Internet News Section
Developers of the LastPass password manager, used by over 33 million people and more than 100,000 companies, have notified users about an incident in which attackers gained access to backup storage containing data from the service's users. The data included information such as usernames, addresses, emails, phone numbers, and IP addresses from which users accessed the service, as well as saved […]
The release of the nftables packet filter version 1.0.6 has been announced, which unifies packet filtering interfaces for IPv4, IPv6, ARP, and network bridges (aimed at replacing iptables, ip6tables, arptables, and ebtables). The nftables package includes user-space components of the packet filter, while the kernel-level processing is handled by the nf_tables subsystem, which has been part of the Linux kernel since the release of […]
A critical vulnerability has been discovered in the ksmbd module, which includes a built-in Linux kernel implementation of a file server based on the SMB protocol, allowing remote execution of code with kernel privileges. The attack can be executed without authentication, provided that the ksmbd module is enabled on the system. The problem manifests starting from kernel 5.15, released in November 2021, and without any unnecessary […]
A vulnerability (CVE-2022-4415) has been identified in the systemd-coredump component, which handles core dumps generated after process crashes, allowing a non-privileged local user to determine the memory contents of privileged processes running with the suid root flag. The presence of the issue in the default configuration has been confirmed in openSUSE, Arch, Debian, Fedora, and SLES distributions. The vulnerability is caused by a lack of proper handling of the sysctl parameter fs.suid_dumpable in systemd-coredump, which, when set to […]
The lightweight window manager IceWM 3.3.0 is now available. IceWM provides full control through keyboard shortcuts, the ability to use virtual desktops, taskbars, and application menus. The window manager is configured through a fairly simple configuration file, and theme customization is possible. Support for window grouping in the form of tabs is available. Built-in applets for monitoring CPU, memory, and traffic are also included. Several third-party GUIs are under separate development for […]
SUSE has released the second prototype of the ALP 'Punta Baretti' (Adaptable Linux Platform), which is positioned as a continuation of the SUSE Linux Enterprise distribution. A key distinction of ALP is the division of the base distribution into two parts: a trimmed-down 'host OS' for operation atop hardware and a layer for application support focused on running in containers and virtual machines. Builds are prepared for the architecture […]
The Fedora 38 release proposes the first stage of transitioning to a modernized boot process, previously suggested by Lennart Poettering, aimed at implementing a fully verified boot covering all stages from firmware to user space, rather than just the kernel and bootloader. This proposal has not yet been reviewed by the FESCo (Fedora Engineering Steering Committee), which is responsible for the technical aspects of developing the Fedora distribution. Components for […]
After five years of development, the release of GnuPG 2.4.0 (GNU Privacy Guard) is here, compatible with OpenPGP (RFC-4880) and S/MIME standards, providing utilities for data encryption, working with digital signatures, key management, and accessing public key repositories. GnuPG 2.4.0 is positioned as the first release of a new stable branch, incorporating changes accumulated during the preparation of releases […]
The release of the specialized distribution Tails 5.8 (The Amnesic Incognito Live System) has been announced, based on the Debian package base and intended for anonymous internet access. Anonymous access in Tails is ensured by the Tor system. All connections, except for traffic through the Tor network, are blocked by the packet filter by default. User data is stored in a way that preserves data between sessions using encryption. […]
The release of Linux Mint 21.1 has been announced, continuing the development of the branch based on the Ubuntu 22.04 LTS package base. The distribution is fully compatible with Ubuntu but significantly differs in its approach to user interface organization and the selection of default applications. The Linux Mint developers provide a desktop environment that adheres to classic desktop organization principles, which is more familiar to users who do not embrace new […]
The release of the home library cataloger MyLibrary 1.0 has taken place. The program's code is written in C++ and is available (GitHub, GitFlic) under the GPLv3 license. The graphical user interface is implemented using the GTK4 library. The program is adapted for use in Linux and Windows operating systems. For Arch Linux users, a ready-made package is available in AUR. MyLibrary catalogs book files in […]
The release of the EndeavourOS 22.12 project is now available, succeeding the Antergos distribution, which was discontinued in May 2019 due to a lack of free time among the remaining maintainers to support the project adequately. The installation image size is 1.9 GB (x86_64, with a separate build being developed for ARM). EndeavourOS allows users to install Arch Linux without unnecessary complexity, along with […]