Internet News Section
After six months of development, the open-source video player MPV 0.40 has been released, which branched from the code base of the MPlayer2 project in 2013. In MPV, the primary focus is on developing new features, without worrying about maintaining compatibility with MPlayer. The MPV code is distributed under the LGPLv2.1+ license, with some parts remaining under GPLv2, but the transition to LGPL is nearly complete and to disable […]
Four vulnerabilities have been identified in the Kubernetes ingress controller ingress-nginx, allowing attackers to execute their own code on the servers of cloud systems utilizing the Kubernetes platform, and gain full privileged access to the Kubernetes cluster. The issues have been assigned a critical severity level (9.8 out of 10). The researchers who discovered these flaws have assigned the vulnerabilities the code name IngressNightmare and noted that they affect approximately 43% of cloud environments. The vulnerabilities […]
Vladimir Serbinenko, one of the three maintainers of the GRUB2 bootloader, who has contributed more than five thousand changes to the codebase, has brought up for discussion the possibility of writing modules for GRUB2 using the Rust language. Vladimir presented the first results of experiments with adding Rust support into GRUB2 and creating the necessary bindings. Changes have also been prepared for GRUB to use shared libraries ('.so', ET_DYN) for […]
The release of the graphics editor GIMP 3.0.2 has been announced, addressing several issues identified shortly after the publication of the initial GIMP 3.0 release last week. Among other fixes, conflicts with some system themes that led to incorrect interface display have been resolved. The developers have also reverted the patch that improved support for graphics tablets, as it introduced problems […]
The Latin American Free Software Foundation has published a completely free version of the Linux kernel 6.14 — Linux-libre 6.14-gnu, cleaned of firmware elements and drivers containing non-free components or code areas restricted by manufacturers. In Linux-libre, features of the kernel for loading external non-free components not included in the kernel package have been disabled, and mentions of using non-free […]
Starting from March 11, the built-in antivirus package Windows Defender in Windows OS began blocking (quarantining) the free driver WinRing0. The driver is used to access various hardware from user space for which no other API is provided in the system. The WinRing0 driver is in demand in projects that manage hardware settings, both free (OpenRGB, Libre Hardware Monitor, FanControl), as well […]
The composite server Hyprland 0.48 is now available, utilizing the Wayland protocol. The project is oriented towards tiling window management but also supports traditional freeform window placement, tabbed window grouping, pseudo-tiling mode, and full-screen window expansion. It offers capabilities for creating visually appealing interfaces: gradients in window borders, background blur, animation effects, and shadows. Additional functionality can be added […]
After two months of development, Linus Torvalds has released the Linux kernel 6.14. Among the most notable changes are: the ntsync driver with Windows NT synchronization primitives, read operation balancing settings in Btrfs RAID1, reflink support in XFS in real-time mode, the possibility of uncached buffered I/O, a dmem cgroup for limiting GPU memory, the use of io_uring in FUSE, attribute delegation in NFS, support for […]
The release of the wayland-protocols 1.42 package has been published, containing a set of protocols and extensions that complement the basic Wayland protocol, providing functionalities necessary for building composite servers and user environments. In Wayland-Protocols 1.42, a new version of the "cursor-shape" protocol is proposed, expanding the capabilities for customizing the cursor's appearance, adding support for cursor shapes with information indicators (question mark) and resizing. […]
The release of the Live distribution Finnix 250 has been announced, coinciding with the 25th anniversary of the project (the first version of Finnix was released on March 22, 2000). The distribution is based on the Debian package base, supports only console operation, and provides a collection of utilities for system administrator needs. It includes over 600 packages with various utilities. The size of the ISO image is 528 MB. In the new version: The package […]
The Landrun project has started developing a new system for isolated execution of individual applications. For isolation, the Landlock LSM module of the Linux kernel is used, allowing the creation of a sandbox environment without performing privileged operations. In its tasks, Landrun is similar to the Firejail utility, but distinguishes itself with a simpler implementation, lightweight nature, and the ability to operate under a regular unprivileged user without being supplied with the suid flag. Code […]
A repeatable builds mode has been proposed for inclusion in the nixpkgs package repository used in the NixOS distribution, allowing the identification of cases where backdoors have been injected into the code, reminiscent of the incident with the XZ project. The presented protection method enables the detection of modifications in the release source code archives that are absent in the code repositories. The essence of the method is that the source code of the new version of the application is built twice […]