ProHoster > Blog > Internet News

Category: Internet News

Internet News Section

Release of the Chrony 4.2 precise time synchronization system

Posted on

The release of the Chrony 4.2 project has been published, providing an independent implementation of the NTP client and server, used for synchronizing precise time in various Linux distributions, including Fedora, Ubuntu, SUSE/openSUSE, and RHEL/CentOS. The program supports the NTPv4 specification (RFC 5905) and the NTS (Network Time Security) protocol, which utilizes elements of public key infrastructure (PKI) and allows for the application of TLS and authenticated encryption […].

Firefox 95.0.1 update resolves an issue with opening microsoft.com websites.

Posted on

A corrective release of Firefox 95.0.1 is available, which fixes several issues: The problem preventing access to many Microsoft websites, including www.microsoft.com, docs.microsoft.com, msdn.microsoft.com, support.microsoft.com, answers.microsoft.com, developer.microsoft.com, and visualstudio.microsoft.com, has been resolved. When trying to access such websites, the browser displayed a page with the error message MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING. The problem was caused by an error in the implementation of the OCSP Stapling mechanism used by the server servicing the site […]

PAPPL 1.1 is now available, a framework for print output organization

Posted on

Michael R Sweet, the author of the CUPS printing system, has released PAPPL 1.1, a framework for developing printing applications based on the IPP Everywhere protocol, which is recommended over traditional printer drivers. The framework code is written in C and is distributed under the Apache 2.0 license with an exception allowing linking with code under GPLv2 and LGPLv2 licenses. […]

The first stable release of the Mold linker, developed by the LLVM lld creator.

Posted on

Rui Ueyama, the author of the LLVM lld linker and the chibicc compiler, has introduced the first stable release of the new high-performance linker Mold, which significantly outpaces the GNU gold and LLVM lld linkers in terms of object file linking speed. The project is deemed ready for production use and can serve as a faster drop-in replacement for the GNU linker on Linux systems. Future plans for the next significant release include […]

A vulnerability in the Linux kernel USB Gadget subsystem that could potentially allow code execution.

Posted on

A vulnerability (CVE-2021-39685) has been discovered in USB Gadget, a subsystem of the Linux kernel that provides a programming interface for creating client USB devices and software simulation of USB devices. This vulnerability could lead to information leakage from the kernel, crashes, or arbitrary code execution at the kernel level. The attack can be executed by an unprivileged local user through manipulations with various device classes implemented over the USB Gadget API, such as […]

Release of OpenVPN 2.5.5

Posted on

The release of OpenVPN 2.5.5 has been prepared, which is a package for creating virtual private networks that allows for encrypted connections between two client machines or to set up a centralized VPN server for multiple clients to operate simultaneously. OpenVPN code is distributed under the GPLv2 license, and binary packages are prepared for Debian, Ubuntu, CentOS, RHEL, and Windows. The new version marks the deprecation of outdated 64-bit ciphers that are susceptible to […]

Buffer overflow in Toxcore, exploited through sending a UDP packet

Posted on

A vulnerability (CVE-2021-44847) has been identified in Toxcore, the reference implementation of the P2P messaging protocol Tox, which potentially allows for code execution upon processing specially crafted UDP packets. All users of applications based on Toxcore that have not disabled UDP transport are affected by this vulnerability. An attack can be executed by simply sending a UDP packet, knowing the victim's IP address, network port, and open DHT key (this information is publicly available in the DHT, […]

Update OpenSSL 3.0.1 addressing the vulnerability

Posted on

Corrective releases of the OpenSSL cryptographic library 3.0.1 and 1.1.1m are now available. Version 3.0.1 fixes a vulnerability (CVE-2021-4044), and about a dozen bugs have been addressed in both releases. The vulnerability is present in the implementation of SSL/TLS clients and is related to the way the libssl library handles negative error codes returned by the X509_verify_cert() function, invoked to verify a certificate passed to the client by the server. Negative codes are returned […]

Release of the Pop!_OS 21.10 distribution, advancing the COSMIC desktop

Posted on

The company System76, which specializes in manufacturing laptops, PCs, and servers shipped with Linux, has released Pop!_OS 21.10. Pop!_OS is based on the Ubuntu 21.10 package base and comes with its own COSMIC desktop environment. The project's developments are distributed under the GPLv3 license. ISO images are available for x86_64 and ARM64 architectures in versions for NVIDIA (2.9 GB) and Intel/AMD […]

Release of QEMU emulator 6.2

Posted on

The release of QEMU 6.2 has been presented. As an emulator, QEMU allows you to run a program compiled for one hardware platform on a system with a completely different architecture, for example, running an application for ARM on an x86-compatible PC. In virtualization mode, the performance of code execution in an isolated environment is close to that of the hardware system, thanks to direct execution of instructions on the CPU and using […]

A new variant of the attack on Log4j 2 allows bypassing the added protection.

Posted on

Another vulnerability (CVE-2021-45046) has been discovered in the JNDI lookup implementation within the Log4j 2 library, appearing despite the fixes added in release 2.15 and regardless of the use of the 'log4j2.noFormatMsgLookup' configuration for protection. The issue poses a danger mainly for older versions of Log4j 2, protected by the 'noFormatMsgLookup' flag, as it allows for bypassing the protections against the previous vulnerability (Log4Shell, CVE-2021-44228), […]

Vulnerabilities in X.Org Server

Posted on

Four vulnerabilities have been identified in the X.Org Server that allow for privilege escalation on the system if the X server is running with root rights, or remote code execution if access is gained through X11 session forwarding via SSH. These issues are expected to be fixed in the upcoming xorg-server 21.1.2 release, which is anticipated in the coming days. In distributions, the issues remain unresolved (Debian, Ubuntu, RHEL, […]

« to the beginning 526 527 528 529 530 531 532 533 534 535 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster