LibreOffice 26.8.2 shipped today as the second maintenance update in the 26.8 family, fixing roughly 35 bugs with no new features. The most urgent patch resolves a startup crash on macOS 27, while Impress audio playback gets fully restored and legacy Microsoft Office formats now import correctly. Calc's relative-reference regression is cleaned up and new support is added for Microsoft Web Query files. TDF advises 26.8 users to upgrade, with macOS 27 users moving immediately, and reminds 26.2 production users that support ends 30 November 2026.
PipeWire 1.6.11 shipped today as the eleventh maintenance update in the stable 1.6 series, arriving just a week after 1.6.10. The release leans heavily into Bluetooth hardening, with security backports, cleaner concurrent profile registration, and stale-pointer fixes, alongside smaller updates to the ALSA plugin, SPA layer, and modules. It remains API- and ABI-compatible with the rest of the 1.6.x line, making it a low-risk drop-in update for distros. The timing lands amid renewed scrutiny of the project's security model, particularly after the April 2026 CVE-2026-5674 sandbox-escape flaw.
Node.js 24.22.2 of its "Krypton" LTS line shipped on October 28, 2026, assembled by core contributor Antoine du Hamel with just six commits. The headline change repairs a crash triggered when Error.stackTraceLimit is set to a huge value, including Infinity, a regression caused by an earlier performance optimization. The same patch also delivers that stack-frame speed-up requested for faster React development, a fix keeping wasm call traces consistent, and a restore of AsyncLocalStorage semantics for parked TransformStream writes. As the latest of three fast 24.x releases, it keeps the LTS branch current ahead of its April 2028 end of life.
D7VK 2.4 released as the project's final feature release before settling into maintenance mode. The update enforces historical early-Direct3D and DirectDraw resolution limits, capping the top "modern" resolution at 1080p, while also reworking Wayland back-buffer handling with a new aspect-ratio-preserving fit-to-screen mode. Its biggest surprise is GXVK, an early-alpha Glide-on-Vulkan port developed by CkNoSFeRaTU that can already run titles like Pandemonium 2. The solo DXVK fork continues to let old Windows games run on Linux, with older Vulkan 1.1 hardware still supported through the DXVK-Sarek port.
Node.js 26.13.0 'Lithium' entered Long Term Support today, adding no new code beyond v26.12.1 but locking in maintenance through the end of April 2029. The line carries the big 26.x features into LTS: the Temporal API enabled by default, a V8 14.6 upgrade, and Undici 8 as the HTTP layer. It also inherits an aggressive October security patch set of ten CVEs, headlined by a Brotli decoder RCE fixed just before Imperva's red team published a "Node2Shell" exploit. Notably, 26 is the last major under Node's old six-monthly schedule, with v27 switching to an annual release model.
BlueOnyx shipped new installation media for its three active RHEL-based control-panel lines, 5210R, 5211R and 5212R, today, a rare nine-day turnaround. The accelerated release closes two critical holes: the "php2shell" PHP remote-code-execution pair (CVE-2026-109618 and CVE-2026-109619) and the PwnEscape guest-to-host VM-escape flaw (CVE-2026-99999). New images bundle patched PHP, patched AlmaLinux kernels and hardened per-site PHP-FPM isolation, so a fresh server starts protected instead of requiring later patching. The same release also overhauls the first-boot experience, fixing installer wizard loops, session-cache bugs and boot-time service failures that used to trip up cold installs.
Microsoft and GitHub released Visual Studio Code 1.144 as a Stable build today, reframing the editor as a hub for coordinating teams of AI agents across machines and clouds. The architectural centerpiece is the new open Agent Host Protocol (AHP) 1.0, which keeps sessions alive through a background process so they carry over between VS Code, the Copilot app, GitHub.com, and the mobile client. Highlights include Copilot Fusion, image generation via GPT Image 2.5 Flare, experimental Computer Use and Working set features, GA assisted permissions, and a long-awaited native Markdown editor, much of it funneled toward paid Copilot subscriptions. The release also pairs a long-delayed UI modernization with a Compact layout option, while Microsoft reassures users that core editing features remain front and center.
Mesa 26.2.6 shipped today with 179 commits from 51 contributors, continuing the stable 26.2 series that launched on August 5. Like every .x bugfix release, it introduces no new features, focusing entirely on patches since 26.2.5. Most of the effort centered on Zink, Mike Blumenkrantz's 40 commits that keep older OpenGL apps running on Vulkan-only hardware, alongside Google's Venus virtual-GPU driver and AMD's RADV/RadeonSI stacks.
Zed Industries released version 1.26.2 today, a weekly patch that bundles Pyrefly, Microsoft's Python language server, as an opt-in built-in option. The release also lets you expand nested variable values directly in debugger hovers and adds DWARF support for debugging WebAssembly sources. On top of the headline features, it ships a long tail of fixes for agent integrations, SSH reconnections, macOS Display P3 color, and cross-platform file handling. Coming just weeks into Zed's steady 1.26 line, the patch nudges the Rust-native editor closer to IDE-grade tooling without sacrificing its speed-focused pitch.
VKD3D-Proton 3.1, the open-source library that lets Windows Direct3D 12 games run on Linux via Vulkan, was tagged on 28 October 2026 by maintainer Hans-Kristian Arntzen. Arntzen describes it as a deliberate "stable" checkpoint rather than a feature drop, existing mainly to set up the larger, riskier v3.2 release. It still lands key modern-DX12 capabilities including opt-in VK_EXT_descriptor_heap support, DXR 1.2 ray tracing, and Shader Model 6.9 with Shader Execution Reordering. The descriptor heap is intentionally held back from the default for now but is expected to enable by default in v3.2, which Arntzen calls "uncharted territory."
VSCodium published 1.143.17232 today, with a one-line patch that repairs broken settings dropdowns introduced by its previous release's UI changes. The tiny fix masks a bigger story: the privacy-focused rebuild deliberately strips Copilot, telemetry, and the "Modern UI" that Microsoft made default in VS Code 1.143. While Microsoft pushes an agent harness by default with no opt-out, VSCodium keeps things model-agnostic, still allowing Claude, Codex, and bring-your-own-key setups. Built from the same MIT source, the two projects now represent opposite philosophies on privacy and user control.
Hyprland maintainer Vaxry released v0.57.0 today, finalizing the project's migration to Lua by completely dropping support for the legacy hyprland.conf file. Anyone still running the old config format must convert to hyprland.lua by hand, since there's no automated converter. The release also adds the long-requested macOS-style window wobble, swappable blur variants, a "scene composition" renderer refactor, and a heavily expanded Lua API, all riding on a fixes list that runs well past a hundred entries. Funded under an exclusive sponsorship deal with the Omacom Foundation, it's the largest Hyprland release to date and a recommended upgrade for anyone already on Lua.
Scribus released two updates on the same day: 1.6.7 for the stable branch and 1.7.4 for development, both patched against the same seven memory-safety CVEs. The flaws live in the code that loads PSD, PICT, TIFF, DRW, and SVM files and could let a crafted image cause crashes or even arbitrary code execution. The 1.7.4 release additionally carries the long-criticized tables overhaul, right-to-left text improvements, and other features headed for the 1.8 stable release. All fixes came from responsible disclosure by Tristan Madani of Talence Security, and both builds are now available free under the GPL.
Ungoogled-chromium 156.0.8078.73-1 has been released, inheriting Chromium 156's massive 353-fix security haul that's roughly ten times larger than Chrome 155's. The privacy-focused fork strips every dependency on Google web services while keeping the vanilla Chromium experience intact. Most of the fixes are worth caring about, though the trade-off is real: no auto-updater, no Google Sync, and extensions need a manual workaround. You can grab it via the AUR, a PPA, a Flatpak, or Homebrew, but the safest move is still building from source.
Faugus Launcher 2.5.3 is a performance- and quality-of-life update for the open-source Linux game launcher that runs Windows and native games through UMU-Launcher. It ships real-time settings, smooth scrolling, and on-demand cover-art loading, with on-demand asset loading delivering the biggest gains for anyone with a large library. The team openly acknowledges the one trade-off, noting that CPU usage climbs while scrolling because thousands of images now load on demand instead of all at once. While it still lags behind Lutris and Heroic on bulk tools and sandboxing, Faugus keeps winning readers over with its clean, fast, good-looking interface.
Strata 0.2.7 focuses on speed and compatibility, with a default change that speeds up 12 GB NVIDIA cards by up to 37 percent on code answers. It adds Radeon RX 9000 and AI PRO R9700 support for faster Qwen decoding, lets DeepSeek run on Ryzen AI Max (Strix Halo) Windows PCs, and makes DeepSeek read prompts much faster across most machines. New features include picture-reading turned on by default for DeepSeek, up to 1M-token context support, layer-major prefill for two NVIDIA cards, and a redesigned web chat with saved chats, search, branching, and LaTeX rendering, plus French as a new interface language.
yserver 1.8.0 shipped today, adding variable refresh rate, hardware cursors, gamma control, and OpenBSD support to a from-scratch Rust rewrite of the ancient X11 display server. The release spans 259 commits from nine contributors and also splits the codebase into focused crates to keep things maintainable. The project, built largely with AI tools like Claude Code, offers real X11 without Xorg's decades of baggage — but only in a niche for holdouts and tinkerers while Wayland dominates. It targets near-Xorg performance and runs Steam games, though it still carries X11's inherited security flaws and remains an ambitious experiment rather than a mainstream choice.
Bottles 67.5 went live on October 27th with 176 commits and 135 files changed, making it one of the project's most code-heavy patches yet. It adds optional Eagle tracing and an identity bridge for its Soda runners, plus now displays playtime totals in hours. The release also patches a wide range of everyday issues, including offline component downloads, account restoration, UMU controller access, and the Wayland setting for Proton launches.
Noctalia, the open-source Wayland desktop shell written in C++23 without Qt or GTK, shipped v5.4.0 today with a big theming overhaul and new wave rendering for its audio visualizers. The update adds JPEG XL, HEIC, HEIF and AVIF support to screenshots and clipboard, keeps those formats optional at runtime, and includes a built-in "reboot to UEFI" action. It also expands the plugin and IPC surface for automation while fixing real-world issues like Rosé Pine's color drift and invalid CalDAV entries.
Weston 16.0.2 has shipped as a point release containing no new features but three targeted bug fixes for Wayland's reference compositor. The DRM backend now uses all hardware overlay planes, a change that mainly helps embedded and mobile SoCs avoid heavier GPU compositing. The RDP backend fails to start instead of silently downgrading to TLS-only authentication when the NLA credential database is missing, and the lua-shell can finally load external Lua modules into the global namespace. Maintainer Marius Vlad of Collabora announced the update, which you can download with verified SHA sums from the Wayland GitLab release page.
