The release of SBCL 2.3.9 (Steel Bank Common Lisp), a free implementation of the Common Lisp programming language, has been published. The project's code is written in Common Lisp and C, and is distributed under the BSD license. In this new release: Stack allocation via DYNAMIC-EXTENT now applies not only to the initial binding but also to all values that a variable can take (for example, via SETQ). This […]
After four years of development, the release of the auto-cpufreq 2.0 utility has been announced, designed for automatic optimization of CPU speed and power consumption in the system. The utility monitors the laptop's battery state, CPU load, CPU temperatures, and activity in the system, and dynamically activates power-saving or high-performance modes based on the situation and selected options. For example, auto-cpufreq can be used to automatically […]
Several recently identified vulnerabilities: CVE-2023-39191 — a vulnerability in the eBPF subsystem that allows a local user to escalate their privileges and execute code at the Linux kernel level. This vulnerability is caused by improper verification of eBPF programs submitted by a user for execution. To exploit this, the user must be able to load their BPF program (if the kernel.unprivileged_bpf_disabled parameter is set to 0, for example, as in Ubuntu 20.04). […]
A year and a half after the last release, an alternative build of the Linux Mint distribution — Linux Mint Debian Edition 6, based on the Debian package base (the classic Linux Mint is based on the Ubuntu package base) — has been released. The distribution is available as installation iso images with the Cinnamon 5.8 desktop environment. LMDE is aimed at technically savvy users and provides newer versions […]
A group of researchers from several universities in the USA has developed a new side-channel attack technique that allows the recreation of visual information processed by the GPU. Using the proposed method, known as GPU.zip, an attacker can determine the information displayed on the screen. Among other things, the attack can be conducted via a web browser; for example, it has been demonstrated how a malicious webpage opened in Chrome can obtain information about […]
The Zero Day Initiative (ZDI) has revealed details about unpatched (0-day) vulnerabilities (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) in the Exim mail server, allowing for remote code execution on a server with the privileges of the process accepting connections on network port 25. No authentication is required for the attack. The first vulnerability (CVE-2023-42115) is caused by an error in the SMTP service and is related to the lack of proper data checks, […]
CodeWeavers has released version 23.5 of the Crossover package, based on Wine code, designed for running applications and games written for the Windows platform. CodeWeavers is one of the key contributors to the Wine project, sponsoring its development and reinvesting innovations made for its commercial products back into the project. The source code of the open components of Crossover 23.0 can be downloaded from this page. […]
The release of RetroArch 1.16 has been published, enhancing the framework for emulating various gaming consoles, allowing classic games to be run through a simple unified graphical interface. Emulators for consoles such as Atari 2600/7800/Jaguar/Lynx, Game Boy, Mega Drive, NES, Nintendo 64/DS, PCEngine, PSP, Sega 32X/CD, SuperNES, etc. are supported. Gamepads from existing gaming consoles, including Playstation 3, can be used, […]
After four years of development, a new stable release of the project management system Trac 1.6 has been presented (the 1.5 branch was experimental), providing a web interface for working with Subversion and Git repositories, a built-in Wiki, a bug tracking system, and a feature planning section for new versions. The code is written in Python and is distributed under the BSD license. SQLite and other databases can be used for data storage, […]
The release of the GNUnet framework 0.20 has been announced, intended for building secure decentralized P2P networks. Networks created with GNUnet do not have a single point of failure and can guarantee users' privacy, including protecting against potential abuses by intelligence services and administrators with access to network nodes. GNUnet supports the creation of P2P networks over TCP, UDP, HTTP/HTTPS, Bluetooth, and WLAN, […]
The Khronos Group, which is focused on developing graphics standards, has published the ANARI 1.0 (Analytic Rendering Interface) standard, which defines an API for cross-platform rendering engines aimed at unifying software interfaces for data visualization. Rendering engine implementations that support the ANARI standard have already been prepared by companies such as AMD (RadeonProRenderANARI), Intel (anari-ospray), and NVIDIA (VisRTX). An open SDK for application development has also been released, along with a plugin that supports […]
The Let’s Encrypt non-profit certificate authority, controlled by the community and providing certificates free of charge to anyone who wishes, is celebrating its tenth anniversary. The service generates around three million new certificates daily. The number of active certificates stands at 277 million (each certificate is valid for three months). These certificates cover approximately 111 million registered domains and 350 million fully qualified domain names (FQDN). According to Firefox Telemetry statistics, worldwide […]