Author: Yuri Gagarin

Vulnerability in LibreOffice allows script execution while working with a document

A vulnerability (CVE-2022-3140) has been identified in the free office suite LibreOffice, allowing for the execution of arbitrary scripts by clicking on a specially crafted link in a document or when triggering a specific event while working with a document. The issue has been resolved in the updates LibreOffice 7.3.6 and 7.4.1. The vulnerability was caused by the addition of support for an additional macro call scheme ‘vnd.libreoffice.command’, specific to LibreOffice. This scheme was included in that […]

A national open source code repository has been approved in the Russian Federation

The Russian government has adopted a resolution 'On conducting an experiment to provide the right to use programs for electronic computers, algorithms, databases and related documentation, including exclusive rights belonging to the Russian Federation, on the basis of open licenses and creating conditions for the use of open-source software'. The resolution mandates: The creation of a national repository for open-source software; Placement of […]

Chrome OS 106 and the first gaming Chromebooks are now available.

The release of the Chrome OS 106 operating system is now available, which is based on the Linux kernel, uses the upstart system manager, ebuild/portage build tools, open components, and the Chrome 106 web browser. The user environment of Chrome OS is limited to the web browser, and instead of standard applications, web applications are used; nevertheless, Chrome OS includes a full multi-window interface, desktop, and taskbar. The source codes are distributed under […]

Release of Kata Containers 3.0 with virtualization-based isolation

After two years of development, the release of Kata Containers 3.0 has been published, enhancing the stack for executing containers using isolation based on full virtualization mechanisms. The project was created by Intel and Hyper by merging the technologies of Clear Containers and runV. The project code is written in Go and Rust, and is distributed under the Apache 2.0 license. The development of the project is overseen by a working […]

An attempt has been made to create a patent pool for the free audio codec Opus.

Vectis IP, a company specializing in intellectual property management, has announced the formation of a patent pool for licensing technologies used in the open audio codec Opus. Ten years ago, Opus was standardized (RFC 6716) by the IETF (Internet Engineering Task Force) as an audio codec for internet applications that requires no licensing fees and does not overlap with patented technologies. Vectis IP […]

Release of the Virtualization System VirtualBox 7.0

After almost three years since the last significant release, Oracle has published VirtualBox 7.0. The installation packages are available for Linux (Ubuntu, Fedora, openSUSE, Debian, SLES, RHEL for AMD64 architecture), Solaris, macOS, and Windows. Key changes: Support for full encryption of virtual machines has been added. Encryption also applies to saved state snapshots […]

Release of the distributed replicated block device DRBD 9.2.0

The release of the distributed replicable block device DRBD 9.2.0 has been published, allowing for a RAID-1-like array formed from several disks of different machines connected over the network (network mirroring). The system is implemented as a module for the Linux kernel and is distributed under the GPLv2 license. The drbd 9.2.0 branch can be used for a transparent replacement of drbd 9.x.x and is fully compatible at the protocol, file […]

Release of Wayland-Protocols 1.27

The release of the wayland-protocols package 1.27 has been published, containing a set of protocols and extensions that enhance the capabilities of the basic Wayland protocol and provide the features necessary for building composite servers and user environments. All protocols go through three phases sequentially — development, testing, and stabilization. After the development stage (the 'unstable' category) is completed, the protocol is placed in the 'staging' branch and officially included in the wayland-protocols set, […]

Intel has confirmed the authenticity of the leak of UEFI firmware code for Alder Lake chips.

Intel has confirmed the authenticity of the source codes for UEFI firmwares and BIOS published by an unknown entity on GitHub. A total of 5.8 GB of code, utilities, documentation, blobs, and configurations related to the creation of firmware for systems using processors based on the Alder Lake microarchitecture, released in November 2021, have been published. The most recent change in the published code was dated September 30, 2022. According to […]

Changes have been accepted in OpenBSD for additional protection of process memory.

Theo de Raadt has added a series of patches to the OpenBSD codebase for enhanced memory protection of processes in user space. Developers have been proposed a new system call and a related library function named mimmutable, which allows for the locking of access rights when reflecting in memory (memory mappings). After locking, the rights assigned to the memory area, such as write prohibition […]

Release of the cryptographic library LibreSSL 3.6.0.

The developers of the OpenBSD project have released a portable version of the LibreSSL 3.6.0 package, which is a fork of OpenSSL aimed at providing a higher level of security. The LibreSSL project emphasizes robust support for the SSL/TLS protocols while removing unnecessary functionality, adding additional protective measures, and conducting significant clean-up and reworking of the codebase. The release of LibreSSL 3.6.0 is considered experimental, in which […]

Release of Parrot 5.1 distribution with a selection of security assessment tools

The release of Parrot 5.1 distribution is available, based on the Debian 11 package base and includes a collection of tools for system security assessment, forensic analysis, and reverse engineering. Several ISO images with the MATE environment are offered for download, designed for everyday use, security testing, installation on Raspberry Pi 4 boards, and creating specialized installations, for example, for deployment in cloud environments. […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster