Author: Yuri Gagarin

Around 73,000 tokens and passwords of open projects were discovered in the public logs of Travis CI.

Aqua Security has published the results of a study on the presence of sensitive data in assembly logs publicly available in the Travis CI continuous integration system. Researchers found a way to extract 770 million logs from various projects. In a test upload of 8 million logs, approximately 73 thousand tokens, credentials, and access keys related to various popular services were identified in the obtained data, including […]

Release of postmarketOS 22.06, a Linux distribution for smartphones and mobile devices

The release of postmarketOS 22.06 has been announced, promoting a Linux distribution for smartphones based on the Alpine Linux package base, the standard C library Musl, and the BusyBox utility suite. The goal of the project is to provide a Linux distribution for smartphones that is independent of the support lifecycle of official firmware and not tied to the typical solutions of the major industry players that set the development vector. Builds have been prepared for the PINE64 PinePhone, […]

Failure in the GitLab infrastructure of FreeDesktop, affecting the repositories of many projects.

The community-supported FreeDesktop development infrastructure based on the GitLab platform (gitlab.freedesktop.org) has become unavailable due to the failure of two SSD drives in the distributed storage based on the Ceph filesystem. There are currently no forecasts regarding whether it will be possible to recover all relevant data from GitLab's internal services (mirrors operated for git repositories, but the data for bug tracking and code review may […]

Alpha testing of PHP 8.2 has begun

The first alpha release of the new branch of the PHP programming language 8.2 has been announced. The release is scheduled for November 24. Major innovations already available for testing or planned for implementation in PHP 8.2 include: the addition of distinct types "false" and "null," which can be used, for example, to return a function's error completion indication or an empty value. Previously, "false" and "null" could only be used in […]

A vulnerability in firejail allows root access in the system

A vulnerability (CVE-2022-31214) has been identified in the Firejail application sandboxing utility, allowing a local user to gain root privileges on the host system. A working exploit is publicly available, tested on current releases of openSUSE, Debian, Arch, Gentoo, and Fedora with the firejail utility installed. The issue has been fixed in firejail release 0.9.70. As a workaround, configuration settings can be adjusted in (/etc/firejail/firejail.config) […]

Bottlerocket 1.8, a distribution based on isolated containers, is now available

The release of the Linux distribution Bottlerocket 1.8.0 has been announced, developed with participation from Amazon for the effective and secure deployment of isolated containers. The distribution's tooling and management components are written in Rust and released under MIT and Apache 2.0 licenses. Bottlerocket supports deployment in Amazon ECS clusters, VMware, and AWS EKS Kubernetes, as well as the creation of custom builds and editions allowing for […]

Release of EasyOS 4.0, a unique distribution from the creator of Puppy Linux

Barry Kauler, the founder of the Puppy Linux project, has published an experimental distribution EasyOS 4.0, combining Puppy Linux technologies with container isolation for running system components. The distribution is managed through a set of graphical configurators developed by the project. The size of the boot image is 773 MB. Features of the distribution: Each application, as well as the desktop itself, can be launched in separate containers for isolation […]

Release of the Apache 2.4.54 HTTP server with vulnerability fixes

The release of HTTP server Apache 2.4.53 has been announced, featuring 19 changes and fixing 8 vulnerabilities: CVE-2022-31813 — a vulnerability in mod_proxy that allows blocking the transmission of X-Forwarded-* headers containing information about the IP address from which the original request came. This issue can be exploited to bypass IP address access restrictions. CVE-2022-30556 — a vulnerability in mod_lua that allows access to data beyond […]

Release of the Cinnamon 5.4 desktop environment

After 6 months of development, the release of the Cinnamon 5.4 user environment has been formed, within which the community of Linux Mint developers is developing a fork of the GNOME Shell, the Nautilus file manager, and the Mutter window manager, aimed at providing a classic GNOME 2 style environment with support for successful interaction elements from GNOME Shell. Cinnamon is based on GNOME components, but these components […]

Release of the MidnightBSD 2.2 operating system. Update of DragonFly BSD 6.2.2

The release of the desktop-oriented operating system MidnightBSD 2.2 has taken place, based on FreeBSD with elements ported from DragonFly BSD, OpenBSD, and NetBSD. The basic desktop environment is built on GNUstep, but users have the option to install WindowMaker, GNOME, Xfce, or Lumina. A bootable image of 774 MB (x86, amd64) is prepared for download. Unlike other desktop builds of FreeBSD, the MidnightBSD OS was initially developed […]

Packages with Qt6 are prepared for Debian 11

The package maintainer for the Qt framework in Debian has announced the formation of packages with the Qt6 branch for Debian 11. The set includes 29 packages with various components of Qt 6.2.4 and a package with the libassimp library supporting 3D model formats. The packages are available for installation through the backports system (repository bullseye-backports). Initially, there were no plans to maintain packages for […]

Release of PoCL 3.0 with an independent implementation of the OpenCL 3.0 standard

The release of the PoCL 3.0 project (Portable Computing Language OpenCL) has been announced, advancing the implementation of the OpenCL standard, independent of graphics accelerator manufacturers, and allowing various backends to execute OpenCL kernels on different types of graphics and central processors. The project code is distributed under the MIT license. It supports operation on X86_64, MIPS32, ARM v7, AMD HSA APU, NVIDIA GPU, and various specialized platforms […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster