Internet News Section
The release of ToaruOS 2.0, a Unix-like operating system written from scratch and delivered with its own kernel, bootloader, standard C library, package manager, user space components, and a graphical interface with a compositing window manager, has been announced. The project’s code is written in C and is distributed under the BSD license. A live image, sized at 14.4 MB, is prepared for download and can be tested in QEMU, VMware, or […]
The third release of starter kits on the ALT Ten platform has been published. The provided images are suitable for getting started with the stable repository for experienced users who prefer to define their own list of application packages and configure the system (even down to creating their own derivatives). As composite works, they are distributed under the GPLv2+ license. Options include a base system and one of the environments […]
The release of GitBucket 4.37 has been announced, a project that develops a system for collaborative work with Git repositories featuring a GitHub and Bitbucket-style interface. The system is characterized by easy installation, extensibility through plugins, and compatibility with the GitHub API. The code is written in Scala and is available under the Apache 2.0 license. MySQL and PostgreSQL can be used as the database. Key features of GitBucket: […]
A vulnerability (CVE-2021-43798) has been discovered in the open data visualization platform Grafana, which allows users to escape the base directory and access arbitrary files in the server's local file system, depending on the permissions of the user running Grafana. The issue is caused by incorrect processing of the path handler '/public/plugins//', where the use of '..' characters was allowed to access lower-level directories. The vulnerability […]
The release of the Ventoy 1.0.62 toolkit has been published, designed for creating bootable USB drives that include multiple operating systems. The program is notable for allowing OS booting from unmodified ISO, WIM, IMG, VHD, and EFI images without the need to unpack the image or reformat the drive. For example, it is sufficient to simply copy the desired set of ISO images onto a USB Flash drive with the Ventoy bootloader, and Ventoy will enable booting […]
The testing of the first candidate release for Wine 7.0, an open implementation of the WinAPI, has begun. The codebase has been frozen in preparation for the release, which is expected in mid-January. Compared to the release of Wine 6.23, 32 bug reports have been closed and 211 changes have been made. The most important changes include a new joystick driver implementation for WinMM (Windows Multimedia API). All Unix libraries of Wine […]
The release of Kali Linux 2021.4 has been announced, designed for testing systems for vulnerabilities, conducting audits, analyzing residual information, and identifying the consequences of attacks by malicious actors. All original developments created within the distribution are distributed under the GPL license and are available through a public Git repository. Several iso images, sized 466 MB, 3.1 GB, and 3.7 GB, have been prepared for download. […]
The release of Cambalache 0.8.0 has been published, enhancing the rapid interface development tool for GTK 3 and GTK 4, which uses the MVC paradigm and emphasizes the importance of the data model. Unlike Glade, Cambalache supports multiple user interfaces within a single project. Functionally, the Cambalache 0.8.0 release is noted to be close to parity with Glade. The code is written […]
A stable release of the Wayland 1.20 protocol, interprocess communication mechanism, and libraries has taken place. The 1.20 branch is backward compatible with API and ABI for 1.x releases and mainly contains bug fixes and minor protocol updates. The composite server Weston, which provides code and working examples for using Wayland in desktop environments and embedded solutions, is evolving as part of a separate development cycle. […]
A critical vulnerability has been identified in Apache Log4j, a popular logging framework for Java applications, allowing arbitrary code execution when logging specially formatted values in the format "{jndi:URL}". Attacks can be conducted on Java applications that log values obtained from external sources, such as during error message logging. It is noted that the issue affects […]
The NPM repository has identified 17 malicious packages that were distributed using typosquatting, i.e., by assigning names similar to those of popular libraries, anticipating that users would make a typo when typing the name or would overlook the differences while selecting a module from the list. The packages discord-selfbot-v14, discord-lofy, discordsystem, and discord-vilao used a modified version of the legitimate library discord.js, which provides functions for […]
MariaDB, alongside its namesake nonprofit organization overseeing the development of the MariaDB database server, has announced a significant change in the schedule for building the MariaDB Community Server and its support scheme. Until now, MariaDB has released one major branch each year and provided support for it for approximately 5 years. Under the new scheme, significant releases containing functional changes […]