Author: ProHoster

KaOS 2022.02 distribution release

KaOS 2022.02 is released, a continuous update distribution aimed at providing a desktop based on the latest KDE releases and applications using Qt. Of the distribution-specific design features, one can note the placement of a vertical panel on the right side of the screen. The distribution is developed with Arch Linux in mind, but maintains its own independent repository of over 1500 packages, and […]

Critical vulnerability in Magento e-commerce platform

In the open platform for organizing e-commerce Magento, which occupies about 10% of the market for systems for creating online stores, a critical vulnerability has been identified (CVE-2022-24086), which allows code to be executed on the server by sending a certain request without authentication. The vulnerability has been assigned a severity level of 9.8 out of 10. The problem is caused by incorrect verification of parameters received from the user in the order processing processor. Details of exploitation of the vulnerability […]

Google has increased the amount of rewards for identifying vulnerabilities in the Linux kernel and Kubernetes

Google has announced an expansion of its cash reward initiative for identifying security issues in the Linux kernel, the Kubernetes container orchestration platform, the Google Kubernetes Engine (GKE), and the kCTF (Kubernetes Capture the Flag) vulnerability competition environment. The rewards program has introduced additional bonus payments of $20 thousand for 0-day vulnerability, […]

Introduced Unredacter, a tool for detecting pixelated text

The Unredacter toolkit is presented, which allows you to restore the original text after hiding it using filters based on pixelation. For example, the program can be used to identify sensitive data and passwords pixelated in screenshots or snapshots of documents. It is claimed that the algorithm implemented in Unredacter is superior to previously available similar utilities, such as Depix, and has also been successfully used to pass the […]

Release of XWayland 21.2.0, a component for running X11 applications in Wayland environments

The release of XWayland 21.2.0 is available, a DDX component (Device-Dependent X) that runs the X.Org Server for running X11 applications in Wayland-based environments. Major changes: Added support for the DRM Lease protocol, which allows the X server to function as a DRM controller (Direct Renderering Manager), providing DRM resources to clients. On the practical side, the protocol is used to generate a stereo image with different buffers for the left and right […]

Valve releases Proton 7.0, a suite for running Windows games on Linux

Valve has published the release of the Proton 7.0 project, which is based on the Wine project codebase and aims to run gaming applications built for Windows and featured in the Steam catalog on Linux. The developments of the project are distributed under the BSD license. Proton allows you to directly run Windows-only game applications on the Steam Linux client. The package includes the implementation […]

LibreOffice variant compiled to WebAssembly and running in a web browser

Thorsten Behrens, one of the leaders of the LibreOffice graphics subsystem development team, published a demo version of the LibreOffice office suite, compiled into WebAssembly intermediate code and capable of running in a web browser (about 300 MB of data is downloaded to the user’s system). The Emscripten compiler is used to convert to WebAssembly, and to organize the output, a VCL backend (Visual Class Library) based on a modified […]

Release of the distribution kit for creating firewalls pfSense 2.6.0

The release of a compact distribution for creating firewalls and network gateways pfSense 2.6.0 has been published. The distribution is based on the FreeBSD code base using the developments of the m0n0wall project and the active use of pf and ALTQ. An iso image for amd64 architecture, 430 MB in size, has been prepared for download. The distribution is managed via a web interface. To organize user access on a wired and wireless network, […]

Kali Linux 2022.1 Security Research Distribution Released

The release of the distribution kit Kali Linux 2022.1 is presented, designed to test systems for vulnerabilities, conduct an audit, analyze residual information and identify the consequences of intruder attacks. All original developments created within the distribution are distributed under the GPL license and are available through a public Git repository. Several variants of iso images have been prepared for download, 471 MB, 2.8 GB, 3.5 GB and 9.4 […]

Release of monitoring system Zabbix 6.0 LTS

The free and completely open source monitoring system Zabbix 6.0 LTS has been released. Release 6.0 is classified as a Long Term Support (LTS) version. For users who use non-LTS versions, we recommend upgrading to the LTS version of the product. Zabbix is ​​a universal system for monitoring the performance and availability of servers, engineering and network equipment, applications, databases, […]

Chrome update 98.0.4758.102 fixing 0-day vulnerabilities

Google has created an update to Chrome 98.0.4758.102, which fixes 11 vulnerabilities, including one dangerous problem already used by attackers in exploits (0-day). Details have not yet been disclosed, but what is known is that the vulnerability (CVE-2022-0609) is caused by a use-after-free memory access in code related to the Web Animations API. Other dangerous vulnerabilities include a buffer overflow [...]