Valve released Proton 11.0-2 on August 21, a targeted point release designed to patch the compatibility regressions introduced by the Wine 11.0 migration five weeks earlier. The build officially bumps vkd3d to version 2.0, marking a major stabilization milestone for Direct3D 12 translation on Linux, while DXVK and FEX-Emu also receive incremental updates. Nine newly validated titles join the "Now playable" list, and dozens of regression fixes restore functionality for everything from the Command & Conquer franchise to recently updated AAA games like Helldivers 2 and Marvel Rivals. SteamOS users get dedicated patches for Forza Horizon and NFS Hot Pursuit Remastered, ensuring the Deck stays viable across Valve's frequent kernel and driver rollouts.
Wine 11.16 dropped on August 21 as a development preview that finally adds VA-API hardware video decoding for H.264 streams, offloading playback directly to the GPU. The build bundles Mono 11.3.0, which introduces ARM64 support for Apple Silicon and native ARM Linux systems, alongside 35 bug fixes including a resolved Steam launch failure and a Wayland driver regression. Under the hood, the release focuses on hardening wow64 memory limits and authentication stacks, with about 40 commits from nine contributors pushing the patchset forward. You can grab the ~44.5 MiB source tarball from dl.winehq.org today, though sticking with the 11.0 stable line is still recommended for critical daily driving.
NetworkManager 1.58.1 dropped on August 21, 2026, primarily to fix a regression that broke automatic connections to WPA3 networks introduced in the previous release. The update enforces stricter security for private 802.1X connections by rejecting arbitrary CA paths, forcing users to rely on system-trusted certificates instead. Additionally, DNS port forwarding to systemd-resolved now works correctly, and mobile broadband interfaces finally enable IPv4 forwarding for gateway usage. While the base 1.58 release already removed dhclient support, this maintenance patch includes the final CVE-2026-10805 fix to prevent config injection in the deprecated backend.
Rust 1.98.0 is now stable, bringing a major performance boost for numerical workloads through new algebraic floating-point methods that allow the compiler to reorder f32 and f64 operations for better loop vectorization. The release also finally standardizes integer serialization with a format_into method and NumBuffer, which benchmarks show perform on par with the long-standing itoa crate. Beyond the headline features, the update stabilizes documentation for ManuallyDrop<Box<_>> behavior and adds a suite of new APIs for string slicing, UTF-16 conversion, and atomic mutations. Users can upgrade immediately via rustup update stable or review the full compiler and Cargo changes in the official GitHub release notes.
Exim has shipped version 4.100, marking exactly thirty years of continuous development since Philip Hazel first wrote the project at the University of Cambridge in 1995. The release consolidates two years of experimental additions like native DMARC evaluation, Public Suffix List lookups, and dynamic module enumeration, while specifically patching a use-after-free vulnerability and several performance regressions introduced during the 4.99 cycle. Security hardening remains the top priority, with taint tracking now extending to certificate extraction and the eval operator, alongside four high-severity CVEs addressed between April and August 2026
Mesa 26.2.1 landed today, delivering 55 targeted bug-fix commits for the open source graphics stack just fifteen days after the initial 26.2 development branch shipped. The update patches regressions across nearly every major driver, including a multi-viewport workaround for Unreal Engine 5 in RADV, descriptor heap alignment fixes in Intel's ANV, and a persistent buffer object refcounting leak that affected multiple Gallium backends. With the 26.x series pushing Vulkan 1.4 and OpenCL 3.1 support for hardware like Intel Panther Lake and AMD RDNA 4/5, these point releases act as a necessary safety net for early adopters running bleeding-edge drivers. The next bugfix drop is scheduled for September 2, 2026, though users preferring a conservative update path can stick with the stable Mesa 26.1.8 release that arrived yesterday.
X.Org Server 26.0.99.901 is the first release candidate for 26.1.0, marking a massive architectural shift by stripping Xwayland into a standalone project and removing the autoconf build system entirely. The cleanup deleted over 21,000 lines of legacy code, including DMX, EXA, and shadow pixmap extensions, while tightening security defaults to disable byte-swapped clients and font server connections by default. New additions include DPMS 1.2 support, multi-CRTC Xvfb capability, DRM platform support for BSD, and a meson-only build requirement with a minimum version of 1.0.0.
Mesa has shipped version 26.1.8, the final stable bugfix for its 26.1 graphics stack, bringing roughly 75 patches from over 30 contributors. The update targets critical rendering artifacts in AMD's RADV driver, cache flush timing on Intel's ANV backend, and dynamic state bugs in Qualcomm's Tu Vulkan driver. Project lead Eric Engestrom confirmed that no further maintenance updates will land on this branch, meaning users should migrate to the active 26.2 development series for ongoing fixes.
Zen Browser 1.21.15b shipped today on the stable channel, upgrading its engine from Firefox 153.0.4 to 154.0. The update brings cross-platform profile backup support for macOS, granular cookie exemption controls, and automatic language detection for full-page translations. Mozilla's MFSA2026-74 advisory landed alongside the release, patching over sixty CVEs including critical sandbox escapes and privilege escalation flaws in the Remote Settings and DOM networking stacks. Roughly every four-day release cadence in the 1.21 series signals serious momentum, though users should know that faster password storage performance is currently taking a hit following a recent architectural rewrite.
Nginx 1.31.4 is live, bringing native PROXY Protocol v2 support to the stream and mail modules for easier integration with modern cloud load balancers. The update also standardizes how HTTP/2 and gRPC requests are forwarded to backends, ensuring consistent authority and Host header handling for microservices. After a volatile security season that saw over a dozen CVEs patched across the first three mainline releases, this version focuses on stability with zero new vulnerabilities and fixes a binary regression for third-party modules. Operators running gRPC traffic or cloud proxies should upgrade immediately, while stable branch users on 1.28.x can verify their security patches before moving.
ISC released BIND 9.20.27 and BIND 9.21.25 today, making them the first monthly maintenance releases under ISC's new security cadence. BIND 9.20.27 is the stable update for production systems, while BIND 9.21.25 is the development branch for testing new features. The shift follows ISC's warning that LLM-driven code analysis is producing vulnerability reports at more than 10 times historic levels. If you run BIND 9.20, update to 9.20.27 now, and if you are still on BIND 9.18, migrate immediately because that branch is end of life.
Godot Engine has published 4.7.2, a stable maintenance build delivering 57 fixes developed by 39 contributors. The update enforces a strict single main thread invariant, eliminates input stuttering for high polling-rate mice on Windows, and routes mbedTLS entropy through Godot's native OS layer for stronger security. With zero reported breaking changes, it serves as a direct and safe upgrade path for projects still running 4.7.1. Standard and .NET builds are now live for Linux, macOS, and Windows on the official download archive.
Oracle has released VirtualBox 7.2.16, closing out a major branch that finally brings full ARM host virtualization to Windows alongside experimental 3D graphics acceleration for Apple Silicon Macs. The update removes three major paywalls by open-sourcing the VRDP remote desktop server, USB smart card emulation, and VM disk encryption directly into the free base package. Behind the headlines, Oracle spent the last year tackling deep VMM stability issues, fixing VMDK corruption, and aggressively tracking Linux kernels from 6.16 through 7.2. Users can download the latest build now, though you should shut down any ARM VMs from previous versions first since saved states are not compatible with the new engine.
Raspberry Pi Imager 2.0.11.1 has landed as a hotfix addressing a critical bug in the Pi Connect wizard where the Next button failed to enable after browser sign-in. The update introduces a new four-part versioning scheme to support rapid patch cycles, along with necessary adjustments for Windows file version reporting and Qt Wayland plugin deployment in AppImages. Developers also corrected nine failing cloud-init generator tests and fixed a Catch2 integration issue that was causing skipped cases to register as failures during test discovery. Released just three days after v2.0.11, the swift turnaround underscores Raspberry Pi's increasing focus on enterprise fleet management tools like Pi Connect for Organizations.
GNU Emacs 31.1 RC1 is now available for testing, bringing sweeping changes to the completion engine, window layout manipulation, and internationalization support. The release ships eager completion display, a rewritten flex algorithm, and new rotation and frame-merging commands that fundamentally shift how you manage your workspace. Emacs now targets Unicode Standard 17.0 alongside fresh input methods for polytonic Greek, Tifinagh, and several Northern Iroquoian scripts. While the symbol shorthand vulnerability still requires version 32 for a full fix, this RC includes a patched mitigation, so you can safely start stress-testing and reporting bugs before the stable drop.
HestiaCP 1.10.3 has arrived as a targeted service release to patch regressions from earlier this week's massive 1.10.0 feature dump. The update resolves a critical FileGator breakage caused by a missing Symfony dependency, alongside a firewall rule reordering bug that risked configuration corruption. Additional improvements include fixed CSS for long DNS records, routine locale updates, and substantial code cleanup that shaves over 1,600 lines.
GIMP 3.4 is moving toward a new "zipped XML" project format to replace XCF, enabling auto-save and incremental updates while maintaining indefinite backward compatibility for legacy files. Photoshop users will see a significant boost with editable text layers on imported PSDs, descriptor import for modern layer styles, and new metadata export options for TIFF and JPEG files. Non-destructive editing expands significantly with filters now applicable to layer masks and non-raster layers, plus the Gradient Tool gains an editable filter stack and MyPaint adds Spectral Blending for realistic pigment mixing. While no date has been set for the GIMP 3.3.2 development snapshot, stable users can expect a GIMP 3.2.6 bug-fix release in the coming weeks.
Matomo released version 5.13.0, delivering a redesigned sparkline card system, a new AIProviders plugin, and targeted security patches including SSRF protection and admin privilege confirmations. The update treats AI chatbot traffic as a first-class visitor source rather than blocking it, complete with reports comparing AI-favored and human-favored content. You can upgrade your self-hosted instance immediately without running any database migrations. The monthly release cadence continues as the team tests 5.14.0 alpha builds alongside early development on Matomo 6.
Bottles 66.7 has arrived, shipped just three days after 66.6 as a focused maintenance release from lead developer Mirko Brombin. The update resolves a common catalog loading error by retrying repository requests over IPv4 when IPv6 resolution times out on partially configured networks. Additional fixes normalize bottle copy paths to prevent accidental overwrites, ensure the UI refreshes on the main thread after deletion, and expose the UMU data directory to fix Flatpak sandbox crashes on external storage. The 15-file patch cycle continues Bottles' rapid development cadence for Linux users running Windows software via Wine and Proton.
Mango Wayland Compositor released version 0.16.1, introducing a forced separation of mouse and trackpad configuration that requires users to prefix options with mouse_ or trackpad_. The update adds devicerule support for per-device input customization, alongside new touch-to-monitor mapping, tag_gather for auto-removing empty tags, and a fresh mmsg get layouts IPC command. Beyond the breaking change, the release patches several critical issues including a client kill crash, incorrect screenshot rotation on display twists, and disrupted frame-skipping logic. Available on Meson and packaged across Arch, Fedora, Gentoo, NixOS, and other major distros, the dwl-based compositor continues to mature as a serious daily-driving alternative for Wayland power users.
