A critical vulnerability has been identified in Apache Log4j, a popular logging framework for Java applications, allowing arbitrary code execution when logging specially formatted values in the format "{jndi:URL}". Attacks can be conducted on Java applications that log values obtained from external sources, such as during error message logging. It is noted that the issue affects […]
The NPM repository has identified 17 malicious packages that were distributed using typosquatting, i.e., by assigning names similar to those of popular libraries, anticipating that users would make a typo when typing the name or would overlook the differences while selecting a module from the list. The packages discord-selfbot-v14, discord-lofy, discordsystem, and discord-vilao used a modified version of the legitimate library discord.js, which provides functions for […]
MariaDB, alongside its namesake nonprofit organization overseeing the development of the MariaDB database server, has announced a significant change in the schedule for building the MariaDB Community Server and its support scheme. Until now, MariaDB has released one major branch each year and provided support for it for approximately 5 years. Under the new scheme, significant releases containing functional changes […]
Microsoft has introduced the open-source package Microsoft-Performance-Tools for performance analysis and diagnosing performance-related issues on Linux and Android platforms. It offers a set of command-line utilities for system-wide performance analysis and profiling of individual applications. The code is written in C# using the .NET Core platform and is distributed under the MIT license. As a source for […]
The release of the open billing system ABillS 0.92 is now available, with components distributed under the GPLv2 license. Key innovations include: The Paysys module has been revamped with most payment modules remodeled and tests added. The Callcenter module has been redesigned. In CRM/Maps2, object highlighting on the map for bulk modifications has been added. The Extfin module has been reworked, and periodic charges for subscribers have been added. Support for selective session detailing for clients (s_detail) has been implemented. An ISG plugin has been added […]
The release of the specialized Tor Browser 11.0.2 has been announced, focusing on providing anonymity, security, and privacy. When using the Tor Browser, all traffic is redirected solely through the Tor network, making it impossible to connect directly through the current system's network connection, which prevents tracking the user's real IP address (in the event of a browser hack, attackers may gain access to system network settings, so […
The release of Calculate Linux 22 is now available. This distribution, developed by the Russian-speaking community, is based on Gentoo Linux, supports a continuous update cycle, and is optimized for quick deployment in corporate environments. The new version implements the ability to update long-neglected systems, translates Calculate utilities to Python 3, and defaults to the PipeWire sound server. For […]
The release of the open-source speech synthesis system RHVoice 1.6.0 has occurred. Initially developed to provide quality support for the Russian language, it has since been adapted for other languages, including English, Portuguese, Ukrainian, Kyrgyz, Tatar, and Georgian. The code is written in C++ and is distributed under the LGPL 2.1 license. It supports operation in GNU/Linux, Windows, and Android. The program is compatible with typical TTS interfaces (text-to-speech) for […]
Due to the increasing cases of repository hijacking in major projects and the promotion of malicious code through the compromise of developer accounts, GitHub is implementing universal enhanced account verification. Mandatory two-factor authentication will be introduced separately for maintainers and administrators of the 500 most popular NPM packages at the beginning of next year. From December 7, 2021, to January 4, 2022, […]
Roskomnadzor has officially amended the unified register of prohibited sites, blocking access to www.torproject.org. All IPv4 and IPv6 addresses of the project's main site have been included in the register, but additional sites not associated with the distribution of Tor Browser, such as blog.torproject.org, forum.torproject.net, and gitlab.torproject.org, remain accessible. The block also does not affect official mirrors such as tor.eff.org, gettor.torproject.org, and tb-manual.torproject.org. The version for […]
The FreeBSD 12.3 release has been presented, published for the architectures amd64, i386, powerpc, powerpc64, powerpcspe, sparc64, and armv6, armv7, and aarch64. Additionally, images for virtualization systems (QCOW2, VHD, VMDK, raw) and cloud environments such as Amazon EC2 have been prepared. The release of FreeBSD 13.1 is expected in the spring of 2022. Key innovations include: a script /etc/rc.final has been added, which is executed at the final stage of operation after all […]
The release of the Firefox 95 web browser has occurred. Additionally, an update to the long-term support branch — 91.4.0 — has been formed. The Firefox 96 branch will soon enter beta testing, with the release scheduled for January 11. Key innovations: An additional level of isolation has been implemented for all supported platforms, based on RLBox technology. The proposed isolation layer blocks security issues […]