📰 New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets

DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit walkthrough for the flaw on June 25, the first public demonstration for this variant.Tracked as CVE-2026-43503 (CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch landed in.

🔗 Source: https://thehackernews.com/2026/06/new-dirtyclone-linux-kernel-flaw-lets.html

#kernel #linux

👉@sysadminoff

📰 Experimental Code Enables Per-Monitor Backgrounds For GNOME Shell

One of the limitations of GNOME's current multi-monitor handling is that the same background is used across the displays. For those that want to enjoy per-monitor background selection, some experimental / proof-of-concept code is now working to allow such per-monitor backgrounds to work with the modern GNOME desktop...

🔗 Source:

#gnome

👉@sysadminoff

https://www.phoronix.com/news/PoC-Per-Background-GNOME

Проект Akrites для координации оперативного устранения уязвимостей

Анонсирован проект Akrites для координации исправления уязвимостей и раскрытия информации об уязвимостях в критически важном открытом ПО.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65782

Oracle introduces new MySQL governance model to boost community participation

Oracle has announced a new governance framework for MySQL to increase transparency and accelerate innovation through deeper community involvement. The model introduces specific roles for participants, including contributors who provide code and documentation, and committers who oversee code quality and reviews. A new technical steering committee will provide strategic guidance, featuring representatives from major cloud providers like AWS and Google Cloud.
Source

👉@sysadminoff

https://4sysops.com/archives/oracle-introduces-new-mysql-governance-model-to-boost-community-participation/

Microsoft Teams introduces centralized Recap app for meeting recordings and AI summaries

Microsoft Teams is launching a dedicated Recap app to centralize meeting recordings, transcripts, and summaries in a single searchable hub. This new interface addresses the difficulty of locating past meeting data by consolidating content from the previous 30 days. The application will be available on Windows, Mac, and web platforms, with mobile support expected to follow shortly after the initial release.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-teams-introduces-centralized-recap-app-for-meeting-recordings-and-ai-summaries/

OpenAI debuts GPT-5.6 series with advanced agentic reasoning and tiered pricing

OpenAI has launched a limited preview of its GPT-5.6 model family, introducing three distinct tiers named Sol, Terra, and Luna. The flagship Sol model features a "max reasoning" mode for deep problem-solving and an "ultra" mode that utilizes subagents to manage complex, multi-step projects. While Terra offers a balance of performance and cost, Luna is positioned as the fastest and most affordable option for high-volume workflows.
Source

👉@sysadminoff

https://4sysops.com/archives/openai-debuts-gpt-5-6-series-with-advanced-agentic-reasoning-and-tiered-pricing/

GitHub Copilot CLI: Tabbed layout, in-session MCP and plugin configuration, and accessibility improvements

GitHub made the redesigned terminal interface for GitHub Copilot CLI generally available. The update introduces a tabbed layout, in-session configuration for tools such as MCP servers and plugins, and accessibility improvements, including screen reader support and theme modes. If you manage Windows workstations, the key points are installation, update method, admin control, and the limits of what this CLI can access compared with VS Code.
Source

👉@sysadminoff

https://4sysops.com/archives/github-copilot-cli-tabbed-layout-in-session-mcp-and-plugin-configuration-and-accessibility-improvements/

📰 Intel ANV Vulkan Driver Now Enables Descriptor Heaps By Default

Back in early May was the experimental enabling of Vulkan descriptor heaps for the Intel ANV open-source driver. After nearly two months of continued testing and improvements, the VK_EXT_descriptor_heap support for Intel graphics on Linux is now enabled by default...

🔗 Source:

#intel #linux #opensource

👉@sysadminoff

https://www.phoronix.com/news/Intel-ANV-Descriptor-Heaps-On

📰 New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user gain root on affected systems.CVE-2026-46331, nicknamed "pedit COW," is an out-of-bounds write in the packet-editing action (act_pedit) that corrupts shared page-cache memory. A public, working exploit appeared within a day of the CVE assignment on June 16. Red Hat rates the flaw as.

🔗 Source: https://thehackernews.com/2026/06/new-linux-pedit-cow-exploit-enables.html

#kernel #linux

👉@sysadminoff

PEdit-CoW и DirtyClone - уязвимости в ядре Linux, позволяющие получить root через изменение страничного кэша

Раскрыта информация о двух новых уязвимостях в ядре Linux, позволяющих непривилегированному пользователю получить права root, перезаписав данные в страничном кэше. Для обеих уязвимостей подготовлены рабочие эксплоиты.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65784

📰 Experimental Code Enables Per-Monitor Backgrounds For GNOME Shell

One of the limitations of GNOME's current multi-monitor handling is that the same background is used across the displays. For those that want to enjoy per-monitor background selection, some experimental / proof-of-concept code is now working to allow such per-monitor backgrounds to work with the modern GNOME desktop...

🔗 Source:

#gnome

👉@sysadminoff

https://www.phoronix.com/news/PoC-Per-Background-GNOME

Anthropic’s fear-based marketing drives AI power concentration

The U.S. government has begun aggressively mandating staggered releases for frontier AI models, a move critics argue represents a "negative turning point" fueled by Anthropic’s fear-based marketing. This shift was cemented when OpenAI was forced to delay GPT-5.6, restricting its most capable "Sol" version to a government-preapproved list of elite partners rather than the general public. This regulatory capture is blamed on Anthropic CEO Dario Amodei, whose warnings about cybersecurity flaws and foreign "distillation attacks" successfully pressured the White House into implementing restrictive oversight.
Source

👉@sysadminoff

https://4sysops.com/archives/anthropics-fear-based-marketing-drives-ai-power-concentration/

📰 Linux Gets Dirty Again: DirtyClone Kernel Flaw Can Lead to Local Root Access

After DirtyFrag, DirtyClone exposes another Linux kernel flaw that may let local attackers gain root access on vulnerable systems.

🔗 Source:

#kernel #linux

👉@sysadminoff

https://linuxiac.com/linux-gets-dirty-again-dirtyclone-kernel-flaw-can-lead-to-local-root-access/

📰 New Intel Linux Driver Patches Enable HDR Over DP MST Connections

One of the limitations of the Intel Linux driver's high dynamic range (HDR) display support is that it currently doesn't work for any DisplayPort Multi-Stream Transport "DP MST" connections, such as for daisy chaining monitors or multi-monitor docking stations. But the good news is patches are being worked on to address this Intel Linux kernel display driver shortcoming...

🔗 Source:

#intel #kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/Intel-HDR-Over-DP-MST

📰 Meet Drawy, KDE’s Infinite Whiteboard App for Linux

KDE’s Drawy brings an Excalidraw-like infinite whiteboard to Linux desktops, built for quick sketches, diagrams, annotations, and visual notes.

🔗 Source:

#kde #linux

👉@sysadminoff

https://linuxiac.com/meet-drawy-kde-infinite-whiteboard-app-for-linux/

📰 How NVIDIA GB10 CPU Performance Compares To Vera

Since delivering NVIDIA Vera CPU benchmarks one month ago and follow-ups like how the ARM Linux server performance has evolved in 8 years or how Vera compares to Ampere Altra that is still quite common in the marketplace, another frequent discussion point and inquiry is about the performance of NVIDIA Vera relative to NVIDIA's GB10 chip.

🔗 Source:

#arm #linux

👉@sysadminoff

https://www.phoronix.com/review/nvidia-vera-gb10

📰 Raspberry Pi 4 with a slower processor now discounted

Global RAM shortages have spiked computer prices, even for cheap Raspberry Pi models. However, Cytron is now selling Raspberry Pi 4 Model B boards at a slight discount.

🔗https://liliputing.com/raspberry-pi-4-with-a-slower-processor-is-now-available-for-a-slight-discount/

#raspberry

👉@sysadminoff

📰 Immich finally delivers Google Photos' best feature with one open-source tool

I finally got Google Photos style memories on my Immich server using this open source tool.

🔗 Source:

#immich #opensource

👉@sysadminoff

https://www.xda-developers.com/immich-finally-delivers-google-photos-best-feature-with-one-open-source-tool/

Брешь в инфраструктуре Python, позволявшая подменить ссылки на релизы на сайте python.org

Организация Python Software Foundation раскрыла информацию о критической уязвимости в API для управления релизами и результатах аудита её возможного применения для атаки на инфраструктуру проекта Python. Уязвимость позволяла обойти систему аутентификации и подключиться к API управления релизами с правами администратора через отправку запроса с любым ключом и указании имени пользователя "admin".

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65786

Windows 11 beta build enhances smart card security for remote sessions

Microsoft has introduced a new Windows 11 Insider Beta build that focuses on strengthening security for enterprise remote environments. Administrators can now configure Azure Virtual Desktop and Windows 365 sessions to disconnect automatically when a redirected smart card is removed. This update specifically applies to sessions using Microsoft Entra ID authentication to help organizations maintain strict compliance standards.
Source

👉@sysadminoff

https://4sysops.com/archives/windows-11-beta-build-enhances-smart-card-security-for-remote-sessions/