Author: ProHoster

Backdoor detected in MonPass CA client software

Avast has published the results of a study into the compromise of the server of the Mongolian certification authority MonPass, which led to the insertion of a backdoor into the application offered for installation to clients. The analysis showed that the infrastructure was compromised through a hack of one of the public MonPass web servers based on the Windows platform. On the specified server, traces of eight different hacks were identified, as a result of which eight webshells were installed […]

Google Opens Missing Sources for Lyra Audio Codec

Google has published an update to the Lyra 0.0.2 audio codec, which is optimized to achieve maximum voice quality when using very slow communication channels. The codec was opened in early April, but was supplied in conjunction with a proprietary mathematical library. In version 0.0.2, this drawback has been eliminated and an open replacement has been created for the specified library - sparse_matmul, which, like the codec itself, is distributed […]

Google Play is moving away from APKs in favor of the App Bundle format

Google has decided to switch the Google Play catalog to use the Android App Bundle application distribution format instead of APK packages. Starting in August 2021, the App Bundle format will be required for all new apps added to Google Play, as well as for instant app ZIP delivery. Updates to those already present in the catalog [...]

Shipping less recent Linux kernels creates hardware support issues for 13% of new users

The Linux-Hardware.org project, based on collected telemetry data over the course of a year, determined that rare releases of the most popular Linux distributions and, as a result, the use of not the latest kernels create hardware compatibility problems for 13% of new users. For example, most new Ubuntu users over the last year were offered the Linux 5.4 kernel as part of the 20.04 release, which is currently lagging […]

Release of Venus 1.0, implementation of the FileCoin storage platform

The first significant release of the Venus project is available, developing a reference implementation of software for creating nodes for the decentralized storage system FileCoin, based on the IPFS (InterPlanetary File System) protocol. Version 1.0 is notable for the completion of a full code audit performed by Least Authority, a company specializing in checking the security of decentralized systems and cryptocurrencies and known for developing the Tahoe-LAFS distributed file system. The Venus code is written […]

Tux Paint 0.9.26 release for children's drawing software

The release of a graphic editor for children's creativity has been published - Tux Paint 0.9.26. The program is designed to teach drawing to children aged 3 to 12 years. Binary assemblies are generated for RHEL/Fedora, Android, Haiku, macOS and Windows. In the new release: The fill tool now has the option to fill an area with a linear or circular gradient with a smooth transition from one color […]

qutebrowser 2.3 release

The release of the web browser qutebrowser 2.3 has been presented, providing a minimal graphical interface that does not distract from viewing the content, and a navigation system in the style of the Vim text editor, built entirely on keyboard shortcuts. The code is written in Python using PyQt5 and QtWebEngine. The source code is distributed under the GPLv3 license. There is no performance impact to using Python, since rendering and parsing […]

AlmaLinux distribution kit supports ARM64 architecture

The AlmaLinux 8.4 distribution, originally released for x86_64 systems, implements support for the ARM/AArch64 architecture. There are three options for iso images available for download: boot (650 MB), minimal (1.6 GB) and full (7 GB). The distribution is fully binary compatible with Red Hat Enterprise Linux 8.4 and can be used as a transparent replacement for CentOS 8. The changes boil down to rebranding, removal of […]

XWayland Release 21.1.1.901 Supporting Hardware Acceleration on Systems with NVIDIA GPUs

XWayland 21.1.1.901 is now available, a DDX component (Device-Dependent X) that runs the X.Org Server to run X11 applications in Wayland-based environments. The release includes changes to enable OpenGL and Vulkan hardware acceleration for X11 applications on systems with proprietary NVIDIA graphics drivers. Typically these kinds of changes are pushed into major new releases, but in this case […]

Update of the Suricata attack detection system with the elimination of a critical vulnerability

The OISF (Open Information Security Foundation) has published corrective releases of the Suricata network intrusion detection and prevention system 6.0.3 and 5.0.7, which eliminate the critical vulnerability CVE-2021-35063. The problem makes it possible to bypass any Suricata analyzers and checks. The vulnerability is caused by disabling flow analysis for packets with a non-zero ACK value but no ACK bit set, allowing […]

Vulnerability in AMD CPU-Specific KVM Code that Allows Code to be Executed Outside the Guest

Researchers from the Google Project Zero team have identified a vulnerability (CVE-2021-29657) in the KVM hypervisor supplied as part of the Linux kernel, which allows them to bypass the isolation of the guest system and execute their code on the side of the host environment. The problem is present in the code used on systems with AMD processors (kvm-amd.ko module) and does not appear on Intel processors. Researchers have prepared a working prototype of an exploit that allows […]

SeaMonkey Integrated Internet Application Suite 2.53.8 Released

The SeaMonkey 2.53.8 set of Internet applications has been released, which combines a web browser, an email client, a news feed aggregation system (RSS / Atom) and a WYSIWYG html page editor Composer within one product. The Chatzilla IRC client, the DOM Inspector web development toolkit, and the Lightning calendar scheduler are offered as preinstalled add-ons. The new release carries over fixes and changes from the current Firefox codebase (SeaMonkey 2.53 is […]