1434 уязвимости в продуктах Oracle, 82 из которых затрагивают Java, MySQL, VirtualBox и Solaris

Компания Oracle опубликовала плановый выпуск обновлений своих продуктов (Critical Patch Update), нацеленный на устранение критических проблем и уязвимостей. Отмечается, что июльское обновление стало крупнейшим в истории по числу уязвимостей — устранено 1449 проблем с безопасностью, затрагивающих 334 продукта Oracle. Всплеск числа уязвимостей объясняется разбором проблем, выявленных благодаря применению AI-инструментов.
( читать дальше... )



 mysql, opennet, oracle, искусственный интеллект, уязвимость

👉@sysadminoff

https://www.linux.org.ru/news/security/18346330

📰 Home Assistant quietly rewrote its Matter server from Python to TypeScript — here's what changed

The biggest Matter upgrade in years doesn't add a single feature.

🔗 Source:

#python

👉@sysadminoff

https://www.xda-developers.com/home-assistant-quietly-rewrote-its-matter-server-from-python-to-typescript-heres-what-changed/

📰 I back up my phone to a NAS with Immich and Syncthing, and it's replaced Google Cloud entirely

I back up files from almost every device I own to my NAS, but none of those backups are as important as the one from my phone. It has years of photos, videos, downloads, and files that are backed up to Google Cloud. However, I want to move away from it eventually and back this up to my NAS with a secondary cheap cloud backup.

🔗 Source:

#immich

👉@sysadminoff

https://www.xda-developers.com/phone-most-important-device-backs-up-nas-everyday/

📰 Linux Kernel 7.1.4 Released with Bug Fixes, Security Updates, and Hardware Improvements

by George WhittakerGreg Kroah-Hartman has announced the release of Linux Kernel 7.1.4, the latest stable maintenance update for the Linux 7.1 series. As with other stable kernel releases, version 7.1.4 focuses on fixing bugs, improving hardware compatibility, and addressing security and reliability issues without introducing new features. The update became available on July 18, 2026, and users of the Linux 7.

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.linuxjournal.com/content/linux-kernel-714-released-bug-fixes-security-updates-and-hardware-improvements

📰 Qualcomm QCE Driver On The Chopping Block With ~48x Slower Than Armv8 Crypto Extensions

A few days back I wrote about upstream Linux kernel developers marking the Qualcomm crypto accelerator driver as "broken" and "harmful" due to its slow performance, history of bugs, and other limitations. Now this Qualcomm Crypto Engine "QCE" driver might be removed outright from the Linux kernel source tree after discovering it's even worse than anticipated...

🔗 Source:

#kernel #linux

👉@sysadminoff

https://www.phoronix.com/news/Qualcomm-QCE-48x-Slower

📰 Debian Considering General Resolution Over LLM Usage In The Project

Debian developers are discussing a general resolution whether to permit AI large language model (LLM) usage within the Debian software project...

🔗 Source:

#debian

👉@sysadminoff

https://www.phoronix.com/news/Debian-GR-LLM-Usage

📰 GE-Proton 11-3 brings better OptiScaler integration, AMD FSR4 improvements and lots of game fixes

GE-Proton 11-3 (and 11-2 just before) is a huge release for the popular compatibility layer for SteamOS / Linux.Read the full article on GamingOnLinux.

🔗 Source:

#amd #linux #proton

👉@sysadminoff

https://www.gamingonlinux.com/2026/07/ge-proton-11-3-brings-better-optiscaler-integration-amd-fsr4-improvements-and-lots-of-game-fixes/

AWS EC2 adds short-term GPU reservations as AI workloads reshape compute

Amazon EC2 Capacity Blocks for machine learning are now generally available in the US East (Ohio) Region, allowing customers to reserve NVIDIA GPU clusters for short, defined periods. The option targets training and inference jobs that need predictable capacity but do not justify a permanent GPU commitment, an important distinction while demand continues to exceed supply. AWS plans to extend Capacity Blocks to additional Regions and Local Zones as AI workloads become more burst-oriented.
Source

👉@sysadminoff

https://4sysops.com/archives/aws-ec2-adds-short-term-gpu-reservations-as-ai-workloads-reshape-compute/

AI Kill Switch Act would let DHS throttle or shut down rogue models

US lawmakers have introduced the bipartisan AI Kill Switch Act, requiring developers of the most powerful AI systems to retain a technical means of slowing, suspending, or shutting down their models. The proposal would cover systems built with more than $100 million in computing power and companies generating at least $500 million in annual AI revenue. Instead of relying on a single emergency off button, developers would need controls to limit requests, restrict users, reduce computing resources, disable functions, or move services to a backup or earlier model.
Source

👉@sysadminoff

https://4sysops.com/archives/ai-kill-switch-act-would-let-dhs-throttle-or-shut-down-rogue-models/

Microsoft 365 profile cards will expose 11 more fields by default

Microsoft will change Microsoft 365 profile cards beginning in late August 2026, making 11 additional fields visible by default when they contain data. A Microsoft 365 profile card is the small info panel that appears when you hover over or click a person’s name or avatar in apps like Outlook, Teams, and other Microsoft 365 services, showing key details about that user. The fields include Division, Role, Employee number, Employee type, Cost center, UPN, Alias, Fax, Street address, State, and Postal code. Administrators who do not want some of this information exposed should review their settings before August 24, 2026.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-365-profile-cards-will-expose-11-more-fields-by-default/

Microsoft Entra sets passkey deadline as July updates add tenant recovery

Microsoft Entra administrators now have a fixed migration clock: passkeys become the default authentication method on September 1, 2026, while Microsoft-provided SMS and voice authentication are retired on February 1, 2027. Users relying on those weaker MFA methods will receive registration prompts, with passkey enrollment eventually required before sign-in can continue. Microsoft also introduced Entra Conditional Access for Agents and Entra ID Protection for Agents service plans, so organizations using AI-agent security features should verify their Microsoft 365 Agent or E7 licensing.
Source

👉@sysadminoff

https://4sysops.com/archives/microsoft-entra-sets-passkey-deadline-as-july-updates-add-tenant-recovery/

Chrome for Arm64 Linux is now available to download

You can now install an official Google Chrome build on Arm64 Linux devices, including the Raspberry Pi. Back in March, Google promised Chrome for Arm64 Linux in “Q2 2026” allowing users on devices like the Raspberry Pi or the growing-fleet of Snapdragon laptops to use their flagship browser and all of its additional extras. It hasn’t said a whole lot about the effort since, but it appears that Arm64 builds of Chrome were recently added to the browser’s official Linux repos for Debian and RPM-based Linux distributions – thanks Steven H. Loading the official Chrome download page on my Raspberry Pi 5 (running […]
You're reading Chrome for Arm64 Linux is now available to download, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

👉@sysadminoff

https://www.omgubuntu.co.uk/2026/07/chrome-arm64-linux-available

📰 GNU C Library 2.44 Released With /etc/tunables.conf, More Optimizations

GNU developers today released GNU C Library "glibc" 2.44 as the newest feature release for this critical library to modern Linux systems and other platforms...

🔗 Source:

#gnu #linux

👉@sysadminoff

https://www.phoronix.com/news/GNU-C-Library-glibc-2.44

📰 Meet Shadowfetch Linux, a New Debian-Based Distro Built Around Local AI

Shadowfetch Linux combines Debian Testing, KDE Plasma 6.6, creative software, privacy-focused defaults, and tools for running AI models locally.

🔗 Source:

#debian #distro #kde #linux #plasma

👉@sysadminoff

https://linuxiac.com/meet-shadowfetch-linux-a-new-debian-based-distro-built-around-local-ai/

📰 Kiwi Menu Continues Bringing macOS Vibes To GNOME

Kiwi Menu as the macOS-inspired quick menu option for the GNOME Shell desktop is continuing to enhance its macOS-esque experience on GNOME...

🔗 Source:

#gnome

👉@sysadminoff

https://www.phoronix.com/news/Kiwi-Menu-macOS-Vibes

📰 KDE Plasma became the best Linux desktop, but it's terrifying for new users

Follow the white rabbit, wait I mean Plasma themes.

🔗 Source:

#kde #linux #plasma

👉@sysadminoff

https://www.xda-developers.com/kde-plasma-became-the-best-linux-desktop-but-its-terrifying-for-new-users/

📰 Fedora Working To Establish Conflict of Interest Policy

Posted this week is a draft copy of the Fedora Conflict of Interest policy being worked on for dealing with identifying, disclosing, and managing any actual, actual, or perceived conflicts of interest within the Fedora Project...

🔗 Source:

#fedora

👉@sysadminoff

https://www.phoronix.com/news/Fedora-Conflict-Interest-Draft

📰 I ditched expensive Raspberry Pi models for a $15 Zero 2W, and it still handles most of my self-hosted projects

Running resource-intensive tools like NextCloud on a Raspberry Pi Zero 2W is not feasible, but essential self-hosted tools can work without problems.

🔗 Source:

#raspberry

👉@sysadminoff

https://www.xda-developers.com/cheapest-raspberry-pi-still-runs-most-of-my-projects/

📰 Auto-cpufreq 3.1 Adds GUI Monitoring and Bluetooth Controls

The Linux power management tool expands its graphical interface with monitoring mode, Bluetooth controls, and improved Lenovo laptop support.

🔗 Source:

#linux

👉@sysadminoff

https://linuxiac.com/auto-cpufreq-3-1-adds-gui-monitoring-and-bluetooth-controls/

📰 Realtek RTL8723B/RTL8723BS Trying To Be Tacked On To The RTW88 Linux Driver

Since 2017 in Linux 4.12 has been the Realtek rtl8723bs WiFi driver where it was introduced into the staging area and remains there nearly a decade later. The rtl8723bs driver for this Realtek 802.11n WiFi SDIO driver has seen a lot of code cleaning over the years and all these years later still is needing lots of code clean-ups from unnecessary code abstractions to dealing with malicious WiFi APs for what Greg Kroah-Hartman has called a "beast...

🔗 Source:

#linux

👉@sysadminoff

https://www.phoronix.com/news/Realtek-RTL8723B-RTW88-Patches