Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-11-11
Apache released HTTP Server 2.4.71 today, calling it the best version of the web server they've ever shipped while urging everyone to upgrade. The headline fix is CVE-2026-119618, a critical remote code-execution flaw in the HTTP/2 module that affects anything from 2.4.55 through 2.4.70. Two smaller vulnerabilities also landed, including a crash bug in the auto-certificate module and a one-byte buffer overflow that only hits the two most recent releases. The project has been moving fast all year, so operators are being pushed to patch immediately and migrate off the end-of-life 2.2 branch.
Visual Studio Code 1.146.0 shipped today as the latest stable release, and its headline move is deprecating the legacy Local agent harness, which will be fully removed by February 2027. Microsoft is standardizing on the Copilot harness, the default for new sessions since 1.143, since it runs on the Agent Host and enforces managed sandbox policies the old runtime can't. Beyond the sunset, the update adds session triage tools like Inbox mode and OS-level chat windows, plus more granular permission prompts and environment-variable masking for sandboxed agents. As always under the now-weekly cadence, it lands as a consolidation step rather than a single marquee feature, cementing VS Code's shift from editor into an agent orchestration platform.
NZXT's coordinated launch of refreshed H5 and H7 cases plus C1000 and C1200 power supplies drove most of today's roundup, with curved single-piece glass and mesh-or-glass modularity winning praise. The H5 RGB+ earns top marks for looks at £119.90, while the H7 offers interchangeable Vista and Aero tops, though reviewers repeatedly flag the proprietary Control Hub Lite and weak value scores. Beyond NZXT, igor'sLAB's rigorous PCM thermal-pad testing, the budget-friendly Surface Mouse 2's Windows 11 haptics, and the surprisingly quiet Gigabyte PSU round out a day of mixed verdicts. Buyers should brace for grim news on memory, with a Patriot DDR5-6000 32GB kit landing at an eye-watering $695 as AI-driven demand hammers consumer DRAM prices.
Bazzite 45.20261111 shipped today as the latest stable image from Universal Blue, the team behind the gaming-focused Linux distro. The release's headline upgrades are a jump to the OGC Linux 7.3.3 kernel and an open Nvidia driver leap to the 620 series (620.70.06-1). Alongside those, the gaming stack gains Gamescope 3.17.0, MangoHUD 0.8.4, and a major PowerStation bump to 0.9.0-1. Because Bazzite is immutable with automatic rollback, updating is low-risk, and users can either rebase to stable or pin this exact release from the Universal Blue GitHub repo.
Python 3.16.0a2 shipped November 10 as the second of seven planned alphas, per release manager Savannah Ostrowski, and it remains a preview build not meant for production. It targets a final release on October 5, 2027, with feature freezing at beta 1 on May 4, 2027. This build delivers faster startup, a 15-to-30× speedup in UUID generation, and richer regex support with nested character sets and Unicode property escapes. Meanwhile, the biggest debates still loom: a possible ?? coalescing operator sponsored by Guido van Rossum, a withdrawn plan to formalize the JIT compiler, and a revived opt-in garbage collection scheme after 3.14's botched attempt.
Microsoft has shipped VS Code 1.145.3, a security-only patch covering 17 vulnerabilities, all of which were fixed on November 10, 2026. The biggest theme is the AI-agent attack surface, with six of the fixes addressing remote code execution holes in MCP integrations, the integrated browser and agent command execution. The most alarming is a JS debugger auto-attach flaw that lets a malicious folder run code with zero user interaction. Microsoft says the fix is already out, so updating to 1.145.3 or later is the obvious move.
XanMod shipped two simultaneous custom Linux kernel builds on Tuesday, November 10, 2026, placing MAIN at 7.3.4-xanmod1 and LTS at 6.18.63-xanmod1. Both track upstream stable releases that Greg Kroah-Hartman flagged with mandatory upgrade advisories, backed by unusually large batches of more than 1,250 and 860 patches respectively. The updates pack real security hardening, including a TSA mitigation for AMD Zen5 hardware and a series of NULL-pointer and refcount fixes. Installed on top of a heavily tuned patchset, XanMod remains a popular pick for gamers and tinkerers willing to rebuild kernel modules by hand.
Liquorix maintainer Steven Barrett released the 7.3-2 kernel build on Tuesday, November 10, folding the security-hardened Linux 7.3.4 into the distro's familiar low-latency configuration. He's deliberately calling it a "capstone" build, pausing months of experimental Project-C scheduler tweaks in favor of a stable, well-tested baseline. The kernel targets Debian, Ubuntu, Fedora, and Arch Linux on AMD64 only, tuned for gamers, audio/video producers, and desktop power users who value responsiveness over raw throughput.
Greg Kroah-Hartman released two Linux kernel updates on 10 November 2026, one each for the fast stable branch (7.3.4) and the 2025 LTS track (6.18.63). Both patches lean heavily on security, folding in two Xen netback advisories (XSA-531 and XSA-532), an AMD Zen 5 TSA_FILL CPU mitigation, and a cluster of AppArmor hardening fixes. The 6.18.63 LTS patch is the larger of the two, packing out-of-bounds-read and integer-overflow fixes into the Ceph client, BPF map handling, and the networking stack. While 7.3.4 sits in pure maintenance mode with mainline already on 7.4-rc2, both updates remain available to download from kernel.org.
2026-11-10
Greg Kroah-Hartman has released Linux kernel 6.12.117, the latest point update in the 6.12 LTS series, on November 10, 2026. It carries the "all users must upgrade" advisory, signaling that security and memory-safety fixes are included in this stable release. Building on 6.12.116's Xen virtualization fixes, it backports reviewed patches rather than adding new features. The 6.12 LTS series is supported until December 2028, giving users roughly two more years of updates.
PHP 8.6.0 RC6 was tagged today by release manager Joe Ferguson, arriving just nine days before the final stable PHP 8.6.0 release. As the sixth and last release candidate, it's a stabilization build carrying only four targeted fixes rather than new features. The changes span Core ABI padding, a timelib date bump, libmagic Fileinfo regressions, and a Streams use-after-free. Test it in non-production environments now, but hold off on production until GA ships on 19 November.
Rhe X.Org Foundation released emergency updates closing eight memory-safety vulnerabilities in xorg-server (21.1.26) and XWayland (24.1.15). Seven flaws affect both codebases, while the eighth, an out-of-bounds EDID write, bites only the full X.Org Server. Most bugs are integer overflows and length-check bypasses that could crash the display server or enable local privilege escalation, and they were found largely with AI/LLM assistance. Users should update to at least these versions, ideally verifying the package before rebuilding from source.
Intel released the first candidate for its Linux NPU driver, version 1.39.0, to give developers a chance to validate before the final tag. The drop upgrades the bundled NPU compiler and Level Zero to v1.33.1, ships firmware for the 37xx, 40xx, and 50xx chip families, and re-enables the Compiler-In-Plugin path that Intel favors for on-device runtime compilation. A highlighted addition is the intel-npu-smi monitoring tool, now formally documented so users can watch NPU power, frequency, and utilization from the terminal. Production users should test the RC first and hold off on broad rollout until the final v1.39.0 release lands.
KDE released Plasma 6.8.3 today, a maintenance update that patches the rough edges left by 6.8's switch to a Wayland-only desktop. The headline fix stops desktop icons from scrambling when you swap monitors, while Spectacle's background mode runs faster and a Create Folder shortcut is finally visible. Most of the real work happens beneath the surface in KWin, with fixes for triple-buffering, HDR color, and a jagged cursor in screen-sharing. The update is available now through rolling-release distros, live USB images, or a from-source build.
Eleven Linux distros shipped security updates in today's roundup, and one SUSE Firefox ESR change alone absorbed a staggering 147 CVEs. Red Hat's scariest move was a Critical patch for edk2 firmware on RHEL 10, where a hole sits below the boot process. Debian included a Telegram Desktop flaw that lets an attacker steal session keys and hijack an account with a single crafted link. Across the board, the same curl and glibc flaws surfaced on Oracle and Ubuntu, so network-facing services are the priority here.
Six recent hardware reviews from November 2026 converge on one surprising conclusion: buyers frequently pay a premium they don't need to. The Acer Predator Helios Neo 16S AI, Razer Reclusa Mini 65%, and XPG NIMBUS PLUS each ask for more money, yet a cheaper base model or a simple price drop usually delivers most of the value. Meanwhile, raw specs don't translate to quality, as the PCCooler SU2500 proves by topping out on paper while failing EMI tests and running loud, while the SIVGA M260 and GIGABYTE Z890 board punch far above their price. The consistent takeaway is that feel, fitment, and honest pricing matter far more than the biggest number on the spec sheet.
Shelly ALPM v3.2.1 adds Shelly-TUI, a brand-new terminal interface for installing, removing, and updating packages. The text-based UI is led by contributor VinnyQF and marks Shelly's third way to use the tool, joining its existing GTK4 app and command-line client. Alongside the release, the project keeps pushing RLPM, a from-scratch Zig rewrite of libalpm that brings security-conscious design but remains work in progress. As CachyOS's default package manager since April 2026, Shelly reaches far beyond hobbyist forums, making this update notably impactful for Arch Linux users.
[ Archive ]
