Posted: 2026-11-06 23:14:57 Source: https://www.youtube.com/watch?v=aQEnUik_kik
Posted: 2026-11-06 20:00:00 Source: https://it.slashdot.org/story/26/11/06/1755247/openais-new-cyber-model-found-ways-to-attack-nearly-1000-linux-flaws?utm_source=atom1.0mainlinkanon&utm_medium=feed
OpenAI says its new GPT-6 Cyber model helped an automated system identify 1,724 security flaws in the Linux kernel and exploit 948 of them to gain administrator-level access during testing, including at least 10 previously unknown techniques. Axios reports: During testing, the system identified 1,724 security flaws and found ways to use 948 of them to gain administrator-level access to Linux systems for about $1.2 million in API credits. At least 10 of the techniques the model used were previously unknown, according to OpenAI. Human researchers reviewed the Linux findings before reporting vulnerabilities and proposed fixes to maintainers. The model also uncovered 81 previously unknown, high-severity flaws in Mozilla's Firefox browser.
Read more of this story at Slashdot.
Posted: 2026-11-06 18:19:19 Source: https://www.kernel.org/
| Version: | 7.3.3 (stable) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-7.3.3.tar.xz |
| PGP Signature: | linux-7.3.3.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-7.3.3 |
Posted: 2026-11-06 18:17:43 Source: https://www.kernel.org/
| Version: | 6.18.62 (longterm) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-6.18.62.tar.xz |
| PGP Signature: | linux-6.18.62.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-6.18.62 |
Posted: 2026-11-06 18:16:50 Source: https://www.kernel.org/
| Version: | 6.12.116 (longterm) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-6.12.116.tar.xz |
| PGP Signature: | linux-6.12.116.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-6.12.116 |
Posted: 2026-11-06 18:16:02 Source: https://www.kernel.org/
| Version: | 6.6.162 (longterm) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-6.6.162.tar.xz |
| PGP Signature: | linux-6.6.162.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-6.6.162 |
Posted: 2026-11-06 18:15:26 Source: https://www.kernel.org/
| Version: | 6.1.192 (longterm) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-6.1.192.tar.xz |
| PGP Signature: | linux-6.1.192.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-6.1.192 |
Posted: 2026-11-06 18:14:43 Source: https://www.kernel.org/
| Version: | 5.15.225 (longterm) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-5.15.225.tar.xz |
| PGP Signature: | linux-5.15.225.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-5.15.225 |
Posted: 2026-11-06 18:14:07 Source: https://www.kernel.org/
| Version: | 5.10.274 (longterm) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-5.10.274.tar.xz |
| PGP Signature: | linux-5.10.274.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-5.10.274 |
Posted: 2026-11-06 18:08:43 Source: https://distrowatch.com/13029
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. CapivaraOS, a Fedora-based Linux distribution with a choice of GNOME, KDE Plasma and Xfce desktop, has received a major update to version 2.0.0. Derived from Fedora 45, the new release promises continuous in-place upgrades and adds new custom applications: "Marsh, Pup and Snout 2.0.0 are available for download.....
Posted: 2026-11-06 17:12:22 Source: https://www.kernel.org/
| Version: | 7.3.2 (stable) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-7.3.2.tar.xz |
| PGP Signature: | linux-7.3.2.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-7.3.2 |
Posted: 2026-11-06 17:08:26 Source: https://www.kernel.org/
| Version: | 6.18.61 (longterm) |
|---|---|
| Released: | 2026-11-06 |
| Source: | linux-6.18.61.tar.xz |
| PGP Signature: | linux-6.18.61.tar.sign |
| Patch: | full (incremental) |
| ChangeLog: | ChangeLog-6.18.61 |
Posted: 2026-11-05 22:00:00 Source: https://it.slashdot.org/story/26/11/05/2140208/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts?utm_source=atom1.0mainlinkanon&utm_medium=feed
A newly disclosed OpenSSH flaw dubbed "*sshole" can allow attackers to log in to password-disabled accounts on certain musl-based Linux systems simply by submitting a password longer than 256 bytes. "Apparently certain varieties of musl Linux (Alpine, OpenWrt, Buildroot, Yocto, etc.) have had this OpenSSH vulnerability for about a decade," writes longtime Slashdot reader AlteredEgg. "Upgrade now!" BleepingComputer reports: Security researcher Ozgun Kultekin, who discovered and released details on the vulnerability today, says the flaw has existed since 2016 and stems from how OpenSSH handles password verification errors on systems using the musl C library. Linux accounts can be configured to prevent password logins by replacing their password hash with an asterisk (*) in the /etc/shadow file. Because this is not a valid password hash, no password should allow access to those accounts. However, a patch introduced in OpenSSH in 2016 to fix a username enumeration vulnerability tracked as CVE-2016-6210 changed how OpenSSH handled accounts without usable password hashes. To prevent attackers from identifying valid usernames through different response times, OpenSSH was modified to perform password hashing even when an account had no usable password hash, including accounts configured with * to block password logins. The problem is that the musl C library's crypt() function also returns * when password hashing fails, including when a submitted password exceeds its 256-byte limit. This means an attacker can submit an oversized password and cause OpenSSH to compare the returned * against the account's stored *, resulting in a successful login. To be clear, the flaw does not allow attackers to bypass passwords on accounts with valid password hashes. [...] Admins who can't immediately install the update can mitigate the issue by turning off SSH password authentication with PasswordAuthentication no in their SSH server configuration and restarting SSH. Kultekin says admins can also check for signs of exploitation by examining SSH authentication logs for password-based logins for accounts that should not allow them.
Read more of this story at Slashdot.
Posted: 2026-11-05 17:17:10 Source: http://www.linux-magazine.com/Online/News/Fedora-45-Now-Available
The latest iteration of Fedora has arrived with Gnome 51 and KDE Plasma 6.8.
Posted: 2026-11-05 14:30:07 Source: https://distrowatch.com/13028
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. David Heinemeier Hansson has announced the release of Omarchy 4.5.0, an updated build of the project's Arch-based Linux distribution with a customised Hyprland tiling compositor. This is the distribution's first release than can be installed on Apple's silicon range of processors. "Omarchy 4.5 is the first big feature....
Posted: 2026-11-05 14:21:49 Source: https://www.kernel.org/
| Version: | next-20261105 (linux-next) |
|---|---|
| Released: | 2026-11-05 |
Posted: 2026-11-05 12:34:37 Source: https://distrowatch.com/13027
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Artix development team has updated Artix Linux to stable version 20261102. Artix Linux is a set of Arch-based, systemd-free distributions with a choice of Cinnamon, KDE Plasma, LXDE, LXQt, MATE and Xfce desktops. The KDE Plasma variant wasn't originally deemed ready for the release, but it has....
Posted: 2026-11-05 03:38:15 Source: https://distrowatch.com/13026
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Sarp Mateson Foundation has announced the release of NebiOS 10.3, the latest stable version of the project's Ubuntu-based desktop Linux distribution featuring a custom-built NebiOS Wayland compositor (based on Wayfire): "NebiOS X 10.3 anniversary update is out as a stable release. The desktop has been reworked from....
Posted: 2026-11-04 21:16:37 Source: https://distrowatch.com/13025
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Stephan Raabe has released ML4W OS 2.17, an updated build of the project's Arch-based Linux distribution featuring a customised Hyprland tiling window manager: "Version 2.17: add wallpaper carousel as a modern alternative to the wallpaper selector, open it with SUPER + W or with the new button to....
Posted: 2026-11-04 16:12:32 Source: https://distrowatch.com/13024
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Joshua Webb has announced the release of a major new version of RakuOS, a Fedora-based immutable Linux distribution with a choice of COSMIC, GNOME and KDE Plasma desktops, as well as Hyprland and niri Wayland compositors. This version updates the underlying Fedora system to version 45: "RakuOS 45....