Author: Yuri Gagarin

Vulnerability in Apache HTTP Server 2.4.49 allowing access to files outside the site root.

An emergency update to the Apache HTTP server 2.4.50 has been formed, which fixes an actively exploited zero-day vulnerability (CVE-2021-41773) that allows access to files outside the website's root directory. This vulnerability can be used to upload arbitrary system files and source texts of web scripts that are accessible for reading by the user under which the HTTP server is running. Developers were notified of the issue back on the 17th […]

Release of Firefox 93

The release of the Firefox 93 web browser has taken place. In addition, updates for the long-term support branches — 78.15.0 and 91.2.0 have been formed. The Firefox 94 branch has moved to beta testing, with a release scheduled for November 2. Key innovations include the default inclusion of support for AVIF (AV1 Image Format) image formats, which utilize intra-frame compression technologies from the AV1 video encoding format. Support for […]

Release of the Python programming language version 3.10

After a year of development, a significant release of the Python programming language 3.10 has been presented. This branch will be supported for one and a half years, after which patches addressing vulnerabilities will be formed for another three and a half years. At the same time, alpha testing of branch Python 3.11 has started (according to the new development schedule, work on the new branch begins five months before the release […]

Release of the mobile platform Android 12

Google has released the open mobile platform Android 12. The source code related to the new release is available in the project's Git repository (branch android-12.0.0_r1). Firmware updates have been prepared for Pixel series devices, as well as for smartphones from Samsung Galaxy, OnePlus, Oppo, Realme, Tecno, Vivo, and Xiaomi. Additionally, universal GSI (Generic System Images) builds have been formed, suitable for different devices on […]

Release of OnlyOffice Desktop 6.4 office suite

The release of the OnlyOffice Desktop 6.4 suite is now available, designed for working with text documents, spreadsheets, and presentations. The editors are formatted as desktop applications that are built with JavaScript using web technologies, but combine client-side and server-side components, designed for standalone use on the user's local system, without referencing an external service. The project's code is distributed […]

Update of the Redis DBMS versions 6.2.6, 6.0.16, and 5.0.14 addressing 8 vulnerabilities

Corrective releases of the Redis DBMS 6.2.6, 6.0.16, and 5.0.14 have been published, addressing 8 vulnerabilities. All users are strongly advised to urgently update Redis to the new versions. Four vulnerabilities (CVE-2021-41099, CVE-2021-32687, CVE-2021-32628, CVE-2021-32627) may lead to buffer overflow when processing specially crafted commands and network requests, but exploitation requires specific configuration parameters (proto-max-bulk-len, set-max-intset-entries, hash-max-ziplist-*, proto-max-bulk-len, client-query-buffer-limit) […]

Unavailability of the Eigen project repository

The Eigen project has encountered technical issues with its main repository. A few days ago, the source code of the project hosted on GitLab became unavailable. Accessing the page results in a 'No repository' error. The releases of the package hosted on the pages are also inaccessible. Discussion participants note that the prolonged unavailability of Eigen has already disrupted the build and continuous testing of many projects, as well […]

Release of Lighttpd 1.4.60 HTTP server

The release of the lightweight HTTP server lighttpd 1.4.60 has taken place. The new version includes 437 changes, mainly related to bug fixes and optimizations. Key innovations: Support for the Range header (RFC-7233) has been added for all non-streaming responses (previously, Range was only supported for serving static files). The implementation of the HTTP/2 protocol has been optimized, reducing memory usage and speeding up the processing of heavily sent initial […]

Release of helloSystem 0.6 distribution, using FreeBSD and resembling macOS

Simon Peter, the creator of the self-contained AppImage package format, has published the release of helloSystem 0.6, based on FreeBSD 12.2 and aimed at common users who are looking to move from macOS due to dissatisfaction with Apple's policies. The system is free of the complexities typical of modern Linux distributions, is fully under user control, and allows former macOS users to feel comfortable. For more information […]

Release of Lumina Desktop 1.6.1

After a year and a half of silence in development, the release of the Lumina 1.6.1 desktop environment has been announced, which has been developed following the cessation of TrueOS development within the Trident project (a desktop distribution of Void Linux). The components of the environment are written using the Qt5 library (without using QML). Lumina adheres to a classic approach to organizing the user environment. It includes a desktop, application panel, session manager, application menu, configuration system […]

Release of Lakka 3.5, a distribution for creating gaming consoles.

The release of Lakka 3.5 has been published, allowing computers, set-top boxes, or single-board computers to be turned into a full-fledged gaming console for playing retro games. The project is a modification of the LibreELEC distribution, originally aimed at creating home theaters. Lakka builds are available for i386, x86_64 platforms (Intel, NVIDIA, or AMD GPUs), Raspberry Pi 1-4, Orange Pi, Cubieboard, Cubieboard2, Cubietruck, Banana Pi, Hummingboard, Cubox-i, […]

A joke about women's age led to a change in the Ruby code of conduct.

Changes have been made to the Ruby project code of conduct, which defines the principles of friendly and respectful communication within the developer community, aimed at clarifying language that allows for abuse: a clause defining tolerance for opposing opinions has been removed. The phrase prescribing a welcoming attitude towards newcomers, young participants, their teachers, and supporters of individuals who cannot control their emotions (‘fire breathing wizards’) has been expanded to all users. […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster