На соревновании ZeroDay Cloud продемонстрировано 11 успешных атак на Redis, PostgreSQL, MariaDB и ядро Linux

Поведены итоги соревнований ZeroDay Cloud, проведённых на конференции Black Hat Europe и нацеленных на выявление уязвимостей в открытом ПО, применяемом в облачных окружениях. В ходе мероприятия было продемонстрировано 11 ранее неизвестных уязвимостей в Redis, PostgreSQL, MariaDB, ядре Linux и Grafana. Размер выплаченных вознаграждений составил 320 тысяч долларов при общем заявленном призовом фонде в 4.5 млн долларов.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=64444

📰 Systemd 259 Released With Experimental Musl libc Support, More Features

Systemd 259 is out as the newest feature release for this widely-used Linux init system and service manager. Yes, there are more features in tow for this systemd release to top off 2025...

🔗 Source:

👉@sysadminoff

https://www.phoronix.com/news/systemd-259

Представлен открытый стандарт описания 3D-сцен OpenUSD Core 1.0

Альянс AOUSD (Alliance for OpenUSD), курируемый организацией Linux Foundation, опубликовал спецификацию OpenUSD Core Specification 1.0, определяющую универсальный формат и язык для описания 3D-сцен, оптимизированный для совместной работы над 3D-контентом. Спецификация преподносится как открытый стандарт для создания 3D-контента и обмена данными между разными 3D-редакторами и платформами. Помимо документации с описанием технологии OpenUSD предложен инструментарий для тестирования совместимости со стандартом.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=64445

📰 Driving a seamless Chromium experience on MediaTek SoCs

As Chromium becomes the default UI runtime on embedded Linux devices, we’re closing long-standing V4L2 gaps and enabling efficient hardware video encoding and decoding on MediaTek platforms for both downstream and upstream.

🔗 Source:

👉@sysadminoff

https://www.collabora.com/news-and-blog/news-and-events/driving-a-seamless-chromium-experience-on-mediatek-socs.html

📰 Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery App

The North Korean threat actor known as Kimsuky has been linked to a new campaign that distributes a new variant of Android malware called DocSwap via QR codes hosted on phishing sites mimicking Seoul-based logistics firm CJ Logistics (formerly CJ Korea Express)."The threat actor leveraged QR codes and notification pop-ups to lure victims into installing and executing the malware on their mobile.

🔗 Source: https://thehackernews.com/2025/12/kimsuky-spreads-docswap-android-malware.html

👉@sysadminoff

📰 How to Install Zabbix Server on Ubuntu 24.04 (Noble Numbat)

Zabbix is an open-source enterprise-class monitoring software that tracks the performance and availability of servers, network devices, and applications in real-time. It uses a server-client model, where the central system needs the Zabbix server installed and the systems being monitored require the Zabbix agent. The.

🔗 Source:

👉@sysadminoff

https://linuxtldr.com/install-zabbix-server-on-ubuntu/

📰 How to Install RQuickShare (NearbyShare/QuickShare) on Linux

RQuickShare is a Rust implementation of the smartphone NearbyShare/QuickShare feature for Linux and macOS. It’s a free, open-source, lightweight tool designed to seamlessly transfer files between desktops and smartphones. There are very few options available in the settings; you can only adjust the default bootup.

🔗 Source:

👉@sysadminoff

https://linuxtldr.com/install-rquickshare-on-linux/

systemd 259

Новый systemd к нам мчится! Чем же порадует энтузиастов GNU/Linux самый распространённый системный менеджер в последнем релизе уходящего года?

расширение интерфейса Varlink IPC (догоняем D-Bus);
опция ExecReloadPost= для юнитов (стреляет после перечитывания конфигурации сервисом);
конфиги /etc/systemd/systemd-sysext.conf и /etc/systemd/systemd-confext.conf для соответствующих сервисов;
systemd-vmspawn научился пробрасывать системного пользователя внутрь виртуалки с помощью --bind-user=/--bind-user-shell=;
опцию --recovery-key= у homectl теперь можно использовать и при операции update, а не только при создании пользователя;
systemd-machined и systemd-importd теперь можно запускать отдельно для каждого пользователя;
run0 получил опцию --empower (использует соответствующую системную группу) для повышения привилегий через механизм capabilities без смены UID - меньше шансов создать файлы от рута или ещё как-то напортачить ненароком;
расширения конфиг файлов (которые в чё-то.d/ папке) с суффиксом .ignore теперь, ожидаемо, игнорируются;
множество не менее праздничных нововведений и улучшений.

Поддержка скриптов System V объявлена устаревшей и планируется к удалению – системы и пакеты, пребывающие в состоянии летаргии, нужно из него вывести.



 homectl, systemd, systemd-importd, systemd-machined, systemd-vmspawn

👉@sysadminoff

https://www.linux.org.ru/news/linux-general/18171416

📰 AMD Awarding Ryzen AI Max+ "Strix Halo" Laptops To Those Fixing ROCm Bugs

AMD Ryzen AI Max+ "Strix Halo" is beautifully awesome. Probably my favorite hardware of 2025 whether it's in desktop form with the likes of the Framework Desktop or for very powerful laptops between the Zen 5 CPU cores and very capable Radeon 8060S Graphics within devices like the HP ZBook Ultra G1a. If you are interested by Strix Halo too and looking for a way to obtain one without the high price, AMD is running a holiday special of those...

🔗 Source:

👉@sysadminoff

https://www.phoronix.com/news/Strix-Halo-ROCm-Bug-Fixes

Windows 365 AI-enabled Cloud PC vs. Copilot+ PC

Microsoft has introduced Windows 365 AI-enabled Cloud PCs, a new cloud-based computing solution that delivers AI-powered Windows experiences to any device. This offering differs significantly from Copilot+ PCs, which are physical computers with specialized AI hardware. This article compares the technical specifications, requirements, and capabilities of both platforms.
Source

👉@sysadminoff

https://4sysops.com/archives/windows-365-ai-enabled-cloud-pc-vs-copilot-pc/

Microsoft to block unauthorized noscripts in Entra ID logins with 2026 CSP update

Microsoft is enforcing stricter Content Security Policy (CSP) for Entra ID authentication, blocking unauthorized noscripts from executing during sign-in. Organizations using browser extensions or third-party tools that inject noscripts into login.microsoftonline.com must identify and replace these tools before enforcement, as they will stop functioning while users can still sign in successfully.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-to-block-unauthorized-noscripts-in-entra-id-logins-with-2026-csp-update/

📰 The Upcoming Armbian Imager Tool is a Godsend for Non-Raspberry Pi SBC Owners

Official Armbian utility supports over 300 boards with smart image filtering and verified writes.

🔗 Source:

👉@sysadminoff

https://itsfoss.com/news/armbian-imager-quietly-debuts/

LibreOffice 25.8.4 Is Now Available for Download with More Than 70 Bug Fixes

LibreOffice 25.8.4 is now available for download as the fourth maintenance update to the latest LibreOffice 25.8 office suite series with more than 70 bug fixes.
The post LibreOffice 25.8.4 Is Now Available for Download with More Than 70 Bug Fixes appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/libreoffice-25-8-4-is-now-available-for-download-with-more-than-70-bug-fixes

Debian тестирует Debusine, систему индивидуальных репозиториев в стиле PPA

Проект Debian начал тестирование системы Debusine, позволяющей создавать индивидуальные репозитории, через которые можно распространять более новые версии программ, проводить предварительное тестирование пакетов или размещать дополнительные пакеты, не подходящие для штатных репозиториев Debian. Debusine преподносится как созданный для Debian аналог репозиториев PPA (Personal Package Archive), применяемых в Ubuntu. Проект развивает Колин Ватсон (Colin Watson), в своё время входивший в технические комитеты Debian и Ubuntu, и занимавшийся разработкой сервиса Launchpad, инсталлятора Ubuntu и системы инициализации Upstart.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=64446

Linux Kernel 6.17 Reaches End of Life, It’s Time to Upgrade to Linux Kernel 6.18 LTS

Linux kernel 6.17 reached end of life and all users are now recommended to upgrade their systems to the latest Linux 6.18 kernel series as soon as possible.
The post Linux Kernel 6.17 Reaches End of Life, It’s Time to Upgrade to Linux Kernel 6.18 LTS appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/linux-kernel-6-17-reaches-end-of-life-its-time-to-upgrade-to-linux-kernel-6-18-lts

Linux Mint 22.3 “Zena” Beta Is Available for Download with Cinnamon 6.6

Linux Mint 22.3 beta is now available for download with the Cinnamon 6.6, Xfce 4.20, and MATE 1.26 desktops, based on Ubuntu 24.04.3 LTS.
The post Linux Mint 22.3 “Zena” Beta Is Available for Download with Cinnamon 6.6 appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/linux-mint-22-3-zena-beta-is-available-for-download-with-cinnamon-6-6

📰 Intel ISPC 1.29 Drops Gen9 GPU Targets, Add New Optimizations & Experimental RISC-V

Intel ISPC 1.29 released on Wednesday as the newest feature update to this Implicit SPMD Program Compiler as a C variant able to target Intel hardware from their CPUs to GPUs for SIMD programming...

🔗 Source:

👉@sysadminoff

https://www.phoronix.com/news/Intel-ISPC-1.29

📰 NVIDIA Releases Linux Driver 590.48 With Wayland and Vulkan Fixes

NVIDIA’s Linux driver 590.48 debuts as a New Feature Branch release with Wayland fixes, Vulkan performance improvements, and updated platform requirements.

🔗 Source:

👉@sysadminoff

https://linuxiac.com/nvidia-releases-linux-driver-590-48-with-wayland-and-vulkan-fixes/

📰 Linux Mint 22.3 “Zena” Beta Is Available for Download with Cinnamon 6.6

Linux Mint 22.3 beta is now available for download with the Cinnamon 6.6, Xfce 4.20, and MATE 1.26 desktops, based on Ubuntu 24.04.3 LTS.

🔗 Source:

👉@sysadminoff

https://9to5linux.com/linux-mint-22-3-zena-beta-is-available-for-download-with-cinnamon-6-6

📰 The First Rust CVE in Linux Kernel Only Makes Your System Crash

Greg Kroah-Hartman announced this alongside 150+ C code vulnerabilities that were addressed.

🔗 Source:

👉@sysadminoff

https://itsfoss.com/news/first-linux-kernel-rust-cve/

📰 Mesa 25.3.2 brings more bug fixes for open source Linux graphics drivers

The Mesa team have released Mesa 25.3.2 as the latest bug-fix release for the current main stable branch of open source Linux graphics drivers..Read the full article on GamingOnLinux.

🔗 Source:

👉@sysadminoff

https://www.gamingonlinux.com/2025/12/mesa-25-3-2-brings-more-bug-fixes-for-open-source-linux-graphics-drivers/