Karna, karnasubarna@lemmy.ml

Change log: https://www.nvidia.com/en-gb/drivers/details/277966/

GNOME Boxes lead developer Felipe Borges has been overhauling the application with a major rewrite and today announced the new beta release. GNOME Boxes has migrated to using the GTK4 toolkit and libadwaita. The new GNOME Boxes code can also handle installing Microsoft Windows 11 now without needing any manual workarounds for Secure Boot or TPM requirements.

Fixes are available for 3 vulnerabilities reported in snapd, each with assigned CVE IDs and CVSS scores.

While carbonaceous chondrites make up only a small portion of the meteorites sampled on Earth, CO chondrites make up a very tiny fraction of those meteorites. According to the study, these types of meteorites are among the most pristine materials in our Solar System.

As an exciting development for GPU-accelerated video decoding within the Mozilla Firefox web browser, initial support for Vulkan Video has landed in the web browser! Firefox on Linux has long been focused on the Video Acceleration API (VA-API) that isn’t universally supported by Linux graphics drivers. This has left to efforts like NVIDIA-VAAPI-Driver to layer VA-API atop NVIDIA NVDEC interfaces to enjoy GPU-accelerated video playback in Firefox. Smaller Arm/embedded graphics drivers also have been largely left out of the game in the VA-API space. But with Vulkan Video we are beginning to see more adoption and in a cross-platform manner.

First up with Flatpak 1.16.4 is a fix for CVE-2026-34078, which is a security issue allowing a complete sandbox escape leading to host file access and code execution in the host context. Ouch. The issue is due to Flatpak portal accepting paths in the sandbox-expose options that can be app-controlled symlinks pointing at arbitrary paths. Due to this apps can access all host files and can be used as a primitive for gaining code execution in the host context. Disabling Flatpak Portal is another way to workaround this issue but can cause app problems. CVE-2026-34079 is also fixed and is for preventing arbitrary file deletion on the host file-system. CVE-2026-34079 stems from caching for ld.so removing outdated cache files without checking that the app controlled path to the outdated cache is in the cache directory.

To get the version of the sudo package installed, run the following command:

Distro developers began discussing ways to reduce the size of firmware updates last year. Now, in Ubuntu 26.04, it’s introducing meta-packaging to spread Linux firmware across 17 smaller packages in the resolute archives. This resolves a bug filed in 2022.

La Suite Meet: https://github.com/suitenumerique/meet

According to complaints filed this Monday in Texas state courts, the TV makers can allegedly use ACR technology to capture screenshots of television displays every 500 milliseconds, monitor the users’ viewing activity in real time, and send this information back to the companies’ servers without the users’ knowledge or consent.

https://system76.com/pop/download/

https://github.com/iDescriptor/iDescriptor

The researchers from the University of Vienna and SBA Research used WhatsApp’s contact-discovery feature, which lets you submit a phone number to the platform’s GetDeviceList API endpoint to determine whether a phone number is associated with an account and what devices were used.

According to marsf, the long-time locale leader of the Japanese SUMO team, the decision to disband was triggered by the recent introduction of an automated translation system known as Sumobot. Deployed on October 22, the bot began editing and approving Japanese Knowledge Base articles without community oversight.