Internet News Section
iXsystems has released the TrueNAS SCALE 22.12 distribution, which uses the Linux kernel and the Debian package base (previous products from this company, including TrueOS, PC-BSD, TrueNAS, and FreeNAS, were based on FreeBSD). Like TrueNAS CORE (FreeNAS), TrueNAS SCALE can be downloaded and used for free. The size of the ISO image is 1.6 GB. Source texts specific to TrueNAS SCALE […]
The seventh edition of the starter sets has been released, small live builds with various graphical environments, on the Tenth platform of ALT. Builds based on the stable repository are intended for experienced users. The starter sets allow users to quickly and conveniently get acquainted with the new desktop environment and window manager (DE/WM). It is also possible to deploy the next system with minimal time spent on installation and configuration […]
After two years of development, the desktop environment Xfce 4.18 has been released, aimed at providing a classic desktop that requires minimal system resources to operate. Xfce consists of several interconnected components that can be used in other projects if desired. Among these components are: the window manager xfwm4, an application launcher panel, a display manager, a user session management system, and monitoring of […]
The Live distribution grml 2022.11, based on Debian GNU/Linux, has been released. The distribution positions itself as a tool for system administrators to recover data after failures. The standard version uses the Fluxbox window manager. Key changes in the new version: packages are synchronized with the Debian Testing repository; the live system has been moved to the /usr partition (the /bin, /sbin, and /lib* directories are symbolic links to their corresponding directories […]
A vulnerability has been identified in the Linux kernel (CVE-2022-42896), which could potentially be exploited to enable remote code execution at the kernel level by sending a specially crafted L2CAP packet via Bluetooth. Additionally, another similar issue (CVE-2022-42895) has been found in the L2CAP handler, which may lead to a leak of kernel memory content in configuration information packets. The first vulnerability has been manifested since August […]
The release of the Libreboot 20221214 free boot firmware has been announced. This project represents a fully free branch of the CoreBoot project, providing a binary-free replacement for proprietary UEFI and BIOS firmware responsible for initializing the CPU, memory, peripheral devices, and other hardware components. Libreboot aims to create a system environment that can function entirely without proprietary software, not only at the operating system level, […]
labwc is a composite manager for Wayland with features similar to Openbox. It is compatible with Openbox themes. It is built on the wlroots library. Key innovations include: Support for virtual desktops added; Touch device support added (such as tablets and smartphones); Protocols implemented for using virtual keyboards and pointers; Added a mode to pin windows on top of others (ToggleAlwaysOnTop); Arrow rendering ensured […]
The release of QEMU 7.2 has been introduced. As an emulator, QEMU enables running a program compiled for one hardware platform on a system with a completely different architecture, for example, executing an ARM application on an x86-compatible PC. In virtualization mode, QEMU's code execution performance in an isolated environment is close to that of a physical system due to direct execution of instructions on the CPU and involvement of […]
Google has introduced the OSV-Scanner toolkit for checking for unpatched vulnerabilities in code and applications, considering the entire chain of dependencies related to the code. OSV-Scanner allows identifying situations where an application becomes vulnerable due to issues in one of the libraries used as a dependency. Moreover, the vulnerable library may be used indirectly, i.e., invoked through another dependency. The project code […]
A compact HTTP server, hinsightd, has been released, notable for utilizing the asynchronous I/O interface io_uring provided in the Linux kernel. The server supports the HTTP/1.1 protocol and is designed for low resource consumption while providing essential functionality. For example, hinsightd supports TLS, reverse proxying (rproxy), caching of dynamically generated content in the local filesystem, on-the-fly data compression, seamless restarts without breaking established connections, and connection […]
Corrective releases of X.Org Server 21.1.5 and xwayland 22.1.6 have been published, which is the DDX component (Device-Dependent X) enabling the X.Org Server to run X11 applications in Wayland-based environments. The new versions fix 6 vulnerabilities that could potentially be exploited for privilege escalation in systems where the X server runs with root permissions, as well as for remote code execution in […]
The developers of the OpenBSD project have introduced a portable release of the LibreSSL 3.7.0 package, which is a fork of OpenSSL aimed at providing a higher level of security. The LibreSSL project focuses on quality support for SSL/TLS protocols by removing unnecessary functionality, adding additional protections, and significantly cleaning up and reworking the codebase. The LibreSSL 3.7.0 release is considered experimental, in which […]