10 уязвимостей в ядре Linux и 5 во FreeBSD, позволяющие получить права root в системе

Выявлена серия уязвимостей в ядре Linux и FreeBSD. Уязвимости в Linux дают возможность удалённо выполнить код, поднять свои привилегии в системе, выйти из контейнеров или обойти изоляцию виртуальных машин. Уязвимости во FreeBSD позволяют удалённо остановить работу ядра, поднять свои привилегии в системе и обойти изоляцию гипервизора Bhyve.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66542

📰 Bazzite Linux announce ROG XBOX Ally X20 and Acer Predator Atlas support is in testing

Another release of the popular Bazzite Linux is coming up, with new devices currently in testing like the ROG XBOX Ally X20 and Acer Predator Atlas.Read the full article on GamingOnLinux.

🔗 Source: https://www.gamingonlinux.com/2026/10/bazzite-linux-announce-rog-xbox-ally-x20-and-acer-predator-atlas-support-is-in-testing/

#linux

👉@sysadminoff

https://gamingonlinux.com/2026/10/bazzite-linux-announce-rog-xbox-ally-x20-and-acer-predator-atlas-support-is-in-testing

‍Ubuntu firmware HWE will prevent issues on older kernel

Ubuntu is planning a new linux-firmware-hwe package, in an effort to reduce the risk of firmware updates for newer kernels causing problems for users running older ones. On Ubuntu long-term support (LTS) releases, you can stick with the standard (GA) kernel it was released with for the duration of its support period, or you can install the HWE update, which brings newer Linux kernel versions to existing Ubuntu LTS releases.  Right now, both kernels share the same firmware package, which means firmware updates designed to work with HWE kernels can cause problems for users who stick with the GA kernel. Ubuntu developer Juerg Haefliger noted that a firmware backport for Ubuntu 24.04 LTS, intended for its Linux 7.0 […]
You're reading Ubuntu firmware HWE will prevent issues on older kernel, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/10/ubuntu-firmware-hwe-effort-moving-forward

📰 FFmpeg 9.1 Preps For Release With APV Vulkan Encoder, NVIDIA Optical Flow FRUC

The release dance is underway for FFmpeg 9.1 as the newest feature release for this widely-used open-source multimedia library...

🔗 Source: https://www.phoronix.com/news/FFmpeg-9.1-Releasing

#ffmpeg #opensource

👉@sysadminoff

https://phoronix.com/news/FFmpeg-9.1-Releasing

📰 Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

🔗 Source: https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html

#python

👉@sysadminoff

Firefox 159

Доступен Firefox 159.
( читать дальше... ) firefox, mozilla

👉@sysadminoff

https://www.linux.org.ru/news/mozilla/18409662

12 free Command Examples to Check Memory Usage in Linux

The post 12 free Command Examples to Check Memory Usage in Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .A Linux server that shows almost no free memory is often perfectly healthy. The old way of reading free output
The post 12 free Command Examples to Check Memory Usage in Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

👉@sysadminoff

https://www.tecmint.com/check-memory-usage-in-linux/

📰 Factorio 2.1 is out now with the native ARM64 Linux build to run on Steam Frame, Raspberry Pi and more

That day is here! Factorio 2.1 stable has arrived as a big clean-up release along with new platform support with their Native Linux version.Read the full article on GamingOnLinux.

🔗 Source: https://www.gamingonlinux.com/2026/10/factorio-2-1-is-out-now-with-the-native-arm64-linux-build-to-run-on-steam-frame-raspberry-pi-and-more/

#linux #raspberry #steam

👉@sysadminoff

https://gamingonlinux.com/2026/10/factorio-2-1-is-out-now-with-the-native-arm64-linux-build-to-run-on-steam-frame-raspberry-pi-and-more

Основатель CentOS и Rocky Linux представил Linux-совместимое ядро Ginux, написанное на Rust

Грегори Курцер (Gregory Kurtzer), основатель дистрибутивов CentOS и Rocky Linux, представил проект Ginux, развивающий ядро операционной системы на языке Rust, нацеленное на достижение совместимости с ядром Linux. Опубликованный исследовательский прототип уже способен загрузить системное окружение дистрибутивов Alpine с BusyBox и Rocky Linux 10 с systemd в многопользовательском консольном режиме. Код проекта распространяется под лицензией Apache 2.0. Поддерживается работа на системах с архитектурой x86-64.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66562

Cloudflare launches PHP CTF to test PHP2Shell WAF bypasses

Cloudflare has opened a limited-time PHP Capture the Flag challenge, inviting researchers to test protections it deployed against PHP2Shell vulnerabilities. The challenge builds on its two-sided WAF detection for PHP2Shell attacks with a deliberately vulnerable PHP sandbox and a flag to retrieve.
Source

👉@sysadminoff

https://4sysops.com/archives/cloudflare-launches-php-ctf-to-test-php2shell-waf-bypasses/

Взлом сервера с модами, дополнениями и ресурсами для игрового движка Luanti

Разработчики свободного игрового движка Luanti, позволяющего создавать игры в стиле Minecraft, объявили об инциденте, в результате которого атакующие получили доступ к серверу проекта, обслуживающему каталог content.luanti.org, через который производится загрузка модов, игр, дополнений, текстур и прочих ресурсов в экосистеме Luanti. В руки атакующих попали персональные данные, IP-адреса и хэши паролей (bcrypt) зарегистрированных пользователей. Атакующие также имели возможность вносить изменения в пакеты, распространяемые через каталог ContentDB.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66563

📰 Tails 7.15.1 Privacy-Focused Linux Distro Released as Emergency Security Update

Tails 7.15.1 addresses compromised CA certificates that could allow attackers to impersonate HTTPS websites through malicious Tor exit nodes.

🔗 Source: /

#distro #linux

👉@sysadminoff

https://linuxiac.com/tails-7-15-1-privacy-focused-linux-distro-released-as-emergency-security-update

📰 Torvalds: AI is fine for competent devs, but spare us the 'drive-by' patches

Kernel maintainers stop asking who used AI, as long as the code is good.

🔗 Source: https://www.theregister.com/columnists/2026/10/23/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches/5304357

#kernel

👉@sysadminoff

https://theregister.com/columnists/2026/10/23/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches/5304357

🤯 [DeskWM] Windows are sheets of paper on a wooden desk - a skeuomorphic Wayland compositor I'm building

🔗 On Unixporn (Reddit): https://www.reddit.com/r/unixporn/s/lccLKvjHJo

#wayland

👉@sysadminoff

https://reddit.com/r/unixporn/s/lccLKvjHJo

📰 Fwupd 2.1.9 Linux Firmware Updater Released with New Features

Fwupd 2.1.9 Linux firmware updater is now available for download with support for Pixart PID 38CA, new features, and bug fixes.

🔗 Source: https://9to5linux.com/fwupd-2-1-9-linux-firmware-updater-released-with-new-features

#linux

👉@sysadminoff

Anthropic’s AI model chained five flaws into working Chrome and Linux exploits

Anthropic says an unreleased Claude-family model built proof-of-concept exploits across five platforms, including a Chrome attack that could escape the browser sandbox after a page loaded. The flaws have been patched, and the company reported no real-world attacks; how much human help the model needed remains unclear.
Source

👉@sysadminoff

https://4sysops.com/archives/anthropics-ai-model-chained-five-flaws-into-working-chrome-and-linux-exploits/

Microsoft’s MAI-Image-2.7 Preview reaches No. 2 in image editing

Microsoft’s MAI-Image-2.7 Preview edits existing images from text prompts. It scored 1,193 on Artificial Analysis’s image-editing leaderboard, six points behind the top-ranked model, and placed third on Arena’s leaderboard. It’s available to try in MAI Playground, but text-to-image generation and Microsoft Foundry access have not yet been announced.
Source

👉@sysadminoff

https://4sysops.com/archives/microsofts-mai-image-2-7-preview-reaches-no-2-in-image-editing/

Replace SharePoint tempauth URLs with Entra ID tokens

On April 1, 2027, SharePoint Online and OneDrive will stop returning pre-authenticated URLs from Microsoft Graph, the REST API for Microsoft 365 data, for common file operations. Today those links carry a short-lived SharePoint credential in the tempauth query string, so a follow-up download or upload works without a token in an Authorization header. After the change, apps must send a Microsoft Entra ID access token in that header instead. Many flows then need two tokens: one for Graph and one for your SharePoint tenant host. A tenant setting can route some apps to Graph URLs so they stay on the Graph token only.
Source

👉@sysadminoff

https://4sysops.com/archives/replace-sharepoint-tempauth-urls-with-entra-id-tokens/

📰 oneDNN 3.14 Released With ACE Support, Initial AMD Zen Optimizations

The UXL Foundation announced today the release of oneDNN 3.14 as the latest feature update to this library providing optimized deep learning operations for software like PyTorch, TensorFlow, OpenVINO, and others. While oneDNN began as an Intel software project, making this version notable is beginning to see AMD Zen CPU optimizations land in oneDNN proper...

🔗 Source: https://www.phoronix.com/news/oneDNN-3.14-Released

#amd #intel

👉@sysadminoff

https://phoronix.com/news/oneDNN-3.14-Released

Удалённая уязвимость в серверных UEFI-прошивках, эксплуатируемая через отправку ICMP-пакета

В TianoCore EDK II (EFI Development Kit II), открытой эталонной реализации UEFI, применяемой в большинстве серверных материнских плат, устранена критическая уязвимость (CVE-2026-97631). Уязвимость присутствует в драйвере PXE и может быть эксплуатирована через отправку специально оформленных ICMP-пакетов во время сетевой загрузки в сетях IPv4 или IPv6. Атака не требует аутентификации и позволяет злоумышленнику выполнить свой код с привилегиями UEFI-прошивки на этапе до передачи управления операционной системе, что может быть использовано для обхода механизма верифицированной загрузки UEFI Secure Boot и подстановки вредоносных компонентов на этапе загрузки.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66565

📰 ArmSoM Sige7s Puts the RK3588S on a Raspberry Pi-Sized Board, and There's a Compute Module Too

The small SBC brings a 6 TOPS NPU, Wi-Fi 6, a Pi-compatible 40-pin header, and up to 32GB RAM, starting at $153.

🔗 Source:

#raspberry

👉@sysadminoff

https://feed.itsfoss.com/link/24361/17505121/armsom-sige7s