Blog Section
The developers of the OpenSSH project have announced plans to discontinue support for keys based on the DSA algorithm. By modern standards, DSA keys do not provide an adequate level of protection, as they use a private key size of only 160 bits and SHA1 hashing, which corresponds in security level to approximately an 80-bit symmetric key. By default, the use of DSA keys was discontinued in 2015, but support […]
Corrective updates for the collaboration platform — GitLab 16.7.2, 16.6.4, and 16.5.6 have been released, addressing two critical vulnerabilities. The first vulnerability (CVE-2023-7028), which has been assigned the highest danger level (10 out of 10), allows for the capture of another user's account through manipulation of the forgot password recovery form. The vulnerability arises from the ability to send an email with a code to reset the password to unconfirmed […]
Details have emerged regarding the attack on the infrastructure used in the development of the PyTorch machine learning framework, which allowed for the extraction of access keys sufficient to host arbitrary data in the project's release repository on GitHub and AWS, as well as to inject code into the main branch of the repository and add a backdoor through dependencies. The alteration of PyTorch releases could have been used to carry out an attack on large companies, […]
On January 9, the official news section of the GNU Hurd project published the final news for Q3 2023: Samuel Thibault fixed the default PIE for gcc and added support for static PIE. He also added the whatis command to the GNU Mach kernel debugger, which can determine what an address points to (stack? port? kalloc?...). There were […]
The release of GodotOS has taken place – an interface for operating systems, fully created in the Godot game engine. GodotOS allows users to work with folders, edit text files, view images, run games, and much more in a streamlined interface that can even be used online. The developers note that GodotOS is more of an experimental toy than a serious project. GodotOS aims to expand […]
Quietly and almost unnoticed, on December 15, 2023 (almost a month ago!), the Shotcut development team released version 23.12.15. This version includes a small collection of fixes and updates, such as: fixing crashes when launching Wayland on Ubuntu 22.04 and 23.10 – qt6-wayland may need to be installed (a bug appeared in version 23.11). This causes issues with Wayland support in Ubuntu […]
The Meshtastic project develops an open communication platform for building a self-sufficient decentralized messaging network, where each point of the network connects through neighboring points, without using centralized routers. To transmit signals, transceivers based on the LoRa protocol are used, allowing data to be sent in an unlicensed frequency range at speeds of several kilobits per second over distances of dozens or even hundreds […]
On January 10, Intel engineers released the quarterly update for FFmpeg Cartwheel 2023Q4 of the FFmpeg multimedia library. The new release provides support for the Meteor Lake platform for new laptops entering the market. This Meteor Lake support works in conjunction with all other Intel open-source graphical drivers included in the Linux 6.7 kernel (which are stable and included by default). Also […]
On January 10, support for Linux kernel 4.14 LTS was officially concluded, as announced by Greg Kroah-Hartman, the maintainer of the stable Linux kernel branch: "I announce the release of kernel 4.14.336. This is the LAST released kernel of the 4.14.y series. Its official support has now ended. PLEASE do not use this kernel version anymore; switch to a newer version as indicated […]"
Greg Kroah-Hartman, responsible for maintaining the stable Linux kernel branch, announced the publication of the final release of Linux kernel 4.14.336, which will be the last in this series. The 4.14 branch was released in November 2017 and has been maintained for six years. Products shipped with kernel 4.14 are advised to upgrade to more current LTS releases. Kernel developers continue to support the following long-term branches: 6.6 […]
The first release of the GodotOS project has been published, which develops a prototype graphical interface created using the Godot game engine. GodotOS is presented as an experiment in using a game engine to design a minimalist, user-friendly, and aesthetically pleasing desktop interface. The project code is written in GDScript and is distributed under the AGPLv3 license. Builds are available for Linux and Windows, and a demo is prepared for download through […]
The repository of the open project OpenXRay, which reproduces the game engine for the early parts of the S.T.A.L.K.E.R. game, has been blocked on GitHub. The project was founded after the source code of the original S.T.A.L.K.E.R. engine was leaked and aims to fix all original flaws while introducing new features such as support for 64-bit platforms, Linux, and OpenGL. The licensing aspect of OpenXRay development has always been in question, but […]