BlueOnyx has refreshed its server distribution lineup with three concurrent generations, headlined by the new 5212R branch built on AlmaLinux 10 with PHP 8.5 and OpenSSL 4.x. The free, open-source hosting panel traces its lineage to Cobalt Networks and Sun Microsystems, offering a no-per-account-licensing alternative to cPanel across AlmaLinux 8, 9, and 10 bases. Recent updates include a newly released AI Assistant for server troubleshooting, a complete overhaul of 2FA implementation, and updated ISOs rebuilt with reproducible tooling for all three branches. Maintained by Michael Stauber, the project continues to provide a stable, multi-tenant web hosting platform complete with email, DNS, and database management without recurring licensing fees.
Raspberry Pi Imager 2.0.11 has arrived, introducing an embedded network installer and multi-frame .img.zst support in its latest stable update. This release doubles down on write reliability with exclusive drive locks on Windows and macOS, alongside a centralized credential hashing system for safer OS customisation. The build pipeline now supports rootless multi-arch builds and properly bundles transitive libraries for AppImages, though the intentional performance trade-off for data integrity remains in effect. You can grab the full set of assets, including CLI and embedded variants, from the official GitHub releases page.
D7VK 2.1 pivots from chasing raw FPS numbers to delivering deep load-time and startup optimizations for legacy Direct3D titles on Linux. Single developer WinterSnowfall reports that the update slashes loading screens by over 50% in select games while producing 3DMark scores on a 37-watt laptop that rival an RTX 4070 running older software builds. The patch also resolves long-standing compatibility issues, eliminating startup crashes in Arx Fatalis and fixing rendering artifacts in Resident Evil 2 and Empire Earth. You can grab the updated ddraw.dll directly from the project's GitHub repository and verify the layer is active using the DXVK_HUD=1 environment variable.
Seafoam Labs released Shelly ALPM v3.0.6 on August 14, 2026, with a maintenance build that prioritizes code quality over new features. The update integrates Valgrind into the CI pipeline, patches the small heap leaks it uncovered, and corrects .desktop file and submenu ID handling for cleaner desktop environment integration. This patch follows the project's massive v3.0.0 overhaul in late July, which stripped the C# and .NET backend to rebuild the core, CLI, GTK4 frontend, and keyring natively in Zig.
OBS Studio 32.2.2 dropped on August 14 to patch a Windows plugin loading bug and unblock the app on macOS 12, but Linux users should hold their breath on package managers. The official Ubuntu PPA and Flathub Flatpak are still serving version 32.2.1, though direct .deb downloads are already live on GitHub for Ubuntu 24.04 and 26.04. Linux streamers will actually benefit more from the 32.2 feature wave, which finally fixes PipeWire drops on NVIDIA GPUs, restores VAAPI AV1 encoding over WHIP, and bumps OpenGL performance on low-end hardware.
AppMan 10.4.1 resolves a critical data-loss regression introduced in the 10.4 release, where the reinstall command failed to preserve .home and .config directories for portable AppImages. The fix extends the backup-and-restore logic from the relocate option to reinstall, copying portable data to a temporary location before wiping the app directory to ensure a safety net for users. Alongside the hotfix, the update adds three new packages contributed by the community: PanConvert for document conversion, boris for behavioral observation, and t3-code for AI-assisted coding.
HestiaCP 1.10.2 has arrived as a service release, dropping just 17 hours after the massive 1.10.0 major update to address three immediate regressions. The hotfix patches two session-isolation vulnerabilities in the bundled file manager that could allow cross-user access to batch downloads and chunked uploads. It also corrects the Bind DNS SOA EXPIRE value to 1,209,600 seconds for better compliance and fixes a regression where sourcing /etc/os-release could overwrite the internal version variable during upgrades. Users on the 1.10.x branch can apply the changes now via the standard upgrade path.
Bottles 66.0 lis now available, introducing UMU launcher integration, ProtoSoda as the default runtime, and an experimental cpak package format. Instead of letting the major release settle, the team pushed five consecutive hotfixes between August 12 and August 14 to patch Flatpak path regressions, Steam runtime argument handling, and DLL case sensitivity issues. The intense two-day sprint not only stabilized the new features but also brought two new developers into the contributor ranks.
ChrisDKN has released v2.2.0 of Amethyst Mod Manager, the open-source Linux-native tool that competes with Windows-only managers like MO2 and Vortex. The update introduces a built-in Thunderstore browser and two-way Nexus Mods collection integration, giving Linux users a seamless way to manage mods across both major platforms. Five new games are now supported, including Risk of Rain 2, Inscryption, and R.E.P.O., bringing the total catalog to over 60 titles. The release also brings Linux-specific technical improvements such as case alias symlinks for Bethesda load times and multi-launcher detection for Steam, Heroic, Lutris, and Faugus.
Samba 4.24.6 is now available as a stable maintenance release containing 10 bug fixes that prioritize stability for CephFS-backed shares and clustered deployments following the security-heavy 4.24.5 update. The patch resolves critical crashes in vfs_ceph_snapshots and vfs_ceph_new, while Martin Schwenke from DDN contributes fixes for CTDB protocol issues regarding IP takeovers and nested elections. Core developers also addressed a memory leak in the Directory Replication Service, a pthreadpool race condition during forking, and various encoding inconsistencies across the S3 DFS server and DRS modules. Alongside the stable release, Samba 4.25.0rc1 was announced, bringing experimental SMB3 Persistent Handles and cluster-wide rate limiting to the next major development branch.
HestiaCP 1.10.0 has shipped, delivering a major security overhaul alongside a substantial feature update for the open-source server panel. The release addresses a string of critical vulnerabilities from the previous 1.9.x cycle by enforcing parameterized queries, stripping out eval() calls, and adding ordered firewall rules across the codebase. Feature-wise, administrators get full PHP 8.5 support, official Debian 13 and Ubuntu 26.04 LTS compatibility, and six new one-click installer apps including Shopware and ClassicPress. Existing users should run the standard upgrade command while skipping the beta repository rename, and older installations will need to apply the provided migration scripts for their OS and jail setup.
Zen Browser 1.21.14b drops today, updating the Firefox fork to engine 153.0.4 and adding FFmpeg 63 for faster media decoding. The stable build finally squashes a Window Sync hang triggered by container ID mismatches and patches a dark-mode contrast bug for Live Folders.
PostgreSQL has shipped maintenance updates for every supported version, including 18.6, 17.11, 16.15, 15.19, and 14.24, to patch 30 security vulnerabilities involving heap buffer overflows and remote code execution risks. The third beta of PostgreSQL 19 is also available, bringing a unified REPACK command, SQL Property Graph query support, and temporal data handling via the FOR PORTION OF clause. Performance and optimizer enhancements in the upcoming release include automatic NOT IN to ANTI JOIN conversions, SIMD-accelerated COPY FROM operations, and a switch to LZ4 as the default TOAST compression method.
The Exim development team released 4.100-RC3 on August 13, marking the third and final release candidate before the stable major update ships. The new branch introduces native DMARC evaluation, expanded log selectors, and a musl DNS out-of-bounds read fix for containerized environments. Legacy malware scanner bridges and outdated protocol support have been removed alongside a new versioning structure that separates security patches onto a dedicated branch. Operators running mail infrastructure should test the release candidate now, with the official 4.100 tag expected within weeks.
Bottles 66.2 dropped less than 24 hours after version 66.1, patching six critical regressions and tightening network calls for the popular Linux Wine and Proton manager. The hotfix resolves a bottle-deletion crash for multi-drive setups, restores custom Steam Runtime launch flags, and finally handles case-sensitive DLL conflicts for the XACT audio dependency. Lead maintainer Mirko Brombin also merged patches that properly detect NVIDIA's open-source NVK Vulkan driver, move heavy network requests off the main UI thread, and revive the external executable launch workflow. The update is available now via Flatpak and cpak, keeping the 143,000-download-strong community on stable ground before the next major feature push lands.
Shelly ALPM v3.0.5 hit the GitHub releases today, bringing just an updated Polkit warning and a routine branch back-merge to the v3.x line. The release lands just one day after the feature-packed v3.0.4, signaling that the team behind the Zig rewrite is shifting focus from rapid-fire development to post-stabilization polish. The quiet bump sits on top of the core architecture introduced back in late July, where the project finally ditched its .NET runtime to link directly to libalpm for genuine native performance across its GTK4 UI, CLI, and TUI modes. You can grab the 6.8 MB UI bundle directly from the GitHub releases page, or sync it through the AUR if you're running a CachyOS or Arch-based install.
AM, the open-source AppImage package manager for GNU/Linux, has released version 10.4, expanding its supported app database to 3,388 entries with a major focus on headless automation. The headline update introduces a global -y flag and enhanced non-interactive installation support, making the tool far more suitable for CI/CD pipelines, container builds, and unattended deployments without requiring manual prompts. Driven by a surge in community contributions following the maintainer's reduced involvement, the release also adds useful utilities like a relocate option for preserving portable profiles, a downgrade command, and fuzzy search suggestions for typos. Unlike Flatpak or Snap, AM keeps apps running natively outside of system package managers, though users should note that the script-based database relies on community-maintained installers rather than strict sandboxes.
Python's core team has released security-only source-only updates for Python 3.10.21, 3.11.16, and 3.12.14, confirming all three versions are now in maintenance mode with no further release cadence. The updates prioritize critical path traversal bypasses in tarfile and ZIP extraction on Windows, while also blocking remote code execution vectors in webbrowser, cookie handling, and WSGI status fields. Denial-of-service protections have been strengthened against exponential complexity attacks in csv, HTML parsing, and XML modules, complemented by a bundle update to libexpat 2.8.3 for improved billion laughs and hash flooding defenses. Users should upgrade immediately, especially those processing untrusted archives or structured data, as these patches address high-severity CVEs including a tarfile link-target escape and cookie control character injection.
Wireshark 4.6.8 is here, delivering 31 security patches that represent the largest single-release hardening effort in the tool's history. The updates focus on crashes triggered by malformed capture files, while also patching the Bluetooth stack, 5G telecom protocols, and the network-facing sharkd daemon. The Wireshark Foundation pushed the fixes alongside version 4.4.18 for long-term support users, closing memory corruption risks across dissectors for SSH, Kerberos, and various file parsers. Linux administrators should note that extcap binaries now default to /usr/libexec/wireshark/extcap, and teams relying on the tool for daily traffic analysis should update immediately to mitigate out-of-bounds read vulnerabilities.
Mesa 26.1.7 landed today, delivering a tight cluster of memory safety patches, compiler corrections, and driver-level workarounds to the stable 26.1.x maintenance branch. The update addresses long-standing buffer object refcounting bugs across the DRM shim, fixes float-to-int conversion artifacts in the NIR pipeline, and adds missing hardware stepping workarounds for Intel Arc and RDNA graphics. OpenCL developers also get a structural bump as Rusticl pivots to a community-maintained libclc fork verified against the official conformance suite. The maintenance branch will continue receiving stability-only patches through August 26, while feature development remains firmly locked to the newer 26.2.x track.
