Linux

Уязвимость в PHP, потенциально позволяющая скомпрометировать любой PHP-сайт Разработчики PHP анонсировали публикации сегодня в 17:00 (MSK) экстренных корректирующих выпусков (8.5.12, 8.4.27, 8.3.36 и 8.2.35), в которых будут устранены две критические уязвимости. Всем администраторам серверов с PHP рекомендовано незамедлительно установить исправления на своих системах, сразу после их появления. Официально детали будут раскрыты только после появления исправлений, но судя по появившейся в открытом доступе информации, речь про уязвимости CVE-2026-109618 и CVE-2026-109619, потенциально позволяющие удалённо выполнить свой код на любом сервере, выполняющем PHP-скрипты. Проблема проявляется во всех версиях, начиная с PHP 5.4. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66516

PS5 Linux hack now supports (some) newer firmware versions You may recall hearing the PS5 can now run Linux. The catch was that it needed a console running older firmware, from before Sony nixed the exploit used. Well, the door is now a little ajar again (‘get a better metaphor, Joey’ – the world). A new pLinux5-NG project adapts the old PS5 Linux bootloader to different security exploits, the Relapse jailbreak and Byepervisor-Reborn, the latter to circumvent the console’s hypervisor protections. This enables booting Linux on PS5 consoles with newer firmware versions than were previously supported, up to 13.60. But, catch time, this effort only officially supports firmware 13.20 right now. Sony’s newer 14.00 […] You're reading PS5 Linux hack now supports (some) newer firmware versions, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission. 👉@sysadminoff https://www.omgubuntu.co.uk/2026/10/ps5-linux-hack-newer-firmware

📰 Memtest86+ v9.00 Released With Support For ARM64 Memory Testing The open-source Memtest86+ program that is popular for RAM testing has expanded beyond the x86/x86_64 (and LoongArch64) world to now support memory testing on ARM64/AArch64 hardware... 🔗 Source: https://www.phoronix.com/news/memtest86-Plus-9.0 #opensource 👉@sysadminoff https://phoronix.com/news/memtest86-Plus-9.0

Firefox 158.0.1 brings important security fixes Mozilla Firefox 158.0.1 is rolling out with some important security fixes. I don’t tend to cover Firefox point releases. They mainly include minor fixes (for things the majority of users won’t have noticed were wrong in the first place). But this week’s Firefox 158.0.1 is more ‘meaty’ than usual point release fare. Among the security advisories this update plugs are eight intermediate certificates belonging to the eMudhra certificate authority, whose private keys were recently compromised. An attacker with those keys could use them to issue certificates to impersonate a legitimate site or read/alter the traffic. Firefox users are already protected, […] You're reading Firefox 158.0.1 brings important security fixes, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission. 👉@sysadminoff https://www.omgubuntu.co.uk/2026/10/firefox-fixes-emudhra-secuity-issue

📰 KDE hits 30, decides it's time to move out of the X11 era Wayland-only Plasma 6.8 heads for Kubuntu 'Tenacious T-Rex' early next year. 🔗 Source: https://www.theregister.com/software/2026/10/15/kde-hits-30-decides-its-time-to-move-out-of-the-x11-era/5303293 #kde #plasma #wayland 👉@sysadminoff https://theregister.com/software/2026/10/15/kde-hits-30-decides-its-time-to-move-out-of-the-x11-era/5303293

📰 Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images.The fixes are in. 🔗 Source: https://thehackernews.com/2026/10/nextjs-ships-out-of-band-patch-for-two.html #opensource 👉@sysadminoff

📰 3mdeb Releases Updated Dasharo/Coreboot Firmware For ASRock Rack SPC741D8-2L2T 3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a Gigabyte server motherboard for AMD EPYC 9005 CPUs. They haven't forgotten about their past projects though and today released an updated version of their Dasharo downstream firmware for the ASRock Rack SPC741D8-2L2T motherboard supporting 4th and 5th... 🔗 Source: https://www.phoronix.com/news/Dasharo-0.9-ASRock-SPC741D8 #amd 👉@sysadminoff https://phoronix.com/news/Dasharo-0.9-ASRock-SPC741D8

Windows 11 KB5127936: Cloud rebuild, IPv6 CLAT, and DPAPI changes KB5127936 (builds 26200.9807 and 26300.9807) is now available in the Release Preview channel for Windows 11 versions 25H2 and 26H2. This preview build adds Cloud rebuild in WinRE, lets WinRE draw on saved Wi-Fi profiles, and brings IPv6 CLAT support for IPv6-only networks. It also signals the end of prompt-based DPAPI protection, broadens memory integrity (HVCI), and adds a customizable File Explorer context menu. Additional fixes target Remote Desktop, BitLocker, and Smart App Control. Source 👉@sysadminoff https://4sysops.com/archives/windows-11-kb5127936-cloud-rebuild-ipv6-clat-and-dpapi-changes/

📰 NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit.A fourth lets an attacker forge a TLS session that could. 🔗 Source: https://thehackernews.com/2026/10/nginx-fixes-5-flaws-including-possible.html #nginx 👉@sysadminoff

Interview with Google CEO Sundar Pichai about AI computing and datacenters in space Google CEO Sundar Pichai joins Alex Kantrowitz to discuss Google’s AI strategy, compute constraints, and emerging AI products. Pichai describes why Google continues to pursue frontier models while also developing smaller models for practical uses. The conversation explores AI safety, agent-based interfaces, data-center investment, and the opportunities and risks of rapid technological change. Source 👉@sysadminoff https://4sysops.com/archives/interview-with-google-ceo-sundar-pichai-about-ai-computing-and-datacenters-in-space/

Компрометация удостоверяющего центра eMudhra, позволившая получить TLS-сертификаты для любых сайтов Компания Mozilla предупредила о компрометации закрытых ключей, связанных с восемью промежуточными (вторичными) корневыми сертификатами удостоверяющего центра eMudhra. Попавшие в руки атакующих ключи позволяли выпустить поддельные TLS-сертификаты для любого сайта, воспринимаемые как заслуживающие доверия во всех браузерах, и использовать их для перехвата или модификации транзитного трафика. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66515

📰 Noctalia 5.3 Wayland Shell Released with Redesigned App Launcher Noctalia 5.3 introduces a redesigned app launcher, expanded bar and dock customization, lock screen improvements, and numerous bug fixes. 🔗 Source: / #wayland 👉@sysadminoff https://linuxiac.com/noctalia-5-3-wayland-shell-released-with-redesigned-app-launcher

📰 Claude Code / AI Shows Potential For Reverse-Engineering Hardware For Linux Support AI/LLMs like Claude Code are beginning to prove capable of helping to reverse engineer hardware for Linux support, especially when it comes to the tedious reverse engineering tasks... 🔗 Source: https://www.phoronix.com/news/AI-Reverse-Engineer-Linux-HW #linux 👉@sysadminoff https://phoronix.com/news/AI-Reverse-Engineer-Linux-HW

📰 Strata 1.0 Released, a New Linux File Manager Built for Omarchy Strata 1.0 is a new Rust-based Linux file manager designed for Omarchy, featuring GTK4, Miller columns, keyboard navigation, and secure previews. 🔗 Source: / #linux #rust 👉@sysadminoff https://linuxiac.com/strata-1-0-released-a-new-linux-file-manager-built-for-omarchy

📰 GNOME Mutter Improves Damage Tracking For Secondary GPU Copy Buffers As an early improvement to Mutter to look forward to with GNOME 52 (Update: It will first appear in GNOME 51.2), the compositor is now tracking damage for secondary GPU copy buffers. This should improve the experience for those with multi-GPU setups such as some hybrid laptops... 🔗 Source: https://www.phoronix.com/news/Mutter-2nd-GPU-Damage-Track #gnome 👉@sysadminoff https://phoronix.com/news/Mutter-2nd-GPU-Damage-Track

Wine портирован на OpenBSD Томас Фрохвайн (Thomas Frohwein) сообщил о портировании Wine на OpenBSD. Известные ограничения: заявлена поддержка только 64-разрядных программ (WoW64 не поддерживается); внутренние тесты отключены, поскольку им нужен доступ к X-серверу, а несколько тестов всё ещё зависают. В качестве успешно запускающихся программ называются ремастер игры «Ведьмак 3» (требуется vkd3d-proton) и редактор Notepad++.  openbsd, port, wine 👉@sysadminoff https://www.linux.org.ru/news/openbsd/18404612

Gemini adds a small-business hub for branding and financial insights Google is adding a business landing page to Gemini, bringing small-business marketing, finances, customer insights, and connected apps into one hub. The new tools begin rolling out globally to all Gemini app users in the coming days. Owners can save brand guidelines for consistent visuals and turn spreadsheets and receipts into financial graphics and interactive models. Source 👉@sysadminoff https://4sysops.com/archives/gemini-adds-a-small-business-hub-for-branding-and-financial-insights/

Give Nautilus file manager the ‘Computer’ view it lacks The Nautilus file manager is great for browsing your files and folders, but it lacks a dedicated way to see all your drives a how much space is left on each – but you can add one. Nautilus My Computer is a third-party view for GNOME Files providing a centralised page listing drives, with storage usage bars to show which mounts, volumes, partitions, etc., have room to spare and which are getting full. Drives can be interacted with like folders, so double-click on one to enter it or right-click to access options to open it in new tab, or window or to unmount or eject, etc., depending on the drive/mount type. A ‘Preferred Folders’ section sits at […] You're reading Give Nautilus file manager the ‘Computer’ view it lacks, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission. 👉@sysadminoff https://www.omgubuntu.co.uk/2026/10/nautilus-my-computer-view

📰 Libreboot 26.10 Open-Source BIOS/UEFI Firmware Released with Full UEFI Support Libreboot 26.10 open-source BIOS/UEFI firmware is now available for download with full UEFI support, support for over 200 Intel/AMD Chromebooks, and other changes. 🔗 Source: https://9to5linux.com/libreboot-26-10-open-source-bios-uefi-firmware-released-with-full-uefi-support #amd #intel #opensource 👉@sysadminoff

📰 Huawei Proposes Enabling CPU Boost By Default For ACPI CPPC Linux Driver For those using the generic ACPI Collaborative Processor Performance Control (CPPC) CPUFreq driver such as on a number of ARM64 Linux server platforms, if the CPUs support a "boost" mode it's disabled by default. But a patch from Huawei is now looking to enable CPU boost mode by default on Linux... 🔗 Source: https://www.phoronix.com/news/Huawei-Proposes-Boost-Default #linux 👉@sysadminoff https://phoronix.com/news/Huawei-Proposes-Boost-Default