Internet News Section
GitLab has released another series of corrective updates for its collaborative development platform — 15.3.2, 15.2.4, and 15.1.6, in which a critical vulnerability (CVE-2022-2992) has been fixed, allowing an authenticated user to execute code remotely on the server. Similar to the CVE-2022-2884 vulnerability fixed a week ago, the new issue is present in the API for importing data from GitHub. The vulnerability also manifests itself in […]
A corrective release of Firefox 104.0.1 is available, which fixes an issue with video playback stopping on the YouTube site. The problem is caused by the reuse of the device for accelerating video decoding and primarily occurs on systems with NVIDIA graphics cards. As a workaround for this issue, you can set the parameters media.wmf.zero-copy-nv12-texture and gfx.direct3d11.reuse-decoder-device to false on the page about:config. Additionally, […]
Google has made changes to the Play Store catalog rules, which restrict the platform's provided VpnService API. New rules prohibit the use of VpnService to filter traffic from other applications for monetization purposes, hidden collection of personal and confidential data, and any ad manipulations that could affect the monetization of other applications. Services are also required to implement mandatory encryption for tunneled traffic […]
The Fedora project developers have outlined a plan to discontinue support for digital signatures based on the SHA-1 algorithm in Fedora Linux 39. The discontinuation entails ceasing trust in signatures that use SHA-1 hashes (SHA-224 will be declared the minimum supported in digital signatures), while maintaining support for HMAC with SHA-1 and providing the option to enable the LEGACY profile with SHA-1. After these changes are applied, the library […]
The lxqt-sway project, focused on porting LXQt desktop components to work in the Sway environment and with a compositor using the Wayland protocol, has published its developments. In its current form, the project resembles a hybrid of the two environments. LXQt settings are transformed into a Sway configuration file. To carry out operations such as changing the virtual desktop, splitting, and closing windows, additional menus have been implemented, making it easier to […]
In the package with the Chromium browser offered in the Debian distribution, there has been a transition to using DuckDuckGo as the default search engine instead of Google. The proposal to replace the search engine with DuckDuckGo has been under consideration since April 2020. Concerns about user privacy are cited as the reason — DuckDuckGo does not utilize result personalization and eliminates data that can be used for tracking […]
A release of the lightweight distribution MX Linux 21.2 has been presented, created as a result of collaboration between communities formed around the antiX and MEPIS projects. This release is based on the Debian package base with enhancements from the antiX project and packages from its own repository. The distribution uses the sysVinit initialization system and its own tools for system configuration and deployment. Both 32-bit and 64-bit versions are available for download […]
IEEE Spectrum magazine, published by the Institute of Electrical and Electronics Engineers (IEEE), has released a new edition of its programming language popularity ranking. Python continues to lead the ranking, with C, C++, and C# following closely behind. Compared to last year's ranking, Java has dropped from 2nd to 5th place. The position of C# has strengthened, moving up from 6th to […]
An experimental release of the open implementation of WinAPI — Wine 7.16 — has taken place. Since the release of version 7.15, 20 bug reports have been closed and 226 changes have been made. The most important changes include: support for WoW64 added in the X11 driver, a layer for running 32-bit applications on 64-bit Windows. Session storage has been implemented in the MSHTML engine. Correct Unicode processing in regular expressions has been established in MSXML […]
A critical vulnerability (CVE-2022-36804) has been identified in Bitbucket Server, a package for deploying a web interface for working with Git repositories. This vulnerability allows a remote attacker with read access to private or public repositories to execute arbitrary code on the server by sending a specially crafted HTTP request. The issue affects versions starting from 6.10.17 and has been fixed in Bitbucket Server and Bitbucket Data Center releases 7.6.17, 7.17.10, […]
A stable release of the interface for simplifying network configuration settings — NetworkManager 1.40.0 — is now available. Plugins to support VPNs (Libreswan, OpenConnect, Openswan, SSTP, etc.) are being developed as part of their own development cycles. Key innovations in NetworkManager 1.40 include: the command line interface nmcli has implemented the ‘—offline’ flag, allowing connection profiles in keyfile format to be processed without referring to the NetworkManager background process. In particular, […]
In recent releases of the Chromium engine, clipboard interaction behavior has changed. While in Firefox, Safari, and older versions of Chrome, clipboard writing was only allowed after explicit user actions, in new releases, simply opening a website is sufficient for clipboard writing. The change in Chrome's behavior is explained by the need to read data from the clipboard when displaying the splash screen […]