Blog Section
A vulnerability (CVE-2022-1972) has been identified in the Netfilter kernel subsystem, similar to the issue disclosed at the end of May. The new vulnerability also allows a local user to gain root privileges in the system through manipulations with rules in nftables and requires access to nftables, which can be obtained in a separate namespace (network namespace or user namespace) with CLONE_NEWUSER rights, […]
The release of CoreBoot 4.17 has been published, in which a free alternative to proprietary firmware and BIOS is being developed. The project's code is distributed under the GPLv2 license. The new version was developed by 150 contributors who prepared over 1300 changes. Key changes: A vulnerability (CVE-2022-29264) has been fixed, which was present in CoreBoot releases from 4.13 to 4.16 and allowed on systems with an AP (Application Processor) […]
The release of the specialized Tails 5.1 distribution (The Amnesic Incognito Live System), based on the Debian package base and intended for anonymous internet access, has been formed. Anonymous access in Tails is provided by the Tor system. All connections, except for traffic through the Tor network, are by default blocked by the packet filter. User data is encrypted when saved between sessions, […]
An experimental release of the open implementation of WinAPI — Wine 7.10 has taken place. Since the release of version 7.9, 56 bug reports have been closed and 388 changes have been made. The most significant changes include: the macOS driver has been transitioned to use the PE (Portable Executable) format instead of ELF. The Wine Mono engine implementing the .NET platform has been updated to version 7.3. Compatible with Windows […]
Konstantin Komarov, founder and head of Paragon Software, proposed the inclusion of the first corrective update for the ntfs3 driver in Linux kernel 5.19. Since the inclusion of ntfs3 in kernel 5.15 last October, the driver has not been updated, and communication with the developers was lost, leading to discussions about the need to classify the NTFS3 code as 'orphaned' […]
After four and a half years since the last update, the fourth release of the Replicant project 6 has been formed, developing a fully open version of the Android platform, free from proprietary components and closed drivers. The Replicant 6 branch is built on the codebase of LineageOS 13, which in turn is based on Android 6. Compared to the original firmware, a large portion has been replaced in Replicant […]
A mode for automatic spam blocking in push notifications has been proposed for inclusion in the Chromium codebase. It has been noted that spam through push notifications is among the most common complaints sent to Google support. The proposed protection mechanism will address the spam issue in notifications and will be applied at the user's discretion. To manage the activation of the new mode, the parameter "chrome://flags#disruptive-notification-permission-revocation" has been implemented, which allows users to control this feature.
Enthusiasts have successfully booted the Linux 5.18 kernel on Apple iPad tablets powered by ARM A7 and A8 chips. Currently, the work is limited to adapting Linux for iPad Air, iPad Air 2, and some iPad mini devices, but there are no fundamental issues in applying these developments to other devices running on Apple A7 and A8 chips.
The release of the Linux distribution Armbian 22.05 has been published, providing a compact system environment for various single-board computers based on ARM processors, including models such as Raspberry Pi, Odroid, Orange Pi, Banana Pi, Helios64, pine64, Nanopi, and Cubieboard, based on processors from Allwinner, Amlogic, Actionsemi, Freescale/NXP, Marvell Armada, Rockchip, Radxa, and Samsung Exynos. The builds are formed using Debian package bases.
The NGINX Unit application server 1.27.0 has been released, which develops a solution for running web applications in various programming languages (Python, PHP, Perl, Ruby, Go, JavaScript/Node.js, and Java). Multiple applications in different programming languages can run simultaneously under NGINX Unit, with their launch parameters being dynamically adjustable without the need to edit configuration files or restart the server. The code is written in such a way that...
Mozilla has released a toolkit for self-sufficient machine translation from one language to another, operating on the user's local system without referring to external services. The project is developed under the Bergamot initiative in collaboration with researchers from several universities in the UK, Estonia, and the Czech Republic, with financial support from the European Union. The developments are released under the MPL 2.0 license. The project includes the bergamot-translator engine, tools...
The Distrobox 1.3 toolkit has been released, allowing for the quick installation and launch of any Linux distribution in a container while ensuring its integration with the main system. The project code is written in Shell and is distributed under the GPLv3 license. It is implemented as an extension of the Docker or Podman tools, and it is designed to simplify the user experience and the integration setup of the running environment with the rest of the system. […]