📰 Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITYSYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet.XBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and.

🔗 Source: https://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html

#linux

👉@sysadminoff

📰 Firefox’s new tab page adds AI-powered daily crossword widget

More widgets are coming to Firefox’s New Tab page, including an interactive crossword puzzle powered by the AI news reader Particle. The mini crossword game is updated daily, with puzzles based around recent content Particle‘s AI has ingested and summarised that day, and links to articles you can read to help deduce crossword answers. You click on a square to activate the row or column (clicking on it again switches between “Across” and “Down”).

🔗 Source:

#firefox

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/07/firefox-new-widgets-crossword

Выпуск среды запуска WASM-4-игр W4ME Station и прошивки WiPhone Lab для кнопочных телефонов

Доступен первый публичный выпуск W4ME Station, среды выполнения для запуска неизменённых игровых картриджей WASM-4 на устройствах с поддержкой CLDC 1.1 и MIDP 2.0, таких как кнопочные телефоны середины 2000-х годов. Код написан на языке Java, сохраняет совместимость с Java 1.3 и распространяется под лицензией MIT. В поставку включены 13 игр и демонстрационных картриджей, среди которых Sokoban, Wasm Wars, Watris, Glowfish Chess, Duck Maze, Rubido, Untangle и Plasma Cube. Сформированы две сборки - полная (275 КБ) с поддержкой просмотра файлов через JSR-75 и базовая сборка для устройств без API FileConnection. Разработка ведётся с применением AI-инструментов.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65980

📰 Imagination PowerVR Driver Marking BXM-4-64 MC1 GPU As Supported In Linux 7.3

Sent out today was the weekly round of drm-misc-next patches of new Direct Rendering Manager feature material ready to be queued in DRM-Next ahead of the Linux 7.3 merge window...

🔗 Source:

#linux

👉@sysadminoff

https://www.phoronix.com/news/Imagination-BXM-4-64-Linux-7.3

Представлены Buz и Cruller, форки JavaScript-платформы Bun, продолжающие развитие на языке Zig

После объявления о переводе JavaScript-платформы Bun на язык Rust при помощи AI и задействования новой реализации в кодовой базе, на основе которой формируется ветка Bun 1.4, несколько энтузиастов объявили о создании форков платформы, продолжающих развитие с использованием языка Zig. Проект Buz подхватил разработку кодовой базы на Zig с последнего коммита перед переходом на Rust.

👉@sysadminoff

https://www.opennet.ru/opennews/art.shtml?num=65981

glibc 2.44

25 июля 2026 года состоялся выпуск GNU C Library 2.44 — новой стабильной версии основной системной библиотеки большинства дистрибутивов GNU/Linux. Glibc предоставляет приложениям стандартные функции для работы с памятью, файлами, процессами, потоками, сетью и системными вызовами. Выпуск продолжает шестимесячный цикл разработки и ориентирован на стандарты ISO C23 и POSIX.1-2024.
Одним из главных новшеств стал файл /etc/tunables.conf, через который администраторы смогут задавать параметры glibc сразу для всей системы. После изменения файла необходимо выполнить ldconfig. Ранее подобные настройки обычно передавались через переменную окружения GLIBC_TUNABLES. Разработчики предупреждают, что формат и расположение нового файла пока не считаются стабильным интерфейсом и в будущих версиях могут измениться.
Основные изменения glibc 2.44:
( читать дальше... )



 glibc

👉@sysadminoff

https://www.linux.org.ru/news/gnu/18346106

1434 уязвимости в продуктах Oracle, 82 из которых затрагивают Java, MySQL, VirtualBox и Solaris

Компания Oracle опубликовала плановый выпуск обновлений своих продуктов (Critical Patch Update), нацеленный на устранение критических проблем и уязвимостей. Отмечается, что июльское обновление стало крупнейшим в истории по числу уязвимостей — устранено 1449 проблем с безопасностью, затрагивающих 334 продукта Oracle. Всплеск числа уязвимостей объясняется разбором проблем, выявленных благодаря применению AI-инструментов.
( читать дальше... )



 mysql, opennet, oracle, искусственный интеллект, уязвимость

👉@sysadminoff

https://www.linux.org.ru/news/security/18346330

📰 Home Assistant quietly rewrote its Matter server from Python to TypeScript — here's what changed

The biggest Matter upgrade in years doesn't add a single feature.

🔗 Source:

#python

👉@sysadminoff

https://www.xda-developers.com/home-assistant-quietly-rewrote-its-matter-server-from-python-to-typescript-heres-what-changed/

📰 I back up my phone to a NAS with Immich and Syncthing, and it's replaced Google Cloud entirely

I back up files from almost every device I own to my NAS, but none of those backups are as important as the one from my phone. It has years of photos, videos, downloads, and files that are backed up to Google Cloud. However, I want to move away from it eventually and back this up to my NAS with a secondary cheap cloud backup.

🔗 Source:

#immich

👉@sysadminoff

https://www.xda-developers.com/phone-most-important-device-backs-up-nas-everyday/

📰 Linux Kernel 7.1.4 Released with Bug Fixes, Security Updates, and Hardware Improvements

by George WhittakerGreg Kroah-Hartman has announced the release of Linux Kernel 7.1.4, the latest stable maintenance update for the Linux 7.1 series. As with other stable kernel releases, version 7.1.4 focuses on fixing bugs, improving hardware compatibility, and addressing security and reliability issues without introducing new features. The update became available on July 18, 2026, and users of the Linux 7.

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.linuxjournal.com/content/linux-kernel-714-released-bug-fixes-security-updates-and-hardware-improvements

📰 Qualcomm QCE Driver On The Chopping Block With ~48x Slower Than Armv8 Crypto Extensions

A few days back I wrote about upstream Linux kernel developers marking the Qualcomm crypto accelerator driver as "broken" and "harmful" due to its slow performance, history of bugs, and other limitations. Now this Qualcomm Crypto Engine "QCE" driver might be removed outright from the Linux kernel source tree after discovering it's even worse than anticipated...

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/Qualcomm-QCE-48x-Slower

📰 Debian Considering General Resolution Over LLM Usage In The Project

Debian developers are discussing a general resolution whether to permit AI large language model (LLM) usage within the Debian software project...

🔗 Source:

#debian

👉@sysadminoff

https://www.phoronix.com/news/Debian-GR-LLM-Usage

📰 GE-Proton 11-3 brings better OptiScaler integration, AMD FSR4 improvements and lots of game fixes

GE-Proton 11-3 (and 11-2 just before) is a huge release for the popular compatibility layer for SteamOS / Linux.Read the full article on GamingOnLinux.

🔗 Source:

#amd #linux #proton

👉@sysadminoff

https://www.gamingonlinux.com/2026/07/ge-proton-11-3-brings-better-optiscaler-integration-amd-fsr4-improvements-and-lots-of-game-fixes/

AWS EC2 adds short-term GPU reservations as AI workloads reshape compute

Amazon EC2 Capacity Blocks for machine learning are now generally available in the US East (Ohio) Region, allowing customers to reserve NVIDIA GPU clusters for short, defined periods. The option targets training and inference jobs that need predictable capacity but do not justify a permanent GPU commitment, an important distinction while demand continues to exceed supply. AWS plans to extend Capacity Blocks to additional Regions and Local Zones as AI workloads become more burst-oriented.
Source

👉@sysadminoff

https://4sysops.com/archives/aws-ec2-adds-short-term-gpu-reservations-as-ai-workloads-reshape-compute/

AI Kill Switch Act would let DHS throttle or shut down rogue models

US lawmakers have introduced the bipartisan AI Kill Switch Act, requiring developers of the most powerful AI systems to retain a technical means of slowing, suspending, or shutting down their models. The proposal would cover systems built with more than $100 million in computing power and companies generating at least $500 million in annual AI revenue. Instead of relying on a single emergency off button, developers would need controls to limit requests, restrict users, reduce computing resources, disable functions, or move services to a backup or earlier model.
Source

👉@sysadminoff

https://4sysops.com/archives/ai-kill-switch-act-would-let-dhs-throttle-or-shut-down-rogue-models/

Microsoft 365 profile cards will expose 11 more fields by default

Microsoft will change Microsoft 365 profile cards beginning in late August 2026, making 11 additional fields visible by default when they contain data. A Microsoft 365 profile card is the small info panel that appears when you hover over or click a person’s name or avatar in apps like Outlook, Teams, and other Microsoft 365 services, showing key details about that user. The fields include Division, Role, Employee number, Employee type, Cost center, UPN, Alias, Fax, Street address, State, and Postal code. Administrators who do not want some of this information exposed should review their settings before August 24, 2026.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-365-profile-cards-will-expose-11-more-fields-by-default/

Microsoft Entra sets passkey deadline as July updates add tenant recovery

Microsoft Entra administrators now have a fixed migration clock: passkeys become the default authentication method on September 1, 2026, while Microsoft-provided SMS and voice authentication are retired on February 1, 2027. Users relying on those weaker MFA methods will receive registration prompts, with passkey enrollment eventually required before sign-in can continue. Microsoft also introduced Entra Conditional Access for Agents and Entra ID Protection for Agents service plans, so organizations using AI-agent security features should verify their Microsoft 365 Agent or E7 licensing.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-entra-sets-passkey-deadline-as-july-updates-add-tenant-recovery/

Chrome for Arm64 Linux is now available to download

You can now install an official Google Chrome build on Arm64 Linux devices, including the Raspberry Pi. Back in March, Google promised Chrome for Arm64 Linux in “Q2 2026” allowing users on devices like the Raspberry Pi or the growing-fleet of Snapdragon laptops to use their flagship browser and all of its additional extras. It hasn’t said a whole lot about the effort since, but it appears that Arm64 builds of Chrome were recently added to the browser’s official Linux repos for Debian and RPM-based Linux distributions – thanks Steven H. Loading the official Chrome download page on my Raspberry Pi 5 (running […]
You're reading Chrome for Arm64 Linux is now available to download, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/07/chrome-arm64-linux-available

📰 GNU C Library 2.44 Released With /etc/tunables.conf, More Optimizations

GNU developers today released GNU C Library "glibc" 2.44 as the newest feature release for this critical library to modern Linux systems and other platforms...

🔗 Source:

#gnu #linux

👉@sysadminoff

https://www.phoronix.com/news/GNU-C-Library-glibc-2.44

📰 Meet Shadowfetch Linux, a New Debian-Based Distro Built Around Local AI

Shadowfetch Linux combines Debian Testing, KDE Plasma 6.6, creative software, privacy-focused defaults, and tools for running AI models locally.

🔗 Source:

#debian #distro #kde #linux #plasma

👉@sysadminoff

https://linuxiac.com/meet-shadowfetch-linux-a-new-debian-based-distro-built-around-local-ai/