📰 LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the.

🔗 Source: https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

#python

📰 Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list. The vulnerabilities have yet to be patched on mainline but at least in some cases there are patches undergoing testing or queued in "-next" branches. The CVSS scores are as high as 9.0...

🔗 Source: https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities

#kernel #linux

📰 Mesa RADV Change Satisfies More Steam Play Games On Aging AMD GFX8 GPUs

Valve landed a patch in Mesa 27.0 and to be back-ported to current Mesa stable series to satisfy more games running under Steam Play with VKD3D-Proton for working on AMD GFX8 GPUs like Polaris...

🔗 Source: https://www.phoronix.com/news/Mesa-RADV-GFX8-FP16-Gaming

#amd #proton #steam

📰 Myrlyn 1.1 Released For SUSE/openSUSE GUI Package Manager

Myrlyn, the package manager GUI that began as YQPkg during a SUSE Hack Week and has evolved quite well, is out with version 1.1 as the first new feature update since the beginning of the year...

🔗 Source: https://www.phoronix.com/news/Myrlyn-1.1-Released

#opensuse

📰 x86 Kernel Shadow Stacks Being Worked On For Linux As Powerful Control Flow Protection

Linux user-space for several years had shadow stack support for hardware-enforced control-flow enforcement in defending against return oriented programming (ROP) attacks. Intel Tigerlake and newer CPUs or AMD Zen 3 and newer have the necessary hardware shadow stacks support. Shadow stacks have been effective for helping user-space software fend ROP attacks while now there is new work toward bringing shadow stack support for kernel space on Linux.

🔗 Source: https://www.phoronix.com/news/Linux-Kernel-Shadow-Stacks

#amd #intel #kernel #linux

📰 Latest Steam Client Update Improves Support for Vulkan Games on Linux

Valve released a new stable Steam Client update today to fix a few bugs to improve support for Vulkan games on Linux, the Steam updater UI, and Remote Play when using NVENC.

🔗 Source: https://9to5linux.com/latest-steam-client-update-improves-support-for-vulkan-games-on-linux

#linux #steam

📰 Edge AI on the Raspberry Pi 5 made me realize this SBC can replace cloud models for half my projects

When you think about locally-deployed AI models, bulky servers armed with cutting-edge graphics cards are probably the first things that come to mind. And considering how much computational power bulky LLMs need, you wouldn’t be far off the mark. But having tinkered with all sorts of wacky experiments over the past year, I’ve realized that heavy LLMs with dozens of billions of parameters aren’t the only AI models that can meet my productivity...

🔗 Source: https://www.xda-developers.com/edge-ai-on-the-raspberry-pi-5-forced-me-to-rethink-how-inference-actually-works/

#raspberry

📰 This Newly Proposed Linux Filesystem Can Fix Corrupted Data

Aimed at hardware exposed to radiation, like satellites, BeamFS can repair data without keeping a second copy.

🔗 Source: https://feed.itsfoss.com/link/24361/17502832/beamfs-linux-filesystem-proposal

#linux

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html?m=1

📰 PipeWire 1.6.10 Is Out to Improve JACK, Bluetooth, Pulse Server, and ALSA Plugin

PipeWire 1.6.10 audio/video server for Linux is now available for download with improvements to JACK, Bluetooth, GStreamer, and ALSA support.

🔗 Source: https://9to5linux.com/pipewire-1-6-10-is-out-to-improve-jack-bluetooth-pulse-server-and-alsa-plugin

#linux

📰 openSUSE Releases Agama 25 Installer with Web-Based Terminal, Exit Option

openSUSE releases the Agama 25 web-based installer for Tumbleweed, Slowroll, and MicroOS with a web-based terminal, enhanced bond port selection, and polishing of the OpenAPI specification.

🔗 Source: https://9to5linux.com/opensuse-releases-agama-25-installer-with-web-based-terminal-exit-option

#opensuse

📰 Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel.One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires the SMB Direct transport and an RDMA-capable network.

🔗 Source: https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html

#kernel #linux

📰 AI Helping To Improve Linux's AMD Zen CPU Microarchitecture Detection

A request for comments (RFC) was sent out last night on the Linux kernel mailing list in seeking to clean-up the AMD Zen microarchitecture detection within the kernel. This is for enhancing the kernel where there are code paths specific to a certain generation of AMD Zen processors or select generations such as Zen 3 through Zen 5 CPUs. AI was leveraged in helping to clean-up this AMD Zen code in the Linux kernel...

🔗 Source: https://www.phoronix.com/news/Linux-AMD-Zen-AI-Detection

#amd #kernel #linux