Blog Section
After 5 months of development, a patch release of the high-performance HTTP server and multi-protocol proxy server nginx 1.20.2 has been prepared, which is being developed alongside the stable branch 1.20.X, where only changes related to fixing serious bugs and vulnerabilities are made. Key changes included in the patch release process: Compatibility with OpenSSL 3.0 has been ensured. Fixed an issue with logging empty SSL variables; Fixed a closing error […]
A group of researchers from Graz University of Technology (Austria), known for developing the MDS, NetSpectre, Throwhammer, and ZombieLoad attacks, has published a new side-channel attack method (CVE-2021-3714) on the memory deduplication mechanism, allowing the determination of whether certain data exists in memory, organization of bytewise leaks of memory content, or discovery of memory layouts to bypass address space layout randomization (ASLR) protections. From […]
Patrick Volkerding has announced the start of testing the second release candidate for Slackware 15.0. The proposed release is suggested by Patrick to be considered in a deeper stage of freeze, free from bugs when attempting to rebuild from source code. An installation image of 3.3 GB (x86_64) has been prepared for download, as well as a minimized build for running in Live mode. From […]
After 5 months of development, the release of the Cinnamon 5.2 user environment has been formed, in which the Linux Mint distribution community is developing a fork of the GNOME Shell, Nautilus file manager, and Mutter window manager, aimed at providing an environment in the classic GNOME 2 style with support for successful interaction elements from GNOME Shell. Cinnamon is based on GNOME components, but these components […]
Oracle has released the Oracle Linux 8.5 distribution, based on the package base of Red Hat Enterprise Linux 8.5. An unrestricted installation ISO image, sized at 8.6 GB and prepared for x86_64 and ARM64 (aarch64) architectures, is available for download. Oracle Linux provides unlimited and free access to the yum repository with binary package updates addressing errors (errata) and issues […]
The Proxmox Virtual Environment 7.1 release has been published; it is a specialized Linux distribution based on Debian GNU/Linux aimed at deploying and managing virtual servers using LXC and KVM, capable of serving as an alternative to products like VMware vSphere, Microsoft Hyper-V, and Citrix Hypervisor. The installation ISO image size is 1 GB. Proxmox VE provides tools for deploying fully ready virtual systems […]
The company 'MBK Laboratory' is developing the Tegu mail server, which combines the functions of an SMTP and IMAP server. To simplify the management of settings, users, storage, and queues, a web interface is provided. The server is written in Go and is distributed under the GPLv3 license. Ready binary builds and extended versions (authentication through LDAP/Active Directory, XMPP messenger, CalDav, CardDav, centralized storage in PostgreSQL, fault-tolerant clusters, a set of web clients) are supplied […]
A group of researchers from the University of California, Riverside, has published a new variant of the SAD DNS attack (CVE-2021-20322), which operates despite the protections added last year to block the vulnerability CVE-2020-25705. The new method is generally similar to last year's vulnerability, differing only in the use of a different type of ICMP packets to check active UDP ports. The proposed attack allows for the substitution of dummy data in the DNS server cache, which […]
The developers of the Vosk library have released new models for recognizing Russian speech: the server model vosk-model-ru-0.22 and the mobile model Vosk-model-small-ru-0.22. These models utilize new speech data and a new neural network architecture, which has improved recognition accuracy by 10-20%. The code and data are distributed under the Apache 2.0 license. Key changes: New data collected from voice assistants significantly enhance the recognition of spoken commands, pronounced […]
The CentOS 2111 distribution has been released, incorporating changes from Red Hat Enterprise Linux 8.5. The distribution is fully binary compatible with RHEL 8.5. CentOS 2111 builds are available (8 GB DVD and 600 MB netboot) for x86_64, Aarch64 (ARM64), and ppc64le architectures. SRPMS packages, on which the binary file builds are based, and debuginfo are available through vault.centos.org. In addition to […]
A group of researchers from the Swiss Federal Institute of Technology Zurich, Vrije Universiteit Amsterdam, and Qualcomm has published a new RowHammer class attack method that allows for the manipulation of individual bits in dynamic random access memory (DRAM). This attack is codenamed Blacksmith and has been assigned the identifier CVE-2021-42114. Many DDR4 chips equipped with protections against previously known RowHammer class methods are susceptible to this issue. A toolkit for testing your systems […]
GitHub has disclosed information about two incidents within the NPM package repository infrastructure. On November 2, external security researchers (Kajetan Grzybowski and Maciej Piechota) reported a vulnerability in the NPM repository as part of the Bug Bounty program. This vulnerability allowed the publication of a new version of any package using an unauthorized account without the necessary permissions to perform such updates. The vulnerability was caused by […]