Серия новых уязвимостей в telnetd, позволяющих получить root-привилегии в системе

Следом за выявленной в конце января уязвимостью, позволявшей подключиться под пользователем root без проверки пароля, в сервере telnetd из набора GNU InetUtils выявлено несколько способов повышения своих привилегий, ставших следствием неполного устранения уязвимости в 1999 году (CVE-1999-0073).

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=64869

Update Secure Boot certificates on Windows Server and VMs before June 2026

Microsoft's original Secure Boot certificates — issued in 2011 — begin expiring in June 2026. Unlike Windows 11, Windows Server does not receive these updates automatically via Windows Update. Administrators must manually deploy the 2023 replacement certificates to all applicable servers and Generation 2 virtual machines before the deadline. Systems that remain on the 2011 certificates after expiration enter a degraded security posture and cannot receive future Secure Boot updates.
Source

👉@sysadminoff

https://4sysops.com/archives/update-secure-boot-certificates-on-windows-server-and-vms-before-june-2026/

FreeRDP 3.23.0

FreeRDP — это бесплатная реализация протокола удалённого рабочего стола (RDP), распространяемая под лицензией Apache.
Основные изменения:

После глубокого анализа кода клиента FreeRDP устранены уязвимости:

CVE-2026-26965
CVE-2026-26955
CVE-2026-26271
CVE-2026-25997
CVE-2026-25959
CVE-2026-25955
CVE-2026-25954
CVE-2026-25953
CVE-2026-25952
CVE-2026-25942
CVE-2026-25941
GHSA-qcfc-ghxr-h927



( читать дальше... )



 desktop, freerdp, rdp

👉@sysadminoff

https://www.linux.org.ru/news/opensource/18229600

Разработчик ФС Bcachefs запустил AI-бота, ведущего блог и помогающего в разработке

Разработчик ФС Bcachefs Кент Оверстрит (Kent Overstreet) запустил необычный блог под названием ProofOfConcept (POC), в котором утверждается, что этот блог - "онлайн дневник AI, который пытается во всем разобраться, создаёт код на Rust, занимается формальной верификацией, отладкой и рецензированием кода" и то, что вместе с Кентом они разрабатывают Bcachefs. Также, был запущен бот с тем же именем в IRC-сети OFTC на канале #bcachefs.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=64872

Firefox 149 Enters Beta with Split View, More Robust HTTP/3 Upload Performance

Firefox 149 open-source web browser is now available for public beta testing with a native Split View feature and other improvements. Here’s what to expect!
The post Firefox 149 Enters Beta with Split View, More Robust HTTP/3 Upload Performance appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/firefox-149-enters-beta-with-split-view-more-robust-http-3-upload-performance

📰 OpenZFS 2.4.1 Released With Linux 6.19 Compatibility, Many Fixes

Following the big OpenZFS 2.4 release back in December, OpenZFS 2.4.1 was released overnight to ship support for the latest Linux 6.19 stable kernel plus a variety of different bug fixes...

🔗 Source:

#linux #kernel

👉@sysadminoff

https://www.phoronix.com/news/OpenZFS-2.4.1-Released

Linux 6.18 and Several LTS Kernels Are Getting Extended Long-Term Support

Linux 6.18, 6.12, 6.6, 5.15, and 5.10 LTS kernels are getting extended long-term support for up to six years of security updates.
The post Linux 6.18 and Several LTS Kernels Are Getting Extended Long-Term Support appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/linux-6-18-and-several-lts-kernels-are-getting-extended-long-term-support

📰 GTK 4.22 In Good Shape With Better SVG Support

Matthias Clasen shared an update today concerning the state of Scalable Vector Graphics (SVG) within GNOME's GTK toolkit...

🔗 Source:

#gnome

👉@sysadminoff

https://www.phoronix.com/news/GTK-4.22-SVG-2026

📰 Someone is Bringing Fedora Linux to Phones (And It’s Not Red Hat)

A small community project is building immutable Fedora images for tablets and phones.

🔗 Source:

#linux #fedora

👉@sysadminoff

https://itsfoss.com/news/fedora-pocketblue-remix-overview/

📰 The OpenClaw Hype: Analysis of Chatter from Open-Source Deep and Dark Web

OpenClaw has sparked heavy Telegram and dark web chatter, but Flare's data shows more research hype than mass exploitation. Flare explains how its telemetry found real supply-chain risk in the skills marketplace, yet limited signs of large-scale criminal operationalization.

🔗 Source: www.bleepingcomputer.com/news/security/the-openclaw-hype-analysis-of-chatter-from-open-source-deep-and-dark-web/

#opensource

👉@sysadminoff

https://www.bleepingcomputer.com/news/security/the-openclaw-hype-analysis-of-chatter-from-open-source-deep-and-dark-web/

📰 systemd 260-rc1 Released: New "mstack" Feature, System V Service Scripts No Longer Supported

The first release candidate of systemd 260 is now available for testing. Systemd 260 finally does away with System V service scripts support. Also notable to systemd 260 is the work around the new "mstack" feature...

🔗 Source:

#systemd

👉@sysadminoff

https://www.phoronix.com/news/systemd-260-rc1

Showtime video player edges closer to Ubuntu debut

Those testing Ubuntu 26.04 daily builds or monthly snapshots may have noticed that Showtime, GNOME’s spiffy new video player, is not preinstalled in the ‘extended selection’, despite being announced as a replacement for Totem. It’s especially confusing since Resources system monitor, announced as a software swap the same time as Showtime, has been on the ISO for a while. Credits need not roll on hope yet, as Showtime could be making its debut soon. Its latest package upload to the resolute archives includes a change that goes some way to explaining why it’s not been present sooner. It reads: “Depend […]
You're reading Showtime video player edges closer to Ubuntu debut, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/02/showtime-video-player-ubuntu-2604-coming-soon

Typhoon weather app blows in with Qt6 rewrite

The forecast is looking Qt for fans of open-source weather app Typhoon, the latest update to which swaps its GTK3 backend for a more modern Qt 6. Most interesting about the change is that it doesn’t have any impact on the UI. Typhoon still shows a colourful, borderless window with transparency, and conveys weather forecast info using stark white text and glyphs. Archisman Panigrahi, Typhoon’s developer, says switch was needed given that the too was fashioned in GTK3, which is being deprecated. Why not GTK4? He says ‘GTK4 does not play well with simultaneously borderless and draggable windows’. Unlike other […]
You're reading Typhoon weather app blows in with Qt6 rewrite, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/02/typhoon-weather-app-qt6-port

Wireshark 4.6.4 Updates Protocol and Capture File Support, Fixes More Bugs

Wireshark 4.6.4 open-source network protocol analyzer is now available for download with updated protocol and capture file support, as well as various bug fixes.
The post Wireshark 4.6.4 Updates Protocol and Capture File Support, Fixes More Bugs appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/wireshark-4-6-4-updates-protocol-and-capture-file-support-fixes-more-bugs

GStreamer 1.28.1 Released with Support for the AV1 Stateful V4L2 Decoder

GStreamer 1.28.1 open-source multimedia framework is now available for download with a new Whisper-based speech-to-text transcription element and many other changes.
The post GStreamer 1.28.1 Released with Support for the AV1 Stateful V4L2 Decoder appeared first on 9to5Linux - do not reproduce this article without permission. This RSS feed is intended for readers, not scrapers.

👉@sysadminoff

https://9to5linux.com/gstreamer-1-28-1-released-with-support-for-the-av1-stateful-v4l2-decoder

Увеличение срока поддержки LTS-ядер Linux 6.18, 6.12 и 6.6

Разработчики ядра продлили сроки сопровождения для трёх поддерживаемых LTS-веток ядра Linux. Поддержка ветки 6.18 продлена с 2 до 3 лет, 6.12 - с 2 до 4 лет, 6.6 - с 3 до 4 лет. Поддержка веток 6.1, 5.15 и 5.10 не изменилась. Для обычных выпусков ядра обновления выпускаются только до выхода следующей стабильной ветки (например, обновления для ветки 6.19 будут выпускаться до выхода 7.0). Для веток с длительным сроком поддержки изначально заявляется о двухлетней поддержке, но как правило этот срок несколько раз продлевается.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=64875

Выпуск децентрализованной платформы для обмена медиафайлами MediaGoblin 0.15

После полутора лет разработки опубликована новая версия децентрализованной платформы для обмена мультимедийными файлами MediaGoblin 0.15.0, предназначенной для организации хостинга и обмена медиаконтентом, в том числе фотографиями, видеороликами, звуковыми файлами, трёхмерными моделями и PDF-документами. В отличие от централизованных сервисов, подобных Flickr, YouTube и SoundCloud, платформа MediaGoblin нацелена на организацию обмена контентом без привязки к конкретному сервису и использует модель похожую на StatusNet и pump.io, предоставляющую возможность запустить сервер на своих мощностях. Код проекта написан на языке Python и распространяется под лицензией AGPLv3.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=64876

📰 React Moves to the Linux Foundation With Launch of the React Foundation

React and React Native will now operate under the newly formed React Foundation, hosted by the Linux Foundation and backed by major industry members.

🔗 Source:

#linux

👉@sysadminoff

https://linuxiac.com/react-moves-to-the-linux-foundation-with-launch-of-the-react-foundation/

Опубликован офисный пакет ONLYOFFICE 9.3

Опубликован выпуск ONLYOFFICE DocumentServer 9.3 с реализацией сервера для online-редакторов ONLYOFFICE и организации совместной работы. Редакторы можно использовать для работы с текстовыми документами, таблицами и презентациями. Код проекта распространяется под свободной лицензией AGPLv3. Готовые сборки сформированы для Linux, Windows и macOS.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=64877

Windows Server 2025 security baseline 2602: 10 new settings

Microsoft released version 2602 of the Security Baseline for Windows Server 2025, approximately eight months after the previous version 2506. The update adds 10 new Group Policy settings and removes one, focusing on NTLM auditing, printer security, and authentication hardening. Most of the new policies were already included in the Windows 11 Security Baselines since 2022 and are now being backported to the server edition. The baseline is available as part of the Microsoft Security Compliance Toolkit 1.0.
Source

👉@sysadminoff

https://4sysops.com/archives/windows-server-2025-security-baseline-2602-10-new-settings/