Internet News Section
A new version of the Util-linux system utility package 2.39 has been released, which includes utilities closely related to the Linux kernel as well as general-purpose utilities. For instance, the package features utilities such as mount/umount, fdisk, hwclock, cal, blkid, fsck/cfdisk/sfdisk, blockdev, chrt, mkfs, ionice, more, renice, su, kill, setsid, login, shutdown, dmesg, lscpu, logger, losetup, setterm, mkswap, swapon, taskset, and so on. In […]
The Institute of System Programming of the Russian Academy of Sciences (ISP RAS) has formed a consortium aimed at organizing collaboration among Russian companies, educational institutions, and research organizations in the field of Linux kernel security research and addressing identified vulnerabilities. The consortium is established on the basis of the Technology Center for Security Research of operating systems built on the Linux kernel, created in 2021. It is expected that the formation of the consortium will allow […]
After eight months of development, a stable release of the composite server Weston 12.0 has been published, advancing technologies that facilitate the full support of the Wayland protocol in Enlightenment, GNOME, KDE, and other desktop environments. The development of Weston aims to provide a high-quality codebase and working examples for using Wayland in desktop environments and embedded solutions, such as platforms for automotive infotainment systems, smartphones, televisions […]
Four vulnerabilities have been identified in Cisco Small Business series switches, allowing a remote attacker to gain full access to the device with root privileges without authentication. To exploit these issues, the attacker must be able to send requests to the network port that hosts the web interface. These vulnerabilities have been assigned a critical severity level (9.8 out of 10). A working exploit prototype is reported to exist. Identified vulnerabilities (CVE-2023-20159, […]
The release of web browser Pale Moon 32.2 has been published, branching from the Firefox codebase to ensure higher performance, maintain the classic interface, minimize memory usage, and provide additional customization options. Pale Moon builds are available for Windows and Linux (x86_64). The project's code is distributed under the MPLv2 license (Mozilla Public License). The project adheres to a classic interface organization, without transitioning to […]
The gaming platform Lutris 0.5.13 has been released, providing tools to simplify the installation, setup, and management of games on Linux. The project's code is written in Python and is distributed under the GPLv3 license. The project supports a catalog for quick search and installation of gaming applications, allowing games to be launched with a single click on Linux through a unified interface, without worrying about dependency installations and settings. […]
Details have been disclosed about an unpatched (0-day) vulnerability (CVE-2023-2156) in the Linux kernel that allows a system to crash by sending specially crafted IPv6 packets (packet-of-death). This issue only manifests when RPL (Routing Protocol for Low-Power and Lossy Networks) protocol support is enabled, which is disabled by default in distributions, primarily used on embedded devices operating in wireless networks with high […]
A release of the specialized distribution Tails 5.13 (The Amnesic Incognito Live System), based on the Debian package base and intended for anonymous internet access, has been created. Anonymous access in Tails is ensured by the Tor system. All connections, except for traffic through the Tor network, are blocked by the packet filter by default. For storing user data in persistence mode between sessions, encryption is used. […]
The release of the Rocky Linux 9.2 distribution, aimed at creating a free version of RHEL capable of replacing classic CentOS, has been announced. The distribution is fully binary compatible with Red Hat Enterprise Linux and can be used as a substitute for RHEL 9.2 and CentOS 9 Stream. Support for the Rocky Linux 9 branch will continue until May 31, 2032. Installation ISO images of Rocky Linux have been prepared […]
Researchers from the University of Birmingham, previously known for developing the Plundervolt and VoltPillager attacks, have identified a vulnerability (CVE-2022-43309) in certain server motherboards that allows physical disabling of the CPU without the possibility of subsequent recovery. The vulnerability, codenamed PMFault, can be exploited to damage servers to which the attacker does not have physical access but does have privileged access to the operating […]
The first test release of the implementation of the PXP programming language, which extends PHP with support for new syntax constructs and enhanced capabilities of the runtime library, has been published. Code written in PXP is translated into standard PHP scripts executed using the standard PHP interpreter. Since PXP only complements PHP, it is compatible with all existing PHP code. Notably, PXP expands PHP's type system for better representation […]
The Sourceware free projects hosting has joined the Software Freedom Conservancy (SFC), which provides legal protection for free projects, advocates for compliance with the GPL license, and collects sponsorship funds. SFC allows participants to focus on the development process by taking on donation collection tasks. SFC also becomes the owner of project assets, relieving developers of personal liability in the case of legal disputes. […]