Wine 11.15 Lands With Local NTLM Auth and ARM64EC Build Support
The Wine development team dropped 11.15 this week, and the changelog reads like a deliberate push toward enterprise workstations. The new build brings local NTLM authentication, MinGW-mode ARM64EC compilation, expanded BCrypt key derivation, and three new WindowsCodecs alpha conversion paths. It also nails down 41 separate bugs and rolls in patches from over 40 contributors.
Wine 11 is already several weeks into its post-NTSYNC maturation phase. The weekly cadence hasn't slowed down since the major architecture overhaul shipped back in March. If you've been tracking the development stream, you've probably noticed the shift from pure compatibility fixes toward infrastructure work that actually lets corporate apps run without leaning on a Windows VM. This release is a pretty clear signal of where that's headed.
"The Wine development release 11.15 is now available," the official note reads. "More KDF algorithms in BCrypt. Support for ARM64EC build in MinGW mode. More format conversions in WindowsCodecs. Support for local NTLM authentication. Various bug fixes."
The features that actually move the needle
Local NTLM authentication was historically the hard wall for corporate Linux desktops. Now Wine handles in-process NTLM without requiring a live domain controller or the Local Security Authority. Piotr Caban wired this across secur32, sspicli, msv1_0, and ntoskrnl. Keep in mind that NTLM still runs the show for a massive chunk of internal Windows networks. Apps that previously choked on authentication can now talk to file shares and legacy internal services directly through Wine.
ARM64EC support in MinGW mode targets the hybrid ARM and x86-64 environment Jacek Caban's team just enabled. Snapdragon and Dimensity laptops are finally reaching actual desktop volumes, and Wine no longer has to fall back to full instruction-level x86 translation for everything. Native .NET applications can now execute as ARM64EC directly on ARM64 Linux hosts. You won't need a heavy binary translator running in the background anymore.
The cryptographic backend keeps migrating from TomCrypt to SymCrypt, and this week added TLS 1.1 and 1.2 key derivation alongside HKDF. Hans Leidekker's patches round out the BCrypt side, while crypt32 gets a strong provider for self-signed certificate creation. If your apps are doing heavy TLS key derivation, missing these usually meant broken handshakes or silent crypto failures.
Three new alpha-heavy pixel format conversions hit WindowsCodecs too. Alex Dujardin added the 32bppBGRA and PBGRA pathways, the 64bppPRGBA bridge, and the 128bppRGBAFloat route. Professional imaging apps that juggle high bit-depth alpha channels will finally stop complaining about format mismatches.
The bug grind and the reality check
The 41 bug fixes cover everything from divide-by-zero crashes in Wayland DPI queries to WinSCP freezing after a window resize. There's a fix for Notepad++ hanging on virtual desktop file changes, a QuickBooks installer crash, and a handful of graphics regressions under Wayland. Not exactly groundbreaking, but the kind of grind that keeps daily drivers usable.
It's a pretty solid maintenance sprint. The NTLM and ARM64EC work moves the needle for people actually trying to replace Windows on their desk. However, at the same time, local NTLM in Wine still means you're dealing with a legacy protocol that Microsoft has been trying to retire for a decade. It works, though don't expect it to handle modern enterprise auth standards out of the box.
Head here to read the full official announcement and the source tarball.
