The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Univention project has published an update for Univention Corporate SErver which introduces new security options, selecting password hashes, performing Keycloak monitoring and simplifies managing Microsoft 365 Classroom tools. "The latest patch-level release of Univention Corporate Server bundles all new features and improvements from the past months onto....
Release Highlights: Although GeForce Game Ready Drivers and NVIDIA Studio Drivers can be installed on supported notebook GPUs, the original equipment manufacturer (OEM) provides certified drivers for your specific notebook on their website. NVIDIA recommends that you check with your notebook OEM for recommended software updates for your notebook.
Game Ready for CONTROL Resonant, Gears of War: E-Day, The Witcher 3: Wild Hunt – Remastered & AION 2 This new Game Ready Driver provides the best gaming experience for the latest new games supporting DLSS and RTX technologies including CONTROL Resonant, Gears of War: E-Day, The Witcher 3: Wild Hunt – Remastered and AION 2.
Fixed Gaming Bugs
Judgement/Lost Judgement/ Virtua Fighter 5 R.E.V.O. may fail to launch after updating to driver 616.56 [6681537]
Fixed General Bugs
No picture on Samsung Odyssey G95NC monitor when connected via HDMI after updating to R615 drivers [6771206]
Certain monitors may not wake from sleep when connected via DisplayPort after updating to R615 drivers [6757568]
Customers can now shop for Mac mini with M6 and M5 Pro, and Mac Studio with M5 Max and M5 Ultra, at Apple Store locations, online, and in the Apple Store app.
Pre-release. This is a test build for Bulwark Lite. Not recommended for production. The latest Docker tag stays on 1.10.0. To try the server build, use ghcr.io/bulwarkmail/webmail:1.11.0-beta.2.
Bulwark Lite
bulwark-lite-1.11.0-beta.2.zip: unpack it on any static web host and set your JMAP server in config.json. The JMAP server must allow CORS from the webmail origin.
bulwark-lite-stalwart.zip: a Stalwart Application bundle that serves itself under the configured prefix (e.g. /webmail).
The Lite zips are attached once the Build Static Lite workflow finishes (a few minutes after publishing).
Changes since beta.1
Toasts for mail actions that had no feedback, plus an "email sent" toast after immediate sends
Toasts show again
Deep links resolve to the local instance
A staged attachment is kept until its upload finishes
If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
Added
Expressions: bit_and function.
Changed
Fixed
MTA:
A mailing list whose recipients include another mailing list is accepted at RCPT TO and then rejected at local delivery with 550 5.5.0 Mailbox not found.
DMARC aggregate reports carry two spf elements per record and the version element of a DMARC aggregate report is written as 1 instead of 1.0.
DSNs generated for an alias rewrite or a list expansion emit a doubled addr-type in Original-Recipient (rfc822;rfc822;user@example.org).
DSNs that cannot be written to the store are discarded, the recipients are flagged as notified and the original message is removed from the queue, losing both the bounce and the message.
POP3:
TOP msg n counts the n lines from the first byte of the message instead of from the first byte of the body.
A message whose very first line begins with . is not byte-stuffed.
Spam filter: Moving or copying a message from one account into another creates no training sample, so the classifier never learns from it.
Sieve: envelope "orcpt" yields the bare address for an ORCPT supplied over SMTP. It now carries the addr-type prefix in every case, as required by RFC 6009.
ACME: The _acme-challenge TXT records published for a DNS-01 authorization are never removed.
DNS: The DNSSEC resolver queries a single nameserver at a time, working around a hickory-resolver race that cancels the TCP retry when two nameservers return a truncated response in parallel.
Troubleshoot tool:
MX records are resolved through the DNSSEC-validating resolver, matching the resolver used by the delivery path.
A TLSA lookup that fails or returns bogus records stops the delivery attempt for that host, instead of continuing without DANE.
OIDC: Bearer tokens that carry no email, preferred_username or upn claim are always authenticated against the default directory.
Meilisearch: A confirmation timeout is treated as a failed write even when failOnTimeout is disabled, so an index whose batches take longer than pollInterval x maxRetries never completes an indexing task and resubmits the same batch indefinitely.
WebUI: A failed update no longer takes an Application offline.
FoundationDB: The cached read version is invalidated when any broadcast is received from another node.
Redis:
On a cluster, the rate limiter and the blob upload quota issue INCR and EXPIRE as a MULTI/EXEC transaction, whose MOVED redirects collapse into a single EXECABORT that never refreshes the slot map.
A connection that fails because it is addressing the wrong server is returned to the pool and reused, since the recycle check only issues PING.
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. This week in DistroWatch Weekly:
Review: Command line shells
News: Orphaned Void packages, Ubuntu finishes migration from GNU to Rust Coreutils, new CoW filesystem for OpenBSD, new features in GNU Coreutils
Questions and answers: The legacy of filenames on Linux
Released last week: Raspberry Pi OS 2026-09-15, Parted Magic 26.09, Clonezilla....
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The MX Linux project has published a new update to the 25.x series. Along with importing new security fixes and firmware from its Debian parent, the MX Linux project includes a number of new changes: "On the MX side, we have pushed most of our updates as we’ve....
After upgrade, you need to run php bin/console doctrine:migrations:migrate (or equivalent) as webserver user after upgrade.. If you are running a docker container, use sudo docker exec --user=www-data partdb php bin/console doctrine:migrations:migrate, or sudo -E inside the docker container, to ensure that the migrations are applied to the correct database.
Note
If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8
Part-DB 2.18.0
New features
Added generic AI client, that can be used for any OpenAI compatible LLM API (#1551)
Allow to specify a color for custom part states by @killecaptron in #1537
Retrieve and store stock levels from info providers for parts by @killecaptron in #1538
Allow to configure which field groups are exported to KiCad by @lukas-runge in #1533
Show DEFAULT_URI value in server info page
Report an AI provider error instead of ending the request with a 500 by @killecaptron in #1539
Added an debug_vars() twig functions in the twig label sandbox to list all available variables
Do not download non-downloadable attachments and improve handling changing URLs on attachment merge by @killecaptron in #1531
Get ready for a brand-new experience in American Truck Simulator! It's time to grab a different set of keys and hit the road in amazing vehicles that are a little different than what you've been used to. We're excited to announce that the
We are so excited to be almost finished with this upcoming DLC and that our #BestCommunityEver will be able to enjoy it too! To get you in the mood for driving the stunning cars from Ford, our talented video team has put together an official video trailer. Watch it below to see all that is coming!
Road Trip will bring a whole new experience for players of American Truck Simulator. Not only will you be able to drive in completely different types of vehicles than before, but you will also have the opportunity to complete smaller delivery jobs, customize your cars with accessories, paint them in different colors, or explore the vast landscapes of the U.S. from a completely new perspective while also discovering and learning about beautiful landmarks with the new Atlas feature!
Just imagine driving legendary cars like the 1967 Ford Mustang Fastback, 2023 Ford F-150, 2023 Ford Bronco, and 1998–2012 Ford Crown Victoria on Route 66 from Chicago to Los Angeles, through the rolling hills of the Midwest, or over the beautiful mountains in Montana from the comfort of your home.
And if you are a pure truck driver and don't feel like ever leaving your decked-out rig, don't forget that the Atlas feature available with Road Trip DLCs is not just for cars. You can still enjoy the feature behind the wheel of an 18-wheeler - just make sure to own the Road Trip: Ford DLC so this feature is unlocked for you right after its release.
require browser POST requests to have an allowed origin (#6238) Browsers can send POST requests without performing any preflight request and without checking whether the request origin is present in Access-Control-Allow-Origin. Intercept these requests and check server-side whether the origin is allowed, blocking the request if it is not.
conf: fix comparison and sharing of the default authInternalUsers (#6205)
pmp4, fmp4: restore check on inbound H265 SPS (bluenviron/mediacommon#374) A valid H265 SPS is required for marshaling back an MP4, so we have to resume checking them.
pmp4: support tracks without edts (bluenviron/mediacommon#375) The edit box is optional (ISO/IEC 14496-12, 8.6.5), but tracks without it were rejected with "unexpected box 'mdia'".
pmp4: return seek errors from GetPayload (bluenviron/mediacommon#376) GetPayload checked the wrong variable after seeking, therefore a failed seek was ignored and the payload was read from the current position of the reader.
pmp4, fmp4: correctly fill HvcC NumTemporalLayers / TemporalIdNested from SPS (bluenviron/mediacommon#379)
rtpmjpeg: reject reserved quantization value 127 (bluenviron/gortsplib#1161) RFC 2435 reserves quantization values 100-127, but the guard used Quantization < 127
make the server manage sessions (#6239) Sessions are now managed by the HLS server, detaching their lifecycle from muxers. This also comes with a performance improvement, since finding a session now traverses a single mutex, and not two channels like before.
return 404 when a session is valid but muxer is closed (#5736) (#6240) HLS sessions are now kept open for up to 30 seconds after a muxer is closed. This allows the server to handle incoming requests belonging to these sessions and to classify then as 404 rather than 401.
change error returned in case session is not found (#6241) match the RTSP behavior and return a "session not found" message rather than an "authentication error", which is reserved for creating sessions, not for using them.
fix AV1 getting stuck by stripping padding (#5632) (#5774) (#6242) AV1 OBU padding is generated by several encoders. Stripping it has been demonstrated to solve most situations in which browsers get stuck when playing such streams.
fix stuck decoding with DJI drones (#5221) (#6051) (#6243) Streams from DJI drones contain SEI units with payload type 5 and a specific UUID that seem to cause stuck videos on Chrome and Firefox. Filter out these units.
code.cloudfoundry.org/bytefmt updated from v0.88.0 to v0.90.0
github.com/MicahParks/keyfunc/v3 updated from v3.8.1 to v3.8.2
github.com/abema/go-mp4 updated from v1.7.1 to v1.7.3
github.com/bluenviron/gohlslib/v2 updated from v2.4.4 to v2.4.5
github.com/bluenviron/gortmplib updated from v1.0.2 to v1.0.3
github.com/bluenviron/gortsplib/v5 updated from v5.6.5 to v5.6.6
github.com/bluenviron/mediacommon/v2 updated from v2.9.4 to v2.9.5
github.com/gin-contrib/pprof updated from v1.5.4 to v1.5.5
github.com/matthewhartstonge/argon2 updated from v1.5.7 to v1.6.3
github.com/pion/ice/v4 updated from v4.4.1 to v4.4.2
github.com/pion/interceptor updated from v0.1.47 to v0.1.48
github.com/pion/sdp/v3 updated from v3.0.19 to v3.0.20
github.com/pion/transport/v4 updated from v4.1.0 to v4.1.1
github.com/pion/webrtc/v4 updated from v4.2.19 to v4.2.20
golang.org/x/crypto updated from v0.55.0 to v0.57.0
golang.org/x/net updated from v0.58.0 to v0.59.0
golang.org/x/sync updated from v0.22.0 to v0.23.0
golang.org/x/sys updated from v0.47.0 to v0.48.0
golang.org/x/term updated from v0.45.0 to v0.46.0
github.com/bytedance/gopkg updated from v0.1.3 to v0.1.4
github.com/bytedance/sonic updated from v1.15.0 to v1.15.2
github.com/bytedance/sonic/loader updated from v0.5.0 to v0.5.1
github.com/cloudwego/base64x updated from v0.1.6 to v0.1.7
github.com/gabriel-vasile/mimetype updated from v1.4.12 to v1.4.13
github.com/gin-contrib/sse updated from v1.1.0 to v1.1.1
github.com/go-playground/validator/v10 updated from v10.30.1 to v10.30.3
github.com/goccy/go-json updated from v0.10.5 to v0.10.6
github.com/klauspost/cpuid/v2 updated from v2.3.0 to v2.4.0
github.com/mattn/go-isatty updated from v0.0.20 to v0.0.23
github.com/pelletier/go-toml/v2 updated from v2.2.4 to v2.4.3
github.com/pion/dtls/v3 updated from v3.1.5 to v3.1.8
github.com/pion/mdns/v2 updated from v2.1.0 to v2.2.0
github.com/pion/srtp/v3 updated from v3.0.13 to v3.0.15
github.com/pion/stun/v3 removed
github.com/pion/turn/v5 updated from v5.0.13 to v5.1.0
go.mongodb.org/mongo-driver/v2 updated from v2.5.0 to v2.8.0
golang.org/x/arch updated from v0.22.0 to v0.29.0
golang.org/x/text updated from v0.41.0 to v0.42.0
google.golang.org/protobuf updated from v1.36.10 to v1.36.11
github.com/pion/stun/v4 v4.0.0 added
hls.js updated from v1.7.2 to v1.7.3
Security
Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.
Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:
ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx
You can verify checksums of binaries by downloading checksums.sha256 and running:
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Clonezilla Live is a Debian-based live distribution containing Clonezilla, a partition and disk cloning software. The project's latest release, version 3.3.3-37, includes several updates from its parent, along with new boot options: "The underlying GNU/Linux operating system has been upgraded, this release is based on the Debian 'Sid'....
With the release of our South Dakota DLC, we invite you all to join us on Thursday, the 24th of September, for the newest World of Trucks event - Cruising South Dakota! Roll through the Mount Rushmore State and take in its wide-open landscapes, natural beauty and rich history.
So, what is the challenge? Haul cargo to or from any city in South Dakota and help the community reach a collective goal of 150,000,000 miles (241,402,000 km). With the strength of our #BestCommunityEver, we know you will smash it!
Hit the road by #CruisingSouthDakota, where vast prairies meet the rugged Black Hills and the otherworldly Badlands, with long crossings over the Missouri River along the way. But this land carries far more than scenery, it holds stories that reach deep into the past. The Black Hills, known to the Lakota people as Paha Sapa, are sacred ground, while Badlands National Park preserves one of the richest fossil beds on Earth. This is where giants like SUE the T. rex slept for millions of years before being discovered.
During your travels, you can look forward to many spectacular views and highlights, such as:
Mount Rushmore National Memorial, the iconic monument carved into a granite face in the Black Hills.
Badlands National Park, a dramatic maze of layered rock spires and buttes unlike anywhere else in America.
Deadwood, the legendary gold rush town where Wild Bill Hickok played his final hand.
Missouri River crossings, where the great river divides the rolling east from the rugged west of the state.
As with past Cruising events, you can also participate using your own trailer by selecting jobs from the External Market!
The South Dakota DLC features 13 incredible cities to explore, and we're offering an exclusive reward for completing your personal goal, which will require you to deliver a job to or from all of them. All jobs for the event must be at least 100 miles (161 km) long.
Take part in this breathtaking journey across the Great Plains, from South Dakota's sweeping landscapes and Black Hills to its frontier towns. Let's roll through the Mount Rushmore State!
Rules
Using External Contracts or External Market, with a World of Trucks-connected profile in American Truck Simulator, the community goal is to drive 150,000,000 miles (241,402,000 km) while delivering cargoes to or from any city in South Dakota.
When a player has completed deliveries to or from all 13 South Dakota cities, they will achieve their personal goal.
All jobs for the event must be at least 100 miles (161 km) long.
You can check if your recent deliveries met these conditions using your Log Book in your World of Trucks profile.
Rewards
Personal: Players who complete deliveries to or from all 13 South Dakota cities will earn a personal World of Trucks Achievement and a Call of the Badlands ATS truck paint job Steam inventory item.
Community: When the community goal of driving 150,000,000 miles (241,402,000 km) during deliveries to or from any city in South Dakota is met, players who have also achieved their personal goal will receive a Ring-necked Pheasant Steam inventory item.
Note: In order to qualify for the community reward, you must complete your personal goal in American Truck Simulator. Each reward will be a Steam inventory item for American Truck Simulator. Once completed, claim your rewards on the Events page of your World of Trucks profile.
The event will conclude on Sunday, the 22nd of November at 23:59 UTC.
Gear up for the latest addition to American Truck Simulator and join us for #CruisingSouthDakota! Share your screenshots and videos with us on our Facebook, X (formerly Twitter), and Instagram profiles, and we will share our favourite ones (we may even feature some of them in a future blog post!).
Pre-release. This is a test build for Bulwark Lite. Not recommended for production. The latest Docker tag stays on 1.10.0. To try the server build, use ghcr.io/bulwarkmail/webmail:1.11.0-beta.1.
Bulwark Lite
Bulwark Lite is a static build of the webmail. It has no Node server: the browser talks to your JMAP server directly.
bulwark-lite-1.11.0-beta.1.zip: unpack it on any static web host (nginx, Caddy, S3, Pages…). Set your JMAP server in config.json. The JMAP server must allow CORS from the webmail origin.
bulwark-lite-stalwart.zip: a Stalwart Application bundle. Install it as an Application in Stalwart and it serves itself under the configured prefix (e.g. /webmail).
The Lite zips are attached once the Build Static Lite workflow finishes (a few minutes after publishing).
Please report problems with the Lite build in the issue tracker.
Also in this pre-release
New "Flat fields" theme
Icon set migrated from Lucide to Tabler Icons
Hardened Lite login, deep-link replay and settings gating
Log in
