Author: Yuri Gagarin

The first release of libcamera, a stack for camera support in Linux.

After four years of development, the first release of the libcamera project (0.0.1) has been formed, offering a software stack for working with video cameras, still cameras, and TV tuners on Linux, Android, and ChromeOS, which continues the evolution of the V4L2 API and will eventually replace it. As the library's API is still evolving and has not yet stabilized, the project has so far developed without branching into separate releases.

Release of Tails 5.5 Distribution

A specialized distribution release of Tails 5.5 (The Amnesic Incognito Live System) has been formed, based on the Debian package base and designed for anonymous browsing. Anonymous access in Tails is provided by the Tor system. All connections, except traffic over the Tor network, are blocked by the packet filter by default. User data is encrypted for preservation between runs.

Vulnerability in LibKSBA leading to code execution when processing S/MIME in GnuPG.

A critical vulnerability (CVE-2022-3515) has been identified in the LibKSBA library, developed by the GnuPG project, which provides functions for working with X.509 certificates. This vulnerability leads to integer overflow and arbitrary data writing beyond the allocated buffer when parsing ASN.1 structures used in S/MIME, X.509, and CMS. The issue is exacerbated by the fact that the Libksba library is used in the GnuPG package, and the vulnerability could lead to severe consequences.

Rhino Linux has been introduced, a continuously updated distribution based on Ubuntu.

The developers of the Rolling Rhino Remix build have announced the transformation of the project into a separate distribution, Rhino Linux. The reason for creating the new product is a reassessment of the goals and development model of the project, which has outgrown its amateur development state and has gone beyond simple rebuilding of Ubuntu. The new distribution will still be built based on Ubuntu but will include additional utilities and be developed by a dedicated team.

Update of the Void Linux installation builds.

New bootable builds of the Void Linux distribution have been formed. Void Linux is an independent project that does not use the developments of other distributions and is developed using a continuous version update cycle (rolling updates, without separate releases of the distribution). The previous builds were published a year ago. In addition to the availability of up-to-date bootable images based on a more recent system snapshot, the update does not bring any functional changes to the builds and their […]

Google has opened the source code of the secure operating system KataOS.

Google has announced the release of work related to the KataOS project, aimed at creating a secure operating system for embedded hardware. The system components of KataOS are written in Rust and run on top of the seL4 microkernel, for which a mathematical proof of reliability has been provided on RISC-V systems, demonstrating full compliance of the code with the specifications defined in formal language. The project's code is open under the […]

Wine 7.19 Release

An experimental release of the open implementation of WinAPI — Wine 7.19 has taken place. Since the release of version 7.18, 17 bug reports have been closed and 270 changes have been made. The most important changes include: the ability to save DOS file attributes to disk. The vkd3d package with Direct3D 12 implementation, working through call translation to the Vulkan graphic API, has been updated to version 1.5. Support for the format […]

An attack on NPM that allows the discovery of packages in private repositories

A vulnerability has been identified in NPM that allows for the detection of packages in private repositories. The issue is caused by the different response times when querying an existing package versus a non-existent one by an external user without access to the repository. For any packages in private repositories without access, the server registry.npmjs.org returns a '404' error, but in the case of an existing package with the requested name, an error is returned […]

The Genode project has released the general-purpose OS Sculpt 22.10

The Sculpt 22.10 operating system release has been introduced, which is based on the Genode OS Framework technologies and is being developed as a general-purpose operating system that can be used by regular users for everyday tasks. The project's source code is distributed under the AGPLv3 license. A LiveUSB image of 28 MB is available for download. It supports operation on systems with Intel processors and graphics subsystems […]

Vulnerabilities in the Linux kernel's wireless stack that allow for remote code execution

A series of vulnerabilities has been identified in the wireless stack (mac80211) of the Linux kernel, some of which could potentially lead to buffer overflows and remote code execution through the transmission of specially crafted packets by the access point. A patch is currently the only fix available. Examples of frames causing the overflow have been published to demonstrate the potential for an attack, along with a utility to inject these frames into the wireless stack […]

Release of PostgreSQL DBMS 15

After a year of development, a new stable branch of the PostgreSQL database management system 15 has been released. Updates for the new branch will be released over the next five years until November 2027. Key innovations include: support for the SQL command 'MERGE', which resembles the 'INSERT … ON CONFLICT' expression. MERGE allows for the creation of conditional SQL expressions that combine INSERT, UPDATE, and DELETE operations in a single statement. For example, using MERGE, one can […]

The code for a machine learning system that generates realistic human movements has been made available

A group of researchers from Tel Aviv University has released the source texts associated with the MDM (Motion Diffusion Model) machine learning system, which allows for the generation of realistic human movements. The code is written in Python using the PyTorch framework and is distributed under the MIT license. For conducting experiments, both pre-trained models and the option to train models independently using the provided scripts are available, for example, […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster