Internet News Section
Six vulnerabilities have been addressed in FreeBSD that allow for privilege escalation in the system or access to kernel data. The issues have been fixed in updates 12.0-RELEASE-p8, 11.2-RELEASE-p12, and 11.3-RELEASE-p1. CVE-2019-5606 is a flaw in the close call handler for file descriptors created through the posix_openpt system call, which may lead to writing to already freed areas of kernel memory (write-after-free). A local attacker may […]
Epigraph: Once upon a time, Hedgehog and Little Bear met in the forest. — Hello, Hedgehog! — Hello, Little Bear! So, word for word, joke for joke, Hedgehog received a slap on the face from Little Bear … Below are the reflections of our team leader and the product development director at RAS, Igor Marnat, on the specifics of workplace conflicts and possible management methods for them. Most conflicts […]
The developers of Exim reported the discovery of a vulnerability and the upcoming release of an update that will fix it. They noted that the risk of exploitation is quite low, as it requires a very specific configuration to be carried out. Details are not yet disclosed, except that exploitation is possible both locally and remotely. The update will be released on July 25, 2019, at which time […]
A critical vulnerability (CVE-2019-12815) has been discovered in ProFTPd (a popular FTP server). Exploitation allows files to be copied within the server without authentication using the 'site cpfr' and 'site cpto' commands, even on servers with anonymous access. The vulnerability is caused by improper checking of read and write access limits (Limit READ and Limit WRITE) in the mod_copy module, which is used […]
AMD has released a new open framework, Caudron, providing tools for rapid development of game prototypes and graphical applications using the Vulkan or DirectX12 APIs. The framework was initially used internally to develop demonstrations and examples for the SDK. The project's code is written in C++11 and is distributed under the MIT license. Caudron is presented as a simplified game engine, easy to learn and […]
The Fedora project developers announced the start of testing the first preliminary version of the new edition of the Fedora CoreOS distribution, which replaces the Fedora Atomic Host and CoreOS Container Linux products as a single solution for running environments based on isolated containers. From CoreOS Container Linux, which came under Red Hat's control following the acquisition of CoreOS, Fedora CoreOS […]
Microsoft is considering transferring the popular feature of the classic Edge browser to its new Chromium-based version. This concerns the password reveal feature (that eye icon). This feature will be implemented as a universal button. It is important to note that only manually entered passwords will be displayed in this way. When autofill mode is on […]
A new release has occurred in the current mainline branch of the nginx web server. Active development is underway in the 1.17 branch, while only bug fixes are being introduced in the current stable branch (1.16). Change: The minimum supported version of zlib is 1.2.0.4. Thanks to Ilya Leoshkevich. Change: The method $r->internal_redirect() of the built-in Perl now expects an encoded URI. Addition: The method $r->internal_redirect() of the built-in Perl […]
A critical vulnerability (CVE-2019-12815) has been identified in the ProFTPD FTP server, allowing files to be copied within the server without authentication through the 'site cpfr' and 'site cpto' commands. This issue has been assigned a severity level of 9.8 out of 10, as it can be exploited for remote code execution when providing anonymous FTP access. The vulnerability was caused by improper validation of access restrictions on […]
Devon O'Brien from the Chrome browser security team announced Google's intention to block DarkMatter intermediate certificates in the Chrome browser and on the Android platform. There are also plans to reject the application to include the DarkMatter root certificate in Google's certificate store. It should be noted that a similar decision was previously made by Mozilla. Google agrees with the arguments put forward by Mozilla representatives […]
Hi! In the comments to the review of the ONYX BOOX James Cook 2, which recently guest-posted on our blog, some were surprised that the device in 2019 comes without a touchscreen (Carl!). But for some, this is strange, while others specifically look for a reader only with physical buttons: for example, elderly people find it easier to handle something they can feel; an accidental swipe […]
Playtonic Games has released a new trailer for the platformer Yooka-Laylee and the Impossible Lair, showcasing the 'alternative level construction' system. There will be 20 levels in the game, but during their journey, our heroes will uncover secrets and solve puzzles that dynamically transform each location. Thus, the total number will rise to 40. 'Rebuild levels by connecting electricity, flooding them with water […]