Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-10-15
Osy, the developer behind UTM, has shipped v0.4 of Triton, the first fully open-source DirectX 11 graphics driver that runs inside QEMU/KVM. Rather than faking the API like DXVK, Triton implements the real DirectX Device Driver Interface, letting Windows talk to a legitimate WDDM driver and giving every guest app real acceleration. The v0.4 release on October 15, 2026, adds three kernel-mode fixes, a use-after-free reference-counting patch, synchronous host mapping for blob windows, and EDID-derived refresh rates, though osy warns the drivers are still unstable. Demonstrated running Crash Bandicoot: The Trilogy and a full 3DMark Fire Strike in a Windows 11 ARM64 guest, the project was also built largely with Anthropic's Claude models, drawing sharp debate about AI-assisted systems programming.
Simple Taskbar, a feature-heavy GNOME Shell extension by maintainer Sultech, has reached version 70 with a new Windows 10 theme as its headline addition. The October 15, 2026 release also adds running-app buttons to the plain panel, a fullscreen-revealing auto-hide mode, and a long list of bug fixes. The project grew from its July 19 creation to 70 releases in roughly three months, one tagged update about every four to five days, and sits at around 155 GitHub stars and 9,300 downloads. It's a privacy-first, telemetry-free tool for users who want a real taskbar without abandoning GNOME's own panel logic.
The open-source rescue tool Antivirus Live CD released version 53.0-1.5.4 today, built on a rebuilt 4MLinux base. Its newest ClamAV patch shuts eight vulnerabilities living in the exact ZIP, PDF, PE, and archive parsers that rescuers hit most often. It boots without an OS, mounts Windows and Linux partitions alike, and runs lean on about 1 GB of RAM. The project remains free under GPLv3, with the full STABLE release still targeted for November 2026.
Noctalia, the independent MIT-licensed Wayland desktop shell, released v5.3.0 today, continuing its rapid cadence since reaching stable. The headline change is a redesigned launcher that keeps the old minimal layout as a "simple" mode, alongside deeper bar, dock, and desktop personalization like per-monitor docks and media-artwork backgrounds. More distinctively, the build hardens security by stopping the built-in calculator from running programs or reading files and keeping revealed passwords out of the clipboard and undo history. The shell, which now brands itself as part of the "Noctalia Family" with Umbriel and Greeter, remains a toolkit-free C++ alternative for slimmer Wayland stacks.
Apache NetBeans 32 RC1 has been released today, landing exactly on the project's feature-freeze date and tagging the build as 32-rc1. The candidate packs 196 commits across 2,246 files from 19 contributors, with standout work in Gradle 9.8.0, JDK 27 Maven fixes, a new JavaFX FXML library, and signed Git commits over SSH. It also deepens JDK 27 compatibility, moves bundled Tomcat to 11.0.26, and modernizes a chunk of security dependencies. If the Apache release vote passes cleanly, the final NetBeans 32 is slated for the November 15–30 window.
PostgreSQL 19 RC 1 shipped today as the first candidate toward a November 19 GA date, packing roughly 200 new features. The headline additions include a native REPACK CONCURRENTLY command, parallel autovacuum, online logical replication, and a new WAIT command for read-your-writes on standbys. But the upgrade isn't a no-op: JIT is now off by default, TOAST compression flips to LZ4, RADIUS support is gone, and a few compatibility landmines like btree_gist inet/cidr indexes can block a clean pg_upgrade. RC 2 lands November 12 and GA is targeted for November 19, so test before you move.
Greg Kroah-Hartman signed off on four LTS kernels, 6.6.159, 6.1.190, 5.15.223 and 5.10.272, each carrying the same small set of backported networking and security fixes. The updates close a TCP use-after-free, harden IPv4 checksum validation and restore SCTP traffic through nfnetlink_queue, clearing the thresholds of Canadian advisory AV26-970. Two of the branches, 5.10 and 5.15, sit just two months from end of life on December 31, 2026, intensifying migration pressure for Ubuntu 22.04 and RHEL 9 users. The other two, 6.1 and 6.6, remain safe through the end of 2027, making this a planning window rather than a panic.
Ubuntu Linux 26.10 "Stonking Stingray" released today, as an interim build supported for nine months until July 2027. The release centers on security, trimming the signed GRUB to shrink the boot attack surface and completing a full migration of core utilities to Rust. On the desktop, it brings GNOME 51 and Myna, an opt-in on-device speech-to-text tool, while dropping WEP Wi-Fi support entirely.
Three Linux kernel point releases, 7.2.11, 6.18.57, and 6.12.113, has been released today, within minutes of each other and signed off by Greg Kroah-Hartman. All three carry the same shared fixes for the Steam controller driver, sched_ext, AMD display, and the CAN subsystem, but each branch also brings its own standout patches. The newest LTS (6.18.57) leads with a fix for the XFS "refluxfs" data-corruption bug and s390 zcrypt memory-disclosure hardening, while 6.12.113 includes a netfilter fix that stops OpenWrt routers from dropping WiFi after ~300 seconds. The updates also carry "Assisted-by: Claude" tags, underscoring how AI-assisted review has become routine, and the advice is the same as always: patch the branch you run and reboot.
Mango, the wlroots-based Wayland compositor billed as "dwm but for Wayland," has shipped version 0.18.1 on 15 October 2026, just six days after its feature-heavy 0.18.0 release. The patch adds right-click-to-close in monocle mode and a smarter client-kill dispatcher while trimming GPU cost from its blur path and simplifying config syntax by dropping required double quotes. A dozen bug fixes round out the update, including a fix for the classic quirk where Alt+Space pauses Chrome and corrections for Electron rendering glitches in the overview. With nearly 3.8k GitHub stars and a brisk weekly release cadence, Mango continues to position itself as a lightweight alternative to heavier compositors like Hyprland.
Seven Linux distros rolled out security updates this week, led by SUSE's Critical WebKit2GTK3 patch packing 233 CVEs and pushing the package to 2.54.1. Debian and Ubuntu came hot on the heels of that haul, with Firefox ESR absorbing 59 CVEs and curl plus Bind stacking up 27 and 24 respectively. Exim tops Fedora's October 15 batch with RCE and SMTP smuggling fixes, while Red Hat, AlmaLinux, and Rocky round out a heavy round of kernel, domain-controller, and package patches. The practical advice is to patch the remote-facing stack first, curl, Bind, and exim before everything else—rather than reacting to severity badges alone.
Six new reviews landed today, and four of them make the case for buying the less-expensive version of something premium. ID-Cooling's $50 Frozn A620 SLK delivers dual-tower cooling in a slim chassis, MSI's $749.99 34-inch QD-OLED wins an Editor's Choice award, and KEMOVE's sub-£100 K94 keyboard packs enthusiast features that rival far pricier boards. The standouts include Warhammer 40,000: Boltgun 2, a four-out-of-five boomer-shooter worth the price of a takeout coffee. The Welax S9 Pro chair and Lian Li's L-shaped EG0850Gv2 PSU are the notable misfires, offering adjustability and silence but stumbling on build quality and raw electrical performance.
Visual Studio Code 1.142 quietly makes the Copilot agent harness the default for new sessions and auto-migrates enterprise workspaces that use sandboxing or permissions. The update introduces preview Canvases for co-editing artifacts with agents and lets you move a chat between folders and Git worktrees without rebuilding its context. Smaller upgrades include a substantially expanded Markdown editor, harness names in chat titles, background shell controls, and a redesigned model picker. Taken together, the release cements Microsoft's strategy of steering developers toward its own SDK runtime while leaving third-party harnesses like Claude and Codex as opt-in alternatives.
Heroic Games Launcher released version 2.22.4 today, a terse little hotfix that resolves two real headaches: a broken GOG login triggered by GOG's Cloudflare anti-bot check, and native Linux games being silently rerouted through Proton/UMU. The GOG fix matters most, since a failed sign-in disables library syncing, cloud saves, and deal browsing for one of the launcher's three core stores. It also quietly adds ARM64 Flatpak build support, stops Heroic from chmod-ing native binaries on exit, and rolls in fresh translation updates across 40-plus languages. With these issues cleared, the release wraps up a rocky 2.22 series and clears the runway for Heroic's next major update, which is expected to deepen its itch.io, Humble Bundle, and Steam integrations.
2026-10-14
Zed Industries released version 1.24.2 as its latest stable build today, shipping 90+ changes across AI, Git, debugging, language support, and platform polish. The headline additions let you create Git tags locally, drag terminal tabs into the Agent Panel for live shell context, and pre-fill the File Finder with your selected text. A 23 percent shrink to the x86_64 Linux binary is the biggest performance win, alongside fixes for emoji rendering, .env files, and several crashes. Though it's more steady polish than a game-changer, the update reinforces Zed's model-agnostic, high-performance stance in an increasingly crowded AI editor market.
Node.js shipped two point releases on the same day, adding Node.js 26.12.0 to the Current line and Node.js 24.22.0 "Krypton" to the active LTS. The Current release delivers websocket mask helpers, clearer errors for missing WebAssembly and RX support, and steady progress on synchronous ESM loading, though it stays lean overall. The LTS line is the more developer-facing upgrade, packing a crypto-heavy refresh, including PKCS12 parsing, SIV encryption modes, and provider-aware cipher discovery, alongside native throttle, debounce, and bound-socket transfer utilities. Both are backward-compatible, so upgrading is low risk, but teams should still test against their own workloads before shipping.
Mesa 26.2.5 bringing 112 commits from 45 contributors to the stable 26.2.x branch. It's a pure bugfix release with no new features, focused on stopping crashes, frame corruption, and memory leaks. AMD's stack absorbed the largest share of fixes, while Mike Blumenkrantz alone handled a third of the work through Zink and swapchain improvements. The next point release lands October 28th, with Mesa 26.3 arriving in November to enable Intel's "Jay" compiler by default.
Epic Games shipped its first-ever native Linux launcher today, available today as an optional "Preview" across Windows, macOS, and Linux. The faster, lighter client was built partly with AI tooling in a self-deprecating "vibe coded" project that engineers still supervised. It officially supports Ubuntu 22.04+, Fedora 43+, and Debian 12+, running Windows games through GE-Proton while keeping the old launcher fully intact. Meanwhile, Epic outlined an ambitious plan to bring Fortnite to Linux via its rebuilt EAC Linux v2 anti-cheat, though the demanding security requirements leave Steam Deck and SteamOS behind for now.
Microsoft shipped another Visual Studio Code update today as one-PR patch by engineer Alex Ross that closed 14 user-filed issues in a single week. The culprit was a security change from the earlier 1.141.1 release, which made extension webviews go blank for anyone whose remote connection used an authority with uppercase letters. The fix restores case-insensitive authority matching while keeping resource containment and OS checks intact. Small by the numbers, but those 14 linked issues reveal just how many WSL and SSH users got caught out.
NGINX released paired updates to both its mainline (1.31.7) and stable (1.30.6) branches today, fixing five medium-severity vulnerabilities rated by parent company F5. Two of those flaws—CVE-2026-15176 and CVE-2026-97205—stretch all the way back to 2009, leaving a large share of the roughly one-third of websites run on nginx potentially exposed. The mainline drop adds features like MaxMind MMDB GeoIP support, QUIC hot-reload and binary upgrade, and IP-based backend SSL verification, while stable stays fixes-only. Operators are urged to upgrade immediately regardless of branch, and to abandon the end-of-life 1.29.x and 1.28.x lines.
KDE Plasma 6.8 shipped today as the "30th Anniversary Edition," landing exactly 30 years after the project's founding. The release retires X11 session support to fully commit to Wayland, while adding a built-in dwell-clicker, a polished remote-desktop server, and window-decoration rules that make Steam windows look more at home. The biggest behind-the-scenes win is Union, now in beta, which aims to become a single theming engine for both Qt Quick and Qt Widgets apps, though it still isn't ready for everyday use. With requirements bumped to Qt 6.11.0 and KDE Frameworks 6.30.0 across a 7,000-line changelog, it's available now via live USB images, KDE neon, or from source.
Today's Linux security roundup spanned eight distros, with Ubuntu's kernel notices carrying a staggering 1,050 CVEs each and Fedora's Chromium bump bundling 247 fixes. Ubuntu's biggest priority is CVE-2023-20585, the AMD SEV-SNP hole that lets local hypervisor attackers corrupt confidential guest memory. Fedora's standout is Chromium 155, alongside Firefox 158.0 and a curl fix for a use-after-free that enables remote code execution over HTTP/2. Across AlmaLinux, Debian, RHEL, Rocky, SUSE, and Slackware, the real RCEs to patch first include pcre2, Dovecot, php8, and the expat integer overflow.
IPFire 2.29 Core Update 204 released today as a housekeeping release that fixes a DNS regression and ships dozens of security updates. The headline repair addresses a bug that left VPN users unable to resolve names after the CU 203 migration to Knot Resolver, with the fix contributed upstream rather than patched locally. Alongside the DNS work, the update bumps OpenSSL, OpenSSH, BIND, and cURL, adds a community phishing-protection ruleset, and tunes experimental RISC-V builds for out-of-order cores. Existing 2.29 users can apply Core Update 204 directly through Pakfire, and IPFire is teasing a major monitoring and reporting upgrade for a near-future release.
A component shortage, sky-high DDR5 memory prices, and a 20 percent plunge in global PC shipments have turned value into the only metric that matters this week. The contrast is sharpest on motherboards, where the $169 ASRock X870 Challenger handily outshines the $800 Gigabyte X870 Aorus Infinity despite the latter's class-leading overclocking credentials. Framework's repairable Laptop 12, be quiet!'s first-ever gaming mice, and Gears of War: E-Day round out a lineup where cheap boards earn the value honors while flagships get graded harder.
Python 3.16.0a1 shipped October 13, 2026, marking the first of seven planned previews before the stable October 5, 2027 release. The cycle's biggest question is whether CPython's experimental JIT compiler survives, following a June 2026 Steering Council ultimatum and the response in PEP 836. Real language changes are still being debated, including frozenset syntax (PEP 841), an export statement (PEP 843), and public()/private() builtins (PEP 844). What's already in this alpha is mostly standard-library polish, such as regex set operations, half-turn math functions, and a major curses overhaul.
Open-source inference engine Strata released version 0.1.44 on October 13, followed by a hotfix just five hours later. The MIT-licensed tool, built by a developer known only as "Niko," runs Qwen3.8-Flash-Next, a 125-billion-parameter Alibaba model, on a single consumer GPU with 12 GB of VRAM. The new versions add native Apple Silicon support for M1 through M5 Macs, first-class Unsloth quantized formats, and NVIDIA-only NVFP4 packs, all while keeping answers mostly byte-identical to earlier builds.
Visual Studio Code 1.141 shipped on October 7, 2026, transforming the editor into an AI agent control center with a unified Copilot harness, a session grid, cross-app handoffs, and cross-platform sandboxing. Microsoft followed up just six days later with Update 1.141.1, a security patch that closes two path-traversal vulnerabilities, including a Critical 9.6 remote code execution flaw (CVE-2026-102238). That RCE requires user interaction to exploit and shows no signs of wild use, but it affects every version from 1.0.0 through 1.141.0. Microsoft recommends upgrading to 1.141.1 immediately and reviewing your sandbox settings before handing agents broad access to files and the network.
Kdenlive 26.08.2 has been released as the second maintenance update of the KDE 26.08 series and part of the broader KDE Gear 26.08.2 cycle. The release focuses on stability over new features, with fixes spread across project handling, proxy clips, audio recording, and the QML-based title editor. A standout change lets the Dynamic Text filter start its frame count at 1 instead of 0, a subtle but useful tweak for countdowns and timers. The free, open-source editor remains free of paywalls and data tracking, with its next major 26.12 release already pointing toward 10-bit and 12-bit color support.
GloriousEggroll shipped GE-Proton 11-8 on October 13 and a hotfix, 11-9, just three and a half hours later, both rebased on Valve's Proton 11 and Wine 11. The 11-8 feature release tightened controller support, Wayland windowing, video playback, and HDR handling after a roughly three-month drought that had the community calling the fork overdue. 11-9 patched a Crimson Desert menu hang and corrected a broken HDR detection regression that had misreported HDR displays as SDR, restoring quick trust in the project's maintenance cadence. The updates also keep alive the broader debate over AI-generated code in Wine, where GE-Proton leans on AI to move fast even though upstream Wine blocks AI-sourced contributions from going live.
[ Archive ]
