Blog Section
Correction releases X.Org Server 21.1.11 and the DDX component (Device-Dependent X) xwayland 23.2.4 have been published, enabling the X.Org Server to run X11 applications in Wayland-based environments. The new versions address 6 vulnerabilities, some of which may be exploited to escalate privileges in systems where the X server runs with root rights, as well as for remote code execution […]
Nine vulnerabilities, collectively named PixieFAIL, have been identified in UEFI firmwares based on the open platform TianoCore EDK2, which are commonly used in server systems. These vulnerabilities exist in the network stack of the firmware used for network booting (PXE). The most critical ones allow an unauthenticated attacker to execute remote code at the firmware level in systems that permit PXE booting using IPv6 networks. […]
Builds have also been removed from rsync, and the build logic has been taken out of lbmk. It has been found that the fan control fails on this motherboard when using a trimmed Intel ME image. This issue seems to affect only these older Arrandale machines; the problem was detected on the X201 but likely also impacts the Thinkpad T410 and other notebooks. This issue does not affect […]
Oracle has created a new branch of the MySQL database, version 8.3, and has released a corrective update for MySQL 8.0.36. MySQL Community Server 8.3.0 builds are prepared for all major Linux distributions, FreeBSD, macOS, and Windows. MySQL 8.3.0 is the third release formed under the new release model, which includes two types of MySQL branches — 'Innovation' and 'LTS'. The Innovation branches, which […]
Oracle has released a corrective update for the VirtualBox virtualization system version 7.0.14, which includes 14 fixes. At the same time, an update for the previous branch VirtualBox 6.1.50 has been formed with 7 changes, including support for packages with kernels from RHEL distributions 9.4 and 8.9, as well as the implementation of the ability to import and export virtual machine images with NVMe storage controllers and a medium inserted in […]
GitHub has disclosed details of a vulnerability that allows access to the contents of environment variables set in containers used in the working infrastructure. The vulnerability was identified by a participant in the Bug Bounty program who is eligible for a reward for finding security issues. The problem affects both the GitHub.com service and GitHub Enterprise Server (GHES) configurations running on user systems. Log analysis and audit […]
After a year of development and 26 experimental versions, a stable release of the open implementation of the Win32 API — Wine 9.0 has been presented, which includes over 7000 changes. Key achievements in the new version include the implementation of the WoW64 architecture for running 32-bit applications in a 64-bit environment, integration of a driver for Wayland support, ARM64 architecture support, implementation of the DirectMusic API, and smart card support. […]
The Linux kernel 6.7 has been released. As is known, the main change in this version is the new filesystem — bcachefs. The developers claim the following capabilities in this filesystem: copy-on-write (COW) similar to ZFS or btrfs; checksums for all files and directories; multi-device support; replication; fault-tolerant encoding (still unstable); caching; compression; encryption; snapshots; support for […]
Jens Axboe, the creator of io_uring and maintainer of the block subsystem in the Linux kernel, was able to increase the number of input/output operations per second (IOPS) by at least 6% (possibly more on full-power Linux kernel configurations), spending only 5 minutes on coding. The idea is to cache the current time request in the block subsystem, made with each input/output operation, — as […]
System76, the company developing the Linux distribution Pop!_OS, has announced progress in the development of the COSMIC desktop environment, rewritten in Rust (not to be confused with the old COSMIC, which was based on GNOME Shell). The shell has been in development for over two years and is nearing the formation of its first alpha release, which will mark the readiness of the basic feature set, allowing the shell to be considered a working product. It is expected that […]
The mobile application "VKontakte" has experienced a massive failure — many users from Russia and other countries report that nothing is loading in their social network applications for iOS and Android. The web version of "VKontakte" is also facing issues, though not as widespread. Upon launching the VK mobile app, many users see only an endless loading screen […]
Components necessary for building the Chrome browser for the Fuchsia operating system have been removed from the Chromium project repository. It is noted that support for Fuchsia in Chrome was an experiment that is now being halted. It is specifically stated that the reason for stopping support is the winding down of the Fuchsia development program for workstations. Support for WebEngine and WebRunner browser components for Fuchsia will continue, but a separate full-featured browser […]