Corrective updates have been released for the stable branch of the DNS server BIND 9.16.18 and the experimental branch 9.17.15 under development, which addresses a serious bug that appeared in the releases of BIND 9.16.17 and 9.17.14 published last week (the day after these releases, developers warned about the issue and recommended not to install versions 9.16.17 and 9.17.14). Versions 9.16.17 and 9.17.14 […]
A vulnerability (CVE-2021-33624) has been found in the Linux kernel that allows the eBPF subsystem to bypass protections against Spectre-class vulnerabilities, enabling the determination of memory contents by creating conditions for speculative execution of certain operations. A certain sequence of commands in privileged code is required for a Spectre attack, leading to the speculative execution of instructions. By manipulating the BPF programs passed for execution, it is possible […]
A new release of the Python library plotly.py 5.0 is available, providing tools for data visualization and various types of statistics. The rendering uses the plotly.js library, which supports over 30 types of 2D and 3D graphs, charts, and maps (the output can be saved as an image or HTML file for interactive display in a browser). The plotly.py code is distributed under the MIT license. In this new release, support for Python […]
The release of Wine Launcher version 1.4.55, which develops a Sandbox environment for running Windows games, is now available. Key features include: isolation from the system, a separate Wine and Prefix for each game, compression into SquashFS images for space savings, a modern launcher style, automatic tracking of changes in the Prefix directory, and generation of patches from this. The project's code is distributed under the GPLv3 license. Significant changes compared to […]
A new version of the Tor Browser 10.0.18, focused on ensuring anonymity, security, and privacy, is available. The browser concentrates on providing anonymity, security, and privacy, with all traffic routed only through the Tor network. Direct connection through the current system's regular network connection is impossible, preventing tracking of the user's real IP address (in the case of browser hacking, attackers may gain access to system […]
APNIC, the registry responsible for allocating IP addresses in the Asia-Pacific region, reported an incident resulting in the SQL dump of the Whois service being exposed, containing confidential data and password hashes. Notably, this is not the first leak of personal data at APNIC — in 2017, the Whois database was already publicly available due to staff oversight. In […]
The release of Rocky Linux 8.4 has taken place, aimed at creating a new free build of RHEL that can take the place of the classic CentOS, after Red Hat decided to end support for the CentOS 8 branch at the end of 2021, rather than in 2029 as originally planned. This is the first stable release of the project, recognized as ready for production deployments. Rocky builds […]
The W3C consortium announced that the Web Audio API has been granted recommended standard status. The Web Audio specification describes a high-level API that allows for the development of web applications in JavaScript for sound synthesis and processing, which operate in web browsers without the need for additional plugins. Use cases for Web Audio include adding sound effects to pages and developing web applications for processing, recording, playback […]
Developers of the NixOS distribution have reported the implementation of integrity verification support for the minimal iso image (iso_minimal.x86_64-linux) using reproducible build mechanisms. Previously, reproducible builds were available at the individual package level, and are now extended to the entire iso image. Any user can create an iso image that is completely identical to the provided downloadable iso image and verify that it is built from the provided source texts and […]
The repository packages.microsoft.com, through which packages with Microsoft products are distributed for various Linux distributions, was non-operational for over 22 hours. This included unavailability for the installation of Linux versions of .NET Core, Microsoft Teams, and Microsoft SQL Server, as well as various Azure devops handlers. Details of the incident have not been disclosed, only that the issues arose due to regressive […]
A vulnerability (CVE-2021-3609) has been identified in the Linux kernel, allowing a local user to elevate their privileges in the system. The issue is caused by a race condition in the implementation of the CAN BCM protocol and is present in Linux kernel releases from 2.6.25 to 5.13-rc6. The problem remains unpatched in distributions (RHEL, Fedora, Debian, Ubuntu, SUSE, Arch). The researcher who discovered the vulnerability was able to craft an exploit to gain root rights […]
The release of the Min web browser 1.20 is available, offering a minimalist interface centered around address bar manipulation. The browser is built using the Electron platform, which allows for the creation of standalone applications based on the Chromium engine and Node.js platform. The Min interface is written in JavaScript, CSS, and HTML. The code is distributed under the Apache 2.0 license. Builds are available for Linux, macOS, and Windows. Min supports navigation […]