Blog Section
The release of the cross-platform open-source build script generator CMake 3.21 has been presented, serving as an alternative to Autotools and used in projects such as KDE, LLVM/Clang, MySQL, MariaDB, ReactOS, and Blender. CMake is written in C++ and distributed under the BSD license. It is notable for providing a simple script language, functionality extension through modules, and minimal dependencies (no binding to […]
A critical vulnerability has been discovered in the cdnjs content delivery network provided by Cloudflare, designed to accelerate the delivery of JavaScript libraries, allowing arbitrary code execution on CDN servers. The danger of this issue is exacerbated by the fact that approximately 12.7% of all websites on the internet use the service to load JavaScript libraries, and the compromise of this infrastructure allows for the substitution of the libraries served by any of these sites. The cdnjs service loads packages […]
A vulnerability has been identified in the uBlock Origin content blocking system that can cause crashes or memory exhaustion when navigating to a specially crafted URL, provided this URL falls under the strict blocking filters. The vulnerability is manifested only when directly accessing the problematic URL, for example, by clicking on a link. The vulnerability has been fixed in the uBlock Origin 1.36.2 update. A similar issue […]
The Pine64 community, which develops open devices, has released the PineTime smartwatch for sale, encased in a sealed housing that can withstand immersion up to 1 meter. The device is priced at $26.99. Unlike the previously available developer kit, the offered watch variant does not come with a low-level debugging interface and is aimed at the average consumer (experiments with installing unverified firmware are not recommended due to limited […]
Google has announced the release of Chrome 91.0.4472.164, which fixes eight vulnerabilities, including CVE-2021-30563, a problem already being exploited by attackers in zero-day exploits. Details have not yet been disclosed, but it is known that the vulnerability is caused by improper type handling (Type Confusion) in the JavaScript V8 engine. Among the other vulnerabilities are three issues related to use-after-free memory accesses […]
Google has announced plans to add an HTTPS-First mode to Chrome 94, similar to the HTTPS Only mode introduced in Firefox 83. When attempting to open a resource without encryption over HTTP, the browser will first try to access the HTTPS site, and if that attempt fails, the user will be shown a warning about the lack of HTTPS support and offered to open the site without encryption. […]
The release of Wine Launcher 1.5.3 is now available, enhancing the Sandbox environment for running Windows games. Key features include: isolation from the system, a separate Wine and Prefix for each game, SquashFS image compression for saving space, a modern launcher style, automatic change logging in the Prefix folder and generation of patches from this, support for gamepads, and Steam/GE/TKG Proton. The project code is distributed under […]
A vulnerability (CVE-2021-22555) has been discovered in Netfilter, a subsystem of the Linux kernel used for filtering and modifying network packets, allowing a local user to gain root privileges on the system, even within an isolated container. A working prototype of an exploit has been prepared for testing, bypassing KASLR, SMAP, and SMEP protection mechanisms. The researcher who identified the vulnerability received a $20,000 reward from Google for […]
The UBports project, which has taken over the development of the Ubuntu Touch mobile platform after Canonical withdrew from it, has released the OTA-18 firmware update (over-the-air). The project is also developing an experimental port of the Unity 8 desktop, which has been renamed Lomiri. The Ubuntu Touch OTA-18 update is designed for smartphones including OnePlus One, Fairphone 2, Nexus 4, Nexus 5, Nexus 7 […]
A fork of zsnes, the Super Nintendo emulator, is now available. The fork author has begun addressing build issues and updating the codebase. The original zsnes project has not been updated for 14 years, and attempts to use it result in compilation problems in modern Linux distributions, as well as incompatibilities with new compilers. The updated package is available in the repository […]
The document-oriented DBMS MongoDB 5.0 has been released, positioned between fast and scalable systems that handle data in key/value format and relational DBMSs that are functional and user-friendly for query formation. MongoDB's code is written in C++ and distributed under the SSPL license, which is based on the AGPLv3 license but is not open source due to its discriminatory requirement for delivery under […]
The release of the authoritative DNS server PowerDNS Authoritative Server 4.5 has been announced, designed for managing DNS zones. According to the developers, PowerDNS Authoritative Server serves approximately 30% of the total number of domains in Europe (90% if considering only DNSSEC-signed domains). The project's code is distributed under the GPLv2 license. PowerDNS Authoritative Server allows for the storage of information about domains […]