📰 NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit.A fourth lets an attacker forge a TLS session that could.

🔗 Source: https://thehackernews.com/2026/10/nginx-fixes-5-flaws-including-possible.html

#nginx

📰 3mdeb Releases Updated Dasharo/Coreboot Firmware For ASRock Rack SPC741D8-2L2T

3mdeb firmware engineers have been quite busy this year working on porting Coreboot and openSIL to an AMD Ryzen AM5 MSI motherboard and similarly getting openSIL and Coreboot up and running on a Gigabyte server motherboard for AMD EPYC 9005 CPUs. They haven't forgotten about their past projects though and today released an updated version of their Dasharo downstream firmware for the ASRock Rack SPC741D8-2L2T motherboard supporting 4th and 5th...

🔗 Source: https://www.phoronix.com/news/Dasharo-0.9-ASRock-SPC741D8

#amd

📰 Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images.The fixes are in.

🔗 Source: https://thehackernews.com/2026/10/nextjs-ships-out-of-band-patch-for-two.html

#opensource

📰 KDE hits 30, decides it's time to move out of the X11 era

Wayland-only Plasma 6.8 heads for Kubuntu 'Tenacious T-Rex' early next year.

🔗 Source: https://www.theregister.com/software/2026/10/15/kde-hits-30-decides-its-time-to-move-out-of-the-x11-era/5303293

#kde #plasma #wayland

📰 Memtest86+ v9.00 Released With Support For ARM64 Memory Testing

The open-source Memtest86+ program that is popular for RAM testing has expanded beyond the x86/x86_64 (and LoongArch64) world to now support memory testing on ARM64/AArch64 hardware...

🔗 Source: https://www.phoronix.com/news/memtest86-Plus-9.0

#opensource

📰 Forgejo 17.0 Dev Platform Released with Improved Actions, Git LFS Support

Forgejo 17.0 is out with improved CI/CD workflows, enhanced Git LFS management, donation buttons, and expanded repository migration support.

🔗 Source: https://linuxiac.com/forgejo-17-0-dev-platform-released-with-improved-actions-git-lfs-support/

#git

📰 My Raspberry Pi runs my self-hosted tools 24/7 for less than the cost of a coffee subscription

A tiny Raspberry Pi sits in my network, hosting documents, passwords, and media while sipping power all day.

🔗 Source: https://www.xda-developers.com/raspberry-pi-hosts-tools-24-7-for-less-than-a-coffee-plan/

#raspberry

📰 Fortnite On Linux Changes Everything For Linux Gaming

Tech commentator Brodie Robertson discusses a major milestone for Linux gaming: the official release of the Epic Games Launcher for Linux, alongside Epic's plans to bring Fortnite to Linux through a major overhaul of Easy Anti-Cheat (EAC Linux v2). In this video, he explores how these changes, system security requirements (like signed kernels and secure boot), and enterprise adoption could reshape the future of gaming on the platform.

🔗 Source: https://www.youtube.com/watch?v=3Xi7m0CYk5s

#linux #gaming #fortnite #epicgames #opensource

📰 Intel Nova Lake S & Nova Lake P To Support SR-IOV With Xe Graphics

A patch has been posted to the Linux kernel mailing list by an Intel engineer confirming that Nova Lake S and Nova Lake P processors with integrated graphics will support SR-IOV in conjunction with the Xe kernel graphics driver...

🔗 Source: https://www.phoronix.com/news/Intel-Nova-Lake-SR-IOV-Xe

#intel #kernel #linux

📰 Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it.The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared.

🔗 Source: https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html

#kernel #linux

📰 LPDDR5 5467 vs. 6400 vs. 7467 MT/s Memory Performance Benchmarks For Laptops

With the recently reviewed Star Labs StarFighter Ultra Linux laptop its BIOS allows for configurable memory speeds unlike many other laptop vendor BIOS implementations these days. Star Labs also made the default design decision to run the LPDDR5-7467 rated memory at LPDDR5-6400 speeds in the name of a balanced user experience for power/performance.

🔗 Source: https://www.phoronix.com/review/lpddr5-5467-6400-7467

#linux

📰 I gave Jellyfin a Kodi makeover, and my media library felt brand-new

Over the past two years, I've spent plenty of time tinkering with my Jellyfin server. It's certainly been enough to know that getting my media library in order has only been half the battle. The other half has been enjoying it from the comfort of my couch, preferably without navigating a clunky interface or dealing with playback quirks that shouldn't be a problem in 2026.

🔗 Source: https://www.xda-developers.com/i-gave-jellyfin-a-kodi-makeover-and-my-media-library-felt-brand-new/

#kodi

📰 Intel Nova Lake S & Nova Lake P To Support SR-IOV With Xe Graphics

A patch has been posted to the Linux kernel mailing list by an Intel engineer confirming that Nova Lake S and Nova Lake P processors with integrated graphics will support SR-IOV in conjunction with the Xe kernel graphics driver...

🔗 Source: https://www.phoronix.com/news/Intel-Nova-Lake-SR-IOV-Xe

#intel #kernel #linux