Category: Blog

The OpenBSD project has released OpenIKED 7.1, a portable implementation of the IKEv2 protocol for IPsec

The release of OpenIKED 7.1 has been published, which implements the IKEv2 protocol developed by the OpenBSD project. Initially, IKEv2 components were an inseparable part of the OpenBSD IPsec stack, but they are now separated into a portable package and can be used in other operating systems. For instance, the operation of OpenIKED has been verified on FreeBSD, NetBSD, macOS, and various Linux distributions including Arch, Debian, Fedora, and Ubuntu. The code is written in […]

Release of the minimalist distribution Alpine Linux 3.16

The release of Alpine Linux 3.16 is available, a minimalist distribution built on the Musl standard library and the BusyBox utility set. The distribution features enhanced security requirements and is compiled with SSP (Stack Smashing Protection) enabled. OpenRC is used as the initialization system, and its own package manager, apk, is utilized for package management. Alpine is used for creating official Docker container images. Bootable […]

Release of Linux Kernel 5.18

After two months of development, Linus Torvalds announced the release of Linux kernel 5.18. Among the most notable changes: a large cleanup of outdated functionality, the deprecation of the Reiserfs file system, the implementation of user process tracing events, added support for Intel's exploit mitigation technology IBT, included buffer overflow detection mode when using the memcpy() function, introduced fprobe function call tracking mechanism, and improved scheduler performance […]

Lotus 1-2-3 has been ported to Linux.

Tavis Ormandy, a security researcher at Google, ported the Lotus 1-2-3 spreadsheet software, released in 1988, to work on Linux. This was done out of curiosity, three years before Linux itself emerged. The port was based on a reworking of the executable files for UNIX, found in a warez archive on one of the BBS. This porting is interesting because […]

A malicious library pymafka has been detected in the Python package index PyPI.

A library named pymafka containing malicious code has been identified in the PyPI (Python Package Index). The library was distributed under a name similar to the popular package pykafka, intending to trick inattentive users into confusing the substitute package with the main project (typosquatting). The malicious package was posted on May 17 and was downloaded 325 times before it was blocked. Inside the package, there was a 'setup.py' script that defined […]

Release of the system manager systemd 251

After five months of development, the release of the system manager systemd 251 has been announced. Key changes include: enhanced system requirements. The minimum supported version of the Linux kernel has increased from 3.13 to 4.15. The presence of the CLOCK_BOOTTIME timer is required for operation. A compiler supporting the C11 standard and GNU extensions is needed for building (the C89 standard continues to be used for header files). An experimental utility, systemd-sysupdate, has been added for automatic […]

Ubuntu 22.10 will transition to audio processing using PipeWire instead of PulseAudio.

In the repository where the development of Ubuntu 22.10 is taking place, there has been a transition to the use of the PipeWire multimedia server as the default for audio processing. Packages related to PulseAudio have been removed from the desktop and desktop-minimal sets, and to ensure compatibility, a working layer over PipeWire, called pipewire-pulse, has been added instead of the libraries for interacting with PulseAudio, which allows all existing PulseAudio clients to continue functioning. […]

Vulnerability in the Linux kernel perf subsystem allowing privilege escalation.

A vulnerability (CVE-2022-1729) has been identified in the Linux kernel, allowing a local user to gain root access to the system. The vulnerability is caused by a race condition in the perf subsystem, which can be exploited to initiate access to a previously freed area of kernel memory (use-after-free). The issue manifests starting from kernel release 4.0-rc1. The exploitability has been confirmed for releases 5.4.193 and above. A fix is currently only available in the form of a patch. The risk of the vulnerability […]

Release of Wine 7.9 and GE-Proton7-18

An experimental release of the open implementation of WinAPI — Wine 7.9 has occurred. Since the release of version 7.8, 35 bug reports have been closed and 323 changes have been made. The most important changes include: The migration of the macOS driver to use the PE (Portable Executable) format instead of ELF. Work has been done to resolve crashes during the execution of tests (‘make test’) on the Windows platform. Closed […]

Release of Erlang/OTP 25

After a year of development, the release of the functional programming language Erlang 25 has taken place, aimed at the development of distributed fault-tolerant applications that provide real-time parallel request processing. The language has gained popularity in areas such as telecommunications, banking systems, e-commerce, computer telephony, and instant messaging organization. At the same time, the OTP 25 (Open Telecom Platform) release, a complementary set of libraries, has been launched. […]

Apache OpenMeetings 6.3 is now available, a server for web conferencing

The Apache Software Foundation has released the Apache OpenMeetings 6.3 web conferencing server, which allows for audio and video conferencing via the web, as well as collaboration and messaging among participants. It supports both webinars with a single speaker and conferences with an arbitrary number of participants interacting simultaneously. The project's code is written in Java and is distributed under […]

Firefox 100.0.2 Update Fixes Critical Vulnerabilities

Corrective releases of Firefox 100.0.2, Firefox ESR 91.9.1, and Thunderbird 91.9.1 have been published, addressing two vulnerabilities assessed as critical. During the ongoing Pwn2Own 2022 competition, a working exploit was demonstrated, allowing an attacker to bypass sandbox isolation and execute code on the system by opening a specially crafted page. The exploit's author has been awarded a prize of $100,000. The first vulnerability (CVE-2022-1802) […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster