Internet News Section
The Live distribution release of NomadBSD 1.4 is now available, which is a FreeBSD variant designed for use as a portable desktop, bootable from a USB drive. The graphical environment is based on the Openbox window manager. DSBMD is used for mounting drives (supporting the mounting of CD9660, FAT, HFS+, NTFS, Ext2/3/4). The boot image size is 2.4 GB (x86_64). In this new release: synchronized with FreeBSD branch 12.2 (p4); […]
Google has released version 89 of the Chrome web browser. A stable version of the free Chromium project, which serves as the basis for Chrome, is also available. The Chrome browser features Google logos, a crash notification system, modules for playing protected video content (DRM), automatic update installation system, and RLZ parameter transmission during searches. The next release, Chrome 90, is scheduled for April 13. Major changes […]
Information has been revealed about 8 vulnerabilities in the GRUB2 bootloader that allow bypassing the UEFI Secure Boot mechanism and achieving the execution of unverified code, such as deploying malware that operates at the bootloader or kernel level. It is worth noting that in most Linux distributions, a small shim layer, signed by Microsoft, is used for verified boot in UEFI Secure Boot mode. This layer verifies GRUB2 […]
After five months of development, OpenSSH 8.5 has been released, an open implementation of the client and server for working with SSH 2.0 and SFTP protocols. The OpenSSH developers reminded about the impending transition of algorithms using SHA-1 hashes to the deprecated category, due to the increased effectiveness of prefix collision attacks (the cost of generating a collision is estimated at about $50,000). In one […]
The first release of a utility has taken place, which saves Kubernetes cluster resources as clean yaml manifests without unnecessary metadata. The script is useful for those who need to transfer configurations between clusters without access to the original configuration files, or for setting up cluster resource backups. It can be run locally as a bash script, but for those who do not want […]
The release of the Pale Moon 29.1 web browser is available, which branched off from the Firefox codebase to provide higher efficiency, maintain a classic interface, minimize memory consumption, and offer additional customization options. Pale Moon builds are generated for Windows and Linux (x86 and x86_64). The project’s code is distributed under the MPLv2 (Mozilla Public License). The project adheres to a classic interface organization, without […]
On February 6-7, 2021, one of the largest free conferences dedicated to free software, FOSDEM, took place. The conference was typically held in person in Brussels, but due to the coronavirus pandemic, it had to be moved online. To achieve this, the organizers teamed up with the Element team and chose a chat based on the open Matrix protocol to construct a federated communication network in real […]
New releases of the Linux From Scratch 10.1 (LFS) and Beyond Linux From Scratch 10.1 (BLFS) guides have been introduced, along with editions of LFS and BLFS using the system manager systemd. Linux From Scratch provides instructions for building a basic Linux system from scratch, using only the source code of the necessary software. Beyond Linux From Scratch supplements the LFS instructions with information on building […]
Today, on February 15, 2021, an updated version of Devuan 3.1.0 Beowulf was quietly released. Devuan 3.1 is an intermediate release continuing the development of the Devuan 3.x branch, built on the Debian 10 'Buster' package base. Live builds and installation ISO images for the AMD64 and i386 architectures have been prepared for download. Builds for ARM (armel, armhf, and arm64) and images for virtual machines for the release […]
In the new releases of the centralized configuration management system SaltStack 3002.5, 3001.6, and 3000.8, a vulnerability (CVE-2020-28243) has been fixed that allows a non-privileged local user on the host to escalate their privileges in the system. The issue was caused by a bug in the salt-minion handler, which is used to receive commands from the central server. The vulnerability was identified in November but was not fixed until now. During the 'restartcheck' operation, substitution may be possible […]
Brian Foy, the founder of the Perl Mongers organization, published a detailed analysis of the incident in which the domain perl.com was hijacked by external parties. The domain hijacking did not affect the project's server infrastructure and was carried out at the level of ownership change and DNS server parameter alterations at the registrar. It is claimed that the computers responsible for the domain were also not compromised, and the attackers used […]
The maintainer of the Telegram Desktop packages for Fedora and RPM Fusion announced the removal of packages from the repositories. A day prior, the package maintainer for Gentoo also announced the discontinuation of support for Telegram Desktop. In both cases, there was a willingness to restore the packages to the repositories if a new maintainer can be found to take over the support. […]