Author: ProHoster

In the Russian Federation, the promotion of its own root TLS certificate has begun

Users of the government services portal of the Russian Federation (gosuslugi.ru) received a notification about the creation of a state certification center with their root TLS certificate, which is not included in the root certificate stores of operating systems and major browsers. Certificates are issued on a voluntary basis to legal entities and are intended to be used in situations of revocation or termination of renewal of TLS certificates as a result of sanctions. For example, certification centers located in [...]

SUSE ceases sales in Russia

SUSE announced the suspension of all direct sales in Russia and the review of all business relationships, taking into account the imposed sanctions. The company also expressed readiness to comply with additional sanctions that may be adopted. Source: opennet.ru

Vulnerabilities in APC Smart-UPS that allow remote control of the device

Security researchers from Armis have disclosed three vulnerabilities in APC managed uninterruptible power supplies that could allow remote control of the device to be taken over and manipulated, such as turning off power to certain ports or using it as a springboard for attacks on other systems. The vulnerabilities are codenamed TLStorm and affect APC Smart-UPS devices (SCL series, […]

BHI is a new Specter class vulnerability in Intel and ARM processors

A group of researchers from the Vrije Universiteit Amsterdam has identified a new vulnerability in the microarchitectural structures of Intel and ARM processors, which is an extended version of the Specter-v2 vulnerability, which allows one to bypass the eIBRS and CSV2 protection mechanisms added to processors. The vulnerability has been given several names: BHI (Branch History Injection, CVE-2022-0001), BHB (Branch History Buffer, CVE-2022-0002) and Specter-BHB (CVE-2022-23960), which describe different manifestations of the same problem [... ]

Release of Tor Browser 11.0.7 and Tails 4.28 distribution

A release of a specialized distribution kit, Tails 4.28 (The Amnesic Incognito Live System), based on the Debian package base and designed to provide anonymous access to the network, has been created. Anonymous access to Tails is provided by the Tor system. All connections other than traffic through the Tor network are blocked by the packet filter by default. To store user data in the user data saving mode between launches, […]

Firefox 98 release

The Firefox 98 web browser has been released. In addition, a long-term support branch update has been created - 91.7.0. The Firefox 99 branch has been transferred to the beta testing stage, the release of which is scheduled for April 5. Main innovations: The behavior when downloading files has been changed - instead of displaying a request before the download starts, files now start downloading automatically, and a notification about the start of […]

Red Hat stops working with organizations from Russia and Belarus

Red Hat has made the decision to end its partnerships with all companies headquartered or headquartered in Russia or Belarus. The company also stops selling its products and services in Russia and Belarus. As for employees located in Russia and Ukraine, Red Hat expressed its readiness to provide them with assistance and all the necessary resources. Source: opennet.ru

Release of Free Heroes of Might and Magic II (fheroes2) - 0.9.13

Project fheroes2 0.9.13 is now available, attempting to recreate Heroes of Might and Magic II. The project code is written in C++ and distributed under the GPLv2 license. To run the game, files with game resources are required, which can be obtained, for example, from the demo version of Heroes of Might and Magic II. Major changes: A prototype of a special console mode for people with […]

Fedora Linux 37 intends to stop building optional packages for the i686 architecture

For implementation in Fedora Linux 37, a policy is slated to recommend that maintainers stop building packages for the i686 architecture if the need for such packages is questionable or would result in a significant investment of time or resources. The recommendation does not apply to packages used as dependencies in other packages or used in the context of "multilib" to enable 32-bit programs to run on 64-bit […]

Release of DentOS 2.0, a network operating system for switches

The release of the DentOS 2.0 network operating system, based on the Linux kernel and intended for equipping switches, routers and specialized network equipment, is available. The development is carried out with the participation of Amazon, Delta Electronics, Marvell, NVIDIA, Edgecore Networks and Wistron NeWeb (WNC). The project was originally founded by Amazon to equip network equipment in its infrastructure. The DentOS code is written in […]

Vulnerability in the Linux kernel that allows corruption of read-only files

A vulnerability has been identified in the Linux kernel (CVE-2022-0847) that allows the contents of the page cache to be overwritten for any files, including those in read-only mode, opened with the O_RDONLY flag, or located on file systems mounted in read-only mode. In practical terms, the vulnerability could be used to inject code into arbitrary processes or corrupt data in opened […]

First release of LWQt, a Wayland-based variant of the LXQt wrapper

Presented the first release of LWQt, a custom shell variant of LXQt 1.0 that has been converted to use the Wayland protocol instead of X11. Like LXQt, the LWQt project is presented as a lightweight, modular and fast user environment that adheres to the methods of classic desktop organization. The project code is written in C++ using the Qt framework and is distributed under the LGPL 2.1 license. The first issue contains […]