Author: Yuri Gagarin

Vulnerability in GitLab Allowing Pipeline Jobs to Run Under Another User

Corrective updates for the collaborative development platform - GitLab 17.1.1, 17.0.3, 16.11.5, 16.10.8, 16.9.9, 16.8.8, 16.7.8, and 16.6.8 have been released, addressing 14 vulnerabilities. One of the issues (CVE-2024-5655) that appears starting from GitLab version 15.8 has been assigned a critical severity level. This vulnerability allows for the execution of continuous integration pipeline jobs under any user. Performing one’s own job […]

Chrome OS 126 Release

The release of Chrome OS 126, based on the Linux kernel, upstart system manager, ebuild/portage build system, open components, and Chrome browser 126 has been announced. The user environment of Chrome OS is limited to the web browser, and instead of standard programs, web applications are utilized; however, Chrome OS includes a complete multi-window interface, desktop, and taskbar. Display output is carried out […]

Release of Ubuntu Sway Remix 24.04

The release of the Ubuntu Sway Remix 24.04 LTS distribution is now available, featuring a pre-configured and ready-to-use desktop based on the Sway tiling window manager. This distribution is an unofficial edition of Ubuntu 24.04, crafted with both experienced GNU/Linux users and novices in mind, who wish to try a tiling window manager environment without the hassle of extensive setup. Downloads are prepared for […]

Firefox 127.0.2 update fixes YouTube issues

An updated release of Firefox 127.0.2 is now available, addressing video playback stuttering issues on YouTube when skipping positions in the stream. The problem was caused by incorrect stream formatting in VP9 on YouTube's side and manifests, among other issues, for VP9 videos with quality above 1080p. The YouTube stream does not ensure consistent ordering of timestamps for incoming video segments, which […]

Owner change of the Polyfill library led to the injection of malicious code on 110,000 sites

Over 110,000 sites using the open-source JavaScript library Polyfill for compatibility with older browser versions became victims of malicious changes made to the library's code by the new owner of the project. Malicious code was embedded into the library, which is loaded on sites via the domain cdn.polyfill.io, redirecting users to fraudulent websites (such as googie-anaiytics.com), betting companies, and online casinos. The Polyfill project was sold in February […]

Support for vertical tabs added to Firefox Nightly builds

New implementations of a sidebar and vertical tab placement have been added to Firefox Nightly builds, from which release Firefox 129 will be formed on August 6, allowing additional screen space to be dedicated to viewing site content on widescreen displays (since April, vertical tabs have been tested in separate larch builds, and are now available in standard Nightly builds). To enable […]

A new atomically updatable distribution of openSUSE Leap Micro 6.0 has been released

The openSUSE project developers have released the atomically updatable distribution openSUSE Leap Micro 6.0, designed for creating microservices and for use as a base system for virtualization platforms and container isolation. Installation builds are available for x86_64 and ARM64 (Aarch64) architectures, as well as ready system images for virtualization systems and raw images for copying to media.

Let’s Encrypt has transitioned to the NTP server ntpd-rs, written in the Rust programming language.

The non-profit certificate authority Let’s Encrypt, community-controlled and providing certificates free of charge to anyone who wishes, has announced its shift to using the NTP server ntpd-rs, developed in the Rust programming language with a focus on security and stability. The project is distributed under the Apache 2.0 and MIT licenses, fully supports NTP and NTS (Network Time Security) protocols at both client and server levels, and can be used […]

A built-in AI assistant has been proposed for testing in Firefox.

Mozilla has announced experiments to integrate a chatbot into Firefox that utilizes large language models to interact with users in natural language. Testing of the chatbot will begin this week in the nightly builds of Firefox. The chatbot will be embedded in the sidebar and can optionally operate through services such as ChatGPT, Google Gemini, HuggingChat, and Le Chat Mistral. In the future […]

Atomic variants of Fedora Linux plan to switch to the Composefs filesystem.

Developers of the Fedora project intend to shift atomically updated editions of the distribution by default to the Composefs filesystem. If approved by the FESCo (Fedora Engineering Steering Committee), which is responsible for the technical aspects of Fedora development, Composefs will begin to be used in Fedora Silverblue (GNOME), Fedora Kinoite (KDE), Fedora CoreOS, Fedora IoT, Fedora Sway Atomic, and Fedora Budgie Atomic builds. The change […]

Vulnerability in UEFI firmware Phoenix affecting many devices with Intel CPUs

A vulnerability (CVE-2024-0762) has been discovered in the Phoenix SecureCore UEFI firmware, used in many laptops, PCs, and servers with Intel processors, which allows for code execution at the firmware level with system access. This vulnerability can be exploited after a successful attack on the system to leave a backdoor in the firmware running above the operating system, bypassing OS security mechanisms, and remaining undetectable by programs […]

Release of SKUDONET 7.1, a distribution for creating traffic balancers

The release of SKUDONET 7.1 has been announced, which develops a specialized distribution based on Debian GNU/Linux, optimized for deploying traffic balancers and reverse proxies, as well as for creating infrastructure for application delivery. It supports the creation of balancers for HTTP/HTTPS and the implementation of services for distributing arbitrary TCP and UDP traffic across nodes. Management and monitoring of the system are carried out through […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster