Linux

📰 Fedora 46 Looking At Moving To RPM v6 Package Format The RPM v4 packaging format has been used by Red Hat Enterprise Linux and Fedora and its derivatives for more than two decades. With next year's Fedora 46 release, Fedora Linux may finally transition to the modern RPM v6 packaging format... 🔗 Source: https://www.phoronix.com/news/Fedora-46-RPM-v6 #fedora #linux 👉@sysadminoff https://phoronix.com/news/Fedora-46-RPM-v6

Microsoft offers a temporary fix for broken Exchange Online EWS apps Microsoft says admins can restore Exchange Online apps disrupted by EWS blocking by temporarily re-enabling the API, but that workaround ends in April 2027. The change follows the EWS app allow-list enforcement; Microsoft’s longer-term advice is to update affected apps to use Microsoft Graph instead. Source 👉@sysadminoff https://4sysops.com/archives/microsoft-offers-a-temporary-fix-for-broken-exchange-online-ews-apps/

📰 Proton Experimental for October 15 has fixes for ARC Raiders, C&C Red Alert, Counterstike and The Aftermath Valve launched the latest update for Proton Experimental to fix up more issues found with Windows games running on SteamOS / Linux.Read the full article on GamingOnLinux. 🔗 Source: https://www.gamingonlinux.com/2026/10/proton-experimental-for-october-15-has-fixes-for-arc-raiders-c-c-red-alert-counterstike-and-the-aftermath/ #linux #proton 👉@sysadminoff https://gamingonlinux.com/2026/10/proton-experimental-for-october-15-has-fixes-for-arc-raiders-c-c-red-alert-counterstike-and-the-aftermath

📰 Linus Torvalds Rejects AI Coding Bans as Linux Rethinks Disclosure Rules Linus Torvalds opposes banning AI coding tools while Linux kernel developers propose dropping the Assisted-by disclosure requirement. 🔗 Source: / #kernel #linux 👉@sysadminoff https://linuxiac.com/linus-torvalds-rejects-ai-coding-bans-as-linux-rethinks-disclosure-rules

📰 n8n saved me more time this year than any AI tool, and most of my workflows don't use AI at all Before I started using n8n, most of my automations were Python or Bash scripts that ran through cron jobs. They got things done, although adding something new or figuring out why a script stopped working took more effort than I wanted. I only have a working knowledge of Python, and even when an AI tool helps me write the code, I still have to understand enough of it to maintain the automation. With n8n, I can follow the workflow on a canvas,... 🔗 Source: https://www.xda-developers.com/n8n-saved-more-time-year-ai-tool-workflows-dont-use-ai/ #python 👉@sysadminoff https://xda-developers.com/n8n-saved-more-time-year-ai-tool-workflows-dont-use-ai

PHP flaw sends government websites across Europe and Canada offline Government websites across Europe and Canada went offline as operators responded to two critical PHP vulnerabilities, with the fix arriving Wednesday after reports of attacks. The shutdowns were precautionary, but PHP developers warned that users should update promptly, and WordPress sites will not receive the fix through automatic updates. Security researchers also say AI helped uncover the flaws, underscoring how quickly vulnerabilities in widely used software can become a broad exposure. Source 👉@sysadminoff https://4sysops.com/archives/php-flaw-sends-government-websites-across-europe-and-canada-offline/

‍RaceView 0.99.4: проигрыватель для синхронного просмотра нескольких видео Друзья, представляю вашему вниманию плеер RaceView. Он нужен, чтобы смотреть несколько видео синхронно. Изначально задумывался мной для просмотра в первую очередь Формулы-1: выбираем файл гонки, DriverTracker и DataChannel, запускаем и получаем три окна, воспроизведение в которых идёт синхронно. В принципе подойдёт для любого случая, когда нужно несколько записей одного момента, например, для мультикамерных записей. Что умеет: несколько дорожек, первая — мастер, остальные подстраиваются по её часам; управление по каждой дорожке: пауза/воспроизведение, выбор аудиодорожки, отключение звука, громкость и временной сдвиг; синхронная перемотка с OSD; полноэкранный режим по каждому окну или по всем сразу; регистрируется в виджете воспроизведения KDE Plasma как один проигрыватель; доступны переводы на английский русский, немецкий, испанский и французский; Стек: Qt6 (Widgets / OpenGLWidgets / DBus), libmpv, C++17, CMake. Сборки для Linux (AppImage) и Windows x86_64 (zip) готовятся в GitHub Actions и лежат в релизах. Лицензия — GPL-3.0-or-later (проект линкует libmpv и Qt). Замечания и баги — в issues или в комментариях.  media player, mpv, video, от автора 👉@sysadminoff https://www.linux.org.ru/news/multimedia/18406511

The PHP Foundation knew about the PHP2Shell flaw for nearly two years The PHP Foundation says PHP developers identified or theorized the flaw in 2024, but it remained unfixed until October 2026. The PHP Foundation says limited funding, scarce developer time, and internal delays left critical flaw CVE-2026-109618 unresolved for nearly two years. The bug was one of two PHP2Shell vulnerabilities that prompted emergency fixes for two critical RCE flaws in October 2026. Source 👉@sysadminoff https://4sysops.com/archives/the-php-foundation-knew-about-the-php2shell-flaw-for-nearly-two-years/

QPACK flaws let one HTTP/3 connection exhaust server memory A flaw in QPACK, HTTP/3’s header-compression system, lets an unauthenticated attacker make some servers expand a small request into a huge amount of memory use. FoxIO found the issue in seven of ten tested HTTP/3 stacks and released proof-of-concept code. The bugs cause denial of service, with no reported data theft, code execution, or attacks in the wild. Source 👉@sysadminoff https://4sysops.com/archives/qpack-flaws-let-one-http-3-connection-exhaust-server-memory/

Опубликован сетевой стек F-Stack 2.0, работающий в пользовательском пространстве Состоялся релиз проекта F-Stack 2.0, развивающего редакцию сетевого стека FreeBSD, адаптированную для обособленной работы в пользовательском пространстве в форме библиотеки. Проект создан крупнейшей в Китае телекоммуникационной компанией Tencent и используется в её продуктах и сервисах. Код написан на языке Си и распространяется под лицензией BSD. Поддерживается работа в Linux и FreeBSD. Проектом также поддерживаются переведённые на использование F-Stack редакции Nginx 1.28 и СУБД Redis 6.2.6, демонстрирующие производительность выше обычных сборок, работающих поверх системного сетевого стека. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66526

📰 Steam Beta for October 15 brings a 64bit Linux client, Achievement Sets and more Another big new Steam Beta release for all platforms has arrived - bringing with it a 64bit Linux client, and a fancy Achievement Sets system.Read the full article on GamingOnLinux. 🔗 Source: https://www.gamingonlinux.com/2026/10/steam-beta-for-october-15-brings-a-64bit-linux-client-achievement-sets-and-more/ #linux #steam 👉@sysadminoff https://gamingonlinux.com/2026/10/steam-beta-for-october-15-brings-a-64bit-linux-client-achievement-sets-and-more

📰 Intel LLM-Scaler-vLLM PV 1.5 Brings Big Improvements Intel software engineers today released the latest version of LLM-Scaler-vLLM PV 1.5, their containerized Docker stack providing a convenient AI/LLM experience atop Intel Arc Graphics hardware and born out of their Project Battlematrix initiative... 🔗 Source: https://www.phoronix.com/news/Intel-LLM-Scaler-vLLM-PV-1.5 #intel 👉@sysadminoff https://phoronix.com/news/Intel-LLM-Scaler-vLLM-PV-1.5

В PyPI-пакет и Docker-образ с LiteLLM подставлено вредоносное ПО Зафиксирована публикация в репозитории PyPI вредоносного выпуска библиотеки LiteLLM, насчитывающей 23 млн загрузок в неделю, а также подстановка вредоносного кода в официальный Docker-образ проекта. Это не первый подобный инцидент с LiteLLM - в марте этого года атакующие уже публиковали вредоносные выпуски после перехвата учётных данных сопровождающего. На этот раз атакующие разместили версию LiteLLM 1.107.0, в которую был встроен вредоносный код для организации удалённого выполнения команд, а также поиска и отправки учётных данных, ключей и токенов доступа. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66525

5 Commands to Protect Critical Apps From the Linux OOM Killer The post 5 Commands to Protect Critical Apps From the Linux OOM Killer first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Your database keeps disappearing overnight, and the only clue is a kernel line saying “Out of memory: Killed process”. Here’s The post 5 Commands to Protect Critical Apps From the Linux OOM Killer first appeared on Tecmint: Linux Howtos, Tutorials & Guides. 👉@sysadminoff https://www.tecmint.com/stop-oom-killer-killing-apps/

📰 SteamOS 0.5.6 Beta for Steam Frame makes adding apk files simpler Valve just released SteamOS 0.5.6 Beta and a Steam Client Update for the Steam Frame - here's all the changes.Read the full article on GamingOnLinux. 🔗 Source: https://www.gamingonlinux.com/2026/10/steamos-0-5-6-beta-for-steam-frame-makes-adding-apk-files-simpler/ #steam 👉@sysadminoff https://gamingonlinux.com/2026/10/steamos-0-5-6-beta-for-steam-frame-makes-adding-apk-files-simpler

📰 Shelly 3.1.7 GUI Package Manager for Arch Linux Adds RLPM Native Package Engine Shelly 3.1.7 graphical package manager for Arch Linux distributions is now available for download with an independent RLPM implementation, expanded isolated builds, and more. 🔗 Source: https://9to5linux.com/shelly-3-1-7-gui-package-manager-for-arch-linux-adds-rlpm-native-package-engine #arch #linux 👉@sysadminoff

📰 The triple-OS NexPhone runs Android, Linux, and Windows 11, but you’ll have to wait until 2027 for it Usually, you're only stuck with one OS on your phone, but what if you could pick between Android, Linux, and Windows 11? It sounds ambitious, but that's a major selling point for NexPhone, which has been in the works for 14 years now. The phone was originally scheduled to release later this year, but unfortunately, it has been pushed back a few months. 🔗 Source: https://www.xda-developers.com/the-triple-os-nexphone-runs-android-linux-and-windows-11-but-youll-have-to-wait-until-2027-for-it/ #android #linux 👉@sysadminoff https://xda-developers.com/the-triple-os-nexphone-runs-android-linux-and-windows-11-but-youll-have-to-wait-until-2027-for-it

Entra ID adds third-party SMS options before Microsoft’s 2027 cutoff Microsoft Entra ID will let organizations choose a third-party provider for SMS and voice authentication starting October 30, ahead of Microsoft’s February 1, 2027 retirement of its own telephony service. Users who rely only on SMS or voice will otherwise face a blocking prompt to register a passkey. Global Administrators and external users have until July 1, 2027. Source 👉@sysadminoff https://4sysops.com/archives/entra-id-adds-third-party-sms-options-before-microsofts-2027-cutoff/

Cloudflare adds two-sided WAF detection for php2shell attacks Cloudflare’s web application firewall (WAF) filters traffic to websites before it reaches their servers. It began blocking php2shell exploits for WAF customers on October 21, using a new detection method that checks both incoming requests and server responses. Cloudflare says attackers were already changing their payloads to evade protections. Source 👉@sysadminoff https://4sysops.com/archives/cloudflare-adds-two-sided-waf-detection-for-php2shell-attacks/

Проблемные корневые сертификаты eMudhra были сгенерированы в HSM и прошли независимый аудит Компания eMudhra опубликовала заявление, связанное с инцидентом, в результате которого у восьми корневых сертификатов удостоверяющего центра оказались легко подбираемые закрытые ключи, имеющие всего 1 байт энтропии вместо 48. eMudhra утверждает, что сертификаты были сгенерированы в апреле 2025 года на публичной торжественной церемонии с использованием аппаратных модулей HSM (Hardware Security Module), имеющих сертификат соответствия требованиям FIPS 140-2 Level 3. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66524