Первый тестовый выпуск композитного сервера Xfwl4 от проекта Xfce
После 6 месяцев разработки представлен первый предварительный выпуск композитного сервера Xfwl4, использующего протокол Wayland. Xfwl4 написан на языке Rust с использованием библиотеки Smithay. В качестве причины создания нового композитного сервера упоминается неудачная попытка реализации одновременной поддержки X11 и Wayland в существующей кодовой базе оконного менеджера xfwm4, который изначально был спроектирован с учётом тесной интеграции протокола X11, что затруднило отделение общей логики управления окнами от специфики X11.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=65742
После 6 месяцев разработки представлен первый предварительный выпуск композитного сервера Xfwl4, использующего протокол Wayland. Xfwl4 написан на языке Rust с использованием библиотеки Smithay. В качестве причины создания нового композитного сервера упоминается неудачная попытка реализации одновременной поддержки X11 и Wayland в существующей кодовой базе оконного менеджера xfwm4, который изначально был спроектирован с учётом тесной интеграции протокола X11, что затруднило отделение общей логики управления окнами от специфики X11.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=65742
Decades-old Squidbleed vulnerability leaks sensitive user data via FTP parser
A critical heap buffer overread vulnerability, dubbed Squidbleed, has been discovered in the widely used Squid web proxy. This flaw, tracked as CVE-2026-47729, has existed in the software's FTP directory-listing parser since 1997. The vulnerability allows a trusted client to leak internal memory from the proxy, potentially exposing cleartext HTTP requests, passwords, and API keys.
Source
👉@sysadminoff
https://4sysops.com/archives/decades-old-squidbleed-vulnerability-leaks-sensitive-user-data-via-ftp-parser/
A critical heap buffer overread vulnerability, dubbed Squidbleed, has been discovered in the widely used Squid web proxy. This flaw, tracked as CVE-2026-47729, has existed in the software's FTP directory-listing parser since 1997. The vulnerability allows a trusted client to leak internal memory from the proxy, potentially exposing cleartext HTTP requests, passwords, and API keys.
Source
👉@sysadminoff
https://4sysops.com/archives/decades-old-squidbleed-vulnerability-leaks-sensitive-user-data-via-ftp-parser/
Homebrew 6.0 enhances supply chain security with tap trust and Linux sandboxing
Homebrew 6.0 introduces a significant security overhaul designed to mitigate supply chain attacks by implementing a new "tap trust" mechanism. The package manager now blocks third-party repositories, known as taps, unless they are on a pre-approved list or have been manually vetted by the user. This change prevents the silent execution of potentially malicious Ruby installation scripts from untrusted sources during the software setup process.
Source
👉@sysadminoff
https://4sysops.com/archives/homebrew-6-0-enhances-supply-chain-security-with-tap-trust-and-linux-sandboxing/
Homebrew 6.0 introduces a significant security overhaul designed to mitigate supply chain attacks by implementing a new "tap trust" mechanism. The package manager now blocks third-party repositories, known as taps, unless they are on a pre-approved list or have been manually vetted by the user. This change prevents the silent execution of potentially malicious Ruby installation scripts from untrusted sources during the software setup process.
Source
👉@sysadminoff
https://4sysops.com/archives/homebrew-6-0-enhances-supply-chain-security-with-tap-trust-and-linux-sandboxing/
Control AirPods & Galaxy Buds on Ubuntu with ‘BudsLink’
BudsLink is a Linux app giving you more control over Bluetooth earbuds from the likes of Apple, Sony, Samsung and Nothing – battery levels, active noise cancellation (ANC) and more, all without needing to use a mobile app. Most Bluetooth audio devices ‘just work’ on Ubuntu and other Linux distributions for listening to audio, but that’s about it. Pair AirPods or Galaxy Buds with your desktop and you’ll find you can’t adjust all of the on-device features you paid for. BudsLink is a GTK4/libadwaita app which can. It lets you control earbud features on your Linux desktop, no need to […]
You're reading Control AirPods & Galaxy Buds on Ubuntu with ‘BudsLink’, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/06/budslink-airpods-galaxy-buds-linux
BudsLink is a Linux app giving you more control over Bluetooth earbuds from the likes of Apple, Sony, Samsung and Nothing – battery levels, active noise cancellation (ANC) and more, all without needing to use a mobile app. Most Bluetooth audio devices ‘just work’ on Ubuntu and other Linux distributions for listening to audio, but that’s about it. Pair AirPods or Galaxy Buds with your desktop and you’ll find you can’t adjust all of the on-device features you paid for. BudsLink is a GTK4/libadwaita app which can. It lets you control earbud features on your Linux desktop, no need to […]
You're reading Control AirPods & Galaxy Buds on Ubuntu with ‘BudsLink’, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/06/budslink-airpods-galaxy-buds-linux
📰 Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow attackers to stealthily read artificial intelligence (AI) conversions from other customers' applications without requiring authentication.The vulnerabilities have been collectively codenamed DifyTap by Zafran Security.
🔗 Source: https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html
#opensource
👉@sysadminoff
Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow attackers to stealthily read artificial intelligence (AI) conversions from other customers' applications without requiring authentication.The vulnerabilities have been collectively codenamed DifyTap by Zafran Security.
🔗 Source: https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html
#opensource
👉@sysadminoff
📰 Steam Machines Is Up for Reservation from $1,049 with Arch Linux-Based SteamOS 3
Valve officially launched the Steam Machines today as an all-in-one Arch Linux-based gaming machine and desktop computer powered by SteamOS.
🔗 Source: https://9to5linux.com/steam-machines-is-up-for-reservation-from-1049-with-arch-linux-based-steamos-3
#arch #linux #linuxbased #steam
👉@sysadminoff
Valve officially launched the Steam Machines today as an all-in-one Arch Linux-based gaming machine and desktop computer powered by SteamOS.
🔗 Source: https://9to5linux.com/steam-machines-is-up-for-reservation-from-1049-with-arch-linux-based-steamos-3
#arch #linux #linuxbased #steam
👉@sysadminoff
📰 Control AirPods & Galaxy Buds on Ubuntu with ‘BudsLink’
BudsLink is a Linux app giving you more control over Bluetooth earbuds from the likes of Apple, Sony, Samsung and Nothing – battery levels, active noise cancellation (ANC) and more, all without needing to use a mobile app. Most Bluetooth audio devices ‘just work’ on Ubuntu and other Linux distributions for listening to audio, but that’s about it.
🔗 Source:
#linux #ubuntu
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/06/budslink-airpods-galaxy-buds-linux
BudsLink is a Linux app giving you more control over Bluetooth earbuds from the likes of Apple, Sony, Samsung and Nothing – battery levels, active noise cancellation (ANC) and more, all without needing to use a mobile app. Most Bluetooth audio devices ‘just work’ on Ubuntu and other Linux distributions for listening to audio, but that’s about it.
🔗 Source:
#linux #ubuntu
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/06/budslink-airpods-galaxy-buds-linux
OMG! Ubuntu
Control AirPods & Galaxy Buds on Ubuntu with ‘BudsLink’
BudsLink is a Linux app giving you more control over Bluetooth earbuds from the likes of Apple, Sony, Samsung and Nothing – battery levels, active noise
📰 Valve’s Steam Machine Gives Linux Gaming a New Living-Room Push
Valve’s new Steam Machine runs SteamOS, bringing Linux-powered PC gaming back to the living room in a compact console-like form.
🔗 Source:
#linux #steam
👉@sysadminoff
https://linuxiac.com/valve-steam-machine-gives-linux-gaming-a-new-living-room-push/
Valve’s new Steam Machine runs SteamOS, bringing Linux-powered PC gaming back to the living room in a compact console-like form.
🔗 Source:
#linux #steam
👉@sysadminoff
https://linuxiac.com/valve-steam-machine-gives-linux-gaming-a-new-living-room-push/
Linuxiac
Valve’s Steam Machine Gives Linux Gaming a New Living-Room Push
Valve’s new Steam Machine runs SteamOS, bringing Linux-powered PC gaming back to the living room in a compact console-like form.
Download and install Windows 11 26H2 ISO
Windows 11 version 26H2 is the next annual feature update for the operating system, expected to roll out in fall 2026. Microsoft confirmed that this release uses an enablement package (eKB), a small update that flips the version number without replacing the entire operating system. The update shares the same platform code as versions 24H2 and 25H2, meaning installation is fast and requires only a single reboot. This article covers the new features, the support lifecycle, and how to download and install Windows 11 26H2 ISO.
Source
👉@sysadminoff
https://4sysops.com/archives/download-and-install-windows-11-26h2-iso/
Windows 11 version 26H2 is the next annual feature update for the operating system, expected to roll out in fall 2026. Microsoft confirmed that this release uses an enablement package (eKB), a small update that flips the version number without replacing the entire operating system. The update shares the same platform code as versions 24H2 and 25H2, meaning installation is fast and requires only a single reboot. This article covers the new features, the support lifecycle, and how to download and install Windows 11 26H2 ISO.
Source
👉@sysadminoff
https://4sysops.com/archives/download-and-install-windows-11-26h2-iso/
📰 OBS Studio 32.2 Promises New Filter to Compose SDR into HDR, Beta Out Now
OBS Studio 32.2 enters public beta testing with a new filter to compose SDR into HDR, dynamic bitrate support for multitrack video, Ubuntu 26.04 LTS support, and more.
🔗 Source: https://9to5linux.com/obs-studio-32-2-promises-new-filter-to-compose-sdr-into-hdr-beta-out-now
#ubuntu
👉@sysadminoff
OBS Studio 32.2 enters public beta testing with a new filter to compose SDR into HDR, dynamic bitrate support for multitrack video, Ubuntu 26.04 LTS support, and more.
🔗 Source: https://9to5linux.com/obs-studio-32-2-promises-new-filter-to-compose-sdr-into-hdr-beta-out-now
#ubuntu
👉@sysadminoff
Focus blur, nightlight added to Miracle-wm desktop
A new version of miracle-wm, the Wayland compositor built on Mir with an i3/Sway style tiling window manager, has been released. Developer Matthew Kosarek, an engineer at Canonical who develops the keyboard-driven UX in his free time, says the new v0.10.0 release delivers more improvements to the plugin system introduced in the April 2026 release, said to be “getting better and better everyday”. Plugins can now be used to set a blur effect on individual unfocused windows using a two-pass separable Gaussian blur shader. This helps set a visible cue that might help you focus more. A new nightlight plugin uses […]
You're reading Focus blur, nightlight added to Miracle-wm desktop, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/06/miracle-wm-focus-blue-nightlight
A new version of miracle-wm, the Wayland compositor built on Mir with an i3/Sway style tiling window manager, has been released. Developer Matthew Kosarek, an engineer at Canonical who develops the keyboard-driven UX in his free time, says the new v0.10.0 release delivers more improvements to the plugin system introduced in the April 2026 release, said to be “getting better and better everyday”. Plugins can now be used to set a blur effect on individual unfocused windows using a two-pass separable Gaussian blur shader. This helps set a visible cue that might help you focus more. A new nightlight plugin uses […]
You're reading Focus blur, nightlight added to Miracle-wm desktop, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.
👉@sysadminoff
https://www.omgubuntu.co.uk/2026/06/miracle-wm-focus-blue-nightlight
Подготовлен Flatpak-пакет с графическим редактором GIMP 0.54, выпущенным в 1996 году
Для желающих оценить в работе ранние версии графического редактора GIMP подготовлен пакет в формате Flatpak с выпуском GIMP 0.54.1, опубликованным 30 лет назад. Пакет пригоден для запуска в современных 64-разрядных дистрибутивах, использующих Wayland (GIMP запускается через xwayland). GIMP 0.54.1 был последним выпуском, построенным с использованием библиотеки Motif. В последующих выпусках код был переписан с использованием собственного тулкита GTK. Версия GIMP 0.54 также примечательна тем, что именно в ней Ларри Юинг (Larry Ewing) нарисовал пингвина Tux, ставшего талисманом Linux.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=65744
Для желающих оценить в работе ранние версии графического редактора GIMP подготовлен пакет в формате Flatpak с выпуском GIMP 0.54.1, опубликованным 30 лет назад. Пакет пригоден для запуска в современных 64-разрядных дистрибутивах, использующих Wayland (GIMP запускается через xwayland). GIMP 0.54.1 был последним выпуском, построенным с использованием библиотеки Motif. В последующих выпусках код был переписан с использованием собственного тулкита GTK. Версия GIMP 0.54 также примечательна тем, что именно в ней Ларри Юинг (Larry Ewing) нарисовал пингвина Tux, ставшего талисманом Linux.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=65744
ZXC 0.12.0
18 июня, после более месяца разработки, состоялся выпуск 0.12.0 библиотеки и кроссплатформенной консольной утилиты ZXC (github.com), реализующих высокопроизводительное многопоточное асимметричное сжатие без потерь и оптимизированное для игровых ресурсов, прошивок и пакетов приложений. Формат разработан по принципу «один раз записать, многократно читать» (WORM).
В отличие от таких кодеков, как LZ4, ZXC жертвует скоростью сжатия ради максимальной пропускной способности при распаковке.
Декларируется скорость распаковки на 10-47% выше, чем у LZ4 с уровнем компрессии по умолчанию, с равным или более высоким коэффициентом сжатия.
Главное изменение этого выпуска – возможность сжатия с использованием предварительно обученного словаря на основе репрезентативных образцов, что значительно уменьшает размер архивов с небольшими блоками или большим количеством маленьких файлов.
Версия формата контейнера обновлена до v6, а версия библиотеки SOVERSION увеличена с 3 до 4.
Проект написан на языке C и распространяется по лицензии BSD 3.
( читать дальше... )
c, zxc, компрессия, консоль, утилита
👉@sysadminoff
https://www.linux.org.ru/news/opensource/18325783
18 июня, после более месяца разработки, состоялся выпуск 0.12.0 библиотеки и кроссплатформенной консольной утилиты ZXC (github.com), реализующих высокопроизводительное многопоточное асимметричное сжатие без потерь и оптимизированное для игровых ресурсов, прошивок и пакетов приложений. Формат разработан по принципу «один раз записать, многократно читать» (WORM).
В отличие от таких кодеков, как LZ4, ZXC жертвует скоростью сжатия ради максимальной пропускной способности при распаковке.
Декларируется скорость распаковки на 10-47% выше, чем у LZ4 с уровнем компрессии по умолчанию, с равным или более высоким коэффициентом сжатия.
Главное изменение этого выпуска – возможность сжатия с использованием предварительно обученного словаря на основе репрезентативных образцов, что значительно уменьшает размер архивов с небольшими блоками или большим количеством маленьких файлов.
Версия формата контейнера обновлена до v6, а версия библиотеки SOVERSION увеличена с 3 до 4.
Проект написан на языке C и распространяется по лицензии BSD 3.
( читать дальше... )
c, zxc, компрессия, консоль, утилита
👉@sysadminoff
https://www.linux.org.ru/news/opensource/18325783
📰 USB4STREAM Merged For Linux 7.2 To Quickly Send Data Between USB4 Connected Systems
As part of today's USB/Thunderbolt subsystem updates for the ongoing Linux 7.2 kernel merge window, USB4STREAM was merged as a nifty and exciting addition to opening up some interesting USB4 connnectivity use-cases for high speed, low latency data transfers...
🔗 Source:
#kernel #linux
👉@sysadminoff
https://www.phoronix.com/news/USB4STREAM-In-Linux-7.2
As part of today's USB/Thunderbolt subsystem updates for the ongoing Linux 7.2 kernel merge window, USB4STREAM was merged as a nifty and exciting addition to opening up some interesting USB4 connnectivity use-cases for high speed, low latency data transfers...
🔗 Source:
#kernel #linux
👉@sysadminoff
https://www.phoronix.com/news/USB4STREAM-In-Linux-7.2
Phoronix
USB4STREAM Merged For Linux 7.2 To Quickly Send Data Between USB4 Connected Systems
As part of today's USB/Thunderbolt subsystem updates for the ongoing Linux 7.2 kernel merge window, USB4STREAM was merged as a nifty and exciting addition to opening up some interesting USB4 connnectivity use-cases for high speed, low latency data transfers.
📰 FFmpeg fixes PixelSmash flaw in widely used video decoder
A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under certain conditions, and can also trigger a denial-of-service condition in applications like Kodi, Emby, Nextcloud, PhotoPrism, and OBS Studio.
🔗 Source:
#ffmpeg
👉@sysadminoff
https://www.bleepingcomputer.com/news/security/ffmpeg-fixes-pixelsmash-flaw-in-widely-used-video-decoder/
A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under certain conditions, and can also trigger a denial-of-service condition in applications like Kodi, Emby, Nextcloud, PhotoPrism, and OBS Studio.
🔗 Source:
#ffmpeg
👉@sysadminoff
https://www.bleepingcomputer.com/news/security/ffmpeg-fixes-pixelsmash-flaw-in-widely-used-video-decoder/
BleepingComputer
FFmpeg fixes PixelSmash flaw in widely used video decoder
A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under certain conditions, and can also trigger a denial-of-service condition in applications like Kodi, Emby, Nextcloud, PhotoPrism, and OBS…
Компания Valve выпустила игровую приставку Steam Machine на базе Linux
Компания Valve объявила о начале приёма заказов на игровую приставку Steam Machine, поставляемую с Linux-дистрибутивом SteamOS. Первая партия по предзаказам будет отправлена 29 июня. Подготовлены четыре комплектации: Steam Machine 512GB ($1049), Steam Machine 512GB + Steam Controller ($1128), Steam Machine 2TB ($1349) и Steam Machine 2TB + Steam Controller ($1428).
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=65745
Компания Valve объявила о начале приёма заказов на игровую приставку Steam Machine, поставляемую с Linux-дистрибутивом SteamOS. Первая партия по предзаказам будет отправлена 29 июня. Подготовлены четыре комплектации: Steam Machine 512GB ($1049), Steam Machine 512GB + Steam Controller ($1128), Steam Machine 2TB ($1349) и Steam Machine 2TB + Steam Controller ($1428).
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=65745
📰 Home Assistant OS 18.0 Released with Linux Kernel 6.18 LTS
The new Home Assistant OS release adds faster disk image flashing, VM image improvements, and updated Linux kernel support.
🔗 Source:
#kernel #linux
👉@sysadminoff
https://linuxiac.com/home-assistant-os-18-0-released-with-linux-kernel-6-18-lts/
The new Home Assistant OS release adds faster disk image flashing, VM image improvements, and updated Linux kernel support.
🔗 Source:
#kernel #linux
👉@sysadminoff
https://linuxiac.com/home-assistant-os-18-0-released-with-linux-kernel-6-18-lts/
Linuxiac
Home Assistant OS 18.0 Released with Linux Kernel 6.18 LTS
The new Home Assistant OS release adds faster disk image flashing, VM image improvements, and updated Linux kernel support.
📰 A $15 Raspberry Pi Zero 2W does Pi-hole better than any spare PC you have lying around
Every time I had to reboot my mini PC to update a Docker container, a VM, or just to apply patches, my entire home network went down with it. My family often noticed that before I did. My mini PC wasn’t struggling with the Pi-hole's load, but there was a simpler, yet just as problematic issue.
🔗 Source:
#raspberry
👉@sysadminoff
https://www.xda-developers.com/raspberry-pi-zero-2w-does-pi-hole-better-than-any-spare-pc/
Every time I had to reboot my mini PC to update a Docker container, a VM, or just to apply patches, my entire home network went down with it. My family often noticed that before I did. My mini PC wasn’t struggling with the Pi-hole's load, but there was a simpler, yet just as problematic issue.
🔗 Source:
#raspberry
👉@sysadminoff
https://www.xda-developers.com/raspberry-pi-zero-2w-does-pi-hole-better-than-any-spare-pc/
XDA
A $15 Raspberry Pi Zero 2W does Pi-hole better than any spare PC you have lying around
Not every service belongs on your home server
Canonical предоставит для систем ARM64 обновления ядра, не требующие перезагрузки
Компания Canonical объявила о расширении сервиса Livepatch на системы с Ubuntu 26.04 LTS и Ubuntu Core 26, использующие процессоры на базе архитектуры ARM64. Ранее Live-патчи распространялись только для архитектуры x86_64, так как в ядре Linux для архитектуры ARM64 отсутствовала поддержка надёжных трассировок стека (CONFIG_HAVE_RELIABLE_STACKTRACE) для выявления активности, связанной с обработкой прерываний, а в инструментарии objtool и kpatch отсутствовали полноценные возможности для оценки состояния до и после применения патча. На реализацию проекта и переработку инфраструктуры для использования live-патчей на системах ARM64 было потрачено три года.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=65746
Компания Canonical объявила о расширении сервиса Livepatch на системы с Ubuntu 26.04 LTS и Ubuntu Core 26, использующие процессоры на базе архитектуры ARM64. Ранее Live-патчи распространялись только для архитектуры x86_64, так как в ядре Linux для архитектуры ARM64 отсутствовала поддержка надёжных трассировок стека (CONFIG_HAVE_RELIABLE_STACKTRACE) для выявления активности, связанной с обработкой прерываний, а в инструментарии objtool и kpatch отсутствовали полноценные возможности для оценки состояния до и после применения патча. На реализацию проекта и переработку инфраструктуры для использования live-патчей на системах ARM64 было потрачено три года.
👉@sysadminoff
https://www.opennet.ru/opennews/art.shtml?num=65746
Dell PowerEdge XE8812 debuts with Nvidia Vera Rubin architecture for AI scale
Dell Technologies has introduced the PowerEdge XE8812 server, a high-density system designed to anchor large-scale artificial intelligence and high-performance computing environments. This fanless, liquid-cooled server utilizes the Nvidia Vera Rubin NVL4 architecture to support up to 144 GPUs within a single rack. The platform is a core component of the Dell AI Factory, an integrated solution that combines servers, storage, and networking for enterprise deployments.
Source
👉@sysadminoff
https://4sysops.com/archives/dell-poweredge-xe8812-debuts-with-nvidia-vera-rubin-architecture-for-ai-scale/
Dell Technologies has introduced the PowerEdge XE8812 server, a high-density system designed to anchor large-scale artificial intelligence and high-performance computing environments. This fanless, liquid-cooled server utilizes the Nvidia Vera Rubin NVL4 architecture to support up to 144 GPUs within a single rack. The platform is a core component of the Dell AI Factory, an integrated solution that combines servers, storage, and networking for enterprise deployments.
Source
👉@sysadminoff
https://4sysops.com/archives/dell-poweredge-xe8812-debuts-with-nvidia-vera-rubin-architecture-for-ai-scale/