Internet News Section
The release of the Sway 1.7 composite manager has been published, built using the Wayland protocol and fully compatible with the i3 tiling window manager and the i3bar panel. The project's code is written in C and distributed under the MIT license. The project is aimed at use on Linux and FreeBSD. Compatibility with i3 is ensured at the level of commands, configuration files, and IPC, allowing for […]
Attackers managed to embed a backdoor in 40 plugins and 53 themes for the WordPress content management system, developed by AccessPress, which claims that its extensions are used on more than 360,000 websites. The results of the incident analysis have not yet been provided, but it is assumed that the malicious code was injected during the compromise of the AccessPress website, altering the proposed downloadable archives […]
The laptop manufacturer Framework Computer, a proponent of giving users the right to repair independently and aiming to make its products as easy as possible for disassembly, modernization, and component replacement, has announced the release of the source code for the Embedded Controller (EC) firmware used in the Framework Laptop. The code is open under the BSD license. The main idea behind the Framework Laptop is to allow users to customize the laptop from modules, […]
After approximately six months since the last major release, a new version of the platform for building decentralized social networks, Hubzilla 7.0, has been published. The project offers a communication server that integrates with web publishing systems, equipped with a transparent identification system and access management tools in decentralized Fediverse networks. The project code is written in PHP and JavaScript and is distributed under the MIT license, with a data storage system […]
Following the announcement of the transition to a web interface for the Anaconda installer used in Fedora and RHEL, the developers of the YaST installer have revealed plans to develop the D-Installer project and create a frontend for managing the installation of openSUSE and SUSE Linux distributions via a web interface. It is noted that the WebYaST web interface has been in development for a long time, but it is limited to remote administration and system configuration, and is not intended for […]
A vulnerability (CVE-2022-0185) has been discovered in the Filesystem Context API provided by the Linux kernel, allowing a local user to gain root privileges on the system. The researcher who identified the issue has published a demonstration of the exploit that allows code to be executed with root rights in the default configuration of Ubuntu 20.04. The exploit code is planned to be released on GitHub within a week after distributions issue updates with […]
The Linux distribution ArchLabs 2021.01.18 has been released, based on the Arch Linux package base and supplied with a lightweight desktop environment based on the Openbox window manager (optional environments include i3, Bspwm, Awesome, JWM, dk, Fluxbox, Xfce, Deepin, GNOME, Cinnamon, Sway). For setting up a stationary installation, the ABIF installer is offered. The base system includes applications such as Thunar, Termite, Geany, Firefox, Audacious, MPV […]
The release of the Monitorix 3.14.0 monitoring system has been introduced, designed for visually tracking the performance of various services, such as monitoring CPU temperature, system load, network activity, and responsiveness of network services. Management of the system is conducted through a web interface, with data presented in the form of graphs. The system is written in Perl, and RRDTool is used for graph generation and data storage. The code is distributed under the GPLv2 license. […]
After three years since the last release, the text recognition system Ocrad 0.28 (Optical Character Recognition) has been formed, developed under the auspices of the GNU project. Ocrad can be used both as a library for integrating OCR functions into other applications and as a standalone utility, which produces text in UTF-8 or 8-bit from the provided input image. […]
A corrective release of Firefox 96.0.2 is available, which addresses several bugs: Fixed a crash when resizing the browser window where the Facebook web application is open. Resolved an issue that caused the tab button to misalign in Linux builds when playing audio on the page. Corrected a bug that resulted in the LastPass extension displaying an empty menu in incognito mode. Source: opennet.ru
A vulnerability (CVE-2022-21658) has been identified in the standard library of the Rust language, related to a race condition in the std::fs::remove_dir_all() function. When using this function to delete temporary files in a privileged application, an attacker could delete arbitrary system files and directories, which they normally wouldn't have access to. The vulnerability is caused by improper handling of symbolic link checks before recursion.
Additional details have emerged about the SUSE Liberty Linux project, announced by SUSE this morning without technical specifics. It turns out that the project has prepared a new edition of the Red Hat Enterprise Linux 8.5 distribution, built using the Open Build Service platform, suitable as a replacement for the classic CentOS 8, whose support was discontinued at the end of 2021.