Other Sites

Tor Project blog

New Release: Tor Browser 14.0.6

This version includes a fix to the crash issue found on older versions of macOS.

Arti 1.4.0 is released: onion services, RPC, relay development, and more

This release offers a new RPC interface, which is Arti's replacement for C Tor's control port with many improvements.

New Release: Tails 6.12

These vulnerabilities can only be exploited by a powerful attacker who has already exploited another vulnerability to take control of an application in Tails.

9to5Linux

Calibre 7.25 Adds Support for Importing KFX Files from 2024 Kindle Devices via MTP

Highlights of Calibre 7.25 include support for importing KFX files from 2024 Kindle devices that use the MTP protocol and a new option to adjust the size of the link and note icons in Book details, which you can access from Preferences > Look & feel > Book details.

KDE Gear 24.12.2 Improves Dolphin, Itinerary, Tokodon, and Many Other KDE Apps

Coming almost a month after the KDE Gear 24.12.1 point release, KDE Gear 24.12.2 is here to fix a regression in the Dolphin file manager on X11 that caused the keyboard focus to move to the Places or Terminal panels when Dolphin was minimized and then unminimized.

LibreOffice 25.2 Open-Source Office Suite Officially Released, This Is What’s New

LibreOffice 25.2 introduces a new privacy feature that removes all personal information associated with any document, such as author names and timestamps, editing time, printer name and configuration, document template, author and date for comments, and tracked changes.

Tails 6.12 Anonymous OS Fixes Security Issues in Tor Circuits, Persistent Storage

Tails 6.12 is here almost a month after Tails 6.11 to address several critical security vulnerabilities that have been discovered and disclosed by a group of security researchers from Radically Open Security, a non-profit computer security consultancy company.

LinuxGizmos.com

Axon Platform Featuring RockChip RK3588S and Support for LLM Frameworks

The Axon platform, powered by the RockChip RK3588S processor, combines an 8-core CPU and an NPU delivering up to 6 TOPS of AI performance. Designed for advanced computing tasks, it supports various LLMs, including Llama, Qwen, and DeepSeek, with benchmarks showcasing performance for AI workloads.

SECO Introduces New Intel-Based Embedded Solutions at Embedded World 2025

SECO will unveil its latest embedded computing solutions at Embedded World 2025, featuring Twin Lake and Arrow Lake architectures. The lineup targets industrial, medical, and AI-driven applications, focusing on performance, scalability, and efficiency.

A bug that was 23 years old or not

posted by Roy Schestowitz on Sep 05, 2022

The vulnerable code has been in curl versions since version 4.9 which makes it exactly 8,729 days (23.9 years) until the shipped version 7.85.0 that fixed it. It also means that we introduced the bug on project day 201 and fixed it on day 8,930.

The code was not problematic when it shipped and it was not problematic during a huge portion of the time it has been used by a large amount of users.

It become problematic when HTTP servers started to refuse HTTP requests they suspected could be malicious. The way this code turned into a denial of service was therefore more or less just collateral damage. An unfortunate side effect.

Maybe the bug was born first when RFC 6265 was published. Maybe it was born when the first widely used HTTP server started to reject these requests.

Read on

Also: 3 things to know about planning for OTA updates in your homelab | Opensource.com

Tux Machines