Flatpak Sandbox Escape & Deleting Host Files (CVE-2026-34078)

Уязвимость (критичность 9.3 из 10) позволяла приложению в формате Flatpak, обойти режим изоляции, получить доступ к файлам в хост-системе и выполнить произвольный код.
Для организации выполнения своего кода в системе, нужно изменить ~/.bashrc или ~/.profile, или изменить файл ~/.ssh/authorized_keys с ключами SSH.
Уязвимость устранена в версии 1.16.4.
Также рекомендуют отключить сервис flatpak-portal: $ sudo systemctl --global mask flatpak-portal.service && systemctl --user stop flatpak-portal.service.



 flatpak, sandbox

👉@sysadminoff

https://www.linux.org.ru/news/security/18261513

📰 Online Open Source OS Puter Becomes More Awesome With Office Offering

A full functional operating system in the web browser. From coding tools to office suite, it has everything.

🔗 Source:

#opensource

👉@sysadminoff

https://feed.itsfoss.com/link/24361/17315665/puter-office-integration

Anthropic анонсировал AI-модель Claude Mythos, умеющую создавать рабочие экпслоиты

Компания Anthropic представила проект Glasswing, в рамках которого предоставит доступ к предварительному варианту AI-модели Claude Mythos с целью выявления уязвимостей и повышения безопасности критически важного программного обеспечения. В число участников проекта включена организация Linux Foundation, а также компании Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, Microsoft, NVIDIA и Palo Alto Networks. Приглашения принять участие в проекте также получили ещё около 40 организаций.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65165

📰 Arch Linux Users Can Now Upgrade to GNOME 50

GNOME 50 is now available for Arch Linux users, bringing the latest desktop release to systems ready for upgrade.

🔗 Source: https://linuxiac.com/arch-linux-users-can-now-upgrade-to-gnome-50

#linux #arch #gnome

👉@sysadminoff

📰 Glass UI Is Making a Comeback on Linux — Thanks to KDE

For those who never warmed up to Breeze, Oxygen and Air are shaping up to be compelling alternatives again.

🔗 Source:

#kde #linux

👉@sysadminoff

https://feed.itsfoss.com/link/24361/17315702/kde-plasma-oxygen-air-comeback

📰 I stopped recommending the 3GB Raspberry Pi 4, and here's why

As a hobbyist, I love experimenting with SBCs and microcontrollers. However, the launch of Raspberry Pi 4 with 3GB of RAM has bamboozled me. The new Pi model joins an already bloated lineup. It was introduced at $84 on April 1, 2026 — I had to investigate if it was a joke. Sadly, it isn't.

🔗 Source:

#raspberry

👉@sysadminoff

https://www.xda-developers.com/i-stopped-recommending-3gb-raspberry-pi-4-heres-why/

📰 Intel Releases OpenVINO 2026.1 With Backend For Llama.cpp, New Hardware Support

Intel's OpenVINO toolkit for optimizing and deploying AI inferencing across their range of hardware platforms is out with its newest quarterly feature update. There is official support for Intel's latest hardware as well as enabling more large language models and other new AI innovations for this excellent open-source Intel software project...

🔗 Source:

#opensource #intel

👉@sysadminoff

https://www.phoronix.com/news/OpenVINO-2026.1-Released

Microsoft Entra March 2026: Passkeys GA, backup preview, and Hybrid Security Fix

Microsoft's March 2026 Entra update promotes passkey authentication to general availability, introduces a built-in tenant backup feature in public preview, and announces a breaking security change for hybrid environments, taking effect June 1, 2026. Additional changes enforce TLS 1.2 for Entra Connect Health agents and bring several multi-tenant governance capabilities into preview. This article covers changes relevant to administrators managing Microsoft 365 tenants and hybrid Active Directory environments.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-entra-march-2026-passkeys-ga-backup-preview-and-hybrid-security-fix/

Raspberry Pi Imager 2.0.8 Released with Fastboot improvements, Bug Fixes

Raspberry Pi Imager 2.0.8 SD card flashing utility is now available for download with fastboot improvements, OS Customisation changes, SSH and write operations enhancements.
The post Raspberry Pi Imager 2.0.8 Released with Fastboot improvements, Bug Fixes appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/raspberry-pi-imager-2-0-8-released-with-fastboot-improvements-bug-fixes

📰 16 contributors, cross-stack improvements: Collabora's work on GStreamer 1.28

Our multimedia engineering team delivered major improvements to GStreamer 1.28: hardware acceleration and zero-copy pipelines, HDR and color support for Wayland, AI inference integration, plus critical codec and RTP/WebRTC interoperability fixes.

🔗 Source:

#wayland

👉@sysadminoff

https://www.collabora.com/news-and-blog/news-and-events/16-contributors-cross-stack-improvements-collabora-work-gstreamer-128.html

GNU nano 9.0 CLI Text Editor Released with New Features and Improvements

GNU nano 9.0 command line text editor for Unix-like systems is now available for download as a major update introducing new features and improvements. Here’s what’s new!
The post GNU nano 9.0 CLI Text Editor Released with New Features and Improvements appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/gnu-nano-9-0-cli-text-editor-released-with-new-features-and-improvements

📰 I tried Fedora and learned why it's not the beginner Linux distro everyone assumes it is

Fedora is one of the best Linux distros out there, but if you're a beginner, it's probably not the best place to start.

🔗 Source:

#distro #linux #fedora

👉@sysadminoff

https://www.xda-developers.com/tried-fedora-learned-why-not-beginner-distro-everyone-assumes-it-is/

📰 GNU nano 9.0 CLI Text Editor Released with New Features and Improvements

GNU nano 9.0 command line text editor for Unix-like systems is now available for download as a major update introducing new features and improvements. Here’s what’s new!

🔗 Source: https://9to5linux.com/gnu-nano-9-0-cli-text-editor-released-with-new-features-and-improvements

#gnu

👉@sysadminoff

Microsoft заблокировал учётные записи для заверения релизов VeraCrypt и WireGuard

Автор системы шифрования дисковых разделов VeraCrypt предупредил пользователей о блокировке компанией Microsoft его учётной записи, используемой для заверения цифровой подписью сборок VeraCrypt для Windows. Сложилась ситуация, при которой невозможно опубликовать новый выпуск VeraCrypt для Windows. При этом действие ключа, которым подписан последний выпуск VeraCrypt 1.26.24, истекает и июне, после чего драйвер VeraCrypt начнёт блокироваться режимом безопасной загрузки.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65172

Выпуск основной ветки веб-сервера NGINX — 1.29.8

Опубликован релиз основной (mainline) ветки веб-сервера NGINX 1.29.8, в которой продолжается развитие функциональности проекта и внедрение новых возможностей. Сообщение о выпуске появилось 7 апреля 2026 года на официальном сайте проекта nginx news, а также было освещено на ресурсе OpenNET.
Разработчики подчёркивают, что ветка 1.29.x остаётся основной линией разработки, в которой появляются новые функции и изменения поведения, тогда как параллельно поддерживаемая стабильная ветка 1.28.x получает лишь исправления критических ошибок и уязвимостей. Такой подход соответствует традиционной модели развития NGINX, где mainline используется для активного внедрения новшеств, а stable — для максимально предсказуемых продакшн-развёртываний.
( читать дальше... )



 nginx, веб сервер

👉@sysadminoff

https://www.linux.org.ru/news/opensource/18261772

Little Snitch, the macOS network tool, is now available on Linux

A Linux version of Little Snitch, the iconic network monitoring and firewall tool for macOS, has been released. Little Snitch for Linux is written in Rust and uses eBPF for kernel-level traffic interception (which lets sandboxed code run inside the Linux kernel without modifying it). The tool lists processes on your machine making network connections, with options to block them. Little Snitch for Linux has a web-based interface rather than a traditional GUI, as it means you can monitor a Linux server remotely from any device, which is useful if you want to know what your Nextcloud or media server […]
You're reading Little Snitch, the macOS network tool, is now available on Linux, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/04/little-snitch-linux

📰 Little Snitch, the macOS network tool, is now available on Linux

A Linux version of Little Snitch, the iconic network monitoring and firewall tool for macOS, has been released. Little Snitch for Linux is written in Rust and uses eBPF for kernel-level traffic interception (which lets sandboxed code run inside the Linux kernel without modifying it). The tool lists processes on your machine making network connections, with options to block them.

🔗 Source: https://www.omgubuntu.co.uk/2026/04/little-snitch-linux

#linux #kernel

👉@sysadminoff

https://www.omgubuntu.co.uk/?p=330786

📰 Bazzite is chopping 1GB off its image size—here's what got cut

It has never been a better time to be a Linux gamer. With Proton making good headway, we're seeing gaming-oriented distros spring up in the wake of SteamOS to capitalize on the wave of titles Linux can now run. This includes Bazzite, which has posted some excellent performance demonstrations over the past few months, including that one time it outperformed Windows on Microsoft's branded handheld console.

🔗 Source:

#linux

👉@sysadminoff

https://www.xda-developers.com/bazzite-chopping-1gb-off-its-image-size/

Dynamic Music Pill brings lyrics to your GNOME desktop

A clutch of new features are available in Dynamic Music Pill, the slick now playing and media controller extension for GNOME Shell. The “big” new addition is lyrics support. When you listen to a track with synced lyrics in a compatible player, you can view those lyrics by opening the applet controller and clicking on the album art inside of it: The lyrics are shown in a freely scrollable widget, with the active line bolder in white for more emphasis. You can scroll up and down whilst tracks are playing. If you click a lyric line, your music player jumps […]
You're reading Dynamic Music Pill brings lyrics to your GNOME desktop, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/04/lyrics-feature-dynamic-music-pill-extension

Endo 0.1.0

Состоялся первый публичный выпуск 0.1.0 кроссплатформенной интерактивной командной оболочки и интерпретатора функционального языка в стиле F# Endo.
Проект создан автором и основным разработчиком эмулятора терминала Contour на языке C++ (стандарт C++23) и распространяется по лицензии Apache 2.0.
( читать дальше... )



 c++, endo, fsharp, shell, функциональное программирование

👉@sysadminoff

https://www.linux.org.ru/news/opensource/18262118

Выпуск miracle-wm 0.9, композитного менеджера на базе Wayland и Mir

Мэтью Косарек (Matthew Kosarek), разработчик из компании Canonical, опубликовал выпуск композитного менеджера miracle-wm 0.9, использующего протокол Wayland и компоненты для построения композитных менеджеров Mir. Miracle-wm поддерживает мозаичную (tiling) компоновку окон, схожую с аналогичной в проектах i3 и Sway. В качестве панели может применяться Waybar. Код проекта написан на языке C++ и распространяется под лицензией GPLv3. Готовые сборки сформированы в формате snap, а также в пакетах rpm и deb для Fedora и Ubuntu.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65174