Linux

Ещё одна уязвимость в PHP, в редких конфигурациях позволяющая удалённо выполнить код Разработчики проекта PHP предупредили о выявлении ещё одной уязвимости (CVE-2026-115560), которая потенциально может использоваться для удалённого выполнения кода на сервере при определённом редком сочетании нестандартных настроек (не в конфигурации по умолчанию) и выполняемого PHP-кода. Подробности о уязвимости намерены опубликовать после готовности очередных корректирующих выпусков PHP. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66534

Выпуск криптографических библиотек OpenSSL 4.1.0 и LibreSSL 4.4.0 Опубликован релиз библиотеки OpenSSL 4.1.0, предлагающей с реализацию протоколов TLS и различных алгоритмов шифрования. OpenSSL 4.1 отнесён к выпускам с обычным сроком поддержки, обновления для которых выпускаются в течение 13 месяцев. Поддержка LTS-ветки OpenSSL 3.5 продлится до апреля 2030 года. Код проекта распространяется под лицензией Apache 2.0. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66533

📰 qBittorrent 5.3 BitTorrent Client Is Out as a Major Update, Here’s What’s New qBittorrent 5.3 open-source BitTorrent client is now available for download with many new features, improvements, bug fixes, and many other changes. 🔗 Source: https://9to5linux.com/qbittorrent-5-3-bittorrent-client-is-out-as-a-major-update-heres-whats-new #opensource 👉@sysadminoff

📰 BFS Removed With Linux 7.4 As Old UnixWare File-System Linus Torvalds began honoring pull requests overnight of new code entering the Linux 7.4 kernel -- as well as removing old code. BFS is the latest obsolete file-system removed from the mainline kernel... 🔗 Source: https://www.phoronix.com/news/BFS-Removed-With-Linux-7.4 #kernel #linux 👉@sysadminoff https://phoronix.com/news/BFS-Removed-With-Linux-7.4

Anthropic plans European AI consulting firm to help businesses deploy AI Anthropic plans to launch a European AI consulting firm with UK private-equity group Hg, bringing engineers and consultants into businesses to help design and implement AI systems. The firm is expected to begin operating by the end of 2026, with offices in London and Berlin. Source 👉@sysadminoff https://4sysops.com/archives/anthropic-plans-european-ai-consulting-firm-to-help-businesses-deploy-ai/

x402 SDK flaws could expose AI agents’ full token balances x402 lets software, including AI agents, pay for API calls directly through web requests. Before fixes released on August 18, its default clients had no spending cap, potentially letting a malicious API request an agent’s entire balance if payments were signed automatically and the app had no payment limits. The fixes also address two other critical flaws, but as of October 23, package audit tools did not flag the vulnerable releases. Source 👉@sysadminoff https://4sysops.com/archives/x402-sdk-flaws-could-expose-ai-agents-full-token-balances/

Calibre 9.7 touts faster ebook conversion speeds Calibre 9.17 has been released with faster ebook conversion speeds and JPEG XL image support. The open-source ebook editor improves output compression speeds for MOBI, AZW3 and PDB files, which makes conversions to those formats quicker. Converting EPUB to MOBI is what I use Calibre for to read on my ancient Kindle. Calibre 9.17 can read JPEG XL images in eBooks and other supported documents during conversions. The format offers high image quality at smaller file sizes and supports features like HDR. JPEG XL is not new, but its popularity (and browser support) is on the up. Accessibility improvements see […] You're reading Calibre 9.7 touts faster ebook conversion speeds, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission. 👉@sysadminoff https://www.omgubuntu.co.uk/2026/10/calibre-9-7-faster-conversion

📰 Omarchy 4.0.5 Released with Linux Kernel 7.2.8, Better Hardware Support Omarchy 4.0.5 ships with Linux kernel 7.2.8, Qt 6.12 compatibility fixes, desktop performance improvements, and better support for NVIDIA laptops and audio devices. 🔗 Source: / #kernel #linux 👉@sysadminoff https://linuxiac.com/omarchy-4-0-5-released-with-linux-kernel-7-2-8-better-hardware-support

📰 GNOME 51.1 Improves Drag and Drop Between Wayland and Xwayland Clients GNOME 51.1 is now available as the first point release to the GNOME 51 desktop environment series with various bug fixes and improvements across several core components and default apps. 🔗 Source: https://9to5linux.com/gnome-51-1-improves-drag-and-drop-between-wayland-and-xwayland-clients #gnome #wayland 👉@sysadminoff

Около 10% выходных узлов Tor были вовлечены в атаку по перехвату SSH-подключений Опубликованы детали инцидента, в ходе которого злоумышленникам удалось получить контроль над 333 выходными узлами сети Tor (всего в Tor около 3000 выходных узлов) и организовать на них перехват нешифрованного трафика и перенаправление SSH-соединений. Атака началась 2 октября (в пятницу вечером), но была выявлена и начала блокироваться 4 октября. 5 октября все скомпрометированные серверы были отключены операторами или самими атакующими. Разбирательство показало, что атакующие получили доступ к серверам за два месяца до начала атаки на пользователей Tor и установили в скомпрометированных системах вредоносное ПО Ebury 1.8.3. 👉@sysadminoff https://www.opennet.ru/opennews/art.shtml?num=66531

📰 This cool Raspberry Pi project turns Telegram photos and voice messages into framed pictures Some of the more ingenious projects I've reported on were born from limitations. While tinkerers will gladly load up their gadgets with as many features as possible, things change when they want to make something for someone who may not be as big of a tech geek as they are. Such is the case of this lovely Raspberry Pi project that allowed a grandma to keep up with the family's Telegram group with minimal interaction. 🔗 Source: https://www.xda-developers.com/this-cool-raspberry-pi-project-turns-telegram-photos-and-voice-messages-into-framed-pictures/ #raspberry 👉@sysadminoff https://xda-developers.com/this-cool-raspberry-pi-project-turns-telegram-photos-and-voice-messages-into-framed-pictures

📰 ReactOS Can Now Be Installed & Used With Its NTFS Driver The ReactOS open-source operating system has seen its NTFS file-system driver mature to the point that it can be finally used for installing and using ReactOS with it. NTFS formatting support is also finally now possible with this driver too... 🔗 Source: https://www.phoronix.com/news/ReactOS-NTFS-Driver #opensource 👉@sysadminoff https://phoronix.com/news/ReactOS-NTFS-Driver

📰 Fedora Linux 45 Delayed, New Release Date Set for October 27 Fedora developers have postponed Fedora Linux 45 until October 27 after no suitable final release candidate was available for evaluation. 🔗 Source: / #fedora #linux 👉@sysadminoff https://linuxiac.com/fedora-linux-45-delayed-new-release-date-set-for-october-27

📰 GNOME 50.6 Desktop Environment Released with Fixes for Nautilus, GNOME Shell GNOME 50.6 is now available as the sixth update to the latest GNOME 50 desktop environment series with various bug fixes, updated translations, and other changes. 🔗 Source: https://9to5linux.com/gnome-50-6-desktop-environment-released-with-fixes-for-nautilus-gnome-shell #gnome 👉@sysadminoff

📰 MeshXFS: AI Adapts XFS Into A Clustered File-System MeshXFS is a clustered open-source file-system in which "no human wrote any of its own code". Depending upon your views of AI, not necessarily something you want to hear for entrusting your data in an AI-created solution. Instead, Claude Opus was tasked with adapting the XFS file-system driver into a clustered file-system... 🔗 Source: https://www.phoronix.com/news/MeshXFS-XFS-Clustered #opensource 👉@sysadminoff https://phoronix.com/news/MeshXFS-XFS-Clustered

📰 Not Every Open Source OS Needs to Be Based on Linux, and These Six Aren’t There are more operating systems than just Linux. Here's a list of a few that are under active development. 🔗 Source: #linux #opensource 👉@sysadminoff https://feed.itsfoss.com/link/24361/17499437/open-source-non-linux-os

📰 GNOME's New Local/Cloud AI Chat App Gains More Features Coming about the past few months has been Moose as a GNOME-aligned AI chat application built around GTK4 and libadwaita. It began as a local AI chat app for the GNOME desktop and grew to support cloud AI services as well. This past week marked the latest feature release for Moose... 🔗 Source: https://www.phoronix.com/news/GNOME-Moose-0.6-AI #gnome 👉@sysadminoff https://phoronix.com/news/GNOME-Moose-0.6-AI

📰 ZimaOS Is a Linux-Based NAS OS That Makes Self-Hosting Easier Meet ZimaOS, a Linux-based NAS operating system that simplifies file storage, backups, Docker apps, and home server management. 🔗 Source: / #linux #linuxbased 👉@sysadminoff https://linuxiac.com/zimaos-is-a-linux-based-nas-os-that-makes-self-hosting-easier

PHP2Shell attackers try to deploy Potassium Mirai botnet Attempts to turn the PHP2Shell vulnerabilities into Potassium botnet infections have not produced a confirmed compromise, despite the millions of attacks Cloudflare reported within hours of disclosure. The attackers tried to use CVE-2026-109618 and CVE-2026-109619 to install a Mirai-derived Linux botnet, but researchers have not seen the malware downloaded or executed through those attempts. PHP has fixed the flaws in versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Source 👉@sysadminoff https://4sysops.com/archives/php2shell-attackers-try-to-deploy-potassium-mirai-botnet/

Zoom’s AI context layer connects business data to meeting assistance The point of Zoom’s Unified Context Layer is to give AI business context it can use to help an individual participant during a conversation—not just transcribe what was said. In principle, an assistant could use that context to surface a relevant answer or suggestion. Zoom says its planned Live Meeting AI Agent will provide proactive help, including finding answers and keeping meetings on track, but hasn’t specified whether its suggestions will be private to one participant or how they will appear. Source 👉@sysadminoff https://4sysops.com/archives/zooms-ai-context-layer-connects-business-data-to-meeting-assistance/