Linux

WordPress wp2shell flaws are being chained for rapid site takeover Two WordPress core flaws were patched and then rapidly weaponized into an exploit chain dubbed wp2shell. Chaining the SQL injection bug with a REST API batch-route confusion flaw lets an attacker bypass authentication and reach remote code execution on vulnerable sites. Source 👉@sysadminoff https://4sysops.com/archives/wordpress-wp2shell-flaws-are-being-chained-for-rapid-site-takeover/

Prometheus TSDB: Manage Data Storage and Retention on Linux The post Prometheus TSDB: Manage Data Storage and Retention on Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Prometheus stores every metric it collects in its own time-series database (TSDB). Over time, this database grows, and if your The post Prometheus TSDB: Manage Data Storage and Retention on Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides. 👉@sysadminoff https://www.tecmint.com/prometheus-tsdb-storage-management-linux/

📰 Mozilla Firefox 153 ESR Is Now Available for Download, Here’s What’s New Mozilla Firefox 153 ESR open-source web browser is now available for download as the new Extended Support Release series with various new features and enhancements. 🔗 Source: https://9to5linux.com/mozilla-firefox-153-esr-is-now-available-for-download-heres-whats-new #firefox #opensource 👉@sysadminoff

NetworkManager 1.58 Разработчики проекта NetworkManager представили новую стабильную ветку 1.58 — системы управления сетевыми подключениями, используемой многими современными дистрибутивами Linux. Выпуск содержит как новые возможности, так и ряд изменений, направленных на модернизацию проекта и поддержку современных сетевых технологий. ( читать дальше... )  network, networkmanager 👉@sysadminoff https://www.linux.org.ru/news/opensource/18342955

ОС NetBSD портирована на системы с процессорами Motorola 68000 Разработчики операционной системы NetBSD представили новый порт hb68k, в котором реализована поддержка систем на базе процессоров Motorola 680x0, разработанных в 1979 году. В настоящее время подобные процессоры продолжают использоваться в конструкторах для самостоятельной домашней сборки компьютеров и обучения проектированию электронных устройств. Порт также может оказаться полезен любителям ретро систем, например, можно отметить недавние инициативы по запуску Linux на игровых приставках Atari Jaguar и Sega MegaDrive, оснащённых CPU Motorola 68000. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=65942

Выпуск Kata Containers 4.0 с изоляцией контейнеров при помощи виртуализации Опубликован выпуск проекта Kata Containers 4.0, развивающего стек для организации выполнения контейнеров с использованием изоляции на базе полноценных механизмов виртуализации. Проект создан компаниями Intel и Hyper путём объединения технологий Clear Containers и runV. Код проекта написан на языках Go и Rust, и распространяется под лицензией Apache 2.0. Развитие проекта курирует рабочая группа, созданная под эгидой независимой организации OpenInfra Foundation, в которой участвуют такие компании, как Canonical, China Mobile, Dell/EMC, EasyStack, Google, Huawei, NetApp, Red Hat, SUSE и ZTE. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=65941

📰 Linux 7.2 Improves Intel Panther Lake Xe3 Arc B390 Graphics Performance My testing of the in-development Linux 7.2 kernel continues in the lab. One of the latest promising findings from this kernel that will be released as stable in August is faster Intel Xe3 graphics performance on Core Ultra Series 3 "Panther Lake" hardware. 🔗 Source: #intel #kernel #linux 👉@sysadminoff https://www.phoronix.com/review/linux-72-panther-lake

Изменения в отслеживании проблем с безопасностью в GNOME Майкл Катанзаро (Michael Catanzaro), с 2020 года отвечающий за отслеживание проблем с безопасностью в проекте GNOME, объявил о сокращении срока раскрытия информации об уязвимостях с 90 до 30 дней. Заявлено, что открытие публичного доступа к информации об уязвимости через 30 дней после получения отчёта является разумным компромиссом, с учётом того, что в большинстве случаев сопровождающие либо устраняют проблему за 1-3 недели, либо вообще не обращают на неё внимания. Изменение вступит в силу 1 августа и объясняется существенным ростом числа отчётов об уязвимостях, созданных при помощи AI-ассистентов. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=65939

📰 Ubuntu 26.04 fixes trash dialog bug that defaulted to cancel Ubuntu 26.04 LTS is getting a fix for Nautilus that restores ‘Delete’ as the focused button in the trash confirmation dialog, undoing an accidental swap that made ‘Cancel’ the focused button instead. That ‘unintentional’ focus flip meant you could no longer hit enter to action file deletion for Trash since it instead cancelled it. I’ve lost count of the times I’ve assumed I emptied the trash since upgrading to Ubuntu 26. 🔗 Source: #ubuntu 👉@sysadminoff https://www.omgubuntu.co.uk/2026/07/ubuntu-26-04-trash-dialog-cancel-button-fix

Firefox 153 released with buil-in containers, QR Code generator + more Mozilla has released Firefox 153 with built-in containers, QR code generation and more quick actions in the address bar. This is the final “monthly” stable release before Mozilla shifts to a faster releases cadence, with new versions of Firefox coming out every two weeks. Like all updates, you can get this one for Windows, macOS and Linux, as well as for Android and iOS (mobile versions have different features and are not covered in this post). Firefox gets built-in Containers Containers are the biggest new feature in Firefox 153. These, Mozilla say, let you “separate cookies by container so you […] You're reading Firefox 153 released with buil-in containers, QR Code generator + more, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission. 👉@sysadminoff https://www.omgubuntu.co.uk/2026/07/firefox-153-new-containers-feature

Kimi K3 sparks crisis for Anthropic and OpenAI China’s new model tightens the AI price war Moonshot’s Kimi K3 is presented as a major new open-weight challenger that lands close to the frontier on many benchmarks while being cheaper than leading U.S. models. The discussion argues that this weakens the idea that frontier intelligence is a durable moat and pushes buyers toward choosing models by task, price, and deployability. It also raises the possibility that AI model capability is becoming commoditized faster than many expected. Source 👉@sysadminoff https://4sysops.com/archives/kimi-k3-sparks-crisis-for-anthropic-and-openai/

Microsoft releases new Windows 11 Insider Preview builds across Beta and Release Preview Microsoft released new Windows 11 Insider Preview builds on July 20, 2026 for the Beta, Experimental, and Release Preview channels. The update covers several branches, including Beta build 26220.8925, Experimental build 26300.8935, and Release Preview builds for 24H2/25H2 and 26H1. Some channels did not receive a new build that day, with Microsoft telling users to watch for future blog updates. Source 👉@sysadminoff https://4sysops.com/archives/microsoft-releases-new-windows-11-insider-preview-builds-across-beta-and-release-preview/

📰 Linux Patches Introduce "KNOD" For In-Kernel Network Offloading Directly To AMD GPUs Some extremely cool patches were posted to the Linux kernel mailing list on Sunday. The patches for "KNOD" allow for in-kernel network offloading to GPUs with an initial focus on AMD GPU support. What makes this all the more nifty is that it doesn't depend upon any user-space libraries like AMD ROCm but is all handled in-kernel with driving the GPU directly... 🔗 Source: #amd #kernel #linux 👉@sysadminoff https://www.phoronix.com/news/KNOD-Network-Offload-AMD-GPUs

Fake GitHub repos turn AI agents into malware delivery tools Malicious GitHub activity dubbed FakeGit has spread across nearly 7,600 repositories, with more than 800 impersonating AI skills or Model Context Protocol (MCP) servers. The campaign uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP files to lure victims into downloading SmartLoader. SmartLoader then establishes persistence and can deploy StealC to steal credentials, sessions, and other sensitive data. Source 👉@sysadminoff https://4sysops.com/archives/fake-github-repos-turn-ai-agents-into-malware-delivery-tools/

📰 Flathub’s AI slop ban looks like it was the right call When Flathub banned AI-coded app submissions last month, some critics warned the platform was denying the future by dismissing a new wave of “vibe-coded” software as out-and-out “slop”. Well, new data suggests otherwise, as nearly three-quarters of the rejected apps are already dead, existing only a few months. Linux developer Evangelos Paterakis, developer of Tuba, Turntable and others, did the digging, looking at 120 code repositories whose... 🔗 Source: #linux 👉@sysadminoff https://www.omgubuntu.co.uk/2026/07/flathub-ai-slop-ban-data

📰 Update now: 7-Zip fixes RCE flaw exploitable with malicious archives 7-Zip version 26.02 was released on June 25 to fix a remote code execution vulnerability that could allow attackers to execute malicious code by convincing users to open specially crafted compressed files. The vulnerability, disclosed by Lunbun researcher Landon Peng, exists in 7-Zip's processing of XZ-compressed data. 🔗 Source: 👉@sysadminoff https://www.bleepingcomputer.com/news/security/update-now-7-zip-fixes-rce-flaw-exploitable-with-malicious-archives/

📰 NetworkManager 1.58 Officially Released with New Features and Improvements NetworkManager 1.58 open-source network connection manager for Linux-based operating systems is now available for download as a major update with many new features and improvements. 🔗 Source: https://9to5linux.com/networkmanager-1-58-officially-released-with-new-features-and-improvements #linux #linuxbased #opensource 👉@sysadminoff

📰 GNOME Changes Security Disclosure Policies Due To AI-Generated Reports The GNOME project is changing its handling of security reports due to the influx of AI/LLM-generated security findings... 🔗 Source: #gnome 👉@sysadminoff https://www.phoronix.com/news/GNOME-Security-Changes-2026

📰 Ubuntu’s desktop icons extension completes its GTK4 port The Desktop Icons NG (aka DING) GNOME Shell extension Ubuntu uses to put icons on your literal desktop, has been busy – it finished its port to GTK4, patched memory leaks and improved a few of its lesser-known features. The GTK4 port landed in v51.0.0, released this month, alongside early support for GNOME 51 (since that’s the GNOME version Ubuntu 26.10 will ship with in October). 🔗 Source: #gnome #ubuntu 👉@sysadminoff https://www.omgubuntu.co.uk/2026/07/ubuntu-desktop-icons-extension-gtk4-port

Microsoft adopts AMD Helios on Azure as Anthropic tests AMD chips Microsoft will deploy AMD's Helios rack-scale AI platform on Azure beginning in the second half of 2026 to run large AI models for its own use, customers, and Azure AI services. Helios combines AMD GPUs, CPUs, networking chips, and software as a full-system alternative to Nvidia's dominant rack-scale offerings. AMD CEO Lisa Su called the expanded deal a major milestone, while Microsoft CEO Satya Nadella stressed that customers need more choices in AI infrastructure. Source 👉@sysadminoff https://4sysops.com/archives/microsoft-adopts-amd-helios-on-azure-as-anthropic-tests-amd-chips/