Тег: linux

Tails 6.11

The Amnesic Incognito Live System (Tails) is a Debian-based live DVD/USB with the goal of providing complete Internet anonymity for the user. The project has published an update for its 6.x series which fixes a serious security vulnerability. "The vulnerabilities described below were identified during an external security audit by Radically Open Security and disclosed responsibly to our team. We are not aware of these attacks being used against Tails users until now. These vulnerabilities can only be exploited by a powerful attacker who has already exploited another vulnerability to take control of an application in Tails. If you want to be extra careful and used Tails a lot since January 9 without upgrading, we recommend that you do a manual upgrade instead of an automatic upgrade. Prevent an attacker from installing malicious software permanently. In Tails 6.10 or earlier, an attacker who has already taken control of an application in Tails could then exploit a vulnerability in Tails Upgrader to install a malicious upgrade and permanently take control of your Tails. Doing a manual upgrade would erase such malicious software."

Софт

Tails 6.11

The Amnesic Incognito Live System (Tails) is a Debian-based live DVD/USB with the goal of providing complete Internet anonymity for the user. The project has published an update for its 6.x series which fixes a serious security vulnerability. "The vulnerabilities described below were identified during an external security audit by Radically Open Security and disclosed responsibly to our team. We are not aware of these attacks being used against Tails users until now. These vulnerabilities can only be exploited by a powerful attacker who has already exploited another vulnerability to take control of an application in Tails. If you want to be extra careful and used Tails a lot since January 9 without upgrading, we recommend that you do a manual upgrade instead of an automatic upgrade. Prevent an attacker from installing malicious software permanently. In Tails 6.10 or earlier, an attacker who has already taken control of an application in Tails could then exploit a vulnerability in Tails Upgrader to install a malicious upgrade and permanently take control of your Tails. Doing a manual upgrade would erase such malicious software."

Софт

4MLinux 47.0

4MLinux is a minimal distribution which ships tools for four types of tasks: servers, gaming, multimedia and system rescue. The project's latest stable version is 47.0 which comes with upgraded applications for the Internet, including Firefox 133.0, Chrome 131.0 and Thunderbird 128.5, besides various other improvements: "The status of the 4MLinux 47.0 series has been changed to STABLE. As always, the new major release has some new features. GNOME CD Master (GUI frontend for cdrdao), Dia (program for drawing diagrams), GLiv (OpenGL image viewer), XRoar (Dragon and Tandy 8-bit computer emulator) as well as many command line MOD/MIDI players are now available out of the box. Gnubik (famous puzzle game) and GNU Backgammon have been added to the 4MLinux GamePack package (downloadable extension). Support for hundreds of old image formats is now provided by RECOIL (Retro Computer Image Library with its GIMP plugin). And finally, it is now possible to install 4MLinux on virtual KVM block devices (/dev/vda1, /dev/vda2, and so on)."

Софт

CachyOS 241221

CachyOS is a Linux distribution based on Arch Linux. It focuses on speed and security optimisations. The project's latest release focuses on performance and Bluetooth support: "One of the most notable changes is that the default kernel is now optimized using AutoFDO. Profiling workloads are run through a diverse set of tests, including sysbench, CachyOS Benchmarker, Git operations, kernel compilation, and several miscellaneous benchmarks. Currently, the profiling is done on a Zen5 machine, but in the future, we plan to support merging multiple profiles for even broader optimization. RustiCL has replaced the default OpenCL driver in the Mesa stack, bringing improved performance and compatibility. Additionally, we now use scx_loader for sched-ext scheduler management in the kernel-manager. This allows for more seamless switching between schedulers and ensures they are properly configured using a dedicated configuration file. We've also enabled Bluetooth support, enhancing the user experience for most users."

Софт

IPFire 2.29 Core 190

The IPFire project develops a minimal operating system for routers and firewalls. The project's latest release, IPFire 2.29 Core 190, provides a kernel update and begins phasing out support for RSA encryption: "We are starting the path to remove RSA from the IPFire web UI and SSH. On new installations, RSA keys won't be generated any more. On existing installations, this update removes the RSA key from the web UI, but we keep the RSA key for SSH to not break any monitoring tools, etc. We still believe that RSA is strong enough to be used in today's world, but since there is sufficient browser and SSH client support for Elliptic Curve Cryptography which is considered to be much stronger, we want to raise the bar for any potential future attacks on RSA. IPFire is also now using post-quantum cryptography for SSH key exchanges: Streamlined NTRU Prime sntrup761 and X25519 with SHA-512 (sntrup761x25519-sha512) and Module-Lattice-based Key-Encapsulation Mechanism (MK-KEM, mlkem768x25519-sha256) have been enabled."

Софт