Internet News Section
The Debian project is pleased to announce the fourth update of its stable distribution, Debian 13 (codenamed trixie), which includes important updates for the security and stability of key components. Release 13.4 is not a new version of the distribution but a set of package updates that accumulate critical bug fixes and vulnerabilities, many of which had previously been released as […]
The Ageleless Linux distribution has been released, created to resist laws requiring the addition of APIs for user age verification in operating systems. Ageleless Linux is noted as a distribution for people of indeterminate age, fundamentally not complying with age verification laws. Among other features, the distribution implements a placeholder API for user age verification that always returns an indeterminate age. A script called become-ageless.sh is provided for installation, allowing […]
The fourth corrective update for Debian 13 has been formed, which includes accumulated package updates and installer fixes. The release includes 111 updates addressing stability issues and 67 updates correcting vulnerabilities. Notable changes in Debian 13.4 include updates to fresh stable versions of packages such as arduino-core-avr, capstone, flatpak, mariadb, openssl, postgresql, qemu, samba, wireless-regdb, […]
The developers of the wolfSSL cryptographic library are enhancing the wolfIP TCP/IP stack, optimized for use on embedded devices with limited resources, as well as for systems operating in real-time mode and solutions requiring increased reliability (Safety-Critical). To ensure predictable resource consumption, wolfIP does not use dynamic memory allocation—all buffers and socket tables have a fixed size and are configured to […]
On March 13, a corrective release 3.51.3 of the compact embedded database SQLite was announced. The project's code is written in C and is distributed as public domain. Due to compatibility issues related to some new features, version 3.52.0 (released on March 6) was withdrawn. Change list for version 3.51.3: on March 3, one of the SQLite developers (Dan) discovered and fixed […]
The code for TUI Studio (Visual Terminal UI Designer), a tool for visually designing user interfaces that operate in a text terminal, has been opened. This environment allows users to interactively create interfaces by dragging and dropping pre-made blocks, editing properties in a visual mode, and previewing results on the fly. The created interface layout can be exported for use in frameworks like Ink, BubbleTea, Blessed, Textual, OpenTUI […]
Google has released version 146 of the Chrome web browser. At the same time, a stable release of the open-source Chromium project, which serves as the basis for Chrome, is available. The Chrome browser differs from Chromium in its use of Google logos, a crash notification system, modules for playing DRM-protected video content, an automatic update system, constant Sandbox isolation, the provision of keys for Google APIs, and the transfer of RLZ parameters […]
A vulnerability has been identified in the gssapi.patch used in many Linux distributions, which adds GSSAPI-based key exchange support to OpenSSH. This vulnerability leads to memory corruption and the bypassing of the privilege separation mechanism. It can be exploited remotely. The presence of the vulnerability has currently been confirmed in Debian and Ubuntu. It manifests when the "GSSAPIKeyExchange yes" option is enabled in the settings. Notably, in […]
Qualys has discovered 9 vulnerabilities in the AppArmor mandatory access control system, the most dangerous of which allow a local unprivileged user to gain root rights on the system, exit isolated containers, and bypass restrictions set through AppArmor. The vulnerabilities have been code-named CrackArmor. CVE identifiers have not yet been assigned. Successful privilege escalation examples have been demonstrated in Ubuntu 24.04 and Debian 13. The issues […]
A vulnerability (CVE-2026-3497) has been identified in the gssapi.patch used in many Linux distributions, which adds GSSAPI-based key exchange support to OpenSSH. This vulnerability leads to pointer dereferencing, memory corruption, and the bypassing of the privilege separation mechanism (Privsep). It can be exploited remotely during the pre-authentication stage. The researcher who identified the issue demonstrated that the process could be caused to crash by sending one […]
The linux-api mailing list has discussed a proposal (RFC) to replace the deprecated binary formats of system logs lastlog, btmp, utmp, and wtmp with new shared libraries using SQLite as a backend. This initiative aims to address accumulated issues, including the overflow of 32-bit time counters in 2038, lack of scalability, low query performance, and lack of atomicity in writing. In […]
Version 1.0.0 of the linear algebra library for C++ (C++23 standard) smath has been released, distributed under the Apache 2.0 license as a single small header file. Library features include a generic class Vec with useful aliases Vec2/Vec3/Vec4 and accessors (x/y/z/w, r/g/b/a). Vectors support approximate comparison and tuple-structured bindings; type Quaternion based on Vec4; generic class Mat with useful aliases Mat2/Mat3/Mat4; auxiliary […]