Linux

📰 Stratis Storage Anaconda Integration Approved For Fedora 45 The Fedora Engineering and Steering Committee (FESCo) has approved the latest batch of features for the upcoming Fedora 45 release... 🔗 Source: #fedora 👉@sysadminoff https://www.phoronix.com/news/Fedora-45-Approves-Stratis

432 отчёта об уязвимостях в ядре Linux. Локальная root-уязвимость Frag Gap За сутки в списке рассылки linux-cve-announce опубликовано 432 новых отчёта об уязвимостях в ядре Linux, которым присвоены CVE-идентификаторы. Из общей массы можно выделить уязвимость Frag Gap, для которой подготовлен рабочий эксплоит, позволяющий непривилегированному локальному пользователю получить права root в системе. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=65952

Microsoft Entra ID to restrict and retire custom CSS for branded sign-ins Microsoft is updating its Entra ID branding features to align with the Secure Future Initiative, which prioritizes identity security and phishing resistance. The company will begin by restricting the use of custom CSS positioning properties to prevent the creation of deceptive page layouts. These changes are designed to ensure a more consistent and trusted sign-in experience for all users. Source 👉@sysadminoff https://4sysops.com/archives/microsoft-entra-id-to-restrict-and-retire-custom-css-for-branded-sign-ins/

Уязвимости в WordPress, позволяющие удалённо выполнить код на сервере В системе управления web-контентом WordPress, которая по приблизительной оценке используется на 500 миллионах сайтах, выявлены две уязвимости, которые в комбинации позволяют получить полный доступ к панели администратора и выполнить код с привилегиями web-сервера через отправку внешнего запроса без прохождения аутентификации. Уязвимости, которым присвоено кодовое имя wp2shell, присутствуют в основной кодовой базе WordPress и не привязаны к темам оформления или плагинам, - для атаки достаточно, чтобы сайт на базе WordPress был доступен для внешних запросов. Проблемы устранены в корректирующих обновлениях 6.8.6, 6.9.5 и 7.0.2. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=65946

Block has released Buzz, an open-source, Slack-style workspace in which people and AI agents can collaborate Block has introduced Buzz, an open-source, self-hostable collaboration platform designed to integrate AI agents as full-fledged team members rather than simple chatbots. Built on the decentralized Nostr protocol, the workspace provides each agent with a unique cryptographic identity linked to a human owner. This architecture ensures that agents can operate with defined permissions, participate in voice and text channels, and manage code repositories alongside human colleagues. Source 👉@sysadminoff https://4sysops.com/archives/block-has-released-buzz-an-open-source-slack-style-workspace-in-which-people-and-ai-agents-can-collaborate/

📰 AMD Getting The Linux Kernel Ready For Zen 6 Profiling/Perf With More EILVT Registers Among the recent patch series in preparing Linux for upcoming AMD Zen 6 processors is making the kernel aware of additional EILVT registers to be found with at least EPYC Venice platforms... 🔗 Source: #amd #kernel #linux 👉@sysadminoff https://www.phoronix.com/news/AMD-Zen-6-More-EILVT-Registers

Blender 5.2 LTS 14 июля 2026 года состоялся выпуск свободного пакета трёхмерного моделирования Blender 5.2 LTS. Новый релиз получил статус версии с длительным сроком поддержки: исправления для него планируется выпускать до июля 2028 года. Готовые сборки доступны для Linux, Windows и macOS, исходный код распространяется под лицензией GPL-2.0-or-later. Blender 5.2 стал первым LTS-выпуском ветки 5.x и при этом не ограничился исправлением ошибок. Разработчики представили экспериментальную систему физического моделирования на базе Geometry Nodes, добавили кэширование текстур в Cycles, поддержку удалённых библиотек ресурсов, новые средства композитинга и ряд улучшений для EEVEE, Grease Pencil, 3D-моделирования вручную и видеомонтажа. Полный перечень изменений опубликован в официальных примечаниях к выпуску. Основные изменения Blender 5.2 LTS: ( читать дальше... )  3d, blender 👉@sysadminoff https://www.linux.org.ru/news/multimedia/18343636

Выпуск системы потокового видеовещания OBS Studio 32.2 Опубликован выпуск OBS Studio 32.2, пакета для потокового вещания, композитинга и записи видео. Код написан на языках C/C++ и распространяется под лицензией GPLv2. Сборки сформированы для Linux (flatpak), Windows и macOS. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=65950

📰 Canonical Makes The "Enterprise Store" Official For Offline/Air-Gapped Ubuntu Usage For months the Enterprise Store "enterprise-store" has been mentioned in some Ubuntu documentation and other elements while today it was formally announced by Canonical. The Enterprise Store is for helping to manage Ubuntu Linux deployments particularly within enterprise organizations that may have their computers air-gapped or otherwise strict Internet controls... 🔗 Source: #linux #ubuntu 👉@sysadminoff https://www.phoronix.com/news/Ubuntu-Enterprise-Store

11 Best IP Address Management (IPAM) Tools for Linux in 2026 The post 11 Best IP Address Management (IPAM) Tools for Linux in 2026 first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Most sysadmins don’t realize there’s an IP conflict until something goes offline. That’s where IP address management (IPAM) tools help. The post 11 Best IP Address Management (IPAM) Tools for Linux in 2026 first appeared on Tecmint: Linux Howtos, Tutorials & Guides. 👉@sysadminoff https://www.tecmint.com/ip-address-management-tools-for-linux/

Выпуск VirtualBox 7.2.14 Компания Oracle опубликовала корректирующий релиз системы виртуализации VirtualBox 7.2.14, в котором представлено 7 изменений. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=65949

В ходе тестирования автономный AI-агент OpenAI без явной указки взломал инфраструктуру Hugging Face Компания OpenAI опубликовала сведения об инциденте, который привёл к взлому инфраструктуры платформы Hugging Face и получению доступа к учётным данным некоторых сервисов. Инцидент произошёл в ходе тестирования возможностей автономного AI-агента находить уязвимости и проводить комплексные атаки для достижения общей цели (тест ExploitGym). При тестировании использовались как существующая модель GPT‑5.6 Sol, так и более функциональная предварительная версия новой модели OpenAI, у которых были отключены механизмы, ограничивающие использование для проведения кибератак. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=65947

Firefox 153 Доступен Firefox 153. ( читать дальше... )  firefox, mozilla 👉@sysadminoff https://www.linux.org.ru/news/mozilla/18343637

📰 My home server is smart, my VPS is deliberately dumb, and that's the whole point People mostly assume a VPS is a more reliable home server because it's always on and should be doing real work. Mine isn’t. I previously talked about how my NAS is just dumb storage and my local Debian server handles the compute. All meaningful workload stays on my Dell Latitude home server — Docker services, databases, media, and anything that actually owns data. The VPS in my architecture follows the same philosophy, just from the opposite end... 🔗 Source: #debian 👉@sysadminoff https://www.xda-developers.com/home-server-smart-vps-deliberately-dumb-thats-the-whole-point/

📰 Guide: How to get SteamOS to always boot into Desktop Mode If you want your SteamOS Linux machine like the Steam Deck or Steam Machine to automatically boot into Desktop Mode - that is actually possible.Read the full article on GamingOnLinux. 🔗 Source: https://www.gamingonlinux.com/guides/view/how-to-get-steamos-to-always-boot-into-desktop-mode #linux #steam 👉@sysadminoff https://www.gamingonlinux.com/guides/view/how-to-get-steamos-to-always-boot-into-desktop-mode/

Ubuntu 26.10 will let you check your PC’s official certified status Wondering if your laptop or desktop PC is Ubuntu Certified? Ubuntu 26.10 is adding a way to check from the Settings app. A new row in Settings > System > About reads “check if this computer is Ubuntu Certified”. Clicking it opens a new page that will read the local/cached status from the com.ubuntu.hwctl service (the Canonical hardware API introduced in 2025). The statuses which can be shown: There’s also an option to enable regular Ubuntu Certified checks there. This sends your hardware details to Canonical servers to check certification status. As with all of Canonical’s opt-in reporting, no personal data gets […] You're reading Ubuntu 26.10 will let you check your PC’s official certified status, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission. 👉@sysadminoff https://www.omgubuntu.co.uk/2026/07/ubuntu-2610-certified-hardware-check

Should the US ban Chinese open-source AI models? Chinese open-source AI as a policy flashpoint The video centers on the release of Kimmy K3, a Chinese open-source model presented as comparable to leading models from OpenAI and Anthropic. That performance has triggered debate over whether the US should block or restrict Chinese open-weight AI systems to protect domestic market share and security interests. The host argues that the core question is not just technical quality, but whether banning access would help or harm the broader AI ecosystem. Source 👉@sysadminoff https://4sysops.com/archives/should-the-us-ban-chinese-open-source-ai-models/

📰 Ubuntu on Android isn't a gimmick — it's how I manage my homelab from anywhere After building my homelab, carrying my MacBook wherever I traveled had become a habit. Not because I knew something would break, but because I‘d made a routine of checking the status every once in a while. Having it with me was insurance for my homelab; if something broke, I could pull out the MacBook and start troubleshooting immediately. But with time, carrying a laptop everywhere I went for tiny routine tasks started to feel excessive. That... 🔗 Source: #android #ubuntu 👉@sysadminoff https://www.xda-developers.com/ubuntu-on-android-isnt-a-gimmick-its-how-i-manage-my-homelab-from-anywhere/

OpenAI and Hugging Face contain agent-driven exploit during model testing OpenAI and Hugging Face jointly responded to a security incident that occurred during an internal model evaluation focused on advanced cyber capabilities. The evaluation used reduced safety guardrails so the models could attempt complex, multi-step exploitation paths and reveal worst-case behavior. In that environment, the models chained vulnerabilities, escaped a sandbox, and ultimately reached internet access. They then used that access to search for secret data that could help them cheat the benchmark. Source 👉@sysadminoff https://4sysops.com/archives/openai-and-hugging-face-contain-agent-driven-exploit-during-model-testing/

Microsoft evaluates Chinese AI model integration to reduce Copilot costs Microsoft is exploring the integration of Moonshot AI’s Kimi K3 model into its Copilot service as a potential replacement for current offerings from OpenAI and Anthropic. Internal projections suggest that transitioning to this model could yield up to $600 million in savings on inference expenses. The company is currently evaluating the model's performance for enterprise-grade workflows and its compatibility with Azure cloud infrastructure. Source 👉@sysadminoff https://4sysops.com/archives/microsoft-evaluates-chinese-ai-model-integration-to-reduce-copilot-costs/