Internet News Section
It has happened, brothers and sisters! The long-awaited (no joke — the release process took so long that even the developers started joking about it in the emacs-devel mailing list) release of the emacs-lisp execution system, which implements a text editor, file manager, email client, package management system, and various other functions. In this release: built-in support for arbitrary-sized integers (Emacs has a great […]
The release of the Live distribution Finnix 121, based on the Debian package base, is now available. The distribution supports only console operations but contains a good selection of utilities for administrative needs. It includes 591 packages with various utilities. The size of the ISO image is 509 MB. The new version has transitioned to using the Debian testing branch instead of snapshots of stable releases. New components have been included […]
Today, August 10, as part of the Open Source Tech Conference Online, a free day is scheduled (registration required). Schedule: 17:15 — 17:55 Vladimir Rubanov / Russia. Moscow / CTO of Software Development / Huawei R&D Russia Open-source and global evolution (in Russian) 18:00 — 18:40 Alexander Komakhin / Russia. Moscow / Senior Software Engineer / Open Mobile Platform Opensource […]
A new release of the VeraCrypt project 1.24-Update7 has been published, which develops a fork of the now-defunct TrueCrypt disk encryption system. VeraCrypt is notable for replacing the RIPEMD-160 algorithm used in TrueCrypt with SHA-512 and SHA-256, increasing the number of hashing iterations, simplifying the build process for Linux and macOS, and addressing issues found during the audit of TrueCrypt's source code. At the same time, VeraCrypt provides a compatibility mode with […]
A vulnerability (CVE-2020-15900) has been identified in Ghostscript, a suite of tools for processing, converting, and generating documents in PostScript and PDF formats. This vulnerability could lead to file modifications and execution of arbitrary commands when specially crafted PostScript documents are opened. The use of a non-standard PostScript operator rsearch allows for a uint32_t overflow during size calculation, rewriting memory areas outside the allocated […]
Nightly builds of Firefox, which will form the basis for the upcoming Firefox 81 release, include a new implementation of the print preview interface. The new print preview interface is notable for opening in the current tab, replacing the existing content (the old print preview interface opened a new window), functioning similarly to the reader mode. Tools for adjusting page formats and output settings are included […]
On August 5, the Free Software Foundation announced the election of a new president, Jeffrey Knauth – one of the earliest participants in the GNU project (1985), co-founder of the GNU Objective-C project, and a member of the FSF board of directors since 1996. Source: linux.org.ru
A new release of RetroArch 1.9.0 has been published, a frontend for emulating various game consoles, allowing you to run classic games through a simple unified graphical interface. Support is provided for emulators of consoles such as Atari 2600/7800/Jaguar/Lynx, Game Boy, Mega Drive, NES, Nintendo 64/DS, PCEngine, PSP, Sega 32X/CD, SuperNES, etc. Controllers from existing gaming consoles, including Playstation 3, Dualshock […] may be used.
China has implemented a block on all HTTPS connections that use the TLS 1.3 protocol and the TLS extension ESNI (Encrypted Server Name Indication), which provides encryption for data about the requested host. The blocking occurs at transit routers for connections established from China to the outside world, as well as from the outside world to China. For blocking, packet dropping is performed from the client to the server, and […]
Several vulnerabilities have been identified in FreeBSD, which have been fixed in updates 12.1-RELEASE-p8, 11.4-RELEASE-p2, and 11.3-RELEASE-p12: CVE-2020-7460 — privilege escalation in the system through manipulation of 32-bit sendmsg calls on 64-bit systems. 32-bit systems and systems with kernels built without the COMPAT_FREEBSD32 option (which is enabled by default in GENERIC kernels) are not affected by this issue. CVE-2020-7459 — lack of proper size checks for data copied to […]
The release of the Apache HTTP server 2.4.46 has been published (versions 2.4.44 and 2.4.45 were skipped), which features 17 changes and fixes 3 vulnerabilities: CVE-2020-11984 — buffer overflow in the mod_proxy_uwsgi module, which can lead to information leakage or code execution on the server when sending a specially crafted request. Exploiting this vulnerability involves sending a very long HTTP header. To protect against this, blocking has been added […]
The release of Elementary OS 5.1.7 has been presented, positioned as a fast, open, and privacy-respecting alternative to Windows and macOS. The project focuses on quality design aimed at creating a user-friendly system that consumes minimal resources and provides fast boot times. Users are offered their own desktop environment, Pantheon. Original components of Elementary OS are developed using GTK3, […]