major Linux distros.
Bazzite shipped its latest stable build, 44.20260928, today adding official support for the Anbernic Win600 handheld. The release bumps the Open Gaming Collective kernel to v7.2.7 while updating Gamescope to 3.16.29 and NVIDIA drivers to 615.71.09-2. It also swaps in the default editor msedit for a handheld-friendly option and pulls key packages from the Terra repository. Existing users can update with the rollback helper, and images stay available for ninety days, allowing easy rollbacks if something breaks.
Today's reviews span eight products, with the ASUS T1 RTX 5070 earning a strong 90% but a pricey tag, and the Sandisk Optimus GX Pro 850P drawing fire for costing $115 more than its WD Black cousin. The Gigabyte 1000GM PG5 leads the PSU pack at just $169.99 with genuine Platinum efficiency and T-Guard connector protection, while five power supplies in total cover everything from a €79.90 budget pick to an SFX-L 1200W flagship. Cooling gets a clever single-tower Cooler Master V8 ACE still awaiting full benchmarks, and the Ducky Cushion 98 stands out as an unusually quiet numpad TKL. Value buyers should test the Gigabyte PSU first, but the RTX 5070 and Sandisk SSD are buys only if the premiums don't stop you.
OpenShot released v4.0.1 yesterday, delivering a maintenance build that repairs the preview, recording, snapping, and logging regressions from the recent Qt6 rewrite. The update arrives just four weeks after v4.0.0, the major release that migrated the free video editor from Qt5 to Qt6 and added Color and Recording Views plus local AI workflows. Among the improvements you'll find a redesigned razor tool with ripple cuts, a critical macOS startup fix, smarter announcement banners, and a genuinely new addition: official Linux Snap support with automatic updates.
GNOME has released 49.10, the last bugfix update for the GNOME 49 "Brescia" series, which is now officially end-of-life following the September 16 launch of GNOME 51. The conservative release bumps roughly a dozen modules with stability and correctness fixes, touching GNOME Shell, Mutter, and smaller libraries like libsecret and gcr. The most important changes are security patches, including CVE-2026-88924 in GVFS and two web-security fixes for the Epiphany browser that were held back from the earlier 49.9 release.
Linux Kernel 7.3-rc5 has landed as the fifth release candidate of the 7.3 cycle, bringing 577 commits from 275 contributors. Linus Torvalds flagged an atypical diffstat where drivers make up less than a third and selftests claim roughly a quarter, though he attributes this to small driver patches and a few large test files rather than anything substantive. Networking and KVM architecture work dominate the tree, with around 101 commits touching memory-safety or concurrency concerns consistent with a normal release candidate.
2026-09-27
Budgie 10.10.3, released by Joshua Strobl, is the third minor update of the 10.10 series and one of its most substantive. It revives the Wayland-breaking Keyboard Layout applet, gives the Budgie Menu its own favorites and a focus fix, and finally lets icons be placed freely on the desktop. Multi-display users gain primary monitor selection, while a long tail of unglamorous fixes quiet panel crashes and polkit hang-ups. It's maintenance-mode territory, but it reads like the most useful Budgie 10.x release since the X11-to-Wayland migration.
Nobara Linux 44 has refreshed its Steam-HTPC and Steam-Handheld builds, both now carrying a 2026-09-26 build date while the standard Official, GNOME, and KDE editions remain pinned to the earlier 2026-09-02 base release. The split follows the same pattern Nobara used for version 43, refreshing the console-style editions after the custom kernel, gamescope session packages, and graphics stack have had time to mature. The Steam builds rely on the project's custom gamescope technology to boot straight into a controller-first, console-like interface and switch back to a desktop, with the respin updating everything from the CachyOS-based kernel to controller-remapping tools. Developed by Thomas Crider, the Proton-GE creator, Nobara is an independent Fedora-based distro that trades official Fedora's vanilla approach for a gaming-ready, out-of-the-box experience.
Noctalia has released v5.2.0, the capstone stable build of its Qt-free C++ rewrite of the native Wayland desktop shell. The headline addition is a full calendar system pulling reminders from iCalendar, CalDAV, and Google Calendar, patching one of the most requested feature gaps. It also rounds out window management, screenshots, audio feedback, plugin authoring tools, and a big batch of stability fixes, while staying MIT-licensed and non-invasive.
Steven Barrett released Liquorix Linux Kernel 7.2-13, merging upstream Linux 7.2.8 and bumping the package version to 7.2.8-1. Unlike most of its 7.x siblings, this point release adds no fresh Project-C scheduler patches, since those got baked in across releases 7.2-1 through 7.2-12. The build still carries forward the project's signature interactive tuning, including SMT-aware scheduling, Zen Interactive frequency defaults, and the dmem-ttm-v8 VRAM patchset.
[ Archive ]
