Internet News Section
The repository packages.microsoft.com, through which packages with Microsoft products are distributed for various Linux distributions, was non-operational for over 22 hours. This included unavailability for the installation of Linux versions of .NET Core, Microsoft Teams, and Microsoft SQL Server, as well as various Azure devops handlers. Details of the incident have not been disclosed, only that the issues arose due to regressive […]
A vulnerability (CVE-2021-3609) has been identified in the Linux kernel, allowing a local user to elevate their privileges in the system. The issue is caused by a race condition in the implementation of the CAN BCM protocol and is present in Linux kernel releases from 2.6.25 to 5.13-rc6. The problem remains unpatched in distributions (RHEL, Fedora, Debian, Ubuntu, SUSE, Arch). The researcher who discovered the vulnerability was able to craft an exploit to gain root rights […]
The release of the Min web browser 1.20 is available, offering a minimalist interface centered around address bar manipulation. The browser is built using the Electron platform, which allows for the creation of standalone applications based on the Chromium engine and Node.js platform. The Min interface is written in JavaScript, CSS, and HTML. The code is distributed under the Apache 2.0 license. Builds are available for Linux, macOS, and Windows. Min supports navigation […]
After a year of development, the release of the Live distribution NST 34 (Network Security Toolkit) has taken place, designed for network security analysis and monitoring its operation. The size of the bootable ISO image (x86_64) is 4.8 GB. A special repository has been prepared for Fedora Linux users, allowing them to install all the developments created within the NST project on an already installed system. The distribution is based on Fedora 34 […]
The tenth corrective update of the Debian 10 distribution has been released, incorporating accumulated package updates and fixing issues in the installer. The release includes 81 updates addressing stability issues and 55 updates resolving vulnerabilities. Notable changes in Debian 10.10 include the implementation of support for the SBAT (UEFI Secure Boot Advanced Targeting) mechanism, addressing issues with the revocation of certificates certified by […]
SQLite 3.36 has been released, a lightweight database management system designed as a plug-in library. The SQLite code is released into the public domain, meaning it can be used freely and without restrictions for any purpose. The financial support for SQLite developers is provided by a specially created consortium, which includes companies such as Adobe, Oracle, Mozilla, Bentley, and Bloomberg. Major changes include the output of the "EXPLAIN QUERY […]
A corrective release of OpenVPN 2.5.3 has been prepared, a package for creating virtual private networks, allowing for encrypted connections between two client machines or enabling the operation of a centralized VPN server for simultaneous work of several clients. The OpenVPN code is distributed under the GPLv2 license, with ready binary packages being formed for Debian, Ubuntu, CentOS, RHEL, and Windows. The new version fixes a vulnerability (CVE-2021-3606) that manifests only in […]
The experimental branch of the open implementation of WinAPI — Wine 6.11 has been released. Since the release of version 6.10, 33 bug reports have been closed and 290 changes have been made. The most important changes include: support for themes has been added to all built-in Wine applications. All missing implementations of mathematical functions from the Musl library code have been added to the C runtime. Support for the MP3 format has been added in […]
The second significant release of the Wasmer project has taken place, which develops a runtime for executing WebAssembly modules. This runtime can be used to create universal applications capable of running on different operating systems, as well as for the isolated execution of untrusted code. The project's code is written in Rust and is distributed under the MIT license. Portability is ensured by compiling the application code into low-level intermediate code […]
The release of the Rust 1.53 systems programming language, originally based on a Mozilla project but now developed under the auspices of the independent non-profit Rust Foundation, has been announced. The language focuses on safe memory operations, provides automatic memory management, and offers tools for achieving high task execution parallelism, all while avoiding the use of a garbage collector and runtime (the runtime is limited to basic initialization and […]
Cloudflare has announced the release of a WARP application variant for Linux, which combines a DNS resolver using the 1.1.1.1 DNS service, VPN, and proxy to redirect traffic through Cloudflare's content delivery network infrastructure. The WireGuard protocol is used for encrypting traffic in the VPN, implemented in BoringTun, written in Rust, and running entirely in user space. A distinctive feature of WARP […]
Google has introduced the SLSA (Supply-chain Levels for Software Artifacts) framework, which summarizes existing experiences in protecting the development infrastructure from attacks that occur during coding, testing, building, and distribution stages. Development processes are becoming increasingly complex and reliant on third-party tools, creating favorable conditions for the promotion of attacks not aimed at the detection and exploitation […]
Russian Russian
Italian
German
Polish
Estonian
Albanian
Bulgarian
Croatian
Czech
Danish
Dutch
English
French
Hungarian
Latvian
Norwegian
Portuguese
Romanian
Slovak
Slovenian
Spanish
Swedish