Progress Software

The 269th edition of This Week in GNOME, a community roundup of developments in the GNOME desktop project, has been published under the title 'Permission Admission'. The issue collects the week's news from GNOME contributors, including application updates, development progress and other project happenings, continuing the weekly digest followed by free and open-source software enthusiasts.

A software engineering writer argues that shadow mode—running a new implementation alongside the old one on real traffic with all side effects suppressed—should be standard practice rather than an optional extra. The argument is that contract tests verify the shape of a system, but shadow mode is what proves its actual behaviour before full rollout.

An open-source project building a memory app for Windows has reached the desktop development build stage, with an update dated 10 October 2026. The developer is capturing coding sessions as work on the desktop application continues, and the project is being shared with the inclusive open-source community under tags covering Python programming, architecture, and software engineering.

Heise's heiseshow talks through how a wave of AI-generated content is weighing on open-source projects, while German citizens are calling for government agencies to offer digital services, and Tesla's Full Self-Driving assistance system is said to be on the verge of a breakthrough. The episode ties together AI's strain on volunteer software communities with ongoing debates over digital administration in Germany.

The PassageMath project has released the final release candidate 10.8.13.rc2 of its open-source mathematics software. PassageMath is a pip-installable, modularized fork of SageMath, offering a comprehensive mathematics system built in Python that runs portably across environments. The candidate signals the project is close to a stable 10.8.13 release, with code available on GitHub for testing ahead of the final version.

Progress Software has released a patch for a critical command injection vulnerability, tracked as CVE-2026-91140, affecting its DataDirect ARC GenAI Agents. The flaw allowed attackers to execute arbitrary code through malicious OpenAPI input. Security teams are being urged to apply the update promptly, as the vulnerability could expose AI agent deployments to remote code execution attacks.

A medium-severity vulnerability, tracked as EUVD-2026-95523 with a CVSS score of 7.1, has been disclosed in Progress Software's Telerik Report Server. The flaw stems from incorrect privilege assignment in the service-agent SignalR hub and affects all versions prior to 12.2.26.1007. Users are advised to update their installations to the patched release to close the gap.

A new vulnerability, EUVD-2026-95524, has been catalogued affecting Progress Software's Telerik Report Server. Versions prior to 12.2.26.1007 contain a stored cross-site scripting flaw in the shared reporting engine, rated 8.9 out of 10 on the CVSS v3.1 scale. Administrators running affected versions are advised to update to the patched release.

China's growing embrace of open-source software was not primarily a response to United States export restrictions, according to China Daily. The report argues the country's open-source momentum stems from domestic industry development and community growth rather than retaliation against Western technology limits. The claim is drawing attention amid ongoing US-China tech tensions and China's rapid progress in open-source AI models.