Internet News Section
The package base for Debian testing, on which the Debian 12 'Bookworm' release will be formed, has accepted the fnt package, which implements a font manager that handles the installation of additional fonts and maintains existing fonts up to date. Besides Linux, the program can also be used on FreeBSD (a port has recently been added) and macOS. The code is written in Shell and is distributed under […].
After a year and a half of development, the release of ReactOS 0.4.14 has been presented, aimed at ensuring compatibility with Microsoft Windows programs and drivers. The operating system is in the 'alpha' stage of development. An installation ISO image (115 MB) and Live build (in a zip archive of 85 MB) have been prepared for download. The project's code is distributed under the GPLv2 and LGPLv2 licenses. Key changes: A feature has been added to the user shell […].
The release of the Chrony 4.2 project has been published, providing an independent implementation of the NTP client and server, used for synchronizing precise time in various Linux distributions, including Fedora, Ubuntu, SUSE/openSUSE, and RHEL/CentOS. The program supports the NTPv4 specification (RFC 5905) and the NTS (Network Time Security) protocol, which utilizes elements of public key infrastructure (PKI) and allows for the application of TLS and authenticated encryption […].
A corrective release of Firefox 95.0.1 is available, which fixes several issues: The problem preventing access to many Microsoft websites, including www.microsoft.com, docs.microsoft.com, msdn.microsoft.com, support.microsoft.com, answers.microsoft.com, developer.microsoft.com, and visualstudio.microsoft.com, has been resolved. When trying to access such websites, the browser displayed a page with the error message MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING. The problem was caused by an error in the implementation of the OCSP Stapling mechanism used by the server servicing the site […]
Michael R Sweet, the author of the CUPS printing system, has released PAPPL 1.1, a framework for developing printing applications based on the IPP Everywhere protocol, which is recommended over traditional printer drivers. The framework code is written in C and is distributed under the Apache 2.0 license with an exception allowing linking with code under GPLv2 and LGPLv2 licenses. […]
Rui Ueyama, the author of the LLVM lld linker and the chibicc compiler, has introduced the first stable release of the new high-performance linker Mold, which significantly outpaces the GNU gold and LLVM lld linkers in terms of object file linking speed. The project is deemed ready for production use and can serve as a faster drop-in replacement for the GNU linker on Linux systems. Future plans for the next significant release include […]
A vulnerability (CVE-2021-39685) has been discovered in USB Gadget, a subsystem of the Linux kernel that provides a programming interface for creating client USB devices and software simulation of USB devices. This vulnerability could lead to information leakage from the kernel, crashes, or arbitrary code execution at the kernel level. The attack can be executed by an unprivileged local user through manipulations with various device classes implemented over the USB Gadget API, such as […]
The release of OpenVPN 2.5.5 has been prepared, which is a package for creating virtual private networks that allows for encrypted connections between two client machines or to set up a centralized VPN server for multiple clients to operate simultaneously. OpenVPN code is distributed under the GPLv2 license, and binary packages are prepared for Debian, Ubuntu, CentOS, RHEL, and Windows. The new version marks the deprecation of outdated 64-bit ciphers that are susceptible to […]
A vulnerability (CVE-2021-44847) has been identified in Toxcore, the reference implementation of the P2P messaging protocol Tox, which potentially allows for code execution upon processing specially crafted UDP packets. All users of applications based on Toxcore that have not disabled UDP transport are affected by this vulnerability. An attack can be executed by simply sending a UDP packet, knowing the victim's IP address, network port, and open DHT key (this information is publicly available in the DHT, […]
Corrective releases of the OpenSSL cryptographic library 3.0.1 and 1.1.1m are now available. Version 3.0.1 fixes a vulnerability (CVE-2021-4044), and about a dozen bugs have been addressed in both releases. The vulnerability is present in the implementation of SSL/TLS clients and is related to the way the libssl library handles negative error codes returned by the X509_verify_cert() function, invoked to verify a certificate passed to the client by the server. Negative codes are returned […]
The company System76, which specializes in manufacturing laptops, PCs, and servers shipped with Linux, has released Pop!_OS 21.10. Pop!_OS is based on the Ubuntu 21.10 package base and comes with its own COSMIC desktop environment. The project's developments are distributed under the GPLv3 license. ISO images are available for x86_64 and ARM64 architectures in versions for NVIDIA (2.9 GB) and Intel/AMD […]
The release of QEMU 6.2 has been presented. As an emulator, QEMU allows you to run a program compiled for one hardware platform on a system with a completely different architecture, for example, running an application for ARM on an x86-compatible PC. In virtualization mode, the performance of code execution in an isolated environment is close to that of the hardware system, thanks to direct execution of instructions on the CPU and using […]