The nightly builds that will form the release of Firefox 94 have incorporated a change that includes a new rendering backend for graphical environments using the X11 protocol by default. This new backend is notable for using EGL for graphics output instead of GLX. It supports open OpenGL drivers Mesa 21.x and proprietary NVIDIA drivers 470.x. Proprietary OpenGL drivers from AMD are not yet […]
Google has released an update for Chrome 93.0.4577.82, which fixes 11 vulnerabilities, including two issues that are already being exploited by attackers (0-day). Details are not yet disclosed, but it's known that the first vulnerability (CVE-2021-30632) is caused by a flaw that leads to a buffer overflow in the JavaScript engine V8, while the second issue (CVE-2021-30633) exists in the implementation of the Indexed DB API and is related to […]
The second release of starter kits on the Alt Ten platform has been published. These images are suitable for experienced users who prefer to determine their own application package list and configure the system (even creating their own derivatives) for starting work with a stable repository. As composite works, they are distributed under the GPLv2+ license. Options include a basic system and one of the environments […]
A group of researchers from American, Australian, and Israeli universities has proposed a new side-channel attack technique to exploit Spectre-class vulnerabilities in browsers based on the Chromium engine. The attack, codenamed Spook.js, allows attackers to bypass site isolation mechanisms by running JavaScript code and read the contents of the entire address space of the current process, that is, accessing the data of pages that are loaded […]
HashiCorp explained the reason for the recent addition to the open source configuration management platform Terraform repository regarding the temporary suspension of review and acceptance of pull requests submitted by community members. The note was perceived by some participants as a crisis in Terraform's open development model. Terraform developers quickly reassured the community, stating that the note was misunderstood and was added merely for […]
The developers of the MidnightBSD project, which is creating a desktop-oriented operating system based on FreeBSD with elements ported from DragonFly BSD, OpenBSD, and NetBSD, have warned users about the discovery of traces of a hack on one of their servers. The breach was accomplished by exploiting a vulnerability, CVE-2021-26084, found in late August in the proprietary collaboration engine Confluence (provided for free by Atlassian) […
The Revolt project is developing a communication platform aimed at creating an open-source alternative to the proprietary messenger Discord. Like Discord, the Revolt platform is focused on creating spaces for organizing communication among communities and groups with shared interests. Revolt allows users to launch their own server for communication and, if necessary, integrate it with a website or communicate using available client […
A new version of the Ultimaker Cura 4.11 package is available, providing a graphical interface for preparing models for 3D printing (slicing). Based on the model, the program defines the working scenario of the 3D printer when applying each layer sequentially. In the simplest case, it is sufficient to import the model in one of the supported formats (STL, OBJ, X3D, 3MF, BMP, GIF, JPG, PNG), select the settings for speed, material, and quality, and […
Microsoft has released an update for the CBL-Mariner 1.0.20210901 distribution (Common Base Linux Mariner), which is being developed as a universal base platform for Linux environments used in cloud infrastructure, edge systems, and various Microsoft services. The project aims to unify the Linux solutions used within Microsoft and simplify the maintenance of Linux systems for various purposes. The project's developments are distributed under the MIT license. In the new release: […
The experimental branch of the open implementation of WinAPI — Wine 6.17 has been released. Since the release of version 6.16, 12 bug reports have been closed and 375 changes have been made. The most significant changes are: Improved support for high-DPI screens in built-in applications. The WineCfg program has been converted to PE (Portable Executable) format. Continued preparation for the implementation of the GDI system call interface. […]
A critical vulnerability (CVE-2021-3781) has been identified in Ghostscript, a toolset for processing, converting, and generating documents in PostScript and PDF formats. This vulnerability allows arbitrary code execution when processing specially crafted files. Emil Lerner initially pointed out the issue, discussing the vulnerability on August 25 at the ZeroNights X conference in St. Petersburg (his presentation covered how Emil […]
Google has released version 2.14 of the Dart programming language, continuing the development of the radically revamped Dart 2 branch. This version differs from the original Dart language by implementing strong static typing (types can be inferred automatically, so specifying types is not mandatory; however, dynamic typing is no longer used, and the originally computed type is fixed to the variable with strict enforcement thereafter […]