📰 I gave Jellyfin a Kodi makeover, and my media library felt brand-new

Over the past two years, I've spent plenty of time tinkering with my Jellyfin server. It's certainly been enough to know that getting my media library in order has only been half the battle. The other half has been enjoying it from the comfort of my couch, preferably without navigating a clunky interface or dealing with playback quirks that shouldn't be a problem in 2026.

🔗 Source: https://www.xda-developers.com/i-gave-jellyfin-a-kodi-makeover-and-my-media-library-felt-brand-new/

#kodi

👉@sysadminoff

https://xda-developers.com/i-gave-jellyfin-a-kodi-makeover-and-my-media-library-felt-brand-new

📰 Intel Nova Lake S & Nova Lake P To Support SR-IOV With Xe Graphics

A patch has been posted to the Linux kernel mailing list by an Intel engineer confirming that Nova Lake S and Nova Lake P processors with integrated graphics will support SR-IOV in conjunction with the Xe kernel graphics driver...

🔗 Source: https://www.phoronix.com/news/Intel-Nova-Lake-SR-IOV-Xe

#intel #kernel #linux

👉@sysadminoff

https://phoronix.com/news/Intel-Nova-Lake-SR-IOV-Xe

Раскрыты детали уязвимостей в PHP и опубликованы корректирующие обновления

Опубликованы корректирующие выпуски PHP 8.5.12, 8.4.27, 8.3.36 и 8.2.35, патчи для уже не поддерживаемых веток PHP 7.4, PHP 8.0 и PHP 8.1, а также подробности об исправленных критических уязвимостях.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66520

PowerToys 0.102 makes dragging easier with Mouse Button Lock

PowerToys is a collection of utilities for Windows PCs. Version 0.102 adds Mouse Button Lock for hands-free dragging, CursorHide to clear the pointer from view, and a quick-access shelf for Command Palette.
Source

👉@sysadminoff

https://4sysops.com/archives/powertoys-0-102-makes-dragging-easier-with-mouse-button-lock/

Google Cloud’s London outage lasted eight hours, prompting regulator scrutiny

Google Cloud’s London outage lasted nearly eight hours, and UK financial regulators have asked the company for more information. The disruption affected Google Cloud services in europe-west2-b and added a cause and duration to the London outage that hit Revolut and other services. Google attributed it to a “power event” and says it will publish a full analysis after its investigation.
Source

👉@sysadminoff

https://4sysops.com/archives/google-clouds-london-outage-lasted-eight-hours-prompting-regulator-scrutiny/

Red Hat and Nvidia push OpenShell agent security below the host OS

Nvidia OpenShell is a sandbox runtime that limits what autonomous AI agents can do. Red Hat plans to integrate Nvidia’s OpenShell Reference Architecture into its AI platforms, pairing agent controls with inference tools and support for Nvidia’s upcoming Vera Rubin systems. The broader design runs on Linux and Kubernetes—including Red Hat’s platforms—and can also use Windows execution containers.
Source

👉@sysadminoff

https://4sysops.com/archives/red-hat-and-nvidia-push-openshell-agent-security-below-the-host-os/

Join Zoom meetings from Microsoft Teams Rooms: Direct Guest Join vs. Cross-Platform Meeting Connect

Microsoft and Zoom unveiled Cross-Platform Meeting Connect—upcoming enhancements for Teams Rooms in Zoom meetings and Zoom Rooms in Teams meetings. This piece starts with how things work today: joining a Zoom meeting from a Teams Room through Direct Guest Join or cross-platform SIP join, including Exchange Online and device configuration. It then covers what the announcement adds and where Microsoft's post stays vague on dates and licensing.
Source

👉@sysadminoff

https://4sysops.com/archives/join-zoom-meetings-from-microsoft-teams-rooms-direct-guest-join-vs-cross-platform-meeting-connect/

📰 Today's Steam Beta Makes The Linux Client A 64-bit App

Valve just dropped a new Steam client beta and it's a big one for Linux gamers...

🔗 Source: https://www.phoronix.com/news/Steam-Linux-Beta-64-bit

#linux #steam

👉@sysadminoff

https://phoronix.com/news/Steam-Linux-Beta-64-bit

Выпуск пользовательского окружения Dux Shell 2.0

Опубликован релиз пользовательского окружения Dux Shell 2.0, поддерживающего работу поверх композитных серверов niri, Hyprland, Sway, MangoWC, labwc, Scroll, Aqueous и Miracle WM. Это первый выпуск после переименования проекта DankMaterialShell (DMS) в Dux Shell. Новое имя проще, созвучно с пингвином Tux и не включает в часть названия чужого бренда. Dux Shell развивает набор сочетающихся между собой компонентов для формирования рабочего стола, таких как панель задач, переключатель виртуальных рабочих столов, интерфейс навигации по установленным приложениям и конфигуратор. Оформление соответствует концепции Material Design 3.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66522

📰 Fedora 45 Will Not Be Released Next Week

For those eager to run the pristine Fedora 45 media, you will need to wait at least one more week...

🔗 Source: https://www.phoronix.com/news/Fedora-45-First-No-Go

#fedora

👉@sysadminoff

https://phoronix.com/news/Fedora-45-First-No-Go

Ubuntu rolls out php2shell, eMudhra certificate fixes

Ubuntu has released security updates for the php2shell PHP flaw that’s led to websites being taken offline, and a key compromise at the eMudhra certificate authority. An Ubuntu desktop wouldn’t be affected unless PHP is installed, and the certificate issue has been largely a browser-based flaw for desktop users. Still, you should open Software Updater to check for updates. If available for your setup, install them pronto. You may have already heard about the security flaws as both have received mainstream media coverage, albeit for different reasons. The eMudhra security key compromise, if exploited, could enable attackers to create fake security […]
You're reading Ubuntu rolls out php2shell, eMudhra certificate fixes, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/10/ubuntu-php2shell-emudhra-security-fixes

Нарушения эмбарго и затягивание разработки патчей в ходе устранения уязвимостей в PHP

Разработчики PHP опубликовали отчёт о проблемах, возникших в процессе устранения исправленных вчера критических уязвимостей в PHP. Информация об уязвимости, возникающей при исчерпании доступной памяти, была получена в ходе внешнего аудита ещё в 2024 году, но была воспринята лишь как теоретическая возможность совершения атаки. Исправление затянулось из-за проблем с достижением консенсуса среди разработчиков PHP о способе устранения уязвимости. Рассматривалось несколько конкурирующих предложений о решении проблемы, каждое из которых имело свои минусы. Приходилось выбирать между нарушением обратной совместимости, появлением новых векторов для атак, вызывающих отказ в обслуживании, и необходимостью внесения изменений во множество сторонних дополнений.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66523

OpenClaw creator Peter Steinberger says he spent about $10 million on AI tokens in September

Peter Steinberger, OpenClaw’s creator and an OpenAI member of technical staff, estimated he spent about $10 million on AI tokens in September—and said investors are covering the bill. He made the estimate at Cloudflare Connect 2026 in San Francisco, where he also discussed agent costs, permissions, and trust.
Source

👉@sysadminoff

https://4sysops.com/archives/openclaw-creator-peter-steinberger-says-he-spent-about-10-million-on-ai-tokens-in-september/

Проблемные корневые сертификаты eMudhra были сгенерированы в HSM и прошли независимый аудит

Компания eMudhra опубликовала заявление, связанное с инцидентом, в результате которого у восьми корневых сертификатов удостоверяющего центра оказались легко подбираемые закрытые ключи, имеющие всего 1 байт энтропии вместо 48. eMudhra утверждает, что сертификаты были сгенерированы в апреле 2025 года на публичной торжественной церемонии с использованием аппаратных модулей HSM (Hardware Security Module), имеющих сертификат соответствия требованиям FIPS 140-2 Level 3.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66524

Cloudflare adds two-sided WAF detection for php2shell attacks

Cloudflare’s web application firewall (WAF) filters traffic to websites before it reaches their servers. It began blocking php2shell exploits for WAF customers on October 21, using a new detection method that checks both incoming requests and server responses. Cloudflare says attackers were already changing their payloads to evade protections.
Source

👉@sysadminoff

https://4sysops.com/archives/cloudflare-adds-two-sided-waf-detection-for-php2shell-attacks/

Entra ID adds third-party SMS options before Microsoft’s 2027 cutoff

Microsoft Entra ID will let organizations choose a third-party provider for SMS and voice authentication starting October 30, ahead of Microsoft’s February 1, 2027 retirement of its own telephony service. Users who rely only on SMS or voice will otherwise face a blocking prompt to register a passkey. Global Administrators and external users have until July 1, 2027.
Source

👉@sysadminoff

https://4sysops.com/archives/entra-id-adds-third-party-sms-options-before-microsofts-2027-cutoff/

📰 The triple-OS NexPhone runs Android, Linux, and Windows 11, but you’ll have to wait until 2027 for it

Usually, you're only stuck with one OS on your phone, but what if you could pick between Android, Linux, and Windows 11? It sounds ambitious, but that's a major selling point for NexPhone, which has been in the works for 14 years now. The phone was originally scheduled to release later this year, but unfortunately, it has been pushed back a few months.

🔗 Source: https://www.xda-developers.com/the-triple-os-nexphone-runs-android-linux-and-windows-11-but-youll-have-to-wait-until-2027-for-it/

#android #linux

👉@sysadminoff

https://xda-developers.com/the-triple-os-nexphone-runs-android-linux-and-windows-11-but-youll-have-to-wait-until-2027-for-it

📰 Shelly 3.1.7 GUI Package Manager for Arch Linux Adds RLPM Native Package Engine

Shelly 3.1.7 graphical package manager for Arch Linux distributions is now available for download with an independent RLPM implementation, expanded isolated builds, and more.

🔗 Source: https://9to5linux.com/shelly-3-1-7-gui-package-manager-for-arch-linux-adds-rlpm-native-package-engine

#arch #linux

👉@sysadminoff

📰 SteamOS 0.5.6 Beta for Steam Frame makes adding apk files simpler

Valve just released SteamOS 0.5.6 Beta and a Steam Client Update for the Steam Frame - here's all the changes.Read the full article on GamingOnLinux.

🔗 Source: https://www.gamingonlinux.com/2026/10/steamos-0-5-6-beta-for-steam-frame-makes-adding-apk-files-simpler/

#steam

👉@sysadminoff

https://gamingonlinux.com/2026/10/steamos-0-5-6-beta-for-steam-frame-makes-adding-apk-files-simpler

5 Commands to Protect Critical Apps From the Linux OOM Killer

The post 5 Commands to Protect Critical Apps From the Linux OOM Killer first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Your database keeps disappearing overnight, and the only clue is a kernel line saying “Out of memory: Killed process”. Here’s
The post 5 Commands to Protect Critical Apps From the Linux OOM Killer first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

👉@sysadminoff

https://www.tecmint.com/stop-oom-killer-killing-apps/

В PyPI-пакет и Docker-образ с LiteLLM подставлено вредоносное ПО

Зафиксирована публикация в репозитории PyPI вредоносного выпуска библиотеки LiteLLM, насчитывающей 23 млн загрузок в неделю, а также подстановка вредоносного кода в официальный Docker-образ проекта. Это не первый подобный инцидент с LiteLLM - в марте этого года атакующие уже публиковали вредоносные выпуски после перехвата учётных данных сопровождающего. На этот раз атакующие разместили версию LiteLLM 1.107.0, в которую был встроен вредоносный код для организации удалённого выполнения команд, а также поиска и отправки учётных данных, ключей и токенов доступа.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66525