Anonymous
2025-08-15 09:51
2025-08-15 09:51
Product
Last Report
Anonymous
2024-07-07 07:01
2024-07-07 07:01
Anonymous
2024-02-07 19:23
2024-02-07 19:23
Anonymous
2026-09-01 09:28
2026-09-01 09:28
Anonymous
2026-07-19 18:49
2026-07-19 18:49
Anonymous
2026-06-11 07:27
2026-06-11 07:27
Anonymous
2019-11-27 17:19
2019-11-27 17:19
Anonymous
2019-11-11 09:02
2019-11-11 09:02
Anonymous
2019-07-21 13:03
2019-07-21 13:03
2026-11-06
Apache has released HTTP Server 2.4.70, its newest General Availability build in the 2.4.x stable branch, announced today. This is fundamentally a bug-fix and hardening release rather than a feature drop, patching crashes in mod_authnz_ldap, overflows in mod_dav_lock, and edge-case issues across mod_cgid, mod_substitute, and mod_cache. Although it carries no new CVEs, it builds on the security-heavy 2026 cycle led by 2.4.69 and bundles roughly two years of fixes on top of earlier releases.
HestiaCP 1.10.6 landed today as a security-first "service release," hardening restore scripts against symlink attacks and closing a File Manager path-traversal bug. The patch also strengthens Exim HELO checks, fixes input-validation flaws, and reworks password and redirect handling across the panel. Beyond hardening, it adds ECDSA Let's Encrypt certificate support, custom DKIM selectors, and auto-patching for hosted services like nginx, Apache, and MariaDB through unattended-upgrades. It sits atop a fast release pace from the team, offering a free alternative to paid panels like cPanel and DirectAdmin.
Today's 14 hardware reviews highlight OLED's slide into the mainstream, with a $279 UPERFECT portable monitor now joining a $7,899 MacBook Pro on 3K-class OLED panels. Reviewers increasingly recommend buying laptops like the HP OmniBook Ultra 16 and Apple's M6 MacBook Pro by build quality, weight, and price rather than synthetic benchmarks, whose deltas have all but vanished. AMD's 9900X3D versus 9950X3D head-to-head argues that core layout and clock speed outrank cache size near the $100 gap. Meanwhile smaller gear, Logitech's 59-gram G305 X SUPERLIGHT, be quiet!'s silent keyboard, Corsair's safety-first RM850e PSU, and Alphacool's reformulated Apex 2 paste, drives a broader value-and-efficiency theme.
Remi Collet has published testing builds of PHP 8.4.28RC1 and 8.5.13RC1 in his repository for Fedora 43–45 and RHEL-based distros like CentOS Stream, AlmaLinux and Rocky Linux. Both supported branches can be installed as base packages in the remi-modular-test repo or as Software Collections via remi-test for safe parallel testing. The releases arrive just months after the PHP2Shell security flaws forced operators to rush toward 8.4.27 and 8.5.12, making these RCs a natural next step in the upgrade path.
Bazzite Linux 45.20261105 shipped on November 5, 2026, one day after a one-line housekeeping patch and two days after the project's first Fedora 45 stable build. The new image quietly adds detection for Valve's upcoming Steam Machine (codename "Fremont"), along with follow-up anti-cheat improvements for Valve hardware and Nvidia GPU passthrough for cooler-control containers. Its major packages are unchanged from the previous build, with SteamOS-Manager being the only real version bump. In short, the release trades flash for stability while pointing Bazzite toward Valve's living-room console and better Nvidia support.
Microsoft shipped Visual Studio Code 1.145.1 today, a patch that adds just two targeted corrections to the existing 1.145 feature set. Both fixes target telemetry inside the Copilot Agent Host, correcting bugs that could misattribute model-call pairing IDs and lose account identity after an account switch. The update also patches two user-facing issues: read-only chats when an agent is disabled by policy, and a governance gap where a failed MCP refresh could drop registry-only restrictions. Together, the release marks another step in VS Code's shift from a text editor into a fully managed AI-agent platform.
2026-11-05
FEX-2611 shipped as the eleventh monthly feature release of 2026 for the open-source x86-on-ARM64 emulator led by Ryan "Sonicadvance1" Houdek. The update's headline addition is AVX-NE-CONVERT support, which lets x86 AI-inference code convert between bfloat16, FP16, and FP32 formats on ARM silicon. It also fixes a memory-load bug that broke the indie game Necesse and advances FEX's ARM64EC work, which paves the way for running x86 Windows games on ARM Linux through Steam. Available under MIT, the release can be built with the tagged git clone or the InstallFEX.py script.
Systemd 262.2 shipped today as an incremental patch built on the 262 major release. It packs roughly 200 commits from around 50 contributors across subsystems like vmspawn, networkd, resolved, and the cloud metadata daemon. The biggest wins lean security, with TPM credentials pinned to the Storage Root Key, expanded TDX and SEV-SNP confidential computing, and network DoS guardrails. Expect it to hit Debian, Fedora, Gentoo, and other distro repositories within days, so a routine update should get you covered.
The OpenVPN community project released version 2.7.9 on November 5, 2026, officially a bugfix release that also fixes several security issues centered on the Windows build. The two new CVEs, both found by researcher Heiko Hund, harden the interactive service by restricting DLL loading, running openvpn.exe at high integrity, and tightening environment-variable and command-line handling. Beyond security, the update adds Linux packet prioritization via IFF_BACKPRESSURE, a Windows GUI username pre-fill hint, and ongoing OpenSSL 4.1 and buffer-hardening work. Windows users running the service or GUI should update now, with 64-bit, 32-bit, and ARM64 MSI installers plus a signed source tarball available from the GitHub release page.
yserver 1.9.0, released today, adds native Windows support to the from-scratch Rust X11 server, its first platform outside Linux, the BSDs, and macOS. The Windows build runs on Windows 11 in x86_64 and aarch64 with a Vulkan 1.3 requirement, offering rootless and rooted modes, a shared clipboard, DPI awareness, and ssh -Y X forwarding via portable, no-install zips. Beyond Windows, the release claims window operations up to 700× faster on slow hardware, the first steps toward client isolation through xhost-style access control, and a pile of Xorg-parity correctness fixes. Developed largely with AI coding agents under a strict spec-first methodology, yserver is already a live example of a security-relevant systems project built that way, with 614 stars and 38 forks on GitHub.
Alpine Linux disclosed a passwordless SSH login flaw with no CVE yet, working in a single connection when OpenSSH runs without PAM. Debian and Ubuntu both fixed a shared APT vulnerability that lets a man-in-the-middle swap verified packages and get arbitrary root code execution, with Ubuntu backing all the way to 14.04 LTS. Fedora's batch centers on the still-lingering eMudhra CA distrust plus a Python update bundling four interpreter versions, while fence-agents Criticals and 145-CVE Firefox pushes show up across RHEL, Oracle, Rocky, and AlmaLinux. The practical advice: patch Alpine sshd and restart the daemon, grab the APT fix even on old releases, and pull Fedora's Python update first.
KDE shipped KDE Gear 26.08.3 on November 5, 2026, a maintenance update touching more than 180 applications and dozens of libraries. There are no new features; it's a bugfix pass that patches crashes, closes regressions, and hardens code. The standout changes include a security hardening sweep in KDE Connect and major stability fixes for the Kdenlive video editor.
Strata 0.2.11 shipped on 5 November 2026, adding seven new Unsloth model files compressed from roughly 1-bit to 4-bit that let you run Alibaba's 125-billion-parameter Qwen3.8-Flash-Next on hardware with as little as 12 GB of VRAM. The release also speeds up prompt processing by up to 70% on NVIDIA cards and 32.7% on four Radeon AI PRO R9700 cards, while fixing multi-card starts that previously failed outright. A standout change is a privacy fix for issue #2892 that stops replies from being routed to the wrong user, along with conversations now saved as files instead of browser storage. It's the most feature-rich release from Niko Veit's fast-rising project, though the numbers are self-reported and low-bit quality still has limits.
Alpine Linux released four coordinated point updates today, fixing a critical OpenSSH flaw that lets attackers log in without a password using just a single, unusually long login attempt. The bypass works when sshd runs without PAM, password authentication is enabled, and at least one account has a scrypt or SHA hash nearby, which covers a lot of default Alpine setups. Alpine shipped the fix via OpenSSH 10.6p2 while still patching the now-EOL 3.21 branch and backing all the way down to 3.16, alongside a separate apk-tools crash fix spanning both package-manager generations. If you run sshd, upgrade with apk upgrade -U -a and restart the daemon, since the running service keeps serving the vulnerable code until you do.
Today's reviews are dominated by value, with six of eight new products pitched as more features per dollar. The standouts include a $49 NZXT S5 RGB case that ships with a 360mm fan, the ~$80 Cougar DUOAIR RGB, which cools GPUs better than pricier cases, and the £779 Philips Evnia Penta Tandem QD-OLED monitor that earns a 4.5/5 despite US unavailability. Keyboard makers are pushing silent tactile switches with the be quiet! Light Mount TKL and EPOMAKER RT75 both landing under $120, while the Logitech G Pro X3 mouse is praised as better than its predecessor yet deemed not worth $200. Storage gets an affordable entry into PCIe 5.0 with Kioxia's DRAM-less QLC Exceria G3, though sustained performance and endurance remain the catch.
NVIDIA released its first Linux R620 production-driver build, 620.70.06, and it's mostly here to tidy up messes rather than add features. The headline fix resolves the Assassin's Creed Shadows hang that had plagued Linux gamers for about three months. It also patches Final Fantasy VII Rebirth crashes, improves Wayland performance, and fixes a kernel crash on servers. NVIDIA says it's a sensible upgrade from the 595 series, though users should confirm GPU and distro compatibility first.
LXQt 2.5.0 shipped today, with its newest feature release bumping the Qt floor to 6.10 and cutting its final LXDE tie by folding menu-cache into libfm-qt. The terminal stack took the brunt of the development, gaining background images, OSC-8 hyperlinks, a visual bell, and range selection. The maintainers also honestly flagged an X11 regression from libkscreen-6.8 and promised a point release to fix it. Available across virtually every major Linux distribution, the update keeps LXQt current without losing its lightweight ethos.
Simple Taskbar 7.2.0, a popular GNOME Shell extension, released today with a new settings search box and a batch of panel and geometry improvements. The update reads as a polish-and-usability release rather than a feature bomb, refining icon magnification, adaptive sizing, and fixes for vertical and multi-monitor setups. It supports GNOME Shell 48 through 51, collects no telemetry, and is available for free through the GNOME Extensions store or by building from source.
AM version 10.7 has pushed its AppImage package catalog to 9,233 unique applications, more than doubling since the September 10.5 build. That surge comes largely from an improved -t template option that automates the creation of install scripts for GitHub-hosted AppImages, reportedly generating 15 scripts per minute. The real drama, though, is a public falling-out between Sala and the upstream AppImage maintainers over stricter validation in appimagetool, which now turns warnings like broken icons into hard build failures. Rather than reconcile, Sala forked both appimagetool and type2-runtime and shifted to Pkgforge's implementation, a split many are reading as an early fault line in the fight over Linux desktop packaging.
Bottles 67.6, the latest stable release of the open-source tool for running Windows apps and games on Linux. The update lets you move and duplicate bottles into custom locations, adds per-bottle notes, and introduces three new DPI scaling modes. Its most technically interesting work deepens UMU integration, letting you run Proton games outside Steam with optional launch controls and in-library download progress. A broad sweep of fixes rounds out the release, tackling interrupted downloads, Battle.net relaunch loops, Fsync/NTSync toggling, and external-drive import regressions.
Ungoogled-chromium released version 157.0.8103.38-1 today, marking a rare all-platforms build that covers Linux, Windows, and macOS rather than the usual Linux-only drop. The version inherits Chromium 157's unusually large haul of 213 security fixes, seven of which are rated Critical and target graphics and rendering subsystems. As a de-Googled fork, it strips out Google's background requests and services, giving privacy-conscious users stock Chromium without the phone-home behavior. Users must accept trade-offs like no auto-updater, no Widevine DRM, and cookies that clear on close, but can install it through most package managers or build it from source for a fully verifiable copy.
Shelly ALPM v3.2.0, codenamed "The Bug Bash," shipped today as a targeted bug-fix pass over one of the project's most aggressive rewrite cycles. It follows the introduction of RLPM, a from-scratch Zig reimplementation of Arch's libalpm that Shelly quietly developed while it became CachyOS's default package manager. The release corrects real regressions, including a Flatpak elevation break, a stuck tray icon, broken restart detection, and flaky AUR builds, while tucking in features like multi-package downgrades and live download-speed readouts. It's not a feature-heavy update, but the project's candor about its still-incomplete libalpm compatibility makes it worth paying attention to as it now serves hundreds of thousands of users.
Liquorix maintainer Steven Barrett tagged kernel 7.2-25 on GitHub November 4, another release built on top of upstream Linux 7.2.15. The release centers on four patches to the custom sched/alt scheduler that tighten task placement on cores and refine "sleep credit" priority boosts. It's a maintenance and refinement release rather than a feature bump, aimed at shaving microseconds off wake latency to make interactive workloads feel snappier. Liquorix remains a single-maintainer, AMD64-only kernel that improves responsiveness in gaming and A/V production while trading some raw throughput.
Canonical released Mir 2.31.0 on 4 November 2026, a stabilization update to the open-source display-server library built from 366 commits across 21 contributors. The release bumps no library ABIs and removes no public APIs, sending a deliberate signal that it's a safe upgrade for integrators. Headline changes include a freely positioned on-screen magnifier, a new output-configuration API, and experimental privacy-preserving buffer-capture support. Mir keeps powering Ubuntu Frame, Miriway, and Ubuntu Touch as the project edges toward a fully Rust-based compositor on its published roadmap.
[ Archive ]
