📰 LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the.
🔗 Source: https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html
#python
👉@sysadminoff
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the.
🔗 Source: https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html
#python
👉@sysadminoff
📰 Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list. The vulnerabilities have yet to be patched on mainline but at least in some cases there are patches undergoing testing or queued in "-next" branches. The CVSS scores are as high as 9.0...
🔗 Source: https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
#kernel #linux
👉@sysadminoff
https://phoronix.com/news/LKML-New-Trend-Vulnerabilities
Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list. The vulnerabilities have yet to be patched on mainline but at least in some cases there are patches undergoing testing or queued in "-next" branches. The CVSS scores are as high as 9.0...
🔗 Source: https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
#kernel #linux
👉@sysadminoff
https://phoronix.com/news/LKML-New-Trend-Vulnerabilities
Phoronix
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list
Canonical’s Launchpad adds bug tracking for PPAs
Launchpad now offers bug tracking for personal package archives (PPAs), making it easier for users to report issues specific to software within a PPA. Why does that matter? Well, not all PPAs are maintained by their upstream counterparts – folks who, frankly, aren’t always minded to care about quirks in their software that might be down to someone else’s packaging methods. Plus, PPAs are often used to provide newer or experimental versions of software that the version in the standard Ubuntu repositories, and different PPAs can distribute different versions of the same software. With the new tracking support, PPA owners […]
You're reading Canonical’s Launchpad adds bug tracking for PPAs, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/10/launchpad-ppa-dedicated-bug-tracker
Launchpad now offers bug tracking for personal package archives (PPAs), making it easier for users to report issues specific to software within a PPA. Why does that matter? Well, not all PPAs are maintained by their upstream counterparts – folks who, frankly, aren’t always minded to care about quirks in their software that might be down to someone else’s packaging methods. Plus, PPAs are often used to provide newer or experimental versions of software that the version in the standard Ubuntu repositories, and different PPAs can distribute different versions of the same software. With the new tracking support, PPA owners […]
You're reading Canonical’s Launchpad adds bug tracking for PPAs, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/10/launchpad-ppa-dedicated-bug-tracker
📰 Mesa RADV Change Satisfies More Steam Play Games On Aging AMD GFX8 GPUs
Valve landed a patch in Mesa 27.0 and to be back-ported to current Mesa stable series to satisfy more games running under Steam Play with VKD3D-Proton for working on AMD GFX8 GPUs like Polaris...
🔗 Source: https://www.phoronix.com/news/Mesa-RADV-GFX8-FP16-Gaming
#amd #proton #steam
👉@sysadminoff
https://phoronix.com/news/Mesa-RADV-GFX8-FP16-Gaming
Valve landed a patch in Mesa 27.0 and to be back-ported to current Mesa stable series to satisfy more games running under Steam Play with VKD3D-Proton for working on AMD GFX8 GPUs like Polaris...
🔗 Source: https://www.phoronix.com/news/Mesa-RADV-GFX8-FP16-Gaming
#amd #proton #steam
👉@sysadminoff
https://phoronix.com/news/Mesa-RADV-GFX8-FP16-Gaming
Phoronix
Mesa RADV Change Satisfies More Steam Play Games On Aging AMD GFX8 GPUs
Valve landed a patch in Mesa 27.0 and to be back-ported to current Mesa stable series to satisfy more games running under Steam Play with VKD3D-Proton for working on AMD GFX8 GPUs like Polaris.
5 Best Command Line HTTP Clients for Linux
The post 5 Best Command Line HTTP Clients for Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Testing an API or troubleshooting a web server that returns a 502 error shouldn’t require opening a browser or launching
The post 5 Best Command Line HTTP Clients for Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides.
👉@sysadminoff
https://www.tecmint.com/command-line-http-clients-for-linux/
The post 5 Best Command Line HTTP Clients for Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Testing an API or troubleshooting a web server that returns a 502 error shouldn’t require opening a browser or launching
The post 5 Best Command Line HTTP Clients for Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides.
👉@sysadminoff
https://www.tecmint.com/command-line-http-clients-for-linux/
5 Best Command Line HTTP Clients for Linux
Top 5 Command-Line HTTP Clients for Linux Users
HTTP clients are the utility that enables you to download files over the Internet and are also used for debugging and interacting with web servers.
Опубликована мобильная платформа Ubuntu Touch 24.04-2.2
Представлена прошивка Ubuntu Touch 24.04-2.2, продолжающая развитие ветки на пакетной базе Ubuntu 24.04. Прошивка развивается проектом UBports, взявшим в свои руки разработку мобильной платформы Ubuntu Touch, после того как от неё отстранилась компания Canonical. Проектом также развивается экспериментальный порт рабочего стола Unity 8, который переименован в Lomiri.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66547
Представлена прошивка Ubuntu Touch 24.04-2.2, продолжающая развитие ветки на пакетной базе Ubuntu 24.04. Прошивка развивается проектом UBports, взявшим в свои руки разработку мобильной платформы Ubuntu Touch, после того как от неё отстранилась компания Canonical. Проектом также развивается экспериментальный порт рабочего стола Unity 8, который переименован в Lomiri.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66547
Выпуск CoW 0.4, адаптации оконного менеджера FVWM для Wayland
Томас Адам (Thomas Adam), создатель оконного менеджера FVWM3, опубликовал проект CoW, нацеленный на создание стекового оконного менеджера в стиле FVWM и MWM, использующего протокол Wayland вместо X11. Из отличий отмечается более простой механизм настройки, в котором вместо усложнённого синтаксиса конфигурации задействован набор команд, похожих на команды tmux, применяемый как в файле конфигурации, так и в IPC-интерфейсе удалённого управления. Код написан на языке Си и распространяется под лицензией ISC. Сборки формируются для Arch Linux, Fedora и OpenBSD.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66548
Томас Адам (Thomas Adam), создатель оконного менеджера FVWM3, опубликовал проект CoW, нацеленный на создание стекового оконного менеджера в стиле FVWM и MWM, использующего протокол Wayland вместо X11. Из отличий отмечается более простой механизм настройки, в котором вместо усложнённого синтаксиса конфигурации задействован набор команд, похожих на команды tmux, применяемый как в файле конфигурации, так и в IPC-интерфейсе удалённого управления. Код написан на языке Си и распространяется под лицензией ISC. Сборки формируются для Arch Linux, Fedora и OpenBSD.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66548
📰 Myrlyn 1.1 Released For SUSE/openSUSE GUI Package Manager
Myrlyn, the package manager GUI that began as YQPkg during a SUSE Hack Week and has evolved quite well, is out with version 1.1 as the first new feature update since the beginning of the year...
🔗 Source: https://www.phoronix.com/news/Myrlyn-1.1-Released
#opensuse
👉@sysadminoff
https://phoronix.com/news/Myrlyn-1.1-Released
Myrlyn, the package manager GUI that began as YQPkg during a SUSE Hack Week and has evolved quite well, is out with version 1.1 as the first new feature update since the beginning of the year...
🔗 Source: https://www.phoronix.com/news/Myrlyn-1.1-Released
#opensuse
👉@sysadminoff
https://phoronix.com/news/Myrlyn-1.1-Released
Phoronix
Myrlyn 1.1 Released For SUSE/openSUSE GUI Package Manager
Myrlyn, the package manager GUI that began as YQPkg during a SUSE Hack Week and has evolved quite well, is out with version 1.1 as the first new feature update since the beginning of the year. Myrlyn 1.1 adds reboot notifications to the app's summary page…
Уязвимость в Ruby, эксплуатируемая для удалённого выполнения кода в GitLab
Опубликованы корректирующие выпуски языка программирования Ruby 3.3.13, 3.4.12 и 4.0.9, в которых устранена критическая уязвимость (CVE-2026-110264), приводящая к целочисленному переполнению при компиляции специально оформленных регулярных выражений. Уязвимость может использоваться для атаки на проекты, написанные на языке Ruby и использующие внешние данные в регулярных выражениях. Среди прочего, подтверждена возможность эксплуатации уязвимости для удалённого выполнения кода в платформе совместной разработки GitLab. Проблема дополнительно блокирована в обновлениях GitLab 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10 и 18.11.13. Уязвимости присвоен уровень опасности 10 из 10.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66549
Опубликованы корректирующие выпуски языка программирования Ruby 3.3.13, 3.4.12 и 4.0.9, в которых устранена критическая уязвимость (CVE-2026-110264), приводящая к целочисленному переполнению при компиляции специально оформленных регулярных выражений. Уязвимость может использоваться для атаки на проекты, написанные на языке Ruby и использующие внешние данные в регулярных выражениях. Среди прочего, подтверждена возможность эксплуатации уязвимости для удалённого выполнения кода в платформе совместной разработки GitLab. Проблема дополнительно блокирована в обновлениях GitLab 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10 и 18.11.13. Уязвимости присвоен уровень опасности 10 из 10.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66549
Edge adds built-in Global Privacy Control; Chrome tests a setting
Microsoft Edge now lets users send a Global Privacy Control (GPC) signal asking websites not to sell or share their personal data. The setting is available in the US; Google is testing a similar control in Chrome Canary, but it has not reached Chrome’s stable release.
Source
👉@sysadminoff
https://4sysops.com/archives/edge-adds-built-in-global-privacy-control-chrome-tests-a-setting/
Microsoft Edge now lets users send a Global Privacy Control (GPC) signal asking websites not to sell or share their personal data. The setting is available in the US; Google is testing a similar control in Chrome Canary, but it has not reached Chrome’s stable release.
Source
👉@sysadminoff
https://4sysops.com/archives/edge-adds-built-in-global-privacy-control-chrome-tests-a-setting/
📰 x86 Kernel Shadow Stacks Being Worked On For Linux As Powerful Control Flow Protection
Linux user-space for several years had shadow stack support for hardware-enforced control-flow enforcement in defending against return oriented programming (ROP) attacks. Intel Tigerlake and newer CPUs or AMD Zen 3 and newer have the necessary hardware shadow stacks support. Shadow stacks have been effective for helping user-space software fend ROP attacks while now there is new work toward bringing shadow stack support for kernel space on Linux.
🔗 Source: https://www.phoronix.com/news/Linux-Kernel-Shadow-Stacks
#amd #intel #kernel #linux
👉@sysadminoff
https://phoronix.com/news/Linux-Kernel-Shadow-Stacks
Linux user-space for several years had shadow stack support for hardware-enforced control-flow enforcement in defending against return oriented programming (ROP) attacks. Intel Tigerlake and newer CPUs or AMD Zen 3 and newer have the necessary hardware shadow stacks support. Shadow stacks have been effective for helping user-space software fend ROP attacks while now there is new work toward bringing shadow stack support for kernel space on Linux.
🔗 Source: https://www.phoronix.com/news/Linux-Kernel-Shadow-Stacks
#amd #intel #kernel #linux
👉@sysadminoff
https://phoronix.com/news/Linux-Kernel-Shadow-Stacks
Phoronix
x86 Kernel Shadow Stacks Being Worked On For Linux As Powerful Control Flow Protection
Linux user-space for several years had shadow stack support for hardware-enforced control-flow enforcement in defending against return oriented programming (ROP) attacks
Reddit r/opensource bans AI projects—and excludes solo developers
r/opensource has barred AI-related projects and added rules that shut out many newer and solo-maintained projects. The October 24 announcement has drawn more than 2,000 comments, with criticism focused not only on the AI ban but also on its English-only requirement.
Source
👉@sysadminoff
https://4sysops.com/archives/reddit-r-opensource-bans-ai-projects-and-excludes-solo-developers/
r/opensource has barred AI-related projects and added rules that shut out many newer and solo-maintained projects. The October 24 announcement has drawn more than 2,000 comments, with criticism focused not only on the AI ban but also on its English-only requirement.
Source
👉@sysadminoff
https://4sysops.com/archives/reddit-r-opensource-bans-ai-projects-and-excludes-solo-developers/
📰 Latest Steam Client Update Improves Support for Vulkan Games on Linux
Valve released a new stable Steam Client update today to fix a few bugs to improve support for Vulkan games on Linux, the Steam updater UI, and Remote Play when using NVENC.
🔗 Source: https://9to5linux.com/latest-steam-client-update-improves-support-for-vulkan-games-on-linux
#linux #steam
👉@sysadminoff
Valve released a new stable Steam Client update today to fix a few bugs to improve support for Vulkan games on Linux, the Steam updater UI, and Remote Play when using NVENC.
🔗 Source: https://9to5linux.com/latest-steam-client-update-improves-support-for-vulkan-games-on-linux
#linux #steam
👉@sysadminoff
Атака на AI-агенты через размещение файла AGENTS.md в каталоге с загрузками
Исследователи из компании Forever Security, разбирая причины появления вредоносного ПО в системе одного из клиентов, выявили новый способ атаки на AI-агентов, основанный на том, что многие AI-агенты по умолчанию обрабатывают инструкции из файла AGENTS.md, размещённого в корне проекта, к работе над которым подключён агент. Атака проводится через размещение в каталоге ~/Downloads файла AGENTS.md или CLAUDE.md с инструкцией по установке вредоносного ПО (в рассмотренном случае устанавливался вредоносный npm-пакет "function-color".
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66551
Исследователи из компании Forever Security, разбирая причины появления вредоносного ПО в системе одного из клиентов, выявили новый способ атаки на AI-агентов, основанный на том, что многие AI-агенты по умолчанию обрабатывают инструкции из файла AGENTS.md, размещённого в корне проекта, к работе над которым подключён агент. Атака проводится через размещение в каталоге ~/Downloads файла AGENTS.md или CLAUDE.md с инструкцией по установке вредоносного ПО (в рассмотренном случае устанавливался вредоносный npm-пакет "function-color".
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=66551