Aggregator

Auditing Gradio 5, Hugging Face’s ML GUI framework

Security Boulevard
10 months 4 weeks ago

This is a joint post with the Hugging Face Gradio team; read their announcement here! You can find the full report with all of the detailed findings from our security audit of Gradio 5 here. Hugging Face hired Trail of Bits to audit Gradio 5, a popular open-source library that provides a web interface that […]

The post Auditing Gradio 5, Hugging Face’s ML GUI framework appeared first on Security Boulevard.

Trail of Bits

国光的 啊切儿 Linux 优化记录(弃坑！)

国光
10 months 4 weeks ago

你这辈子有没有因为没有折腾过 Arch Linux 而感觉遗憾？有没有厌倦了无聊的 Ubuntu？有没有想给自己找点事情做，充实一下自己？那就赶紧试试看 Arch Linux 吧！

国光

国光的 Ubuntu KDE Wayland 桌面美化记录(弃坑！)

国光
10 months 4 weeks ago

Hyprland 深度使用了很长时间，虽然特效操作很酷，但是有点过于激进了，好多适配度也跟不上，所以还是想安装其他的桌面再对比体验看看。

自带的 GNOME 桌面我一直保留，虽然简洁开箱即用，但是可定制性还是弱了一点，所以打算尝试一下大名鼎鼎的 KDE 桌面，我倒要看看 KDE 桌面有多么的厉害！

国光

国光的 Ubuntu Hyprland 桌面优化记录(弃坑！)

国光
10 months 4 weeks ago

你是否羡慕人家 Arch Linux 那酷炫的平铺式桌面，现在不必再自卑了，使用目前最新的 Ubuntu 也是可以做到通用酷炫的效果。那么准备好电脑，跟着本文开始行动起来吧！

国光

Ubuntu 24.10 释出

Solidot
10 months 4 weeks ago
Canonica 释出了 Ubuntu 24.10(Oracular Oriole)，该版本只支持九个月。下一个版本 Ubuntu 25.04 将于明年四月释出。Ubuntu 24.10 的主要新特性包括：桌面环境 GNOME 47，改进了默认文件管理器 Nautilus，改进低分辨率显示器上的 UI，屏幕录像支持硬件编码，当 snap 应用在后台更新时 Ubuntu Dock 会显示一个进度条，如果有待处理更新 App Center 将会显示一个应用内通知；最新的 Linux 6.11 内核，运行英伟达显卡的系统将默认启用 Wayland，APT 3.0 包管理器，等等。

CVE-2000-0798 | SGI IRIX 6.2/6.3/6.4 XFS File System truncate privileges management (EDB-20137 / XFDB-2110)

Vuldb Updates
10 months 4 weeks ago
A vulnerability classified as critical was found in SGI IRIX 6.2/6.3/6.4. This vulnerability affects the function truncate of the component XFS File System. The manipulation leads to improper privilege management. This vulnerability was named CVE-2000-0798. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Gartner 警告到 2027 年八成程序员都需要提升技能跟上 AI 时代

Solidot
10 months 4 weeks ago
Gartner 警告，到 2027 年八成程序员都需要提升技能，才能跟上生成式 AI 日益增长的需求。Gartner 预测 AI 将分三个阶段改变行业。第一阶段 AI 工具将提高生产力，尤其是对高级程序员。第二阶段 AI 原生软件工程将会出现，大多数代码将由 AI 生成。第三阶段，随着企业普及率的提高，AI 工程将会崛起，需要精通软件工程、数据科学和机器学习的新一代专业人员。

CVE-2024-25360 | Motorola CX2L Router 1.0.1 SystemWizardStatus device_web_ip information disclosure

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Motorola CX2L Router 1.0.1. It has been classified as problematic. This affects the function device_web_ip of the component SystemWizardStatus. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-25360. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com

CVE-2022-34310 | IBM CICS TX Standard/CICS TX Advanced 11.1 risky encryption (XFDB-229441)

Vuldb Updates
10 months 4 weeks ago
A vulnerability classified as problematic has been found in IBM CICS TX Standard and CICS TX Advanced 11.1. Affected is an unknown function. The manipulation leads to risky cryptographic algorithm. This vulnerability is traded as CVE-2022-34310. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-38594 | Linux Kernel up to 6.8.11/6.9.2 kernel/locking/mutex.c stmmac_priv initialization (487f9030b1ef/6f476aff2d8d/36ac9e7f2e57)

Vuldb Updates
10 months 4 weeks ago
A vulnerability was found in Linux Kernel up to 6.8.11/6.9.2. It has been classified as critical. This affects the function stmmac_priv of the file kernel/locking/mutex.c. The manipulation leads to improper initialization. This vulnerability is uniquely identified as CVE-2024-38594. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-36989 | Splunk Enterprise/Cloud Platform Notifications access control (SVD-2024-0709)

Vuldb Updates
10 months 4 weeks ago
A vulnerability classified as critical was found in Splunk Enterprise and Cloud Platform. Affected by this vulnerability is an unknown functionality of the component Notifications Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-36989. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad