Linux
2.13K subscribers
4.58K photos
20 videos
18.9K links
Новости Линукс Linux

По всем вопросам @evgenycarter
Download Telegram
Cloudflare adds two-sided WAF detection for php2shell attacks

Cloudflare’s web application firewall (WAF) filters traffic to websites before it reaches their servers. It began blocking php2shell exploits for WAF customers on October 21, using a new detection method that checks both incoming requests and server responses. Cloudflare says attackers were already changing their payloads to evade protections.
Source

👉@sysadminoff

https://4sysops.com/archives/cloudflare-adds-two-sided-waf-detection-for-php2shell-attacks/
Entra ID adds third-party SMS options before Microsoft’s 2027 cutoff

Microsoft Entra ID will let organizations choose a third-party provider for SMS and voice authentication starting October 30, ahead of Microsoft’s February 1, 2027 retirement of its own telephony service. Users who rely only on SMS or voice will otherwise face a blocking prompt to register a passkey. Global Administrators and external users have until July 1, 2027.
Source

👉@sysadminoff

https://4sysops.com/archives/entra-id-adds-third-party-sms-options-before-microsofts-2027-cutoff/
📰 The triple-OS NexPhone runs Android, Linux, and Windows 11, but you’ll have to wait until 2027 for it

Usually, you're only stuck with one OS on your phone, but what if you could pick between Android, Linux, and Windows 11? It sounds ambitious, but that's a major selling point for NexPhone, which has been in the works for 14 years now. The phone was originally scheduled to release later this year, but unfortunately, it has been pushed back a few months.

🔗 Source: https://www.xda-developers.com/the-triple-os-nexphone-runs-android-linux-and-windows-11-but-youll-have-to-wait-until-2027-for-it/

#android #linux

👉@sysadminoff

https://xda-developers.com/the-triple-os-nexphone-runs-android-linux-and-windows-11-but-youll-have-to-wait-until-2027-for-it
📰 Shelly 3.1.7 GUI Package Manager for Arch Linux Adds RLPM Native Package Engine

Shelly 3.1.7 graphical package manager for Arch Linux distributions is now available for download with an independent RLPM implementation, expanded isolated builds, and more.

🔗 Source: https://9to5linux.com/shelly-3-1-7-gui-package-manager-for-arch-linux-adds-rlpm-native-package-engine

#arch #linux

👉@sysadminoff
5 Commands to Protect Critical Apps From the Linux OOM Killer

The post 5 Commands to Protect Critical Apps From the Linux OOM Killer first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Your database keeps disappearing overnight, and the only clue is a kernel line saying “Out of memory: Killed process”. Here’s
The post 5 Commands to Protect Critical Apps From the Linux OOM Killer first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

👉@sysadminoff

https://www.tecmint.com/stop-oom-killer-killing-apps/
В PyPI-пакет и Docker-образ с LiteLLM подставлено вредоносное ПО

Зафиксирована публикация в репозитории PyPI вредоносного выпуска библиотеки LiteLLM, насчитывающей 23 млн загрузок в неделю, а также подстановка вредоносного кода в официальный Docker-образ проекта. Это не первый подобный инцидент с LiteLLM - в марте этого года атакующие уже публиковали вредоносные выпуски после перехвата учётных данных сопровождающего. На этот раз атакующие разместили версию LiteLLM 1.107.0, в которую был встроен вредоносный код для организации удалённого выполнения команд, а также поиска и отправки учётных данных, ключей и токенов доступа.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66525
📰 Intel LLM-Scaler-vLLM PV 1.5 Brings Big Improvements

Intel software engineers today released the latest version of LLM-Scaler-vLLM PV 1.5, their containerized Docker stack providing a convenient AI/LLM experience atop Intel Arc Graphics hardware and born out of their Project Battlematrix initiative...

🔗 Source: https://www.phoronix.com/news/Intel-LLM-Scaler-vLLM-PV-1.5

#intel

👉@sysadminoff

https://phoronix.com/news/Intel-LLM-Scaler-vLLM-PV-1.5
Опубликован сетевой стек F-Stack 2.0, работающий в пользовательском пространстве

Состоялся релиз проекта F-Stack 2.0, развивающего редакцию сетевого стека FreeBSD, адаптированную для обособленной работы в пользовательском пространстве в форме библиотеки. Проект создан крупнейшей в Китае телекоммуникационной компанией Tencent и используется в её продуктах и сервисах. Код написан на языке Си и распространяется под лицензией BSD. Поддерживается работа в Linux и FreeBSD. Проектом также поддерживаются переведённые на использование F-Stack редакции Nginx 1.28 и СУБД Redis 6.2.6, демонстрирующие производительность выше обычных сборок, работающих поверх системного сетевого стека.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66526
🔥1
QPACK flaws let one HTTP/3 connection exhaust server memory

A flaw in QPACK, HTTP/3’s header-compression system, lets an unauthenticated attacker make some servers expand a small request into a huge amount of memory use. FoxIO found the issue in seven of ten tested HTTP/3 stacks and released proof-of-concept code. The bugs cause denial of service, with no reported data theft, code execution, or attacks in the wild.
Source

👉@sysadminoff

https://4sysops.com/archives/qpack-flaws-let-one-http-3-connection-exhaust-server-memory/
The PHP Foundation knew about the PHP2Shell flaw for nearly two years

The PHP Foundation says PHP developers identified or theorized the flaw in 2024, but it remained unfixed until October 2026. The PHP Foundation says limited funding, scarce developer time, and internal delays left critical flaw CVE-2026-109618 unresolved for nearly two years. The bug was one of two PHP2Shell vulnerabilities that prompted emergency fixes for two critical RCE flaws in October 2026.
Source

👉@sysadminoff

https://4sysops.com/archives/the-php-foundation-knew-about-the-php2shell-flaw-for-nearly-two-years/
‍RaceView 0.99.4: проигрыватель для синхронного просмотра нескольких видео

Друзья, представляю вашему вниманию плеер RaceView. Он нужен, чтобы смотреть несколько видео синхронно.
Изначально задумывался мной для просмотра в первую очередь Формулы-1: выбираем файл гонки, DriverTracker и DataChannel, запускаем и получаем три окна, воспроизведение в которых идёт синхронно.
В принципе подойдёт для любого случая, когда нужно несколько записей одного момента, например, для мультикамерных записей.
Что умеет:


несколько дорожек, первая — мастер, остальные подстраиваются по её часам;


управление по каждой дорожке: пауза/воспроизведение, выбор аудиодорожки, отключение звука,
громкость и временной сдвиг;


синхронная перемотка с OSD;


полноэкранный режим по каждому окну или по всем сразу;


регистрируется в виджете воспроизведения KDE Plasma как один проигрыватель;


доступны переводы на английский русский, немецкий, испанский и
французский;


Стек: Qt6 (Widgets / OpenGLWidgets / DBus), libmpv, C++17, CMake.
Сборки для Linux (AppImage) и Windows x86_64 (zip) готовятся в GitHub Actions
и лежат в релизах.
Лицензия — GPL-3.0-or-later (проект линкует libmpv и Qt).
Замечания и баги — в issues или в комментариях.



 media player, mpv, video, от автора

👉@sysadminoff

https://www.linux.org.ru/news/multimedia/18406511
PHP flaw sends government websites across Europe and Canada offline

Government websites across Europe and Canada went offline as operators responded to two critical PHP vulnerabilities, with the fix arriving Wednesday after reports of attacks. The shutdowns were precautionary, but PHP developers warned that users should update promptly, and WordPress sites will not receive the fix through automatic updates. Security researchers also say AI helped uncover the flaws, underscoring how quickly vulnerabilities in widely used software can become a broad exposure.
Source

👉@sysadminoff

https://4sysops.com/archives/php-flaw-sends-government-websites-across-europe-and-canada-offline/
📰 n8n saved me more time this year than any AI tool, and most of my workflows don't use AI at all

Before I started using n8n, most of my automations were Python or Bash scripts that ran through cron jobs. They got things done, although adding something new or figuring out why a script stopped working took more effort than I wanted. I only have a working knowledge of Python, and even when an AI tool helps me write the code, I still have to understand enough of it to maintain the automation. With n8n, I can follow the workflow on a canvas,...

🔗 Source: https://www.xda-developers.com/n8n-saved-more-time-year-ai-tool-workflows-dont-use-ai/

#python

👉@sysadminoff

https://xda-developers.com/n8n-saved-more-time-year-ai-tool-workflows-dont-use-ai
📰 Linus Torvalds Rejects AI Coding Bans as Linux Rethinks Disclosure Rules

Linus Torvalds opposes banning AI coding tools while Linux kernel developers propose dropping the Assisted-by disclosure requirement.

🔗 Source: /

#kernel #linux

👉@sysadminoff

https://linuxiac.com/linus-torvalds-rejects-ai-coding-bans-as-linux-rethinks-disclosure-rules
Microsoft offers a temporary fix for broken Exchange Online EWS apps

Microsoft says admins can restore Exchange Online apps disrupted by EWS blocking by temporarily re-enabling the API, but that workaround ends in April 2027. The change follows the EWS app allow-list enforcement; Microsoft’s longer-term advice is to update affected apps to use Microsoft Graph instead.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-offers-a-temporary-fix-for-broken-exchange-online-ews-apps/
📰 Fedora 46 Looking At Moving To RPM v6 Package Format

The RPM v4 packaging format has been used by Red Hat Enterprise Linux and Fedora and its derivatives for more than two decades. With next year's Fedora 46 release, Fedora Linux may finally transition to the modern RPM v6 packaging format...

🔗 Source: https://www.phoronix.com/news/Fedora-46-RPM-v6

#fedora #linux

👉@sysadminoff

https://phoronix.com/news/Fedora-46-RPM-v6
📰 Valve’s Steam Client for Linux Goes 64-bit in Beta and Moves Into a Container

They say running Steam in the same kind of container its games use should make the client behave more consistently.

🔗 Source:

#linux #steam

👉@sysadminoff

https://feed.itsfoss.com/link/24361/17498835/steam-linux-64-bit-client
📰 AI-Generated Starling Desktop Environment Rolls Out Its Own Office Suite

Starling, the open-source desktop environment written in Swift and with its own Wayland compositor too and written largely via Claude Code, has now rolled out its own AI-generated office suite...

🔗 Source: https://www.phoronix.com/news/AI-Starling-Desktop-Office

#opensource #wayland

👉@sysadminoff

https://phoronix.com/news/AI-Starling-Desktop-Office