Blog Section
A vulnerability (CVE-2021-29154) has been identified in the eBPF subsystem, which allows running handlers for tracing, analyzing subsystem performance, and traffic management within the Linux kernel in a special virtual machine with JIT, enabling a local user to execute their code at the kernel level. The issue is present up to and including release 5.11.12 and has not yet been fixed in distributions (Debian, Ubuntu, RHEL, Fedora, SUSE, […]
After ten months of development, the multimedia package FFmpeg 4.4 is now available, including a set of applications and a collection of libraries for operations on various multimedia formats (recording, converting, and decoding audio and video formats). The package is distributed under LGPL and GPL licenses, and FFmpeg development is carried out alongside the MPlayer project. Key changes introduced in FFmpeg 4.4 include the implementation of the VDPAU (Video Decode API) functionality […]
Three and a half years after the last significant branch was formed, a new release of the GnuPG 2.3.0 (GNU Privacy Guard) toolkit is presented, compatible with OpenPGP (RFC-4880) and S/MIME standards, providing utilities for data encryption, handling digital signatures, key management, and access to public key stores. GnuPG 2.3.0 is positioned as the first release of a new codebase that includes […]
The Apache community developers voted to cease the development of the Apache Mesos cluster resource management platform, transferring existing work to the Apache Attic repository for deprecated projects. Those interested in the further development of Mesos are encouraged to continue development by creating a fork of the project's git repository. One of the key developers of Mesos mentions the inability to compete with the Kubernetes platform as one of the reasons for the project's failure, which was […]
After a year of development, the release of the Ergo 1.2 framework has occurred, implementing the full Erlang network stack and its OTP library in the Go language. The framework provides developers with a flexible toolkit from the Erlang world for creating distributed solutions in Go using design patterns such as Application, Supervisor, and GenServer. Since the Go language lacks a direct equivalent of the Erlang process, the […]
The release of the free antivirus package ClamAV 0.103.2 has been formed, fixing several vulnerabilities: CVE-2021-1386 — privilege escalation on Windows due to unsafe loading of the UnRAR DLL (a local user can place their DLL masquerading as the UnRAR library and achieve execution of code with system privileges). CVE-2021-1252 — infinite loop when processing specially crafted Excel XML files. CVE-2021-1404 — process crash during […]
Google has announced the inclusion of the Rust programming language among those permitted for Android platform development. The Rust compiler was added to the Android source tree back in 2019, but support for this language remained experimental. Among the first components in Rust that are planned to be delivered in Android are new implementations of the Binder Inter-Process Communication mechanism and […]
The first results of the investigation into the incident regarding the detection of two malicious commits with a backdoor in the PHP project Git repository have been published. During the examination of the attackers' activities, it was concluded that the git.php.net server hosting the Git repository was not compromised, but the database with the accounts was compromised […]
Mozilla developers have decided not to remove the compact mode for displaying panels and to continue delivering associated functionality. However, the visible user setting to choose the panel mode (hamburger menu in the panel -> Customize -> Density -> Compact or Personalization -> Icons -> Compact) will be removed by default. To restore the setting, a parameter 'browser.compactmode.show' will appear in about:config, which returns the button […]
Google has introduced a new audio codec, Lyra, optimized for achieving maximum speech transmission quality even over very slow communication channels. The Lyra implementation code is written in C++ and is open-sourced under the Apache 2.0 license, but one of the required dependencies is the proprietary library libsparse_inference.so, which implements the core for mathematical computations. It is noted that the proprietary library is temporary […]
Corrective releases for the Ruby programming language 3.0.1, 2.7.3, 2.6.7, and 2.5.9 have been issued, addressing two vulnerabilities: CVE-2021-28965 — a vulnerability in the built-in REXML module that can lead to the creation of an incorrect XML document when parsing and serializing a specially crafted XML document, resulting in a structure that does not match the original. The danger of the vulnerability heavily depends on the context, but attacks on […] cannot be ruled out.
The release of the open-source platform webOS Open Source Edition 2.10 has been introduced, which can be used on various portable devices, boards, and automotive infotainment systems. Raspberry Pi 4 boards are considered the reference hardware platform. The platform is developed in a public repository under the Apache 2.0 license, with community oversight, adhering to a collaborative development model. The webOS platform was originally developed by […]