After two years of development, the desktop environment Xfce 4.18 has been released, aimed at providing a classic desktop that requires minimal system resources to operate. Xfce consists of several interconnected components that can be used in other projects if desired. Among these components are: the window manager xfwm4, an application launcher panel, a display manager, a user session management system, and monitoring of […]
The Live distribution grml 2022.11, based on Debian GNU/Linux, has been released. The distribution positions itself as a tool for system administrators to recover data after failures. The standard version uses the Fluxbox window manager. Key changes in the new version: packages are synchronized with the Debian Testing repository; the live system has been moved to the /usr partition (the /bin, /sbin, and /lib* directories are symbolic links to their corresponding directories […]
A vulnerability has been identified in the Linux kernel (CVE-2022-42896), which could potentially be exploited to enable remote code execution at the kernel level by sending a specially crafted L2CAP packet via Bluetooth. Additionally, another similar issue (CVE-2022-42895) has been found in the L2CAP handler, which may lead to a leak of kernel memory content in configuration information packets. The first vulnerability has been manifested since August […]
The release of the Libreboot 20221214 free boot firmware has been announced. This project represents a fully free branch of the CoreBoot project, providing a binary-free replacement for proprietary UEFI and BIOS firmware responsible for initializing the CPU, memory, peripheral devices, and other hardware components. Libreboot aims to create a system environment that can function entirely without proprietary software, not only at the operating system level, […]
The release of QEMU 7.2 has been introduced. As an emulator, QEMU enables running a program compiled for one hardware platform on a system with a completely different architecture, for example, executing an ARM application on an x86-compatible PC. In virtualization mode, QEMU's code execution performance in an isolated environment is close to that of a physical system due to direct execution of instructions on the CPU and involvement of […]
labwc is a composite manager for Wayland with features similar to Openbox. It is compatible with Openbox themes. It is built on the wlroots library. Key innovations include: Support for virtual desktops added; Touch device support added (such as tablets and smartphones); Protocols implemented for using virtual keyboards and pointers; Added a mode to pin windows on top of others (ToggleAlwaysOnTop); Arrow rendering ensured […]
Google has introduced the OSV-Scanner toolkit for checking for unpatched vulnerabilities in code and applications, considering the entire chain of dependencies related to the code. OSV-Scanner allows identifying situations where an application becomes vulnerable due to issues in one of the libraries used as a dependency. Moreover, the vulnerable library may be used indirectly, i.e., invoked through another dependency. The project code […]
A compact HTTP server, hinsightd, has been released, notable for utilizing the asynchronous I/O interface io_uring provided in the Linux kernel. The server supports the HTTP/1.1 protocol and is designed for low resource consumption while providing essential functionality. For example, hinsightd supports TLS, reverse proxying (rproxy), caching of dynamically generated content in the local filesystem, on-the-fly data compression, seamless restarts without breaking established connections, and connection […]
Corrective releases of X.Org Server 21.1.5 and xwayland 22.1.6 have been published, which is the DDX component (Device-Dependent X) enabling the X.Org Server to run X11 applications in Wayland-based environments. The new versions fix 6 vulnerabilities that could potentially be exploited for privilege escalation in systems where the X server runs with root permissions, as well as for remote code execution in […]
The developers of the OpenBSD project have introduced a portable release of the LibreSSL 3.7.0 package, which is a fork of OpenSSL aimed at providing a higher level of security. The LibreSSL project focuses on quality support for SSL/TLS protocols by removing unnecessary functionality, adding additional protections, and significantly cleaning up and reworking the codebase. The LibreSSL 3.7.0 release is considered experimental, in which […]
The release of the Firefox 108 web browser has been announced. Additionally, an update for the long-term support branch—102.6.0—has been formed. The Firefox 109 branch is soon to enter beta testing, with its release scheduled for January 17. Key innovations in Firefox 108 include the addition of the keyboard shortcut Shift+ESC for quick access to the process manager page (about:processes), which allows evaluation of which processes and internal […]
After two months of development, the release of the distributed version control system Git 2.39 has been published. Git is one of the most popular, reliable, and high-performance version control systems, providing flexible tools for non-linear development based on branching and merging. To ensure the integrity of the history and resilience to 'backdating' changes, implicit hashing of all prior history is used in every commit, […]