Category: Internet News

An attack on NPM that allows the discovery of packages in private repositories

A vulnerability has been identified in NPM that allows for the detection of packages in private repositories. The issue is caused by the different response times when querying an existing package versus a non-existent one by an external user without access to the repository. For any packages in private repositories without access, the server registry.npmjs.org returns a '404' error, but in the case of an existing package with the requested name, an error is returned […]

The Genode project has released the general-purpose OS Sculpt 22.10

The Sculpt 22.10 operating system release has been introduced, which is based on the Genode OS Framework technologies and is being developed as a general-purpose operating system that can be used by regular users for everyday tasks. The project's source code is distributed under the AGPLv3 license. A LiveUSB image of 28 MB is available for download. It supports operation on systems with Intel processors and graphics subsystems […]

Vulnerabilities in the Linux kernel's wireless stack that allow for remote code execution

A series of vulnerabilities has been identified in the wireless stack (mac80211) of the Linux kernel, some of which could potentially lead to buffer overflows and remote code execution through the transmission of specially crafted packets by the access point. A patch is currently the only fix available. Examples of frames causing the overflow have been published to demonstrate the potential for an attack, along with a utility to inject these frames into the wireless stack […]

Release of PostgreSQL DBMS 15

After a year of development, a new stable branch of the PostgreSQL database management system 15 has been released. Updates for the new branch will be released over the next five years until November 2027. Key innovations include: support for the SQL command 'MERGE', which resembles the 'INSERT … ON CONFLICT' expression. MERGE allows for the creation of conditional SQL expressions that combine INSERT, UPDATE, and DELETE operations in a single statement. For example, using MERGE, one can […]

The code for a machine learning system that generates realistic human movements has been made available

A group of researchers from Tel Aviv University has released the source texts associated with the MDM (Motion Diffusion Model) machine learning system, which allows for the generation of realistic human movements. The code is written in Python using the PyTorch framework and is distributed under the MIT license. For conducting experiments, both pre-trained models and the option to train models independently using the provided scripts are available, for example, […]

Vulnerability in LibreOffice allows script execution while working with a document

A vulnerability (CVE-2022-3140) has been identified in the free office suite LibreOffice, allowing for the execution of arbitrary scripts by clicking on a specially crafted link in a document or when triggering a specific event while working with a document. The issue has been resolved in the updates LibreOffice 7.3.6 and 7.4.1. The vulnerability was caused by the addition of support for an additional macro call scheme ‘vnd.libreoffice.command’, specific to LibreOffice. This scheme was included in that […]

A national open source code repository has been approved in the Russian Federation

The Russian government has adopted a resolution 'On conducting an experiment to provide the right to use programs for electronic computers, algorithms, databases and related documentation, including exclusive rights belonging to the Russian Federation, on the basis of open licenses and creating conditions for the use of open-source software'. The resolution mandates: The creation of a national repository for open-source software; Placement of […]

Chrome OS 106 and the first gaming Chromebooks are now available.

The release of the Chrome OS 106 operating system is now available, which is based on the Linux kernel, uses the upstart system manager, ebuild/portage build tools, open components, and the Chrome 106 web browser. The user environment of Chrome OS is limited to the web browser, and instead of standard applications, web applications are used; nevertheless, Chrome OS includes a full multi-window interface, desktop, and taskbar. The source codes are distributed under […]

Release of Kata Containers 3.0 with virtualization-based isolation

After two years of development, the release of Kata Containers 3.0 has been published, enhancing the stack for executing containers using isolation based on full virtualization mechanisms. The project was created by Intel and Hyper by merging the technologies of Clear Containers and runV. The project code is written in Go and Rust, and is distributed under the Apache 2.0 license. The development of the project is overseen by a working […]

An attempt has been made to create a patent pool for the free audio codec Opus.

Vectis IP, a company specializing in intellectual property management, has announced the formation of a patent pool for licensing technologies used in the open audio codec Opus. Ten years ago, Opus was standardized (RFC 6716) by the IETF (Internet Engineering Task Force) as an audio codec for internet applications that requires no licensing fees and does not overlap with patented technologies. Vectis IP […]

Release of the Virtualization System VirtualBox 7.0

After almost three years since the last significant release, Oracle has published VirtualBox 7.0. The installation packages are available for Linux (Ubuntu, Fedora, openSUSE, Debian, SLES, RHEL for AMD64 architecture), Solaris, macOS, and Windows. Key changes: Support for full encryption of virtual machines has been added. Encryption also applies to saved state snapshots […]

Release of the distributed replicated block device DRBD 9.2.0

The release of the distributed replicable block device DRBD 9.2.0 has been published, allowing for a RAID-1-like array formed from several disks of different machines connected over the network (network mirroring). The system is implemented as a module for the Linux kernel and is distributed under the GPLv2 license. The drbd 9.2.0 branch can be used for a transparent replacement of drbd 9.x.x and is fully compatible at the protocol, file […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster