Internet News Section
The release of the Qbs 1.19 build tool has been announced. This is the sixth release since the Qt Company stepped away from the project, prepared by a community interested in continuing the development of Qbs. Building Qbs requires Qt as a dependency, although Qbs itself is designed to facilitate the assembly of any projects. Qbs uses a simplified version of the QML language to define project build scripts, allowing […]
Google has launched a new service called Open Source Insights (deps.dev), which visualizes the complete graph of direct and indirect dependencies for packages distributed through NPM, Go, Maven, and Cargo repositories (with support for NuGet and PyPI coming soon). The main purpose of the service is to analyze the spread of vulnerabilities in modules and libraries present in the dependency chain, which can be […]
A vulnerability (CVE-2021-3560) has been identified in the Polkit component used in distributions to enable unprivileged users to perform actions requiring elevated access rights (such as mounting USB drives). This vulnerability allows a local user to gain root privileges on the system. The issue has been fixed in Polkit version 0.119. The problem appears starting from release 0.113, but many distributions, including RHEL, Ubuntu, Debian, and SUSE, have backported the vulnerable functionality in […]
The release of the CentOS 2105 distribution has been announced, which incorporates changes from Red Hat Enterprise Linux 8.4. The distribution is fully binary compatible with RHEL 8.4. Builds of CentOS 2105 are prepared (8 GB DVD and 605 MB netboot) for x86_64, Aarch64 (ARM64), and ppc64le architectures. The SRPMS packages, on which the binary files are based, and debuginfo are available via vault.centos.org. Additionally, […]
The release of Chrome OS 91, based on the Linux kernel, the upstart system manager, the ebuild/portage build tools, open components, and Chrome 91 web browser, has occurred. The user environment of Chrome OS is limited to the web browser, and web applications are used instead of standard programs; however, Chrome OS includes a full multi-window interface, desktop, and taskbar. The build of Chrome OS 91 […]
The committee overseeing the development of the GCC compiler suite (GCC Steering Committee) has approved the cessation of the mandatory transfer of property rights to code to the SPI Foundation. Developers wishing to contribute changes to GCC are no longer required to sign a CLA agreement with the SPI Foundation. To participate in development, it is now sufficient to confirm that the developer has the right to transfer the code and is not attempting to claim […]
The release of the Kali Linux 2021.2 distribution, intended for testing systems for vulnerabilities, conducting audits, analyzing residual information, and identifying the consequences of attacks by malicious actors, has occurred. All original developments created within the distribution are distributed under the GPL license and are available through the public Git repository. Several iso images are prepared for download, sized at 378 MB, 3.6 GB, and 4.2 GB. The builds […]
The release of the Linux distribution Clonezilla Live 2.7.2, designed for fast disk cloning (only used blocks are copied), is available. The tasks performed by the distribution are similar to the proprietary product Norton Ghost. The size of the distribution's iso image is 308 MB (i686, amd64). The distribution is based on Debian GNU/Linux and utilizes code from projects such as DRBL, Partition Image, ntfsclone, partclone, udpcast. Booting from […]
A specialized distribution release of Tails 4.19 (The Amnesic Incognito Live System) has been formed, based on the Debian package base and designed to provide anonymous internet access. Anonymous access in Tails is guaranteed by the Tor network. By default, all connections, except for traffic through the Tor network, are blocked by a packet filter. To store user data in persistent mode between sessions, […]
The release of NixOS 21.05 has been presented, based on the Nix package manager and offering several in-house developments that simplify system configuration and maintenance. For example, NixOS uses a single system configuration file (configuration.nix), provides the ability to quickly roll back updates, supports switching between different system states, allows individual users to install specific packages (the package is placed in the home directory), and permits simultaneous installation […]
After nearly a year of development, the release of the openSUSE Leap 15.3 distribution has taken place. This release is based on the core package set of the SUSE Linux Enterprise distribution, with some user applications from the openSUSE Tumbleweed repository. A universal DVD image is available for download, with a size of 4.4 GB (x86_64, aarch64, ppc64les, 390x), a minimal installation image for network package loading (146 MB), and Live images with […]
The release of the Apache HTTP Server 2.4.48 has been published (release 2.4.47 was skipped), which includes 39 changes and fixes 8 vulnerabilities: CVE-2021-30641 — incorrect triggering of the section in 'MergeSlashes OFF' mode; CVE-2020-35452 — stack overflow by one null byte in mod_auth_digest; CVE-2021-31618, CVE-2020-26691, CVE-2020-26690, CVE-2020-13950 — dereferencing of NULL pointers in mod_http2, mod_session, and mod_proxy_http; CVE-2020-13938 — the possibility of crashing […]