Тег: linux

IPFire 2.29 Core 187

IPFire is a Linux-based operating system for firewalls. The project focuses on easy set-up and configuration. The project's latest release introduces an extra layer of protection against denial-of-service (DoS) attacks. "Since IPFire is very commonly deployed in data centres where denial-of-service attacks happen on a regular basis, we now have added better protection against those kinds of attacks. Formerly, the system protected itself rather well against (D)DoS attacks, but this was only limited if TCP connections terminated at the firewall itself like for reverse proxies, etc. Now, IPFire can use TCP SYN cookies to protect infrastructure behind it better against SYN flood attacks. This is especially useful in high-bandwidth scenarios and cloud deployments and can be activated with only one checkbox separately for each firewall rule."

Софт

Vanilla OS 2

The Vanilla OS team have annoiced the second release of their distribution, which carries the codename Orchid. Vanilla OS 2 drops the Ubuntu base in favour of Debian and strives to provide a stable environment which can run packages in a variety of formates while also offering the ability to rollback changes. "Did you encounter a system issue and need to revert to a previous stable state? With Orchid, this is quite simple, if something goes wrong, you can select the previous state during boot. After logging in, Orchid will prompt you to perform a rollback, once confirmed, this rollback becomes permanent until the next update. When a new update happens, the problematic state will be replaced with the new version of the operating system. Why would you need to perform a rollback? Even though Orchid is designed to be stable and compatible, and its update system ensures the updates are only installed if they pass, and despite every update being meticulously tested by our developers, something can still go wrong. Having a recovery point is essential. For example, you might be using hardware that is not compatible with the update, which is a scenario we cannot fully cover (yet)."

Софт

Emmabuntüs DE5-1.02

Emmabuntüs is a desktop Linux distribution with editions based on Debian's Stable branch with the Xfce and LXQt desktop environments. The project's latest release, DE5-1.02, introduces a number of accessibility improvements. "The accessibility functions added in this upgrade are: Orca screen reader combined with the Svox-Pico speech synthesis to help the blind persons. The Compiz window manager with its accessibility module (full-screen zoom, change of screen brightness, etc.) for the visually impaired. MouseTweaks and mouse emulation with numeric keypad for people with physical disabilities. eBook-speaker for audio playback of digital books in ePub format. Daisy-player for reading audio books in Daisy format. Kiwix in accessibility mode to read Wikipedia offline. Ocrizer for scanning a document in OCR mode and opening the result in LibreOffice. Elograf for voice dictation. Tux Typing voice version for learning the keyboard of Zendalona. NatBraille software for generating Braille books. GNOME-calculator in accessibility mode."

Софт

CachyOS July 2024 Release

This is our 8th release this year, and we are very proud to announce a new optimized repository. Starting with this release, we are providing a Zen4 optimized repository. This repository will be automatically used at new installation for Zen4 and Zen5 CPUs, to provide the best performance.

The znver4 target provides a bunch of extra avx512 extensions and also other instructions. Here you can find a list of the additional used instructions by the compiler compared to the x86-64-v4 target: abm, adx, aes, avx512bf16, avx512bitalg, avx512ifma, avx512vbmi, avx512vbmi2, avx512vnni, avx512vpopctndq, clflushopt, clwb, clzero, fsgsbase, gfni, mwaitx, pclmul, pku. prfchw, rpdid, rdrnd, rdseed, sha, sse4a, vaes, vockmulqdq, wbnoinvd, savec, xsaveopt, xsaves

Софт

Qubes OS 4.2.2

The Qubes OS team have announced a new update to the project's security-focused operating system. One of the significant changes in Qubes OS 4.2.2 is an adjustment to how files are transferreed between isolated envirnonments, called qubes. "Qubes 4.2.2 includes a fix for #8332: File-copy qrexec service is overly restrictive. As explained in the issue comments, we introduced a change in Qubes 4.2.0 that caused inter-qube file-copy/move actions to reject filenames containing, e.g., non-Latin characters and certain symbols. The rationale for this change was to mitigate the security risks associated with unusual unicode characters and invalid encoding in filenames, which some software might handle in an unsafe manner and which might cause confusion for users. Such a change represents a trade-off between security and usability. After the change went live, we received several user reports indicating more severe usability problems than we had anticipated. Moreover, these problems were prompting users to resort to dangerous workarounds (such as packing files into an archive format prior to copying) that carry far more risk than the original risk posed by the unrestricted filenames. In addition, we realized that this was a backward-incompatible change that should not have been introduced in a minor release in the first place. Therefore, we have decided, for the time being, to restore the original (pre-4.2) behavior by introducing a new allow-all-names argument for the qubes.Filecopy service. By default, qvm-copy and similar tools will use this less restrictive service (qubes.Filecopy +allow-all-names) whenever they detect any files that would be have been blocked by the more restrictive service (qubes.Filecopy +). If no such files are detected, they will use the more restrictive service."

Софт