# Update Published articles for Update. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Intel Compute Stack Enables LEO For Nova Lake, Introduces Intel Portable ISA "PISA" DevFeed: [Intel Compute Stack Enables LEO For Nova Lake, Introduces Intel Portable ISA "PISA"]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-17T13:05:07Z Content type: release Language: en Sources: [Phoronix]() Topics: [intel](), [Nova](), [OpenCL](), [GPU](), [Linux](), [LLVM](), [Compiler](), [parallel]() Tags: [desktop-linux](), [gpu](), [intel](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [llvm](), [nova](), [open-source-graphics](), [opencl](), [phoronix](), [phoronix-test-suite](), [release](), [runtime](), [ubuntu-benchmarks](), [ubuntu-hardware](), [update]() ### AI overview Intel Compute Runtime 26.35.39758.10 adds several GPU compute features and enables the OpenCL LEO driver by default for upcoming Nova Lake S processors on Linux. The release also introduces initial support for Intel's Portable ISA (PISA) format. ### Source excerpt Released today was the Intel Compute Runtime 26.35.39758.10 update for Windows and Linux systems. With this updated OpenCL and Level Zero GPU compute driver stack comes some exciting updates for this monthly feature update... ## Aniimo Launches on GeForce NOW Alongside a 007 First Light Update DevFeed: [Aniimo Launches on GeForce NOW Alongside a 007 First Light Update]() Original publisher: [Read original article]() Author: GeForce NOW Community Published: 2026-09-17T13:00:55Z Content type: news Language: en Sources: [NVIDIA Blog]() Topics: [GeForce](), [Cloud](), [Streaming](), [Steam Deck](), [Firefox](), [Nvidia]() Tags: [cloud-gaming](), [devices](), [firefox](), [gaming](), [geforce-now](), [launches](), [steam-deck](), [stream](), [super-resolution](), [update]() ### AI overview NVIDIA highlights Aniimo's launch on GeForce NOW, support for streaming across devices including Steam Deck and Firefox, and updates and promotions for 007 First Light. The article also mentions other new titles joining the cloud service. ### Source excerpt A new creature-catching adventure is ready to stream from the cloud this week. Pawprint Studio's Aniimo arrives on GeForce NOW at launch, inviting gamers to explore the vibrant continent of Idyll across supported devices. Also this week, 007 First Light receives a path-tracing update on GeForce NOW, alongside a smashing limited-time Deluxe Edition sale on [...] ## HP EliteBook 2170p support added to Libreboot DevFeed: [HP EliteBook 2170p support added to Libreboot]() Original publisher: [Read original article]() Author: Leah Rowe Published: 2026-09-17T04:32:50.666044Z Content type: news Language: en Sources: [News about Libreboot releases and development]() Topics: [libreboot](), [coreboot]() Tags: [bios](), [canoeboot](), [coreboot](), [free-software](), [grub](), [installation](), [libre](), [libreboot](), [opensource](), [release](), [static-site-generator](), [testing](), [uefi](), [update]() ### AI overview Libreboot added full support for the HP EliteBook 2170p after the board was supported in coreboot 4.20.1. The article also notes that installation instructions became available on 16 August 2023 and that a previously reported GRUB keyboard-initialization issue was fixed. ### Source excerpt Article: HP EliteBook 2170p support added to Libreboot Web link: https://libreboot.org/news/hp2170p.html ## Libreboot 20150124 release DevFeed: [Libreboot 20150124 release]() Original publisher: [Read original article]() Author: Leah Rowe Published: 2026-09-17T04:32:50.666044Z Content type: release Language: en Sources: [News about Libreboot releases and development]() Topics: [libreboot](), [Hardware](), [boot]() Tags: [article](), [bios](), [canoeboot](), [changes](), [coreboot](), [free-software](), [grub](), [hardware](), [libre](), [libreboot](), [mac](), [opensource](), [release](), [thinkpad](), [uefi](), [update](), [usb]() ### AI overview Libreboot's 24 January 2015 release supports several Lenovo ThinkPad models and Apple MacBook models. It removes ME/AMT on supported Lenovo systems and includes updates to GRUB parsing, ARM binaries, Flashrom, X200 backlight handling, and utilities for changing MAC addresses and generating firmware images. ### Source excerpt Article: Libreboot 20150124 release Web link: https://libreboot.org/news/libreboot20150124.html ## Libreboot 20210522 released! DevFeed: [Libreboot 20210522 released!]() Original publisher: [Read original article]() Author: Leah Rowe Published: 2026-09-17T04:32:50.666044Z Content type: release Language: en Sources: [News about Libreboot releases and development]() Topics: [libreboot](), [releases](), [coreboot](), [boot](), [x86](), [Linux]() Tags: [bios](), [boot](), [build-system](), [canoeboot](), [coreboot](), [firmware](), [free-software](), [libre](), [libreboot](), [linux](), [opensource](), [release](), [uefi](), [update](), [x86]() ### AI overview Libreboot 20210522 is a testing release of the free boot firmware, released on 22 May 2021. It focuses on build-system changes and updates to coreboot 4.14, with support and testing status varying across hardware platforms. ### Source excerpt Article: Libreboot 20210522 released! Web link: https://libreboot.org/news/libreboot20210522.html ## Mir/Wayland-Powered Miracle-WM 0.11 Released With New Overview Mode, Window Urgency DevFeed: [Mir/Wayland-Powered Miracle-WM 0.11 Released With New Overview Mode, Window Urgency]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-17T00:58:42Z Content type: release Language: en Sources: [Phoronix]() Topics: [Wayland](), [Library](), [canonical]() Tags: [commands](), [data](), [desktop-linux](), [events](), [github](), [image](), [input](), [ipc](), [library](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [open-source-graphics](), [overview](), [phoronix](), [phoronix-test-suite](), [plugins](), [release](), [ubuntu-benchmarks](), [ubuntu-hardware](), [update](), [wayland](), [window](), [windows]() ### AI overview Miracle-WM 0.11, a Wayland compositor built on the Mir library, adds an overview mode, window urgency support, plugin IPC events and commands, and support for newer Mir protocols. The release is built on Mir 2.29. ### Source excerpt Canonical engineer Matthew Kosarek rolled out Miracle-WM 0.11 today as an end-of-summer update to this Wayland compositor built atop the Mir library... ## n8n Patches 16 Security Vulnerabilities, 12 Rated High Severity DevFeed: [n8n Patches 16 Security Vulnerabilities, 12 Rated High Severity]() Original publisher: [Read original article]() Author: Christian Rakoot Published: 2026-09-16T18:31:20Z Content type: news Language: en Sources: [Self Host Lab]() Topics: [n8n](), [Vulnerabilities](), [patches](), [Security](), [Self-hosted]() Tags: [automation](), [n8n](), [news](), [patches](), [security](), [security-vulnerabilities](), [self-hosted](), [update](), [vulnerabilities]() ### AI overview n8n published a bi-weekly security update disclosing 16 fixed advisories: 12 rated High severity and 4 rated Medium. The article highlights an unauthenticated NoSQL injection in the MongoDB Chat Memory node that can disclose chat history across sessions, along with five High-severity credential-handling advisories. ### Source excerpt n8n, the self-hosted workflow automation platform covered regularly on this site, published its bi-weekly security update on September 16, 2026. The bulletin, posted on the official n8n Community forum by a member of the n8n security team, discloses 16 advisories fixed since the previous update on September 2: 12 rated High severity and 4 rated [...] ## Android Studio Rabbit 1 RC 1 now available DevFeed: [Android Studio Rabbit 1 RC 1 now available]() Original publisher: [Read original article]() Author: Android Studio Releaser (noreply@blogger.com) Published: 2026-09-16T14:17:15Z Content type: release Language: en Sources: [Android Studio Release Updates]() Topics: [Android Studio](), [Beta channel](), [Release notes](), [macOS]() Tags: [android](), [android-studio](), [beta-channel](), [macos](), [preview](), [release](), [release-notes](), [update]() ### AI overview Android Studio Rabbit 1 RC 1 is available in the Beta channel. Existing Beta-channel users can update through the IDE, while others can download it. The article directs readers to preview release notes and closed issues for features, changes, and fixed bugs. ### Source excerpt Android Studio Rabbit 1 RC 1 is now available in the Beta channel. If you already have an Android Studio build on the Beta channel, you can get the update by clicking Help > Check for Updates (or Android Studio > Check for Updates on macOS). Otherwise, you can download it here. For information on new features and changes in Android Studio Rabbit 1, see the Android Studio Preview release notes. For details of bugs fixed in each previous release of Android Studio Rabbit 1, see closed issues. ## Rider and ReSharper 2026.2.2 Are Out! DevFeed: [Rider and ReSharper 2026.2.2 Are Out!]() Original publisher: [Read original article]() Author: Alexander Kurakin Published: 2026-09-16T14:12:44Z Content type: release Language: en Sources: [The JetBrains Blog]() Topics: [rider](), [resharper](), [AI-assisted coding](), [test-coverage]() Tags: [2026](), [ai-agent-hooks](), [ai-agents](), [code-coverage](), [coverage](), [hooks](), [jetbrains](), [macos](), [mcp](), [net](), [net-tools](), [releases](), [resharper](), [rider](), [update]() ### AI overview JetBrains releases Rider, ReSharper, and .NET tools 2026.2.2, adding an AI Agent Setup widget in Rider, more targeted hook feedback for coding agents, TUnit coverage support, and fixes including a macOS freezing issue. ### Source excerpt We've released version 2026.2.2 of ReSharper, Rider, and .NET tools. You can install this update from inside the tools themselves, through the Toolbox App, or on our website. Here's what's new in this update. Rider 2026.2.2 AI Agent Setup widget We've recently added a wide range of features to help you work with coding agents [...] ## Google's September 2026 Pixel update addresses a modem vulnerability reportedly under limited, targeted exploitation DevFeed: [Google's September 2026 Pixel update addresses a modem vulnerability reportedly under limited, targeted exploitation]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-16T10:39:04Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Google](), [pixel](), [Vulnerabilities](), [Android Security](), [Security & Privacy](), [Mobile]() Tags: [android-security](), [bugs](), [cve-2026-58704](), [google](), [mobile](), [modem](), [news](), [pixel](), [security](), [update](), [vulnerabilities](), [vulnerability]() ### AI overview Google's September 2026 Pixel security update fixes 110 vulnerabilities, including CVE-2026-58704, a high-severity cellular modem permission-bypass flaw that may be under limited, targeted exploitation. Pixel users should install the update and verify that their device shows the September 5, 2026 security patch level or later. ### Source excerpt Google's September Pixel update fixes 110 vulnerabilities, including a modem flaw being used in limited, targeted attacks. ## Mercure Broadcasting in Laravel 13.32 DevFeed: [Mercure Broadcasting in Laravel 13.32]() Original publisher: [Read original article]() Author: Paul Redmond Published: 2026-09-16T02:44:52Z Content type: release Language: en Sources: [Laravel]() Topics: [Laravel](), [releases](), [Release notes](), [real-time](), [enum](), [WebSocket]() Tags: [enums](), [features](), [github](), [laravel](), [laravel-releases](), [news](), [queue](), [real-time](), [release](), [release-notes](), [storage](), [update](), [websockets]() ### AI overview Laravel 13.32 adds a Mercure broadcast driver, filesystem methods for copying and moving files between disks, and enum support for queue pause and resume methods. The release also includes additional fixes and updates. ### Source excerpt Laravel 13.32 adds a Mercure broadcast driver, Storage::copyToDisk() and moveToDisk(), enum support in queue pause/resume, and more. The post Mercure Broadcasting in Laravel 13.32 appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox. ## Kermit 2.2.0 adds WasmWasi support and a new Coil3 extension - Kevin Schildhorn DevFeed: [Kermit 2.2.0 adds WasmWasi support and a new Coil3 extension - Kevin Schildhorn]() Original publisher: [Read original article]() Published: 2026-09-16T00:00:00Z Content type: release Language: en Sources: [Touchlab | Enterprise Mobile Innovation & Development]() Topics: [Library](), [WebAssembly](), [Extension]() Tags: [2-2](), [coil](), [extension](), [ios](), [kermit](), [kotlin-multiplatform](), [library](), [swift](), [update](), [version](), [webassembly]() ### AI overview Kermit 2.2.0 adds WasmWasi support for selected targets, updates supported targets, and introduces a Kermit module for receiving logs from Coil 3 image loaders. ### Source excerpt The 2.2.0 update for Kermit is out now featuring a new Coil3 extension, plus support for more targets including WasmWasi. ## Oracle September 2026 Critical Security Patch Update addresses 672 CVEs DevFeed: [Oracle September 2026 Critical Security Patch Update addresses 672 CVEs]() Original publisher: [Read original article]() Author: Research Special Operations Published: 2026-09-15T21:00:28Z Content type: article Language: en Sources: [Tenable Blog]() Topics: [Security](), [Vulnerabilities](), [Network]() Tags: [cves](), [network](), [security](), [september-2026](), [update](), [vulnerabilities]() ### AI overview Oracle's September 2026 Critical Security Patch Update fixes 672 unique CVEs through 673 security updates across 17 Oracle product families. It includes 104 critical patches, with Oracle E-Business Suite receiving the most patches. ### Source excerpt Oracle addresses 672 CVEs in its September 2026 Critical Security Patch Update with 673 patches, including 104 critical updates. Key Takeaways The September 2026 Critical Security Patch Update (CSPU) contains fixes for 672 unique CVEs in 673 security updates 104 issues (15.5% of all patches) were assigned a critical severity rating Oracle E-Business Suite received the highest number of patches at 159, accounting for 23.6% of all patches Background On September 15, Oracle released its Critical Security Patch Update (CSPU) for September 2026. Beginning in May 2026, Oracle introduced CSPUs as a monthly release cycle that sits between the larger quarterly Critical Patch Updates (CPUs), addressing a focused set of high-severity issues on a faster cadence. This CSPU contains fixes for 672 unique CVEs in 673 security updates across 17 Oracle product families. Out of the 673 security updates published, 15.5% of patches were assigned a critical severity. High severity patches accounted for the bulk of security patches at 74.7%, followed by critical severity patches at 15.5%. This month's update includes 104 critical patches across 104 CVEs. SeverityIssues PatchedCVEsCritical104104High503503Medium5958Low77Total673672 Analysis This month's update saw the Oracle E-Business Suite product family contain the highest number of patches at 159, accounting for 23.6% of the total patches, followed by Oracle Fusion Middleware at 153 patches, which accounted for 22.7% of the total patches. A full breakdown of the patches for this CSPU can be seen in the following table, which also includes a count of vulnerabilities that can be exploited over a network without authentication. Oracle Product FamilyNumber of PatchesRemote Exploit without AuthOracle E-Business Suite15919Oracle Fusion Middleware15378Oracle Hyperion10250Oracle Siebel CRM6326Oracle Analytics508Oracle Communications3123Oracle Commerce2716Oracle Supply Chain195Oracle Virtualization191Oracle PeopleSoft164Oracle Database Server115 ## Bungie is overhauling Marathon from its original extraction shooter vision DevFeed: [Bungie is overhauling Marathon from its original extraction shooter vision]() Original publisher: [Read original article]() Author: Diego Argüello Published: 2026-09-15T19:00:00Z Content type: news Language: en Sources: [gamedeveloper]() Topics: [Development]() Tags: [announcement](), [news](), [release](), [update]() ### AI overview Bungie is overhauling Marathon after player feedback, adding the permanent PvE mode Symbiosis, delaying an update from September 22 to December 8, and moving away from a strict seasonal schedule. ### Source excerpt Bungie says addressing player feedback requires the team to 'change both what we're building and how we deliver it,' ## Fedora 45 Beta Released With KMSCON Console, GNOME 51 & Other Updates DevFeed: [Fedora 45 Beta Released With KMSCON Console, GNOME 51 & Other Updates]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-15T14:30:08Z Content type: news Language: en Sources: [Phoronix]() Topics: [Fedora](), [Linux]() Tags: [announcement](), [compiler](), [desktop-linux](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [open-source-graphics](), [phoronix](), [phoronix-test-suite](), [release](), [ubuntu-benchmarks](), [ubuntu-hardware](), [update]() ### AI overview Fedora 45 Beta has been released with KMSCON replacing the in-kernel console, GNOME 51, Stratis Storage support in Anaconda, stricter security defaults, reproducible package builds, and updates to core development tools and libraries. A final release is planned for 20 October, with 27 October as a fallback date. ### Source excerpt The beta release of Fedora 45 is out today and right on schedule for this wonderful Linux distribution... ## Announcing Fedora Linux Asahi Remix 45 Beta DevFeed: [Announcing Fedora Linux Asahi Remix 45 Beta]() Original publisher: [Read original article]() Author: Davide Cavalca Published: 2026-09-15T14:05:00Z Content type: release Language: en Sources: [Fedora Magazine]() Topics: [Remix](), [Fedora](), [Linux](), [Hardware](), [GPU](), [dnf]() Tags: [announce](), [apple](), [bugs](), [dnf](), [features](), [fedora-project-community](), [gpu](), [h-264](), [hardware](), [installation](), [linux](), [pre-release](), [release](), [remix](), [report](), [update](), [vp9]() ### AI overview Fedora Asahi Remix 45 Beta is available for Apple Silicon Macs, bringing Fedora Linux 45 Beta and initial out-of-the-box support for Apple M3, M3 Pro, and M3 Max systems. It also adds hardware-accelerated H.264 and VP9 decoding across Apple Silicon, with AV1 decoding on M3 systems. Performance-oriented 3D GPU drivers for M3 systems are deferred to a future Mesa update. ### Source excerpt We are happy to announce the availability of Fedora Linux Asahi Remix 45 Beta. This pre-release will bring the freshly announced Fedora Linux 45 Beta to Apple Silicon Macs. We expect to announce general availability of Fedora Linux Asahi Remix 45 in about a month. This will coincide with the overall Fedora Linux 45 release. [...] ## Kubernetes Changed Block Tracking API - Beta Differences DevFeed: [Kubernetes Changed Block Tracking API - Beta Differences]() Original publisher: [Read original article]() Author: Prasad Ghangal Published: 2026-09-14T18:30:00Z Content type: article Language: en Sources: [Kubernetes Blog]() Topics: [Kubernetes](), [API](), [gRPC]() Tags: [2026](), [compatibility](), [container-image-registry](), [developer](), [documentation](), [kubernetes](), [registry](), [release](), [snapshots](), [storage](), [streaming](), [update]() ### AI overview This Kubernetes developer article explains the Beta changes to Changed Block Tracking (CBT) support for CSI drivers. The SnapshotMetadataService CRD moved from v1alpha1 to v1beta1, with no automatic conversion, and CBT remains limited to block volumes. It also outlines compatibility requirements and the steps for upgrading and trying the feature. ### Source excerpt Changed Block Tracking (CBT) support for CSI drivers shipped as Alpha in September 2025. With the March 2026 v1.0.0 release of the external-snapshot-metadata project, the feature moved to Beta. If you aren't yet familiar with changed block tracking for storage in Kubernetes, the Alpha announcement covers the motivation, the three primary components (the CSI SnapshotMetadata gRPC service, the SnapshotMetadataService CRD, and the external-snapshot-metadata sidecar), and a walkthrough of how to use the API. CBT currently applies to block volumes; file-volume and network file-share changed-list tracking is not covered by this feature. This post focuses on what is different in Beta. What's new in Beta The main change in that release was the promotion of the SnapshotMetadataService CRD from v1alpha1 to v1beta1. The CRD used to advertise a driver's metadata service now serves cbt.storage.k8s.io/v1beta1. The schema itself is unchanged, but this release removed v1alpha1 (rather than serving it alongside the new version). If you are upgrading from Alpha, you need to: Re-apply the CRD definition shipped with v1.0.0. Update SnapshotMetadataService manifests to use apiVersion: cbt.storage.k8s.io/v1beta1. Update any client or controller code that talks to the CRD. This is a one-time change. There is no automatic conversion between the two versions. Compatibility Minimum Kubernetes version: 1.33 CSI spec: 1.10 or newer Container image: registry.k8s.io/sig-storage/csi-snapshot-metadata:v1.0.0 Trying it out The Getting Started section in the Alpha blog still applies. In short: Make sure your CSI driver supports volume snapshots and ships the external-snapshot-metadata sidecar. Install the SnapshotMetadataService CRD (the v1beta1 definition from the v1.0.0 release). Create a SnapshotMetadataService resource for your driver. Use a client -- snapshot-metadata-lister, or your own implementation -- to call GetMetadataAllocated and GetMetadataDelta. If you want to see the full flow end-to-e ## Steam Frame Will Launch With Half-Life: Alyx & At Least 70 Verified Games DevFeed: [Steam Frame Will Launch With Half-Life: Alyx & At Least 70 Verified Games]() Original publisher: [Read original article]() Author: Mike Johnson Published: 2026-09-14T18:15:00Z Content type: news Language: en Sources: [UploadVR]() Topics: [Hardware](), [Steam Deck]() Tags: [2026](), [article](), [developers](), [games](), [hardware](), [launch](), [published](), [steam-deck](), [update](), [vr-gaming]() ### AI overview Valve's Steam Frame headset is set to launch with at least 70 VR games certified to run well. The article presents the current list of games with the Great On Frame label and explains how the label helps owners find compatible games while giving visibility to developers supporting the hardware. ### Source excerpt The Steam Frame will launch with at least 70 VR Games certified by Valve to run standalone and we have a full list. ## Toolbox App 3.8: Improves IDE Update Handling on macOS and Fixes Keyboard Navigation DevFeed: [Toolbox App 3.8: Improves IDE Update Handling on macOS and Fixes Keyboard Navigation]() Original publisher: [Read original article]() Author: Ivan Kuzmin Published: 2026-09-14T16:05:56Z Content type: release Language: en Sources: [The JetBrains Blog]() Topics: [App](), [ide](), [macOS]() Tags: [cleanup](), [ide](), [jetbrains-toolbox](), [macos](), [navigation](), [shortcuts](), [toolbox-app](), [update]() ### AI overview Toolbox App 3.8 improves IDE update handling on macOS, restores keyboard navigation in project and tool lists, and adds progress reporting and safeguards for cleanup of leftover IDE directories. ### Source excerpt Version 3.8 of the Toolbox App restores keyboard navigation in project and tool lists. On macOS, manual IDE updates stay available even when the system reports the installation directory as protected. IDE updates remain available on macOS macOS was sometimes incorrectly reporting an IDE installation directory as non-writable, causing the Toolbox App to needlessly disable [...] ## Firefox 156 Available With Its Built-In PDF Viewer Starting Up To 45% Faster DevFeed: [Firefox 156 Available With Its Built-In PDF Viewer Starting Up To 45% Faster]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-14T15:09:09Z Content type: news Language: en Sources: [Phoronix]() Topics: [Firefox](), [pdf](), [Mozilla](), [Linux](), [Nvidia]() Tags: [cpu](), [desktop-linux](), [firefox](), [history](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [memory](), [mozilla](), [nvidia](), [open-source-graphics](), [pdf](), [performance](), [phoronix](), [phoronix-test-suite](), [release](), [ubuntu-benchmarks](), [ubuntu-hardware](), [update](), [vulkan]() ### AI overview Firefox 156 is available with a built-in PDF viewer that starts up up to 45% faster. The release also improves memory and CPU usage when displaying large scaled-down JPEG images and includes several fixes. Vulkan Video decoding for newer NVIDIA GPUs remains limited to nightly builds. ### Source excerpt Mozilla today published their Firefox 156.0 release binaries ahead of the official Tuesday announcement... ## Uptime Kuma 2.5.4 Patches Critical JSONata Code Execution Flaw DevFeed: [Uptime Kuma 2.5.4 Patches Critical JSONata Code Execution Flaw]() Original publisher: [Read original article]() Author: Christian Rakoot Published: 2026-09-14T06:55:25Z Content type: article Language: en Sources: [Self Host Lab]() Topics: [Security](), [vulnerability](), [Monitoring](), [configuration]() Tags: [2026](), [cve](), [dependency](), [monitoring](), [monitoring-news](), [news](), [security](), [update](), [uptime-kuma-2-5-4](), [vulnerability]() ### AI overview Uptime Kuma 2.5.4 fixes a critical JSONata vulnerability that could enable arbitrary code execution on the monitor host, along with a second denial-of-service issue. The release updates jsonata to 2.2.2 and also adds an SFTP monitor type and three notification providers. ### Source excerpt Uptime Kuma 2.5.4 patches a critical-rated code execution flaw in the JSONata library (CVE-2026-77415, CVSS 9.3) plus a second denial-of-service fix, and adds an SFTP monitor type and three new notification providers. Here's what the flaw actually requires to exploit, and how to update. ## Custom labels in Grafana Cloud Synthetic Monitoring: New updates for consistency and ease-of-use DevFeed: [Custom labels in Grafana Cloud Synthetic Monitoring: New updates for consistency and ease-of-use]() Original publisher: [Read original article]() Author: Anant Sharma Published: 2026-09-12T11:22:06.456390Z Content type: article Language: en Sources: [Grafana Labs blog on Grafana Labs]() Topics: [Grafana Cloud](), [synthetic monitoring](), [Grafana](), [Monitoring](), [telemetry](), [dashboards]() Tags: [analytics](), [dashboards](), [grafana](), [grafana-cloud](), [how-to](), [logs](), [metrics](), [monitoring](), [observability](), [synthetic-monitoring](), [telemetry](), [traces](), [update]() ### AI overview Grafana Cloud Synthetic Monitoring is updating custom labels so they attach directly to every check metric and log, rather than only sm_check_info. The label_ prefix will be removed, and labels will appear exactly as defined. Existing users must migrate dashboards, SLOs, alerts, and queries that reference these labels by March 1, 2027. ### Source excerpt Labels are a powerful way to organize telemetry and define policies across Grafana Cloud, helping to streamline alerting, attribution, access control, and more. But traditionally, custom labels in Synthetic Monitoring have worked a little differently: they only lived on a single sm_check_info metric, and Grafana Cloud prefixed each one with label_. To make custom labels in Synthetic Monitoring work consistently with the rest of Grafana Cloud--without extra joins, naming conventions, or workarounds--we're rolling out an update that lets your custom labels attach directly to every check metric, not just sm_check_info, and removes the label_ prefix. Starting today, labels appear exactly as you write them, making Synthetic Monitoring data easier to navigate and use with label-based policies across Grafana Cloud. If you currently use custom labels in Synthetic Monitoring, read on to learn how to migrate to the new labels. We are asking users to migrate by March 1, 2027 to ensure their custom dashboards, SLOs, alerts, and queries that reference Synthetic Monitoring metrics do not break, and continue to work as expected. If you do not use custom labels in Synthetic Monitoring, you don't need to do anything to prepare for this update. How custom labels work in Synthetic Monitoring Until now, if you wanted to filter a dashboard, scope an alert, or attribute cost by team or service within Synthetic Monitoring, you had to join sm_check_info against the check metric you actually want to query. You also had to remember that team is really label_team in this context. That approach worked to ensure your custom labels were never at odds with system-defined labels. However, it broke down as usage scaled up and dozens of teams started running hundreds of checks across services, environments, and regions. Teams rely on consistent schemas to direct label-based workflows, and this update brings Synthetic Monitoring further into the fold of your existing policies. With the update, labels i ## Forgejo 16.0.4 and 15.0.8 Fix Critical Repository Template RCE DevFeed: [Forgejo 16.0.4 and 15.0.8 Fix Critical Repository Template RCE]() Original publisher: [Read original article]() Author: Christian Rakoot Published: 2026-09-12T06:40:18Z Content type: article Language: en Sources: [Self Host Lab]() Topics: [vulnerability](), [releases](), [Security](), [Template](), [Authorization](), [API](), [Git]() Tags: [api](), [docker-containers](), [docker-containers-news](), [forgejo](), [git](), [news](), [release](), [security](), [self-hosted](), [update](), [vulnerability]() ### AI overview Forgejo 16.0.4 and 15.0.8 fix a critical remote code execution vulnerability in repository-template creation, along with an API authorization bypass. The article explains how malicious template variables could restore a .git directory with executable hooks and urges affected self-hosted instances to update. ### Source excerpt Forgejo 16.0.4 and 15.0.8 patch a critical remote code execution vulnerability in repository templates, tracked as CVE-2026-89094 with a CVSS score of 9.9, plus a narrower API permission bypass. Any instance on 16.0.3 or earlier, or 15.0.7 or earlier on the LTS branch, is vulnerable. Here's what happened, why it matters, and how to update. ## Valve releases SteamVR 2.17 update with Dashboard usability improvements ahead of Steam Frame launch DevFeed: [Valve releases SteamVR 2.17 update with Dashboard usability improvements ahead of Steam Frame launch]() Original publisher: [Read original article]() Author: Scott Hayden Published: 2026-09-11T16:20:00Z Content type: news Language: en Sources: [Road to VR]() Topics: [ui](), [Usability](), [User Experience](), [Steam Deck](), [Hardware]() Tags: [news](), [pc-vr-news-reviews](), [steam-deck](), [ui](), [update](), [usability](), [user-experience](), [xr-industry-news]() ### AI overview Valve released SteamVR 2.17 to all users after a beta period. The update adds Steam Deck-style Quick Access controls and improves access to achievements, guides, notes, overlay management, battery information, and brightness controls. The article says Steam Frame's price and exact release date remain unknown. ### Source excerpt Valve has dropped a sizeable update to SteamVR, paving the way for what appears to be imminent launch of its long-awaited standalone VR headset, Steam Frame. Update (September 11th, 2026): Previously available only in beta, Valve has now released its 2.17 SteamVR update for all users. You can check out the full changelog here. Original [...] The post Valve Drops Big SteamVR Update Ahead of Steam Frame Launch appeared first on Road to VR. [Next page]()