An experimental release of the open implementation of WinAPI — Wine 7.15 has occurred. Since the release of version 7.14, 22 bug reports have been closed, and 226 changes have been made. The most significant changes include: support for command lists in Direct2D (the ID2D1CommandList object, which provides methods for saving the state of a command set that can be recorded and replayed). Support for the RSA encryption algorithm has been implemented. In […]
The release of the Toybox 0.8.8 system utility suite has been announced, which, like BusyBox, is formatted as a single executable file optimized for minimal system resource consumption. The project is developed by a former maintainer of BusyBox and is distributed under the 0BSD license. The main purpose of Toybox is to provide manufacturers with a minimalist set of standard utilities without disclosing the source code of modified components. Toybox's capabilities are still […]
The release of the GNU Binutils 2.39 system utility suite has been announced, which includes programs such as the GNU linker, GNU assembler, nm, objdump, strings, and strip. In the new version: The ELF linker now issues a warning when enabling the ability to execute code on the stack, as well as when there are memory segments in the binary file for which […]
A vulnerability (CVE-2022-2590) has been discovered in the Linux kernel, allowing an unprivileged user to modify memory-mapped files and tmpfs files without having write permissions, thereby elevating their privileges in the system. The issue is similar to the Dirty COW vulnerability but is limited to impacts on data in shared memory (shmem).
Microsoft has published an Emoji library that includes over 1,500 icons available in various styles (3D, multicolor, flat, high-contrast). The library's content corresponds to a new set of Emojis introduced to Windows 11 users last year, now enhanced with 3D versions of the icons. The library is open under an MIT license, allowing for derivative works and use of the icons in products. Source: opennet.ru
Canonical has introduced the first maintenance release of the Ubuntu 22.04.1 LTS distribution, which includes updates for several hundred packages related to vulnerability fixes and stability improvements. The new version also addresses installer and bootloader bugs. The release of Ubuntu 22.04.1 marks the completion of the base stabilization for the LTS release — users of Ubuntu 20.04 will now be prompted to upgrade to […]
Details have emerged about a new attack on Intel processors — AEPIC Leak (CVE-2022-21233) — which causes sensitive data to leak from isolated Intel SGX (Software Guard eXtensions) enclaves. The issue affects Intel CPUs of the 10th, 11th, and 12th generations (including the new Ice Lake and Alder Lake series) and is due to an architectural flaw that allows access to uninitialized data left in APIC registers […]
Several vulnerabilities have been discovered in the Linux kernel, caused by accessing already freed memory areas, allowing a local user to escalate their privileges in the system. Working prototypes for exploits have been created for all identified issues and will be published one week after the vulnerabilities are disclosed. Patches addressing the issues have been sent to Linux kernel developers. CVE-2022-2588 — a vulnerability in the cls_route filter implementation, […]
Google has announced an expansion of its initiative to reward payouts for discovering vulnerabilities in the Linux kernel. The maximum payout for a new vulnerability and the creation of a working exploit based on it has been increased from $91,000 to $133,000. In addition to the previously used kCTF (Kubernetes Capture the Flag) environment for hacking attempts, new environments have been offered based on the latest stable […]
The Kali Linux 2022.3 distribution release has been announced, intended for testing systems for vulnerabilities, conducting audits, analyzing residual information, and identifying the aftermath of attacks by malicious actors. All original contributions made within the distribution are distributed under the GPL license and available through a public Git repository. Several versions of the iso images have been prepared for download, sized at 432 MB, 2.9 GB, 3.4 GB, and 9.8 […]
The release of the nftables 1.0.5 packet filter has been published, unifying the filtering interfaces for IPv4, IPv6, ARP, and network bridges (aiming to replace iptables, ip6tables, arptables, and ebtables). Concurrently, the release of the accompanying library libnftnl 1.2.3 has been published, providing a low-level API for interacting with the nf_tables subsystem. The nftables package includes packet filter components operating in user space, while […]
GitHub has opened a discussion on a proposal to implement the Sigstore service for verifying packages through digital signatures and maintaining a public log to confirm authenticity when distributing releases. The use of Sigstore will allow for an additional level of protection against attacks targeting the substitution of software components and dependencies (supply chain). For example, the proposed change will protect project source codes in case of account compromise […]