Blog Section
A vulnerability (CVE-2023-40547) has been identified in the Shim layer used in most Linux distributions for verified boot in UEFI Secure Boot mode, which may lead to remote code execution and bypassing the UEFI Secure Boot verification mechanism. An attacker controlling the HTTP server contacted by Shim could return a specially crafted response, leading to controlled writes into a buffer overflow area for […]
On January 23, a message appeared on the GitHub page of the Open Broadcaster Software project announcing the completion of support for AV1 video encoding using the Linux Video Acceleration API (VA-API). On May 2, 2023, a merge request for OBS FFmpeg to add AV1 VA-API support was opened, and as of the evening of January 23, that code has been merged. Code […]
On January 18, version 0.91 of GNOME Network Displays was released. Among the significant improvements announced are: added support for the Miracast over Infrastructure (MICE) protocol (@lorbus); support for the Chromecast protocol (@kyteinsky); added support for streaming a virtual screen (@NaheemSays); various bug fixes; various translations added/updated. For reference: GNOME Network Displays is software that allows streaming the GNOME desktop to […]
A year after the previous release, the Redcore Linux 2401 distribution has been published, attempting to combine the features of Gentoo with ease of use for regular users. The distribution provides a simple installer enabling rapid deployment of a working system without requiring the recompilation of components from source code. Users are provided with a repository of ready-made binary packages, accompanied by a continuous cycle of updates (rolling model). For managing […]
Corrective updates for the collaboration platform have been released — GitLab 16.8.1, 16.7.4, 16.6.6, and 16.5.8, addressing 5 vulnerabilities. One of the issues (CVE-2024-0402), which has been present since the release of GitLab 16.0, has been assigned a critical severity level. This vulnerability allows an authenticated user to write files to any directory on the server according to the access rights under which the web interface operates […]
On January 24, version 4.038 of the C++ library SRELL (Std::RegEx-Like Library) was released, implementing ECMAScript-compatible regular expressions. Change log: a bug was fixed where the expression /(?:ab)+|cd/ matched the string 'ababcd'; minor improvements. Library features: header-only; ECMAScript-compatible regular expressions; std::regex-like design; support for char8_t, char16_t, and char32_t types for C++11 and later standards. More detailed information is available at […]
The release of the Parrot 6.0 distribution is available, based on the Debian package base and including a selection of tools for system security testing, forensic analysis, and reverse engineering. Several ISO images with a MATE environment have been offered for download, intended for everyday use, security testing, installation on Raspberry Pi boards, and creating specialized installations, for example, for use in cloud environments. The Parrot distribution […]
Version 1.9.367 of the Radix cross Linux distribution is now available, prepared for devices based on ARM/ARM64, RISC-V, and x86/x86_64 architectures. The distribution is built using the proprietary Radix.pro build system, which simplifies the creation of distributions for embedded systems. The code for the build system is distributed under the MIT license. The boot images, prepared according to the instructions in the Platform Download section, contain a local package repository and therefore the system installation is not […]
A set of Cryptsetup 2.7 utilities has been released, designed for configuring disk partition encryption in Linux using the dm-crypt module. It supports working with dm-crypt, LUKS, LUKS2, BITLK, loop-AES, and TrueCrypt/VeraCrypt partitions. The package also includes the veritysetup and integritysetup utilities for setting up data integrity verification based on the dm-verity and dm-integrity modules. Key improvements: The ability to use hardware mechanisms has been implemented […]
Google has released the web browser Chrome 121. At the same time, a stable release of the free Chromium project, which underpins Chrome, is available. The Chrome browser differs from Chromium by the use of Google logos, a crash reporting system, modules for playing copy-protected video content (DRM), an automatic update system, constant inclusion of Sandbox isolation, provision of keys for Google API, and transfer of […]
Firefox, a free browser built on the Quantum engine, developed and distributed by Mozilla Corporation, and the fourth most popular browser in the world, has been updated to version 122. What's new: Linux: Support for VA-API has been enabled for all architectures (previously it was only enabled for x86 and ARM). Deb packages for Ubuntu, Debian, and Linux Mint are now offered. Search engine suggestions are now […]
A vulnerability (CVE-2024-0684) has been discovered in the split utility, provided in the GNU coreutils package and used for splitting large files into parts. This vulnerability leads to a buffer overflow when processing long lines (several hundred bytes) when using the split option "—line-bytes" ("-C"). The vulnerability was identified during an analysis of crashes occurring when using the split utility to split data transmitted during […]