Author: ProHoster

Release of dav1d 1.0, the AV1 decoder from the VideoLAN and FFmpeg projects

The VideoLAN and FFmpeg communities have published the release of the dav1d 1.0.0 library with the implementation of an alternative free decoder for the AV1 video encoding format. The project code is written in C (C99) with assembly inserts (NASM/GAS) and is distributed under the BSD license. Support for x86, x86_64, ARMv7 and ARMv8 architectures, and operating systems FreeBSD, Linux, Windows, macOS, Android and iOS has been implemented. The dav1d library supports […]

Pale Moon Browser 30.0 Release

The release of the Pale Moon 30.0 web browser has been published, which forked from the Firefox codebase to provide higher performance, retain the classic interface, minimize memory consumption and provide additional customization options. Pale Moon builds are generated for Windows and Linux (x86 and x86_64). The project code is distributed under the MPLv2 (Mozilla Public License). The project adheres to the classical organization of the interface, without […]

Mozilla Embeds Identifiers in Firefox Installer Downloads

Mozilla has launched a new method for identifying browser installations. Assemblies distributed from the official website, delivered in the form of exe files for the Windows platform, are supplied with dltoken identifiers, unique for each download. Accordingly, several successive downloads of the installation archive for the same platform result in downloading files with different checksums, since the identifiers are added directly […]

Malicious change made to NPM package node-ipc that deletes files on systems in Russia and Belarus

A malicious change was detected in the node-ipc NPM package (CVE-2022-23812), with a 25% probability that the contents of all files that have write access are replaced with the “❤️” character. The malicious code is activated only when launched on systems with IP addresses from Russia or Belarus. The node-ipc package has about a million downloads per week and is used as a dependency on 354 packages, including vue-cli. […]

Results of the legal proceedings related to the Neo4j project and the AGPL license

The US Court of Appeals upheld the district court's earlier decision in a case against PureThink related to Neo4j Inc.'s intellectual property infringement. The lawsuit concerns violation of the Neo4j trademark and the use of false statements in advertising during the distribution of the Neo4j DBMS fork. Initially, the Neo4j DBMS developed as an open project, supplied under the AGPLv3 license. Over time, the product […]

gcobol, a COBOL compiler based on GCC technologies, introduced

The GCC compiler suite developer mailing list features the gcobol project, which aims to create a free compiler for the COBOL programming language. In its current form, gcobol is being developed as a fork of GCC, but after completion of development and stabilization of the project, changes are planned to be proposed for inclusion in the main structure of GCC. The project code is distributed under the GPLv3 license. As a reason for creating a new project [...]

Release of OpenVPN 2.5.6 and 2.4.12 with security fixes

Corrective releases of OpenVPN 2.5.6 and 2.4.12 have been prepared, a package for creating virtual private networks that allows you to organize an encrypted connection between two client machines or provide a centralized VPN server for the simultaneous operation of several clients. The OpenVPN code is distributed under the GPLv2 license, ready-made binary packages are generated for Debian, Ubuntu, CentOS, RHEL and Windows. New versions eliminate a vulnerability that could potentially […]

Remote DoS vulnerability in the Linux kernel exploited by sending ICMPv6 packets

A vulnerability has been identified in the Linux kernel (CVE-2022-0742) that allows you to exhaust available memory and remotely cause a denial of service by sending specially crafted icmp6 packets. The issue is related to a memory leak that occurs when processing ICMPv6 messages with types 130 or 131. The issue has been present since kernel 5.13 and was fixed in releases 5.16.13 and 5.15.27. The problem did not affect the stable branches of Debian, SUSE, […]

Go programming language 1.18 release

The release of the programming language Go 1.18 is presented, which is being developed by Google with the participation of the community as a hybrid solution that combines the high performance of compiled languages ​​with such advantages of scripting languages ​​as ease of writing code, speed of development, and error protection. The project code is distributed under the BSD license. The syntax of Go is based on the familiar elements of the C language with some borrowings from […]

Vulnerability in OpenSSL and LibreSSL leading to a loop when processing invalid certificates

Maintenance releases of the OpenSSL cryptographic library 3.0.2 and 1.1.1n are available. The update fixes a vulnerability (CVE-2022-0778) that can be used to cause denial of service (infinite looping of the handler). To exploit the vulnerability, it is enough to process a specially designed certificate. The problem occurs in both server and client applications that can process user-supplied certificates. The problem is caused by a bug in the […]

Chrome update 99.0.4844.74 fixes critical vulnerability

Google has released Chrome updates 99.0.4844.74 and 98.0.4758.132 (Extended Stable), which fix 11 vulnerabilities, including a critical vulnerability (CVE-2022-0971), which allows you to bypass all levels of browser protection and execute code on the system outside the sandbox -environment. Details have not yet been disclosed, it is only known that the critical vulnerability is associated with accessing already freed memory (use-after-free) in the browser engine […]

Debian's maintainer leaves Debian, disagreeing with new community behavior

The Debian project account management team has terminated Norbert Preining's status for inappropriate behavior on the debian-private mailing list. In response, Norbert decided to stop participating in Debian development and move to the Arch Linux community. Norbert has been involved in Debian development since 2005 and has maintained approximately 150 packages, mostly […]