Internet News Section
Chromium developers have summarized the initial results of the RenderingNG project, launched 8 years ago, aimed at continuously improving the performance, reliability, and scalability of Chrome. For instance, the optimizations added in Chrome 94 compared to Chrome 93 allowed for an 8% reduction in page processing delays and a 0.5% increase in battery life. Considering the size […]
A new attack vector has been discovered for the Apache HTTP server that remains unpatched in version 2.4.50 and allows access to files in areas outside the site's root directory. Additionally, researchers have found a method that, under certain non-standard configurations, not only allows reading system files but also executing arbitrary code remotely on the server. The issue is only present in releases 2.4.49 […]
A new version of the static code analyzer cppcheck 2.6 has been released, which identifies various classes of errors in C and C++ code, including when using non-standard syntax typical for embedded systems. A collection of plugins is provided, ensuring integration of cppcheck with various development, continuous integration, and testing systems, as well as features like compliance checking […]
A method has been published that bypasses limitations set in the PHP interpreter through the disable_functions directive and other settings in php.ini. Recall that the disable_functions directive allows for prohibiting the use of certain internal functions in scripts, such as blocking 'system, exec, passthru, popen, proc_open, and shell_exec' to prevent calls to external programs, or fopen to forbid file access. Notably, the proposed […]
The Bottlerocket Linux distribution version 1.3.0 has been released, developed with the participation of Amazon for the efficient and secure launch of isolated containers. The toolkit and management components of the distribution are written in Rust and are distributed under the MIT and Apache 2.0 licenses. Bottlerocket supports deployment in Amazon ECS clusters, VMware, and AWS EKS Kubernetes, as well as the creation of custom builds and editions that allow for […]
Canonical has introduced the first release of the Ubuntu Frame shell, designed for creating internet kiosks, self-service terminals, information stands, digital signage, smart mirrors, industrial displays, IoT devices, and other similar applications. The shell is intended to provide a full-screen interface for a single application and is based on the use of the Mir display server and the Wayland protocol. The project's developments are distributed under the GPLv3 license. Prepared for download are […]
After five months of development and seven and a half years since the last significant release, a corrective release of the Apache OpenOffice 4.1.11 office suite has been formed, offering 12 fixes. Ready packages have been prepared for Linux, Windows, and macOS. This new release addresses three vulnerabilities: CVE-2021-33035 — allows for code execution when opening a specially crafted file in DBF format. […]
After three years of development, a stable release of the Squid 5.1 proxy server has been presented, ready for use in production systems (the 5.0.x releases were in beta status). With the 5.x branch now designated as stable, it will only receive fixes for vulnerabilities and stability issues, although minor optimizations may be included. Development of new features will take place in a new experimental branch 6.0. Users […]
The release of the IPFire 2.27 Core 160 distribution for creating routers and firewalls has been published. IPFire features a simple installation process and configuration setup through an intuitive web interface rich with visual graphs. The size of the installation ISO image is 406 MB (x86_64, i586, ARM, AArch64). The system is modular, and in addition to basic packet filtering and traffic management functions, IPFire offers modules for […]
The release of the display server Mir 2.5 has been presented, the development of which continues under Canonical, despite the discontinuation of the Unity shell and the Ubuntu edition for smartphones. Mir remains in demand for Canonical projects and is now positioned as a solution for embedded devices and the Internet of Things (IoT). Mir can be used as a compositing server for Wayland, allowing applications to run in environments […]
The lightweight window manager IceWM 2.8 has been released. IceWM offers full control via keyboard shortcuts, the ability to use virtual desktops, task panels, and application menus. The window manager can be customized through a fairly simple configuration file, and theme usage is possible. Built-in applets for monitoring CPU, memory, and traffic are available. Several third-party GUIs for customization, desktop implementations, and editors are being developed separately […]
An emergency update to the Apache HTTP server 2.4.50 has been formed, which fixes an actively exploited zero-day vulnerability (CVE-2021-41773) that allows access to files outside the website's root directory. This vulnerability can be used to upload arbitrary system files and source texts of web scripts that are accessible for reading by the user under which the HTTP server is running. Developers were notified of the issue back on the 17th […]