Blog Section
The free UNIX-like operating system OpenBSD 7.2 has been released. The OpenBSD project was founded by Theo de Raadt in 1995 after a conflict with the NetBSD developers, which resulted in Theo being denied access to the NetBSD CVS repository. Following this, Theo de Raadt and a group of like-minded individuals created a new open-source system based on the NetBSD source tree […]
A vulnerability (CVE-2022-37454) has been identified in the implementation of the SHA-3 (Keccak) cryptographic hash function, proposed in the XKCP (eXtended Keccak Code Package), which could lead to a buffer overflow when processing specifically formatted data. The issue arises from an error in the specific implementation of SHA-3, rather than a flaw in the algorithm itself. The XKCP package is presented as the official implementation of SHA-3, developed with the participation of the developer team […]
A corrective release of Firefox 106.0.1 is now available, which addresses an issue that caused crashes on systems with AMD Zen 1 CPUs due to attempts to read from inaccessible memory. Additionally, it is noteworthy that a button for confirming extension permissions for operation within the context of a specific site has been included in the nightly builds of Firefox, as required by the third version of the manifest […]
On the eighteenth anniversary of the project, the release of the Ubuntu 22.10 "Kinetic Kudu" distribution is now available. This version is categorized as an interim release, with updates provided for a duration of 9 months (support will continue until July 2023). Installation images are created for Ubuntu, Ubuntu Server, Lubuntu, Kubuntu, Ubuntu Mate, Ubuntu Budgie, Ubuntu Studio, Xubuntu, UbuntuKylin (a version for China), and Ubuntu Unity. Main […]
After a year of development, the release of the new stable branch of the open communication platform Asterisk 20 has been announced. This platform is designed for deploying software PBXs, voice communication systems, VoIP gateways, IVR systems (voice menus), voicemail, conference calling, and call centers. The source code of the project is available under the GPLv2 license. Asterisk 20 is classified as a long-term support (LTS) release, with updates scheduled to be released in […]
The release of CoreBoot 4.18 has been published, within which a free alternative to proprietary firmware and BIOS is being developed. The project code is distributed under the GPLv2 license. Over 200 developers participated in creating the new version, preparing more than 1800 changes. Key updates include support for 23 motherboards, 19 of which are used in devices running Chrome OS or on Google servers. […]
The release of the lightweight Live distribution AntiX 22 has occurred, built on the Debian package base and aimed at installation on outdated hardware. The release is based on the Debian 11 package base but is delivered without the system manager systemd and with eudev instead of udev. For initialization, runit or sysvinit can be used as options. The default user environment is formed using the IceWM window manager, […]
The main branch release of nginx 1.23.2 has been formed, in which the development of new features continues, as well as the release of the parallel stable branch nginx 1.22.1, into which only changes related to fixing serious bugs and vulnerabilities are made. In the new versions, two vulnerabilities (CVE-2022-41741, CVE-2022-41742) in the ngx_http_mp4_module, used for streaming from H.264/AAC formatted files, have been fixed. […]
A vulnerability (CVE-2022-2602) has been identified in the implementation of the asynchronous input/output interface io_uring, which has been included in the Linux kernel since release 5.1, allowing an unprivileged user to gain root rights in the system. The presence of the issue has been confirmed in the 5.4 branch and kernels starting from the 5.15 branch. The vulnerability is caused by accessing an already freed memory block (use-after-free) in the io_uring subsystem, which occurs as a result of a race condition […]
GitHub has implemented support for a new type of access tokens that can selectively define the permissions of a specific developer or script, covering only the tasks necessary for completing the work. It is expected that selective access provision will help reduce the risk of attacks in the event of credential compromise. Tokens can be used in scripts to organize selective access to the GitHub API and when connecting through […]
Corrective releases for the distributed source code management system Git 2.38.1, 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 have been published, addressing two vulnerabilities that appear when using the 'git clone' command in the '--recurse-submodules' mode with unverified repositories and while utilizing the interactive mode of 'git shell'. You can track package update releases in distributions on the Debian pages, […]
The release of Stratis 3.3 has been published, developed by Red Hat and the Fedora community to unify and simplify the tools for configuring and managing a pool of one or more local storage drives. Stratis provides features such as dynamic storage allocation, snapshots, integrity assurance, and layer creation for caching. Stratis support is integrated into the Fedora and RHEL distributions starting from […]