The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Lime Technology, Inc. has announced the release of Unraid OS 7.3.0, the latest version of the company's Linux-based commercial operating system designed for Network-Attached Storage (NAS) deployments. The new version brings critical security updates and a redesigned onboarding wizard for new installations: "New users getting started with 7.3.0....
The Stable channel has been updated to 148.0.7778.167/168 for Windows/MacΒ andΒ 148.0.7778.167Β for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in theΒ Log
Security Updates will be posted soon
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
For our Road Trip project in American Truck Simulator, we continue to expand a growing collection of legendary vehicles that feel perfectly at home cruising endless highways and scenic byways across America. Today, weβre excited to share a work-in-progress look at the 2023 Dodge Challenger SRT Hellcat Widebody, one of the most iconic American muscle cars of modern times.
Few vehicles represent contemporary American muscle quite like the Challenger. The Hellcat Widebody stands as a bold statement from an era when muscle cars reached new heights of power, presence, and character, while still paying homage to the unmistakable design language that defined generations before it. It is already regarded as a modern legend, a car that proudly carries the spirit of American performance into the present day.
The Dodge Challenger has always been about more than numbers on paper. Itβs about attitude, confidence, and the feeling of pointing a long hood toward the horizon. The Hellcat amplifies all of that with its aggressive stance, widened bodywork, and unmistakable road presence.
In Road Trip, this vehicle is about experiencing the vastness of North America from behind the wheel of an automotive icon, cruising historic highways, rolling through small towns, and stopping to admire the diverse landscapes and landmarks that define each state. This is the kind of car meant for memorable journeys, where the drive itself is just as important as the destination.
With every new Road Trip vehicle, our team continues to raise the bar for visual fidelity, and the Dodge Challenger Hellcat Widebody is no exception. From the muscular exterior proportions to carefully crafted interior details, our vehicle artists are paying close attention to materials, lighting, and overall authenticity to ensure the car feels believable and immersive within the world of American Truck Simulator.
Whether parked at a scenic overlook or cruising under changing skies, we want this Challenger to look and feel right in every situation, making each Road Trip experience more atmospheric and visually rewarding.
Weβre looking forward to sharing more updates as the Road Trip project evolves. Please remember that this car is still a work in progress, and further refinements are planned as development continues. With legendary vehicles like the Dodge Challenger Hellcat Widebody, we aim to clearly set expectations: Road Trip is about exploration, atmosphere, and celebrating American automotive culture on the open road, one unforgettable journey at a time.
26.2 Snapshot 7 (known as 26.2-snapshot-7 in the launcher) is the seventh snapshot for Java Edition 26.2, released on May 12, 2026, which adds new soundtracks, a new music disc, player-to-player connectivity, and friends lists.
Full changelog: https://minecraft.wiki/Java_Edition_26.2-snapshot-7
There are experimental features in 2.4, one is enabled with --enable-experimental-mail-utf8, and another with --enable-experimental-imap4rev2, and you also need to set mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them in config.
Critical bug fixes
CVE-2026-27851: lib-var-expand: Safe filter marks all following pipelines safe.
CVE-2026-33603: auth: CRAM-SHA-*-PLUS channel binding could be faked.
MITM attacker with a certificate trusted by the client could have
bypassed the requirement for channel binding.
CVE-2026-40020: IMAP folders can be shared-spammed to everyone.
CVE-2026-42006: An attacker can cause uncontrolled memory usage with
excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete.
Changes
indexer-worker, quota-status, script-login, program-client-local: Root
privileges are now dropped permanently before serving requests.
indexer-worker: Default restart_request_count changed to 1 to work
correctly after permanent root privilege drop.
lmtp: Add back service_extra_groups=$SET:default_internal_group that was
incorrectly removed in v2.4.3.
master: inet_listener_reuse_port has been replaced by service_reuse_port.
The new setting properly pre-creates all listener sockets at startup and
assigns one unique socket per process. Using this allows evenly distributing
incoming connections to login processes. See https://doc.dovecot.org/latest/core/config/service.html#service_reuse_port
for details.
Bug fixes
auth: Fix LDAP escaping of 0x13 control character.
auth: Use timing-safe comparison for certificate and public key fingerprints.
fts: Don't send request to Tika if there is no body text.
fts: Fix address header indexing for RFC 2047 encoded-words.
fts: tika, fts-solr: Fix use-after-free crash during DNS lookup.
imap: Fix assertion panic on invalid REPLACE 0 command.
lib-auth-client: Avoid "unknown id" errors for aborted auth requests.
lib-dcrypt: Fix potential crash if trying to access untrusted/corrupted keys.
lib-dcrypt: Improve error message if keys aren't in hex format as expected.
lib-index: Fix potential crash if fsck fails.
lib-ldap: Fix using OpenLDAP default CA when ssl_client_ca_dir/file is unset.
v2.4.3 regression.
lib-master, master: Fix behavior for services with client_limit>1 and
restart_request_count so that processes reaching restart_request_count are
no longer counted towards process_limit.
lib-master: Fix crash when reaching client_limit with restart_request_count>1.
lib-master: haproxy - Don't trust client certificate common name when
HAProxy reports verification failure.
lib-sasl: cram-md5 - Fix out of bounds memory read.
lib-sasl: oauth2 - Fix one byte out of bounds read.
+ Update Spanish, Chinese, German translations
+ Windows 11 Explorer: Optimize for ShellExt early return.
+ Windows: Add dark icon
+ KDE: Add support for context menu entry on KDE 6
+ iOS GUI: Explicitly release iCloud-downloaded files (feedback requested)
+ iOS GUI: Add dark/tinted icons
+ macOS GUI: Add light/dark icon variant according to the latest macOS guidelines
+ Android GUI: Permission request explanation for media location
+ Android GUI: Improve listing performance with hundreds of files
+ Android GUI: Improve colour contrast of button
+ Android GUI: Slightly reducing release size
+ Amiga .info: Initial and complete support
+ APV: Initial support, raw and in MP4
+ AV2: Initial support, raw and in MP4/AVIF
+ AV1: Support of Annex B (raw) streams
+ JPEG: Support of MotionPhoto
+ PNG: Support of animated PNG
+ HEVC/AV1: Support of HLG+
+ IAMF: Support of IAMF v2.0.0 test files
+ XMP: Support new GContainer format in JPEG files
+ HEVC: Show the precise profile for Format Range generic profile
+ Matroska: support RFC 9559 track flags (SDH, audio description, original, commentary)
+ Matroska: Map Performer, Podcast URL, Genre tags
+ MPEG-4: handle better some malformed stsd compressor names
+ MP4/MOV: handle presence or lack (heuristic) of version/flags in meta boxes
+ VorbisCom & MKV: Map ENCODER_OPTIONS from opusenc
+ APE: Read DISC and DISCSUBTITLE tag
+ WM: Read WM/SetSubTitle and WM/PartOfSet as part and part number
+ MPEG-4: Read the com.apple.iTunes:DISCSUBTITLE tag
+ Vorbis: Read the DISCSUBTITLE tag
+ Vorbis: Write disc numbers into Part/Position and Part/Position_Total
+ ID3v2: Map TSST to Part
+ MZ/PE: Identify presence of Cargo Auditable data
+ SMPTE registers: add more items
+ MZ/PE: Get Extended DLLCharacteristics / CETCOMPAT
+ MZ/PE: Extract SBAT from EFI files
+ MZ/PE: Parse resources, Optional Header and Section Headers
x LXF: fix crashes with buggy files
x ID3v2: fix crashes with buggy content
x Channel splitting: fix crashes with buggy content
x Channel grouping: fix crashes with buggy content
x ID3v2: fix not skipping unknown character encoding
x MPEG-4: does not parse boxes with unknown version
x Filter C0 controls, DEL, and C1 controls
x DLL: Fix missing const in buffer API
x I2561, Dirac: fix freeze with some malformed content
x I2578, Matroska: fix bad behavior with content having more then 126 tracks
x I2557, Matroska: fix false positive cover detection
x I2506, Matroska: fix false positive cover detection
x MPEG-4 Visual: less false-positive detection
x AAC: fix false-positive display of gain_control with corrupted frames
x VP9: fix frame info with RGB content
x DV DIF: fix recorded date century
x ADM: fix potential crash
Amsterdam, Nederland β 6 mei 2026 β Synology kondigde vandaag de lancering aan van de BC510 en TC510, een nieuwe generatie AI-gestuurde cameraβs die z
First-launch web setup wizard. New installs no longer need to hand-edit .env.local - point a browser at the container and the wizard probes the JMAP server(s), configures OAuth/OIDC, generates the session secret, accepts branding uploads, and provisions the initial admin password. Admin storage is now split into ADMIN_CONFIG_DIR (operator-authored, mountable read-only after setup) and ADMIN_STATE_DIR (runtime audit log and login timestamps); the legacy ADMIN_DATA_DIR keeps working for existing installs.
Features
Setup: Web setup wizard with multi-step flow: Server, Auth, Security, Logging, Branding, Review, Admin
Setup: Admin config/state directory split with optional ADMIN_CONFIG_READONLY for immutable deployments (#226)
Setup: File uploads on the wizard branding step
Setup: Redesigned review step with grouped summary and an advanced toggle for the full config
Setup: Require explicit confirmation when JMAP probe finds no session
Mail: Drag attachments out of the viewer to the local file system (#267)
Mail: Configurable signature position β above or below quoted text (#266)
Mail: Signature position is now searchable from the email behavior settings
Mail: Show avatar in Focused list for compact density and above
Mail: Align Focused list preview with other layout previews
Compose: From-header override in the composer with catch-all auto-reply, replies to an alias on a domain you own pre-fill the alias as the sender even when it isn't a configured identity (#246)
Performance
Mail: Prefetch initial email data on login
Auth: Parallelize login round-trips and drop redundant JMAP re-verify
Fixes
Auth: Skip upstream JMAP reverify for trusted URLs (#237)
Auth: Show account identity in the switcher header instead of the sending alias
Compose: Fall back to the primary identity signature on reply
Setup: Drop redundant first-login banner about removing ADMIN_PASSWORD (#222)
UI: Consistent notice cards for server probe results
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
Added
is_ip_in_cidr expression function for CIDR matching.
Changed
Bump mail-auth to 0.9 (which bumps hickory-resolver to 0.26).
Deprecated RFC2136 SIG(0) support as it is no longer supported by hickory.
Fixed
JMAP:
Patching ids containing digits in JSON Pointers fails.
Patching nested objects with null values fails.
External directories:
SQL: Return Failed instead of Error when the query returns no results.
LDAP: Impersonation fails when the user has not logged in before.
Network: Attempt binding to IPv4 when binding to IPv6 fails with EAFNOSUPPORT error.
Bootstrap: Timeout after 30 seconds when probing the data store.
HTTP: Use permissive CORS headers for .well-known endpoints.
ACME:
Include apex domains when requesting certificates for subdomains.
Use the public suffix list to determine the zone name when no origin is provided.
MTA:
Allow rescheduling recipients with permanent failures.
Process reports using original RCPT before rewriting.
Autodiscover v2 endpoint unreachable.
DNS update (via dns-update crate):
OVH + Google Cloud DNS: Fix FQDN handling for MX and SRV records.
Route53: Fix changeset error resolution.
deSEC: Use empty subname for apex records instead of @, which the API rejects.
Cloudflare: Wrap TXT record content in double quotes (RFC 1035) to suppress dashboard warnings.
iCalendar/JSCalendar (via calcard crate):
Support STATUS:CANCELLED mapping from VTODO to JSCalendar.
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. This week in DistroWatch Weekly:
Review: Fedora 44
News: Fedora plans to provide AI tools, problems with Ubuntu's new coreutils, TrueNAS extends development cycle, postmarketOS improves boot splash screen, Redox ports tmux
Questions and answers: What to do about all the extra fonts?
Released last week: OmniOS r151058, Omarchy 3.7.0, Parrot....
Today, weβre taking a closer look behind the scenes of Building Canada, focusing on the creation of British Columbia and what it takes to bring it into American Truck Simulator. We spoke with Patrix, our Map Technical Lead for ATS, who shared his perspective on how this ambitious new region is being brought to life and how the new road networks are being made.
"Hi, my name is Patrik (also known as Patrix). Over the past 15 exciting years at SCS Software, a mix of good fortune and personal dedication has taken me on quite a journey, from starting as a junior map designer on Euro Truck Simulator 2 just months before its release, to my current role as a Technical Lead working on American Truck Simulator."
"It's a pleasure and a big responsibility to be trusted by the company in terms of technical knowledge and pipeline correctness. In my early years, I recall breaking a lot of technical rules to achieve any sort of visual that was (or could be) considered nice. Doing that, I was many times inevitably instructed by experienced senior colleagues about how the game engine works and why I should be careful about overloading hardware with random details or items in map scenes."
"As years flew by, I became more responsible and stood rather rational about the complexity of the map and shaped a pretty exact vision of where the limits are and how the map should be done, so that it works smoothly on any computer and is also accessible to maintenance, which is critical for projects that live on for more than 10 years, just like ATS recently proved to be able to."
"Right now, my responsibility is to set and maintain a certain technical consistency in terms of how our map is being done across the entire ATS, which means syncing the attitude towards map creation across several projects and across different map teams."
"When our CEO, Pavel Ε ebor, approached us initially with the idea of going north to British Columbia, we immediately knew it would be a challenge. With its significance for the future of ATS, British Columbia reminds me of the times when we worked on Texas. Both were to be bigger than regular DLCs and should also carry a lot of specific new content. Logically, as we are going to another country in ATS for the very first time, we had to prepare a new set of road signage, both vertical and horizontal. Vertical signage are road-side signs, and those in Canada are very similar to the ones in the United States."
"Small things like font differences, dimensions, or rules for placement are exactly those little details we are looking for and following, so that our community of experienced drivers will immediately recognize that they are in Canada, even from unspecified random screenshots."
"Just like we did for the US, we read lots of Canadian documentation to get things right. One of the more complicated decisions was to pick the correct width of road lines. If documentation gives you a variety, what would you pick? The middle, one of the edge cases, or the most common? Also, how would we know from Prague what the most common roadline width is in Canada? When we found answers to these initial questions, even bigger issues appeared with implementation. For our Prism3D engine, different roadlines mean lots of new data that we had to create. Our in-game roads are made from templates of roads and more complex baked segments that we call prefabs. So if we wanted a slightly different yellow and a little wider/narrower lines, it meant making hundreds of road templates and prefabs to be able to bring this detail into British Columbia."
"Another part of my role as technical leader is to check all city layouts and compare their ambitions to the rest of the map, so that we stay consistent in the way we shape the game world."
"Now, British Columbia is actually pretty huge, but just like in many other cases, it is disproportionally balanced in terms of city spacing. The area around Vancouver is surrounded by a huge agglomeration of suburbs, and even cities across the water, like Victoria, were challenging in terms of where to put them on our map scale. Obviously, we had to sacrifice some bridges or interesting road pieces near Vancouver, but on the other hand, we will bring both border crossings from the US to Canada below Vancouver. The one at Interstate 5 is now relevant since we know our car-driving module, Road Trip, is on the way."
"I hope that players will truly enjoy exploring British Columbia and come to appreciate the sheer scale and ambition behind the project. While bringing a brand-new map like this to life comes with its fair share of challenges, itβs also been an incredibly fun and rewarding experience for the team, one weβre excited to share with the community."
UpSnap is, and always will be, free and open source software.
If someone is asking you to pay money for access to UpSnap binaries, source code, or licenses, you are being scammed.
The official and only trusted source for UpSnap is this repository (and its linked releases).
Do not pay third parties for something that is provided here for free.
Log in
