Blog Section
Rizal Muttaqin, one of the designers of the LibreOffice office suite, published a blog post outlining a plan for the potential development of the LibreOffice 8.0 user interface. The most notable innovation is the built-in tab support, which allows for quick switching between different documents, similar to how users switch between websites in modern browsers. Each tab can also be detached if needed […]
Clients of the Microsoft Azure cloud platform using Linux in virtual machines have encountered a critical vulnerability (CVE-2021-38647) that allows remote code execution with root privileges. The vulnerability, codenamed OMIGOD, is notable because the issue exists within the OMI Agent application, which is quietly installed in Linux environments. The OMI Agent is automatically installed and activated when using services such as […]
In the Travis CI continuous integration service designed for testing and building projects developed on GitHub and Bitbucket, a security issue (CVE-2021-41077) has been identified that allows the content of sensitive environment variables in public repositories using Travis CI to be exposed. The vulnerability also allows exposure of the keys used in Travis CI for generating digital signatures, access keys, and tokens for accessing […]
The release of Apache HTTP Server 2.4.49 has been published, featuring 27 changes and fixing 5 vulnerabilities: CVE-2021-33193 — mod_http2 is susceptible to a new variant of the "HTTP Request Smuggling" attack, which allows crafted client requests to interject into the content of requests made by other users through mod_proxy (for example, malicious JavaScript code could be injected into another user's session on the site). CVE-2021-40438 — SSRF vulnerability (Server […]
The release of the open billing system ABillS 0.91 is now available, with components provided under the GPLv2 license. Key updates include: Paysys: all modules have been revamped. Paysys: payment system tests have been added. Client API introduced. Triplay: the management mechanism for sub-services Internet/TV/Telephony has been reworked. Cams: integration with the cloud-based video surveillance system Forpost. Ureports: the ability to send notifications simultaneously through multiple types has been added. Maps2: new layers added: Visicom Maps, 2GIS. […]
Mozilla has introduced a new recommendation system, Firefox Suggest, which provides additional suggestions while typing in the address bar. Unlike recommendations based on local data and search engine queries, this new feature can include information from third-party partners, which may be non-profit projects like Wikipedia as well as paid sponsors. For example, when you start typing in […]
After six months of development, Oracle has released Java SE 17 (Java Platform, Standard Edition 17), with the open project OpenJDK serving as its reference implementation. Except for the removal of some outdated features, Java SE 17 maintains backward compatibility with previous versions of the Java platform — most previously written Java projects will run without modification on […]
Vulnerabilities (CVE-2021-40823, CVE-2021-40824) have been identified in most client applications for the decentralized communication platform Matrix, allowing access to keys used for transmitting messages in end-to-end encrypted (E2EE) chats. An attacker, having compromised one user in the chat, can decrypt messages that were previously sent to that user from vulnerable client applications. Successful exploitation requires access to the recipient's account […]
The nightly builds that will form the release of Firefox 94 have incorporated a change that includes a new rendering backend for graphical environments using the X11 protocol by default. This new backend is notable for using EGL for graphics output instead of GLX. It supports open OpenGL drivers Mesa 21.x and proprietary NVIDIA drivers 470.x. Proprietary OpenGL drivers from AMD are not yet […]
Google has released an update for Chrome 93.0.4577.82, which fixes 11 vulnerabilities, including two issues that are already being exploited by attackers (0-day). Details are not yet disclosed, but it's known that the first vulnerability (CVE-2021-30632) is caused by a flaw that leads to a buffer overflow in the JavaScript engine V8, while the second issue (CVE-2021-30633) exists in the implementation of the Indexed DB API and is related to […]
The second release of starter kits on the Alt Ten platform has been published. These images are suitable for experienced users who prefer to determine their own application package list and configure the system (even creating their own derivatives) for starting work with a stable repository. As composite works, they are distributed under the GPLv2+ license. Options include a basic system and one of the environments […]
A group of researchers from American, Australian, and Israeli universities has proposed a new side-channel attack technique to exploit Spectre-class vulnerabilities in browsers based on the Chromium engine. The attack, codenamed Spook.js, allows attackers to bypass site isolation mechanisms by running JavaScript code and read the contents of the entire address space of the current process, that is, accessing the data of pages that are loaded […]
Russian Russian
Italian
German
Polish
Estonian
Albanian
Bulgarian
Croatian
Czech
Danish
Dutch
English
French
Hungarian
Latvian
Norwegian
Portuguese
Romanian
Slovak
Slovenian
Spanish
Swedish