📰 FFmpeg 9.1 Preps For Release With APV Vulkan Encoder, NVIDIA Optical Flow FRUC

The release dance is underway for FFmpeg 9.1 as the newest feature release for this widely-used open-source multimedia library...

🔗 Source: https://www.phoronix.com/news/FFmpeg-9.1-Releasing

#ffmpeg #opensource

👉@sysadminoff

https://phoronix.com/news/FFmpeg-9.1-Releasing

📰 Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

🔗 Source: https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html

#python

👉@sysadminoff

Firefox 159

Доступен Firefox 159.
( читать дальше... ) firefox, mozilla

👉@sysadminoff

https://www.linux.org.ru/news/mozilla/18409662

12 free Command Examples to Check Memory Usage in Linux

The post 12 free Command Examples to Check Memory Usage in Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .A Linux server that shows almost no free memory is often perfectly healthy. The old way of reading free output
The post 12 free Command Examples to Check Memory Usage in Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

👉@sysadminoff

https://www.tecmint.com/check-memory-usage-in-linux/

📰 Factorio 2.1 is out now with the native ARM64 Linux build to run on Steam Frame, Raspberry Pi and more

That day is here! Factorio 2.1 stable has arrived as a big clean-up release along with new platform support with their Native Linux version.Read the full article on GamingOnLinux.

🔗 Source: https://www.gamingonlinux.com/2026/10/factorio-2-1-is-out-now-with-the-native-arm64-linux-build-to-run-on-steam-frame-raspberry-pi-and-more/

#linux #raspberry #steam

👉@sysadminoff

https://gamingonlinux.com/2026/10/factorio-2-1-is-out-now-with-the-native-arm64-linux-build-to-run-on-steam-frame-raspberry-pi-and-more

Основатель CentOS и Rocky Linux представил Linux-совместимое ядро Ginux, написанное на Rust

Грегори Курцер (Gregory Kurtzer), основатель дистрибутивов CentOS и Rocky Linux, представил проект Ginux, развивающий ядро операционной системы на языке Rust, нацеленное на достижение совместимости с ядром Linux. Опубликованный исследовательский прототип уже способен загрузить системное окружение дистрибутивов Alpine с BusyBox и Rocky Linux 10 с systemd в многопользовательском консольном режиме. Код проекта распространяется под лицензией Apache 2.0. Поддерживается работа на системах с архитектурой x86-64.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66562

Cloudflare launches PHP CTF to test PHP2Shell WAF bypasses

Cloudflare has opened a limited-time PHP Capture the Flag challenge, inviting researchers to test protections it deployed against PHP2Shell vulnerabilities. The challenge builds on its two-sided WAF detection for PHP2Shell attacks with a deliberately vulnerable PHP sandbox and a flag to retrieve.
Source

👉@sysadminoff

https://4sysops.com/archives/cloudflare-launches-php-ctf-to-test-php2shell-waf-bypasses/

Взлом сервера с модами, дополнениями и ресурсами для игрового движка Luanti

Разработчики свободного игрового движка Luanti, позволяющего создавать игры в стиле Minecraft, объявили об инциденте, в результате которого атакующие получили доступ к серверу проекта, обслуживающему каталог content.luanti.org, через который производится загрузка модов, игр, дополнений, текстур и прочих ресурсов в экосистеме Luanti. В руки атакующих попали персональные данные, IP-адреса и хэши паролей (bcrypt) зарегистрированных пользователей. Атакующие также имели возможность вносить изменения в пакеты, распространяемые через каталог ContentDB.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66563

📰 Tails 7.15.1 Privacy-Focused Linux Distro Released as Emergency Security Update

Tails 7.15.1 addresses compromised CA certificates that could allow attackers to impersonate HTTPS websites through malicious Tor exit nodes.

🔗 Source: /

#distro #linux

👉@sysadminoff

https://linuxiac.com/tails-7-15-1-privacy-focused-linux-distro-released-as-emergency-security-update

📰 Torvalds: AI is fine for competent devs, but spare us the 'drive-by' patches

Kernel maintainers stop asking who used AI, as long as the code is good.

🔗 Source: https://www.theregister.com/columnists/2026/10/23/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches/5304357

#kernel

👉@sysadminoff

https://theregister.com/columnists/2026/10/23/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches/5304357

🤯 [DeskWM] Windows are sheets of paper on a wooden desk - a skeuomorphic Wayland compositor I'm building

🔗 On Unixporn (Reddit): https://www.reddit.com/r/unixporn/s/lccLKvjHJo

#wayland

👉@sysadminoff

https://reddit.com/r/unixporn/s/lccLKvjHJo

📰 Fwupd 2.1.9 Linux Firmware Updater Released with New Features

Fwupd 2.1.9 Linux firmware updater is now available for download with support for Pixart PID 38CA, new features, and bug fixes.

🔗 Source: https://9to5linux.com/fwupd-2-1-9-linux-firmware-updater-released-with-new-features

#linux

👉@sysadminoff

Anthropic’s AI model chained five flaws into working Chrome and Linux exploits

Anthropic says an unreleased Claude-family model built proof-of-concept exploits across five platforms, including a Chrome attack that could escape the browser sandbox after a page loaded. The flaws have been patched, and the company reported no real-world attacks; how much human help the model needed remains unclear.
Source

👉@sysadminoff

https://4sysops.com/archives/anthropics-ai-model-chained-five-flaws-into-working-chrome-and-linux-exploits/

Microsoft’s MAI-Image-2.7 Preview reaches No. 2 in image editing

Microsoft’s MAI-Image-2.7 Preview edits existing images from text prompts. It scored 1,193 on Artificial Analysis’s image-editing leaderboard, six points behind the top-ranked model, and placed third on Arena’s leaderboard. It’s available to try in MAI Playground, but text-to-image generation and Microsoft Foundry access have not yet been announced.
Source

👉@sysadminoff

https://4sysops.com/archives/microsofts-mai-image-2-7-preview-reaches-no-2-in-image-editing/

Replace SharePoint tempauth URLs with Entra ID tokens

On April 1, 2027, SharePoint Online and OneDrive will stop returning pre-authenticated URLs from Microsoft Graph, the REST API for Microsoft 365 data, for common file operations. Today those links carry a short-lived SharePoint credential in the tempauth query string, so a follow-up download or upload works without a token in an Authorization header. After the change, apps must send a Microsoft Entra ID access token in that header instead. Many flows then need two tokens: one for Graph and one for your SharePoint tenant host. A tenant setting can route some apps to Graph URLs so they stay on the Graph token only.
Source

👉@sysadminoff

https://4sysops.com/archives/replace-sharepoint-tempauth-urls-with-entra-id-tokens/

📰 oneDNN 3.14 Released With ACE Support, Initial AMD Zen Optimizations

The UXL Foundation announced today the release of oneDNN 3.14 as the latest feature update to this library providing optimized deep learning operations for software like PyTorch, TensorFlow, OpenVINO, and others. While oneDNN began as an Intel software project, making this version notable is beginning to see AMD Zen CPU optimizations land in oneDNN proper...

🔗 Source: https://www.phoronix.com/news/oneDNN-3.14-Released

#amd #intel

👉@sysadminoff

https://phoronix.com/news/oneDNN-3.14-Released

Удалённая уязвимость в серверных UEFI-прошивках, эксплуатируемая через отправку ICMP-пакета

В TianoCore EDK II (EFI Development Kit II), открытой эталонной реализации UEFI, применяемой в большинстве серверных материнских плат, устранена критическая уязвимость (CVE-2026-97631). Уязвимость присутствует в драйвере PXE и может быть эксплуатирована через отправку специально оформленных ICMP-пакетов во время сетевой загрузки в сетях IPv4 или IPv6. Атака не требует аутентификации и позволяет злоумышленнику выполнить свой код с привилегиями UEFI-прошивки на этапе до передачи управления операционной системе, что может быть использовано для обхода механизма верифицированной загрузки UEFI Secure Boot и подстановки вредоносных компонентов на этапе загрузки.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=66565

📰 ArmSoM Sige7s Puts the RK3588S on a Raspberry Pi-Sized Board, and There's a Compute Module Too

The small SBC brings a 6 TOPS NPU, Wi-Fi 6, a Pi-compatible 40-pin header, and up to 32GB RAM, starting at $153.

🔗 Source:

#raspberry

👉@sysadminoff

https://feed.itsfoss.com/link/24361/17505121/armsom-sige7s

📰 USB-C DisplayPort Alt Mode on Rockchip RK3588 and RK3576, starting with the Flipper One

A look at the USB-PD, PHY, hotplug, and DRM changes involved in making USB-C DisplayPort Alternate Mode work on RK3588/RK3576, and where they stand on the way to mainline Linux.

🔗 Source: https://www.collabora.com/news-and-blog/news-and-events/usb-c-displayport-alt-mode-on-rockchip-rk3588-and-rk3576-starting-with-the-flipper-one.html

#linux

👉@sysadminoff

https://collabora.com/news-and-blog/news-and-events/usb-c-displayport-alt-mode-on-rockchip-rk3588-and-rk3576-starting-with-the-flipper-one.html

📰 Linux Moves Closer to Retiring the x32 ABI After Years of Limited Adoption

by George WhittakerLinux kernel developers are renewing efforts to retire the x32 application binary interface (ABI), a little-used compatibility feature that attempted to combine the advantages of 64-bit processors with the smaller memory footprint of 32-bit applications. A revised patch series submitted on October 8, 2026, proposes the first steps toward disabling the interface, potentially ending support for an architecture experiment...

🔗 Source: https://www.linuxjournal.com/content/linux-moves-closer-retiring-x32-abi-after-years-limited-adoption

#kernel #linux

👉@sysadminoff

https://linuxjournal.com/content/linux-moves-closer-retiring-x32-abi-after-years-limited-adoption

Ghostty 1.4.0

Команда разработчиков представила Ghostty 1.4.0 — крупный релиз популярного эмулятора терминала. Новая версия вобрала в себя 7 месяцев активной разработки: над ней трудились 172 контрибьютора, сделавших 2 289 коммитов. Обновление приносит колоссальное ускорение, снижение потребления памяти, полноценную поддержку протокола Kitty и множество других улучшений для всех поддерживаемых платформ.Ghostty — это быстрый, многофункциональный и кроссплатформенный эмулятор терминала, использующий собственный пользовательский интерфейс и аппаратное ускорение графики. Ghostty построен на libghostty — высокопортативной, встраиваемой библиотеке, которая предоставляет базовую эмуляцию терминала, состояние рендеринга и многое другое. libghostty лежит в основе всех встроенных терминалов в IDE от JetBrains, и сейчас ведутся работы по замене ядра терминала с libvterm на libghostty в Neovim.( читать дальше... ) ghostty, terminal, zig, консоль

👉@sysadminoff

https://www.linux.org.ru/news/opensource/18409755