Author: Yuri Gagarin

Experiment to gain control over packages in the AUR repository

Results have been published from an experiment on seizing control over packages in the AUR (Arch User Repository), which is used by third-party developers to distribute their packages without inclusion in the main Arch Linux distribution repositories. Researchers prepared a script to check for the expiration of domain registrations found in PKGBUILD and SRCINFO files. During the execution of this script, 14 expired domains were identified, used in 20 […]

Release of Display Server Mir 2.10

The release of display server Mir 2.10 has been announced, which continues to be developed by Canonical, despite the abandonment of the Unity shell and the Ubuntu edition for smartphones. Mir remains in demand in Canonical projects and is now positioned as a solution for embedded devices and the Internet of Things (IoT). Mir can be used as a compositing server for Wayland, allowing apps to run in environments […]

Firefox 106.0.2 and Tor Browser 11.5.6 Update

A patch release of Firefox 106.0.2 is now available, addressing several issues: Fixed a problem with missing content in some PDF forms. In the configuration, the width of the column showing the current state of website notification permissions has been normalized. Resolved browser hangs when using accessibility tools on certain sites (for example, when opening the Proxmox web interface). A problem has been fixed […]

Chrome 107 has been released.

Google has released version 107 of the Chrome web browser. At the same time, a stable release of the free Chromium project, which serves as the basis for Chrome, is also available. Chrome differs from Chromium by using Google logos, having a system for sending crash notifications, modules for playing copy-protected video content (DRM), automatic update installation, constant Sandbox isolation, provision of keys to Google APIs, and transmission during […]

Documentation for PostgreSQL 15.0 is available in English

Postgres Pro has published a full translation of the PostgreSQL 15.0 database management system documentation into English (PDF, Epub). In addition to the translation of the official documentation, several publicly available English-language books on PostgreSQL have been released — "Postgres: A First Encounter" (PDF), "Inside PostgreSQL" (PDF), "PostgreSQL. Basics of SQL Language" (PDF), and "Introduction to Database Technologies" (PDF). Source: opennet.ru

Lennart Poettering proposed a new architecture for verified Linux boot.

Lennart Poettering has published a proposal for modernizing the boot process of Linux distributions aimed at addressing existing issues and simplifying the organization of a fully verified boot that verifies the integrity of the kernel and base system environment. The necessary changes for implementing the new architecture are already included in the systemd codebase and affect components such as systemd-stub, systemd-measure, systemd-cryptenroll, systemd-cryptsetup, systemd-pcrphase, and systemd-creds. Proposed changes […]

The readiness of the Sigstore code cryptographic verification system has been announced.

Google has announced the formation of the first stable releases of the components that make up the Sigstore project, which is declared suitable for creating production implementations. Sigstore develops tools and services for software verification using digital signatures and maintaining a public log that confirms the authenticity of changes (transparency log). The project is being developed under the auspices of the non-profit organization Linux Foundation by companies such as Google, Red Hat, Cisco, vmWare, […]

Vulnerabilities in Samba leading to buffer overflow and out-of-bounds access

Corrective releases of Samba package versions 4.17.2, 4.16.6, and 4.15.11 have been published to fix two vulnerabilities. The release of package updates across distributions can be tracked on the pages: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD. CVE-2022-3437 — buffer overflow in unwrap_des() and unwrap_des3() functions provided in the GSSAPI library from the Heimdal package (included with Samba since version 4.0). Exploiting the vulnerability […]

A draft of the third edition of the PNG format has been published

The W3C Consortium has published a draft of the third edition of the specification standardizing the PNG image packaging format. The new version is fully backward compatible with the second edition of the PNG specification released in 2003 and features additional capabilities such as support for animated images, the ability to integrate EXIF metadata, and the provision of CICP (Coding-Independent Code Points) properties for defining color spaces (including […]

Release of Brython 3.11, an implementation of the Python language for web browsers

The release of the Brython 3.11 project (Browser Python) has been introduced, implementing the Python 3 programming language for execution in web browsers, allowing the use of Python instead of JavaScript for Web script development. The project code is written in Python and distributed under the BSD license. By including the brython.js and brython_stdlib.js libraries, web developers can utilize Python to define the logic of a website on […]

Initial support for the RISC-V architecture has been added to the Android codebase.

Changes have begun to be integrated into the AOSP (Android Open Source Project) repository, where the source texts of the Android platform are developed, to support devices with processors based on the RISC-V architecture. The set of changes for RISC-V support has been prepared by Alibaba Cloud and includes 76 patches covering various subsystems, including the graphics stack, audio system, video playback components, bionic library, Dalvik virtual machine, […]

Release of Programming Language Python 3.11

After a year of development, a significant release of the Python programming language 3.11 has been made. This new branch will be supported for one and a half years, after which there will be three and a half additional years for vulnerability patching. Simultaneously, alpha testing of the Python 3.12 branch has begun (according to the new development schedule, work on a new branch starts five months before release […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster