Category: Blog

Resolving GPL violations in the mimemagic library resulted in a Ruby on Rails failure

The author of the popular Ruby library mimemagic, which has over 100 million downloads, was forced to change the license from MIT to GPLv2 due to a discovered breach of the GPLv2 license within the project. Only versions 0.3.6 and 0.4.0, released under GPL, remain on RubyGems, while all older releases under the MIT license have been removed. Furthermore, the development of mimemagic has been halted, and the repository on GitHub […]

The OSI organization will hold new elections for the board of directors due to the compromise of the voting system.

The Open Source Initiative (OSI), which verifies licenses for compliance with Open Source criteria, has decided to hold a re-election for the governing board due to a vulnerability found in the voting platform used to manipulate the results of the previous elections. Currently, the vulnerability has been blocked and an independent investigation has been brought in to determine the consequences of the breach. Details of the incident will be published after completion […]

Update Samba 4.14.2, 4.13.7, and 4.12.14 to address vulnerabilities

Corrective releases for Samba 4.14.2, 4.13.7, and 4.12.14 have been prepared to address two vulnerabilities: CVE-2020-27840 — a buffer overflow that occurs when processing specially crafted DN (Distinguished Name) entries. An anonymous attacker can cause the AD DC LDAP server based on Samba to crash by sending a specially crafted bind request. Since there is a potential to control the overwrite area during the attack, […]

The release of the SpamAssassin 3.4.5 spam filtering system includes a vulnerability fix.

The release of the spam filtering platform SpamAssassin 3.4.5 is now available. SpamAssassin implements a comprehensive approach to decision-making regarding blocking: messages undergo a series of checks (context analysis, DNSBL black and white lists, trainable Bayesian classifiers, signature checking, sender authentication via SPF and DKIM, etc.). After the message is evaluated by various methods, a specific weight coefficient is accumulated. If the computed […]

Release of Tor Browser 10.0.14 and Tails distribution 4.17.

The release of the specialized distribution Tails 4.17 (The Amnesic Incognito Live System), based on the Debian package base and designed for anonymous internet access, has been formed. Anonymous access in Tails is ensured by the Tor system. By default, all connections except for traffic through the Tor network are blocked by the packet filter. For storing user data in save mode between sessions, […]

Release of the GNOME 40 desktop environment

After six months of development, the GNOME 40 desktop environment has been released. Over 24,000 changes have been made compared to the previous release, involving 822 developers. To quickly assess the features of GNOME 40, specialized Live builds based on openSUSE and an installation image prepared under the GNOME OS initiative are offered. GNOME 40 is also already included in […]

An open letter has been published in support of Stallman

Dissenters against the attempt to displace Stallman from all positions published a counter open letter from Stallman's supporters and opened a petition to support him (to sign, one must send a pull request). Actions against Stallman are interpreted as attacks on free speech, a distortion of what was said, and social pressure on the community. Historically, Stallman has focused more on philosophical questions and […]

Release of Manjaro Linux 21.0

The release of Manjaro Linux 21.0, built on Arch Linux and aimed at beginner users, has taken place. The distribution is notable for its simplified and user-friendly installation process, support for automatic hardware detection, and installation of the necessary drivers. Manjaro is available as live builds with graphical environments KDE (2.7 GB), GNOME (2.6 GB), and Xfce (2.4 GB). At […]

TLS 1.0 and 1.1 have officially been deemed obsolete.

The IETF (Internet Engineering Task Force), which works on the development of Internet protocols and architecture, has published RFC 8996, officially classifying TLS 1.0 and 1.1 protocols as obsolete technologies. The TLS 1.0 specification was published in January 1999. Seven years later, an updated TLS 1.1 was released with security improvements related to initialization vector generation and padding. At […]

Chrome 90 has approved the use of HTTPS by default in the address bar.

Google has announced that in the release of Chrome 90, scheduled for April 13, the default will be to open websites via HTTPS when entering hostnames in the address bar. For example, when entering the host example.com, the website https://example.com will be opened by default, and if there are issues, it will revert to http://example.com. This feature was previously […]

The movement to remove Stallman from all positions and dissolve the board of the Free Software Foundation.

Richard Stallman's return to the board of the Free Software Foundation has sparked negative reactions from some organizations and developers. In particular, the nonprofit organization Software Freedom Conservancy (SFC), whose director recently received an award for contributions to the development of free software, announced the termination of all relations with the Free Software Foundation and the cessation of any activities intersecting with this organization, in […]

Release of Firefox 87

The release of the web browser Firefox 87 has taken place. Additionally, an update for the long-term support branch 78.9.0 has been prepared. The Firefox 88 branch has entered beta testing, with the release scheduled for April 20. Key innovations include new indicators for the position of found keywords displayed on the scrollbar when using the search function and activating the Highlight All mode.

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster