Vue normale

Reçu aujourd’hui — 29 octobre 2025

GNU/Linux man pages 6.16 released

Par :jzb
29 octobre 2025 à 17:17

Alejandro Colomar has announced the release of version 6.16 of the GNU/Linux man pages. This release includes new or rewritten man pages for fsconfig(), fsmount(), and fsopen(), as well as a number of newly documented interfaces in existing man pages. The release is also available as a PDF book.

ICANN report: DNS runs on FOSS

Par :jzb
29 octobre 2025 à 17:05

ICANN's Security and Stability Advisory Committee (SSAC) has announced a report on "the critical role of Free and Open Source Software (FOSS) within the Domain Name System (DNS)". The report is aimed at policymakers and examines recent cybersecurity regulations in the US, UK, and EU as they apply to FOSS in the DNS system; it includes findings and guidelines "to strengthen the FOSS ecosystem that is critical to the secure and stable operation of the Internet". From the report's summary:

This ecosystem depends on a global network of maintainers and contributors who are often unpaid volunteers. While many are unpaid volunteers, the DNS space is unique in also relying on a handful of long-lived maintenance organizations. This creates a model based on community collaboration rather than the commercial contracts that define a traditional software supply chain, which introduces unique risks related to financial sustainability for the maintenance organizations and maintainer burnout for volunteers.

These unique characteristics mean that regulatory frameworks designed for proprietary software may not be well-suited for FOSS and therefore could have severe unintended consequences to the stability of critical Internet infrastructure.

Thanks to SSAC member Maarten Aertsen for the tip.

[$] Retrieving pixels from Android phones with Pixnapping

Par :jake
29 octobre 2025 à 16:44
A new class of attacks on Android phones, called "Pixnapping", was announced on October 13. It allows a malicious app to gather output rendered in a victim app, pixel-by-pixel, by exploiting a GPU side-channel. Depending on what the victim app displays, anything from sensitive email and chats to two-factor authentication (2FA) codes could be captured—and shipped off to an attacker's site.

Tor Browser 15.0 released

Par :jzb
29 octobre 2025 à 15:15

Version 15.0 of the Tor Browser has been released:

This is our first stable release based on Firefox ESR 140, incorporating a year's worth of changes that have been shipped upstream in Firefox. As part of this process, we've also completed our annual ESR transition audit, where we reviewed and addressed around 200 Bugzilla issues for changes in Firefox that may negatively affect the privacy and security of Tor Browser users. Our final reports from this audit are now available in the tor-browser-spec repository on our GitLab instance.

This release inherits the vertical tabs feature, unified search button, as well as other new features and usability improvements in Firefox that have passed the Tor Project's audit.

Voilà les premières photos en vol du X-59, l’avion supersonique qui rêve d’être silencieux

29 octobre 2025 à 14:34

Lockheed Martin X59

Des photographes étaient sur place, le 28 octobre 2025, pour assister au premier vol du X-59, l'avion supersonique qui doit démontrer qu'il est possible de franchir le mur du son sans faire trop de bruit. Les clichés sont remarquables.

La France va se doter de nouveaux « yeux » pour surveiller les menaces spatiales en orbite

29 octobre 2025 à 14:17

radar espace

La France a lancé officiellement le chantier du nouveau radar Aurore, qui viendra prendre la suite du radar GRAVES. Objectif : donner au pays de nouveaux « yeux » pour observer tout ce qui se passe en orbite terrestre basse.

[$] Debian splits ftpmaster team

Par :jzb
29 octobre 2025 à 14:05

Debian's ftpmaster team has been responsible for allowing new packages to enter Debian, removing old packages, and otherwise maintaining Debian's package archive for more than two decades. As of October 26, the team is no more and its duties are being split between two new teams. The Archive Operations Team will focus on the infrastructure required to support the Debian archives, and the DFSG, Licensing & New Packages Team, which is responsible for reviewing packages entering the new queue. In time, this move could speed up processing of new packages, as well as making the teams more sustainable, but only after new members are recruited and trained. For now, the same folks are doing the work but spread across two teams.

Security updates for Wednesday

Par :jzb
29 octobre 2025 à 13:18
Security updates have been issued by Debian (gimp, python-authlib, and xorg-server), Fedora (chromium and git-lfs), Mageia (poppler and tomcat), Red Hat (kernel, kernel-rt, redis, and redis:6), SUSE (fetchmail, grafana, ImageMagick, kernel-devel, libluajit-5_1-2, proxy-helm, python-Authlib, and xen), and Ubuntu (linux-intel-iotg, linux-intel-iotg-5.15 and squid, squid3).

« Je ne fais plus confiance à Signal » clame Elon Musk, mais il n’a rien compris, selon la patronne de l’appli

29 octobre 2025 à 10:15

Suite à la panne majeure d'AWS, qui a causé des perturbations sur Signal, Elon Musk s'en est pris à l'application, jugeant inadmissible la dépendance de la messagerie instantanée à Amazon. Mais pour sa patronne, Meredith Whittaker, il n'a pas compris le véritable enjeu.

Reçu hier — 28 octobre 2025

C’est le tout premier vol du X-59, l’avion qui veut passer supersonique sans un bruit

28 octobre 2025 à 15:38

X-59 NASA Lockheed Martin

Sans crier gare, le prototype d'avion supersonique X-59 s'est placé sur la piste de décollage ce 28 octobre et a mis les gaz pour décoller. Il vient ainsi d'effectuer ton tout premier vrai vol.

Nouveau missile, nouvelle tête nucléaire : la France met en service le M51.3

28 octobre 2025 à 14:47

missile 51.3

Octobre 2025 a été un mois animé sur le terrain nucléaire. La France vient à ce propos d'annoncer la mise en service opérationnel d'un nouveau missile nucléaire pour ses sous-marins. Et la nouvelle génération de ce missile est dès à présent en chantier.

Fedora Linux 43 released (Fedora Magazine)

Par :jzb
28 octobre 2025 à 14:11

The Fedora Project has announced the release of Fedora Linux 43, with "what's new" articles for Fedora Workstation, Fedora KDE Plasma Desktop, and Fedora Atomic Desktops.

For those of you installing fresh Fedora Linux 43 Spins, you may be greeted with the new Anaconda WebUI. This was the default installer interface for Fedora Workstation 42, and now it's the default installer UI for the Spins as well.

If you are a GNOME desktop user, you'll also notice that the GNOME is now Wayland-only in Fedora Linux 43. GNOME upstream has deprecated X11 support, and has disabled it as a compile time default in GNOME 49. Upstream GNOME plans to fully remove X11 support in GNOME 50.

See the release notes for a full list of changes in Fedora 43.

Security updates for Tuesday

Par :jzb
28 octobre 2025 à 13:15
Security updates have been issued by AlmaLinux (kernel, kernel-rt, libtiff, squid:4, and thunderbird), Debian (strongswan and webkit2gtk), Fedora (pcre2, qt5-qtbase, squid, unbound, and xen), Mageia (icu and libtpms), Oracle (java-1.8.0-openjdk, java-17-openjdk, java-21-openjdk, kernel, squid:4, and thunderbird), Red Hat (libtiff, squid, squid:4, and webkit2gtk3), SUSE (cmake, dracut-saltboot, erlang, exim, expat, ffmpeg-4, firefox, golang-github-prometheus-alertmanager, haproxy, java-11-openjdk, kernel, libxslt, multi-linux-manager, openssl-3, podman, rabbitmq-server, spacewalk-web, strongswan, and wireshark), and Ubuntu (gst-plugins-good1.0, linux-aws-5.15, radare2, ruby2.3, ruby2.5, ruby2.7, and strongswan).

La série The Acolyte a failli sauver une idée bâclée dans les films Star Wars, mais c’est trop tard

28 octobre 2025 à 12:06

Kylo Ren sabre laser

Des explications permettent de rattacher narrativement certains évènements de la troisième trilogie de Star Wars avec la série The Acolyte. Ces nouveaux liens sont intéressants d'un point de vue du lore, et permettent de rattraper une piste gâchée de la postlogie. Hélas, cela n'ira sans doute pas beaucoup plus loin.

La prochaine angoisse des astronomes ? Ces miroirs qui réfléchiront la lumière du Soleil en pleine nuit

28 octobre 2025 à 10:12

Reflect Orbital

C'est un projet futuriste qui n'existe que sur le papier pour l'instant. Mais il a de quoi inquiéter les astronomes : la startup Reflect Orbital a l'idée de lancer des « satellites miroirs » dans l'espace pour refléter la lumière du Soleil sur Terre, pendant la nuit.

Reçu avant avant-hier

Un souci central de Battlefield 6 doit être corrigé avec le premier gros patch

27 octobre 2025 à 15:22

Battlefield 6

Alors que la saison 1 de Battlefield 6 se prépare, un patch arrive pour améliorer un peu plus la physique des balles tirées depuis son arme. Objectif : ajuster le phénomène de la dispersion, un paramètre clé pour un jeu de tir comme BF6.

Rust Coreutils 0.3.0 released

Par :jzb
27 octobre 2025 à 13:46

Version 0.3.0 of Rust Coreutils, part of the uutils project, has been released. This release adds safe directory traversal for several utilities, better error handling, and performance improvements. The project has upgraded its test suite reference from GNU coreutils 9.7 to 9.8, and added 16 new tests. It includes a fix for the date bug that affected automatic updates in Ubuntu 25.10.

Security updates for Monday

Par :jzb
27 octobre 2025 à 13:02
Security updates have been issued by Debian (intel-microcode, openjdk-11, openjdk-17, openjdk-21, python-pip, request-tracker4, thunderbird, and tika), Fedora (cef, chromium, complyctl, cri-o1.31, cri-o1.32, cri-o1.33, cri-o1.34, docker-buildkit, docker-buildx, dovecot, fetchmail, gi-docgen, golang-github-facebook-time, insight, mbedtls, mingw-binutils, mingw-python3, mingw-qt5-qtsvg, mingw-qt6-qtsvg, moodle, openssl, perl-YAML-Syck, podman-tui, python-socketio, python-sqlparse, python3.10, python3.11, python3.12, python3.9, qt5-qtsvg, runc, samba, squid, sssd, suricata, valkey, wireshark, wordpress, and yarnpkg), Red Hat (libssh), SUSE (aaa_base, afterburn, bind, chromedriver, chrony, firefox, git, govulncheck-vulndb, grub2, ImageMagick, java-11-openjdk, java-17-openjdk, kernel, libssh, libunbound8, libxslt, micropython, mozilla-nss, netty, open-vm-tools, openbao, p7zip, podman, poppler, python-python-socketio, python-urllib3, ruby2.5, rust-keylime, vim, wireshark, and xen), and Ubuntu (linux-aws-6.14).
❌