Author: Yuri Gagarin

Vulnerabilities in UEFI firmware based on the InsydeH2O framework allow code execution at the SMM level.

In the InsydeH2O framework, used by many manufacturers to create UEFI firmware for their hardware (the most common implementation of UEFI BIOS), 23 vulnerabilities have been discovered that allow code execution at the SMM (System Management Mode) level, which is more privileged (Ring -2) than hypervisor mode and the zero protection ring, and has unrestricted access to all memory. The issue affects UEFI firmware used by manufacturers such as Fujitsu, […]

The Alpha-Omega initiative aimed at enhancing the security of 10,000 open projects

The OpenSSF (Open Source Security Foundation) has launched the Alpha-Omega project aimed at enhancing open source software security. Initial investments of $5 million and staff to kickstart the initiative will be provided by Google and Microsoft. Other organizations are also invited to participate either by providing engineering personnel or through funding, which […]

Wayland accounts for less than 10% of Linux users of Firefox

According to statistics from the Firefox Telemetry service, which analyzes data from sent telemetry and user interactions with Mozilla's servers, the share of Firefox users on Linux operating in environments based on the Wayland protocol does not exceed 10%. 90% of Firefox users on Linux continue to use the X11 protocol. A pure Wayland environment is used by approximately 5-7% of Linux users, while XWayland is used by approximately […]

Postfix mail server 3.7.0 is now available.

After 10 months of development, the release of the new stable branch of the Postfix mail server — 3.7.0 has occurred. At the same time, support for the Postfix 3.3 branch, released in early 2018, has been discontinued. Postfix is one of the rare projects that combines high security, reliability, and performance, achieved through a well-thought-out architecture and a strict coding policy […]

Release of the OpenMandriva Lx 4.3 distribution

After a year of development, the release of the OpenMandriva Lx 4.3 distribution has been announced. The project is developed by the community after the Mandriva S.A. company handed over project management to the non-profit organization 'OpenMandriva Association.' A Live build of 2.5 GB (x86_64) is available for download, along with the 'znver1' build optimized for AMD Ryzen, ThreadRipper, and EPYC processors, as well as images for use on ARM devices like PinebookPro and Raspberry […]

Release of the Absolute Linux 15.0 distribution

The lightweight Absolute Linux 15.0 distribution, based on the Slackware 15 codebase, has been released. The graphical environment of the distribution is built on the IceWM window manager, the ROX Desktop, and the qtFM and arox (rox-filer) file managers. A custom configurator is used for setup. The distribution includes applications such as Firefox (with optional Chrome and Luakit), OpenOffice, Kodi, Pidgin, GIMP, WPClipart, […]

Release of the Linux distribution Zenwalk 15

After more than five years since the last significant release, the Zenwalk 15 distribution, compatible with the Slackware 15 package base and using a custom environment based on Xfce 4.16, has been released. For users, the distribution may be appealing due to its provision of more recent versions of software, user-friendliness, high performance, and a rational approach to application selection (one application for one task), […]

Release of SciPy 1.8.0, a library for scientific and engineering calculations

The release of the library for scientific, mathematical, and engineering calculations, SciPy 1.8.0, has occurred. SciPy provides a large collection of modules for tasks such as computing integrals, solving differential equations, image processing, statistical analysis, interpolation, applying Fourier transformations, finding function extrema, vector operations, analog signal processing, sparse matrix operations, and more. The project's code is distributed under the BSD license and utilizes […]

Release of the file manager GNOME Commander 1.14

The release of the dual-pane file manager GNOME Commander 1.14.0 has taken place, optimized for use in the GNOME desktop environment. GNOME Commander offers features such as tabs, command line access, bookmarks, customizable color schemes, directory skipping mode while selecting files, external data access via FTP and SAMBA, extensible context menus, automatic mounting of external drives, access to navigation history, […]

Kasper is available, a scanner for speculative execution code issues in the Linux kernel.

A group of researchers from the Free University of Amsterdam has published the Kasper toolkit, designed to identify snippets of code in the Linux kernel that can be used to exploit Spectre-class vulnerabilities caused by speculative code execution by the processor. The source texts of the toolkit are distributed under the Apache 2.0 license. It should be noted that conducting such attacks as Spectre v1, which allows determining the contents of memory, requires the presence of […]

Release of OS Qubes 4.1, which uses virtualization to isolate applications

After nearly four years of development, the release of Qubes OS 4.1 has taken place, implementing the idea of using a hypervisor for strict isolation of applications and OS components (each class of applications and system services runs in separate virtual machines). A system with 6 GB of RAM and a 64-bit Intel or AMD CPU with support for VT-x with EPT/AMD-v with RVI is required for operation […]

Cassowary — a framework for seamless operation with Windows applications on Linux

The Cassowary project is developing a toolkit that allows running Windows programs in a virtual machine or on another computer as if they were native standalone applications on the Linux desktop. Windows programs are launched through a shortcut in the Linux environment and open in separate windows, similar to standard Linux applications. The reverse scenario is also supported — Linux programs can be called from a Windows environment. […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster