Internet News Section
Seven vulnerabilities have been fixed in the GRUB2 bootloader, which allow bypassing the UEFI Secure Boot mechanism and executing unverified code, such as injecting malware that operates at the bootloader or kernel level. Additionally, there is one vulnerability in the shim layer that also permits bypassing UEFI Secure Boot. This group of vulnerabilities has been code-named Boothole 3, similar to previous issues, […]
The release of the lightweight HTTP server lighttpd 1.4.65 has taken place, aiming to combine high performance, security, compliance with standards, and configurability. Lighttpd is suitable for use in high-load systems and focuses on low memory and CPU resource consumption. The new version includes 173 changes. The project code is written in C and is released under the BSD license. Key innovations: WebSocket support added over […]
After a year of development, SUSE has released the SUSE Linux Enterprise 15 SP4 distribution. Products such as SUSE Linux Enterprise Server, SUSE Linux Enterprise Desktop, SUSE Manager, and SUSE Linux Enterprise High Performance Computing are based on the SUSE Linux Enterprise platform. The distribution can be downloaded and used for free, but access to updates and fixes is limited to 60 days […]
The beta release of a significant new branch of the Thunderbird 102 email client has been introduced, based on the ESR version of Firefox 102. The release is scheduled for June 28. The most notable changes include: a built-in client for the decentralized communication system Matrix. The implementation supports advanced features such as end-to-end encryption, invitation sending, participant delay loading, and editing sent messages. A new import and export wizard has been added, supporting […]
The IETF (Internet Engineering Task Force) committee responsible for developing internet protocols and architecture has completed the formation of the RFC for the HTTP/3.0 protocol and published related specifications under RFC 9114 (protocol) and RFC 9204 (QPACK header compression technology for HTTP/3). The HTTP/3.0 specification has received the status of 'Proposed Standard,' after which work will begin to elevate the RFC to Draft Standard status […]
In collaboration with manufacturing companies SkyWater Technology and Efabless, Google has launched an initiative allowing open hardware developers to produce their developed chips for free. The initiative aims to stimulate the development of open hardware, reduce costs in developing open projects, and simplify interaction with manufacturing plants. Thanks to this initiative, anyone can start designing their own specialized chips without fear of […]
The GNUnet 0.17 framework has been released, designed for building secure decentralized P2P networks. Networks created with GNUnet have no single point of failure and can guarantee the confidentiality of users' private information, thus preventing possible abuses by intelligence agencies and administrators with access to the network nodes. GNUnet supports the creation of P2P networks over TCP, UDP, HTTP/HTTPS, Bluetooth, and WLAN, […]
Developers from Red Hat and Collabora have begun creating an open Vulkan driver, nvk, for NVIDIA graphics cards, which will supplement the existing Mesa drivers: anv (Intel), radv (AMD), tu (Qualcomm), and v3dv (Broadcom VideoCore VI). The driver is being developed on the basis of the Nouveau project, utilizing some subsystems previously used in the OpenGL driver Nouveau. Meanwhile, in Nouveau, […]
A vulnerability (CVE-2022-1972) has been identified in the Netfilter kernel subsystem, similar to the issue disclosed at the end of May. The new vulnerability also allows a local user to gain root privileges in the system through manipulations with rules in nftables and requires access to nftables, which can be obtained in a separate namespace (network namespace or user namespace) with CLONE_NEWUSER rights, […]
The release of CoreBoot 4.17 has been published, in which a free alternative to proprietary firmware and BIOS is being developed. The project's code is distributed under the GPLv2 license. The new version was developed by 150 contributors who prepared over 1300 changes. Key changes: A vulnerability (CVE-2022-29264) has been fixed, which was present in CoreBoot releases from 4.13 to 4.16 and allowed on systems with an AP (Application Processor) […]
The release of the specialized Tails 5.1 distribution (The Amnesic Incognito Live System), based on the Debian package base and intended for anonymous internet access, has been formed. Anonymous access in Tails is provided by the Tor system. All connections, except for traffic through the Tor network, are by default blocked by the packet filter. User data is encrypted when saved between sessions, […]
An experimental release of the open implementation of WinAPI — Wine 7.10 has taken place. Since the release of version 7.9, 56 bug reports have been closed and 388 changes have been made. The most significant changes include: the macOS driver has been transitioned to use the PE (Portable Executable) format instead of ELF. The Wine Mono engine implementing the .NET platform has been updated to version 7.3. Compatible with Windows […]