Category: Internet News

Vulnerability in the io_uring subsystem of the Linux kernel allows privilege escalation.

A vulnerability (CVE-2021-41073) has been discovered in the Linux kernel, allowing a local user to elevate their privileges in the system. The issue stems from an error in the implementation of the asynchronous input/output io_uring interface, leading to a call to a memory block that has already been freed. It is noted that the researcher was able to achieve memory release at a specified offset while manipulating the loop_rw_iter() function as an unprivileged user, making it possible to create a working […]

The Windowsfx project has prepared an Ubuntu build with a Windows 11-styled interface.

A preview release of the Windowsfx 11 distribution is now available, aimed at recreating the Windows 11 interface and specific Windows visual effects. The environment has been recreated using a specialized WxDesktop theme and additional applications. The build is based on Ubuntu 20.04 and KDE Plasma 5.22.5 desktop. An ISO image sized 4.3 GB is prepared for download. The project is also developing a paid version that includes […]

Google will fund a security audit of 8 important open-source projects.

The OSTIF (Open Source Technology Improvement Fund), established to enhance the security of open projects, has announced a partnership with Google, which has expressed its willingness to fund an independent security audit of 8 open projects. The funds received from Google will be used to audit Git, the JavaScript library Lodash, the PHP framework Laravel, the Java framework Slf4j, the JSON libraries Jackson (Jackson-core and Jackson-databind), and Java components of Apache Httpcomponents […]

Firefox is conducting an experiment to use Bing as the default search engine

Mozilla is conducting an experiment to switch 1% of Firefox users to use Microsoft's Bing search engine by default. The experiment began on September 6 and will last until the end of January 2022. Users can assess their participation in Mozilla's experiments on the 'about:studies' page. For users who prefer other search engines, settings will still allow choosing a search engine of their liking. Reminder: […]

Release of Ubuntu 18.04.6 LTS distribution

An update for Ubuntu 18.04.6 LTS has been released. This release includes only accumulated package updates related to addressing vulnerabilities and issues affecting stability. The kernel and software versions correspond to version 18.04.5. The main goal of the new release is to update the installation images for amd64 and arm64 architectures. The installation image addresses issues related to key revocation during the resolution of […]

Oracle has removed the restriction on using JDK for commercial purposes

Oracle has changed the license agreement for the JDK 17 package (Java SE Development Kit), which provides reference builds of tools for developing and running applications in the Java language (utilities, compiler, class library, and JRE execution environment). Starting with JDK 17, the package is offered under a new NFTC license (Oracle No-Fee Terms and Conditions), which permits free use […]

A new interface layout for LibreOffice 8.0 with tab support is available

Rizal Muttaqin, one of the designers of the LibreOffice office suite, published a blog post outlining a plan for the potential development of the LibreOffice 8.0 user interface. The most notable innovation is the built-in tab support, which allows for quick switching between different documents, similar to how users switch between websites in modern browsers. Each tab can also be detached if needed […]

Remote vulnerability in OMI Agent deployed in Microsoft Azure Linux environments

Clients of the Microsoft Azure cloud platform using Linux in virtual machines have encountered a critical vulnerability (CVE-2021-38647) that allows remote code execution with root privileges. The vulnerability, codenamed OMIGOD, is notable because the issue exists within the OMI Agent application, which is quietly installed in Linux environments. The OMI Agent is automatically installed and activated when using services such as […]

The release of Apache HTTP Server 2.4.49 has been published, featuring 27 changes and addressing 5 vulnerabilities: CVE-2021-33193 - vulnerability of mod_http2 to a new variant of the 'HTTP Request Smuggling' attack.

In the Travis CI continuous integration service designed for testing and building projects developed on GitHub and Bitbucket, a security issue (CVE-2021-41077) has been identified that allows the content of sensitive environment variables in public repositories using Travis CI to be exposed. The vulnerability also allows exposure of the keys used in Travis CI for generating digital signatures, access keys, and tokens for accessing […]

Release of Apache HTTP Server 2.4.49 with vulnerability fixes

The release of Apache HTTP Server 2.4.49 has been published, featuring 27 changes and fixing 5 vulnerabilities: CVE-2021-33193 — mod_http2 is susceptible to a new variant of the "HTTP Request Smuggling" attack, which allows crafted client requests to interject into the content of requests made by other users through mod_proxy (for example, malicious JavaScript code could be injected into another user's session on the site). CVE-2021-40438 — SSRF vulnerability (Server […]

Release of the open billing system ABillS 0.91

The release of the open billing system ABillS 0.91 is now available, with components provided under the GPLv2 license. Key updates include: Paysys: all modules have been revamped. Paysys: payment system tests have been added. Client API introduced. Triplay: the management mechanism for sub-services Internet/TV/Telephony has been reworked. Cams: integration with the cloud-based video surveillance system Forpost. Ureports: the ability to send notifications simultaneously through multiple types has been added. Maps2: new layers added: Visicom Maps, 2GIS. […]

Mozilla has introduced Firefox Suggest and a new interface for the Firefox Focus browser.

Mozilla has introduced a new recommendation system, Firefox Suggest, which provides additional suggestions while typing in the address bar. Unlike recommendations based on local data and search engine queries, this new feature can include information from third-party partners, which may be non-profit projects like Wikipedia as well as paid sponsors. For example, when you start typing in […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster