Author: Yuri Gagarin

Malicious packages discovered in the Ubuntu Snap Store

Canonical has announced a temporary suspension of the automatic publishing package verification system in the Snap Store due to the appearance of packages with malicious code intended to steal cryptocurrency from users. It is unclear whether the incident is limited to the publication of malicious packages by third-party authors or whether there are security issues directly with the repository, as the situation in the official announcement is characterized by […]

Release of SBCL 2.3.9, implementation of the Common Lisp language

The release of SBCL 2.3.9 (Steel Bank Common Lisp), a free implementation of the Common Lisp programming language, has been published. The project's code is written in Common Lisp and C, and is distributed under the BSD license. In this new release: Stack allocation via DYNAMIC-EXTENT now applies not only to the initial binding but also to all values that a variable can take (for example, via SETQ). This […]

Release of the energy consumption and performance optimizer auto-cpufreq 2.0

After four years of development, the release of the auto-cpufreq 2.0 utility has been announced, designed for automatic optimization of CPU speed and power consumption in the system. The utility monitors the laptop's battery state, CPU load, CPU temperatures, and activity in the system, and dynamically activates power-saving or high-performance modes based on the situation and selected options. For example, auto-cpufreq can be used to automatically […]

Vulnerabilities in the Linux kernel, Glibc, GStreamer, Ghostscript, BIND, and CUPS

Several recently identified vulnerabilities: CVE-2023-39191 — a vulnerability in the eBPF subsystem that allows a local user to escalate their privileges and execute code at the Linux kernel level. This vulnerability is caused by improper verification of eBPF programs submitted by a user for execution. To exploit this, the user must be able to load their BPF program (if the kernel.unprivileged_bpf_disabled parameter is set to 0, for example, as in Ubuntu 20.04). […]

Release of Linux Mint Debian Edition 6

A year and a half after the last release, an alternative build of the Linux Mint distribution — Linux Mint Debian Edition 6, based on the Debian package base (the classic Linux Mint is based on the Ubuntu package base) — has been released. The distribution is available as installation iso images with the Cinnamon 5.8 desktop environment. LMDE is aimed at technically savvy users and provides newer versions […]

GPU Attack.zip, allowing the recreation of data rendered by the GPU

A group of researchers from several universities in the USA has developed a new side-channel attack technique that allows the recreation of visual information processed by the GPU. Using the proposed method, known as GPU.zip, an attacker can determine the information displayed on the screen. Among other things, the attack can be conducted via a web browser; for example, it has been demonstrated how a malicious webpage opened in Chrome can obtain information about […]

Three critical vulnerabilities in Exim allow for remote code execution on the server.

The Zero Day Initiative (ZDI) has revealed details about unpatched (0-day) vulnerabilities (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) in the Exim mail server, allowing for remote code execution on a server with the privileges of the process accepting connections on network port 25. No authentication is required for the attack. The first vulnerability (CVE-2023-42115) is caused by an error in the SMTP service and is related to the lack of proper data checks, […]

Release of CrossOver 23.5 for Linux, Chrome OS, and macOS

CodeWeavers has released version 23.5 of the Crossover package, based on Wine code, designed for running applications and games written for the Windows platform. CodeWeavers is one of the key contributors to the Wine project, sponsoring its development and reinvesting innovations made for its commercial products back into the project. The source code of the open components of Crossover 23.0 can be downloaded from this page. […]

Release of the RetroArch 1.16 game console emulator

The release of RetroArch 1.16 has been published, enhancing the framework for emulating various gaming consoles, allowing classic games to be run through a simple unified graphical interface. Emulators for consoles such as Atari 2600/7800/Jaguar/Lynx, Game Boy, Mega Drive, NES, Nintendo 64/DS, PCEngine, PSP, Sega 32X/CD, SuperNES, etc. are supported. Gamepads from existing gaming consoles, including Playstation 3, can be used, […]

The project management system Trac 1.6 is available

After four years of development, a new stable release of the project management system Trac 1.6 has been presented (the 1.5 branch was experimental), providing a web interface for working with Subversion and Git repositories, a built-in Wiki, a bug tracking system, and a feature planning section for new versions. The code is written in Python and is distributed under the BSD license. SQLite and other databases can be used for data storage, […]

The P2P platform GNUnet 0.20 has been released

The release of the GNUnet framework 0.20 has been announced, intended for building secure decentralized P2P networks. Networks created with GNUnet do not have a single point of failure and can guarantee users' privacy, including protecting against potential abuses by intelligence services and administrators with access to network nodes. GNUnet supports the creation of P2P networks over TCP, UDP, HTTP/HTTPS, Bluetooth, and WLAN, […]

ANARI 1.0 has been introduced, an open standard for 3D rendering engines

The Khronos Group, which is focused on developing graphics standards, has published the ANARI 1.0 (Analytic Rendering Interface) standard, which defines an API for cross-platform rendering engines aimed at unifying software interfaces for data visualization. Rendering engine implementations that support the ANARI standard have already been prepared by companies such as AMD (RadeonProRenderANARI), Intel (anari-ospray), and NVIDIA (VisRTX). An open SDK for application development has also been released, along with a plugin that supports […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster