Blog Section
The developers of the MidnightBSD project, which is creating a desktop-oriented operating system based on FreeBSD with elements ported from DragonFly BSD, OpenBSD, and NetBSD, have warned users about the discovery of traces of a hack on one of their servers. The breach was accomplished by exploiting a vulnerability, CVE-2021-26084, found in late August in the proprietary collaboration engine Confluence (provided for free by Atlassian) […
The Revolt project is developing a communication platform aimed at creating an open-source alternative to the proprietary messenger Discord. Like Discord, the Revolt platform is focused on creating spaces for organizing communication among communities and groups with shared interests. Revolt allows users to launch their own server for communication and, if necessary, integrate it with a website or communicate using available client […
A new version of the Ultimaker Cura 4.11 package is available, providing a graphical interface for preparing models for 3D printing (slicing). Based on the model, the program defines the working scenario of the 3D printer when applying each layer sequentially. In the simplest case, it is sufficient to import the model in one of the supported formats (STL, OBJ, X3D, 3MF, BMP, GIF, JPG, PNG), select the settings for speed, material, and quality, and […
Microsoft has released an update for the CBL-Mariner 1.0.20210901 distribution (Common Base Linux Mariner), which is being developed as a universal base platform for Linux environments used in cloud infrastructure, edge systems, and various Microsoft services. The project aims to unify the Linux solutions used within Microsoft and simplify the maintenance of Linux systems for various purposes. The project's developments are distributed under the MIT license. In the new release: […
The experimental branch of the open implementation of WinAPI — Wine 6.17 has been released. Since the release of version 6.16, 12 bug reports have been closed and 375 changes have been made. The most significant changes are: Improved support for high-DPI screens in built-in applications. The WineCfg program has been converted to PE (Portable Executable) format. Continued preparation for the implementation of the GDI system call interface. […]
A critical vulnerability (CVE-2021-3781) has been identified in Ghostscript, a toolset for processing, converting, and generating documents in PostScript and PDF formats. This vulnerability allows arbitrary code execution when processing specially crafted files. Emil Lerner initially pointed out the issue, discussing the vulnerability on August 25 at the ZeroNights X conference in St. Petersburg (his presentation covered how Emil […]
Google has released version 2.14 of the Dart programming language, continuing the development of the radically revamped Dart 2 branch. This version differs from the original Dart language by implementing strong static typing (types can be inferred automatically, so specifying types is not mandatory; however, dynamic typing is no longer used, and the originally computed type is fixed to the variable with strict enforcement thereafter […]
Version 0.3.35 of the PipeWire project has been released, developing a next-generation multimedia server that replaces PulseAudio. PipeWire offers enhanced features compared to PulseAudio for handling video streams, the ability to process audio with minimal latency, and a new security model for managing access at the level of individual devices and streams. The project is supported in GNOME and is already used by default […]
The GNU Project has released the first test version of GNU Anastasis, a protocol and applications for securely backing up encryption keys and access codes. The project is being developed by the creators of the GNU Taler payment system in response to the need for a tool to recover keys lost due to storage system failures or forgotten passwords used to encrypt the key.
The Norwegian proprietary browser Vivaldi, developed by the team behind Opera Presto, has become the default browser in the Linux distribution Manjaro with the Cinnamon desktop. The Vivaldi browser will also be available in other editions of the Manjaro distribution through the project's official repositories. To enhance integration with the distribution, a new theme adapted to the Manjaro Cinnamon design has been added to the browser.
GitHub has revealed details about seven vulnerabilities in the tar and @npmcli/arborist packages, which provide functions for working with tar archives and calculating dependency trees in Node.js. The vulnerabilities allow specially crafted archives to overwrite files outside of the root directory during extraction, as permitted by current access rights. These issues could enable arbitrary code execution.
The release of the main branch nginx 1.21.3 has been formed, continuing the development of new features (only critical bug fixes and vulnerabilities are addressed in the concurrently supported stable branch 1.20). Major changes include optimization of request body reading when using the HTTP/2 protocol. Bugs in the internal API for processing the request body that occur when using the HTTP/2 protocol have been fixed.