Linux
2.13K subscribers
4.61K photos
20 videos
19K links
Новости Линукс Linux

По всем вопросам @evgenycarter
Download Telegram
📰 Sentry Pledges $1 Million to Open Source Maintainers

Sentry expands its financial support for open source, allocating $1 million to software maintainers, foundations, and critical dependencies.

🔗 Source: /

#opensource

👉@sysadminoff

https://linuxiac.com/sentry-pledges-1-million-to-open-source-maintainers
📰 Fedora 45 Hits A Second NO-GO: Not Releasing Until November

Fedora 45 wasn't released this week as its ideal early release target due to not having a release candidate build in time for last week's Go/No-Go meeting. At today's Go/No-Go meeting, Fedora 45 was delayed by at least one more week due to open blocker bugs...

🔗 Source: https://www.phoronix.com/news/Fedora-45-Second-NO-GO

#fedora

👉@sysadminoff

https://phoronix.com/news/Fedora-45-Second-NO-GO
📰 Shelly 3.1.9 GUI Package Manager for Arch Linux Improves AUR Support

Shelly 3.1.9 graphical package manager for Arch Linux distributions is now available for download with file migration support to RLPM, more reliable AUR builds, and other changes.

🔗 Source: https://9to5linux.com/shelly-3-1-9-gui-package-manager-for-arch-linux-improves-aur-support

#arch #linux

👉@sysadminoff
Релиз Firefox 159

Состоялся релиз web-браузера Firefox 159 и сформированы обновления прошлых веток с длительным сроком поддержки - 153.6.0 и 115.44.0. В рамках нового двухнедельного цикла формирования релизов на стадию бета-тестирования переведена ветка Firefox 160, релиз которой намечен на 10 ноября.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66557
📰 Calibre 9.17 E-Book Manager Adds JPEG XL Support and Performance Improvements

Calibre 9.17 open-source e-book manager is now available for download with support for JPEG XL images for e-book cover conversion, faster MOBI/AZW3/PDB conversion, and more.

🔗 Source: https://9to5linux.com/calibre-9-17-e-book-manager-adds-jpeg-xl-support-and-performance-improvements

#opensource

👉@sysadminoff
📰 Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated.Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-111497). Node.js disclosed the flaw.

🔗 Source: https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html

#linux

👉@sysadminoff
10 уязвимостей в ядре Linux и 5 во FreeBSD, позволяющие получить права root в системе

Выявлена серия уязвимостей в ядре Linux и FreeBSD. Уязвимости в Linux дают возможность удалённо выполнить код, поднять свои привилегии в системе, выйти из контейнеров или обойти изоляцию виртуальных машин. Уязвимости во FreeBSD позволяют удалённо остановить работу ядра, поднять свои привилегии в системе и обойти изоляцию гипервизора Bhyve.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66542
‍Ubuntu firmware HWE will prevent issues on older kernel

Ubuntu is planning a new linux-firmware-hwe package, in an effort to reduce the risk of firmware updates for newer kernels causing problems for users running older ones. On Ubuntu long-term support (LTS) releases, you can stick with the standard (GA) kernel it was released with for the duration of its support period, or you can install the HWE update, which brings newer Linux kernel versions to existing Ubuntu LTS releases.  Right now, both kernels share the same firmware package, which means firmware updates designed to work with HWE kernels can cause problems for users who stick with the GA kernel. Ubuntu developer Juerg Haefliger noted that a firmware backport for Ubuntu 24.04 LTS, intended for its Linux 7.0 […]
You're reading Ubuntu firmware HWE will prevent issues on older kernel, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/10/ubuntu-firmware-hwe-effort-moving-forward
📰 FFmpeg 9.1 Preps For Release With APV Vulkan Encoder, NVIDIA Optical Flow FRUC

The release dance is underway for FFmpeg 9.1 as the newest feature release for this widely-used open-source multimedia library...

🔗 Source: https://www.phoronix.com/news/FFmpeg-9.1-Releasing

#ffmpeg #opensource

👉@sysadminoff

https://phoronix.com/news/FFmpeg-9.1-Releasing
📰 Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

🔗 Source: https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html

#python

👉@sysadminoff
12 free Command Examples to Check Memory Usage in Linux

The post 12 free Command Examples to Check Memory Usage in Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .A Linux server that shows almost no free memory is often perfectly healthy. The old way of reading free output
The post 12 free Command Examples to Check Memory Usage in Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

👉@sysadminoff

https://www.tecmint.com/check-memory-usage-in-linux/
Основатель CentOS и Rocky Linux представил Linux-совместимое ядро Ginux, написанное на Rust

Грегори Курцер (Gregory Kurtzer), основатель дистрибутивов CentOS и Rocky Linux, представил проект Ginux, развивающий ядро операционной системы на языке Rust, нацеленное на достижение совместимости с ядром Linux. Опубликованный исследовательский прототип уже способен загрузить системное окружение дистрибутивов Alpine с BusyBox и Rocky Linux 10 с systemd в многопользовательском консольном режиме. Код проекта распространяется под лицензией Apache 2.0. Поддерживается работа на системах с архитектурой x86-64.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66562
Cloudflare launches PHP CTF to test PHP2Shell WAF bypasses

Cloudflare has opened a limited-time PHP Capture the Flag challenge, inviting researchers to test protections it deployed against PHP2Shell vulnerabilities. The challenge builds on its two-sided WAF detection for PHP2Shell attacks with a deliberately vulnerable PHP sandbox and a flag to retrieve.
Source

👉@sysadminoff

https://4sysops.com/archives/cloudflare-launches-php-ctf-to-test-php2shell-waf-bypasses/