Blog Section
Canonical has warned of the approaching end of the five-year update release period for the Ubuntu 16.04 LTS distribution. Official public support for Ubuntu 16.04 will cease on April 30, 2021. For users who cannot transition their systems to Ubuntu 18.04 or 20.04 in time, as with previous LTS releases, the ESM (Extended Security Maintenance) program is offered to extend publication […]
A corrective update for the Flatpak 1.10.2 toolkit, which enables the creation of self-contained packages, has been released, fixing a vulnerability (CVE-2021-21381) that allowed a package author to bypass the established sandbox isolation mode and access files on the host system. This issue has been present since release 0.9.4. The vulnerability is caused by a flaw in the implementation of the file forwarding function, which enables access manipulation […]
A vulnerability (CVE-2021-27365) has been discovered in the iSCSI subsystem code of the Linux kernel, allowing an unprivileged local user to execute code at the kernel level and gain root privileges in the system. A working prototype exploit is available for testing. The vulnerability has been resolved in Linux kernel updates 5.11.4, 5.10.21, 5.4.103, 4.19.179, 4.14.224, 4.9.260, and 4.4.260. Kernel package updates are available in Debian, Ubuntu, SUSE/openSUSE distributions, […]
Google has released several exploit prototypes demonstrating the potential exploitation of Spectre-class vulnerabilities when executing JavaScript code in the browser, circumventing previously added protective measures. Exploits can be used to gain access to the memory of the process handling web content in the current tab. A site called leaky.page has been launched for testing the exploit, with the code detailing the logic of operation available on GitHub. The proposed […]
Google has released Chrome version 89.0.4389.90, which addresses five vulnerabilities, including issue CVE-2021-21193, already being exploited by attackers (0-day). Details have not been disclosed, but it is known that the vulnerability is caused by access to a freed memory area in the JavaScript engine Blink. The issue has been assigned a high, but not critical, severity level, indicating that the vulnerability does not allow for bypassing […]
An experimental release of the open implementation of WinAPI — Wine 6.4 has occurred. Since the release of version 6.3, 38 bug reports have been closed and 396 changes have been made. The most significant changes include: Added support for the DTLS protocol. In DirectWrite, support has been implemented for manipulating font sets (FontSet), defining filters for font sets, and calls to GetFontFaceReference(), GetFontSet(), and GetSystemFontSet(), allowing retrieval of information about […]
The eighth release of the starter kits on the Ninth Alt platform is ready. These images are suitable for experienced users who prefer to define the application package list independently and configure the system (up to creating their own derivatives) to start working with a stable repository. They are distributed as composite works under the GPLv2+ license. Options include a basic system and one of the desktop environments […]
Russian Railways is transitioning part of its infrastructure to the Astra Linux platform. A total of 22,000 licenses for the distribution have already been purchased — 5,000 licenses will be used for migrating the automated workplaces of employees, while the rest will be for building a virtual infrastructure for workplaces. The migration to Astra Linux will begin this month. The implementation of Astra Linux into the infrastructure of Russian Railways will be handled by JSC […]
Following GitHub and Bitbucket, developers of the GitLab collaborative development platform have announced the discontinuation of the use of the word "master" for main branches, in favor of the word "main". The term "master" has recently been deemed politically incorrect, as it alludes to slavery and is perceived by some members of the community as offensive. The change will be made both in the GitLab.com service and after updating the GitLab platform for […]
Igor Pavlov has released the official console version of 7-zip for Linux alongside the release of version 21.01 for Windows, due to the p7zip project not seeing updates for five years. The official version of 7-zip for Linux is similar to p7zip but is not a copy. No details are provided about the differences between the projects. The program is released in versions for x86, x86-64, ARM and […]
A patch release of Firefox 86.0.1 is available, which includes several fixes: A crash at startup occurring in various Linux distributions has been resolved. This issue was caused by an incorrect memory size check in the code for loading ICC color profiles, written in Rust. A problem causing Firefox to hang after macOS wakes from sleep on systems with Apple M1 processors has been fixed. An error has been resolved, […]
The release of Samba 4.14.0 has been presented, continuing the development of the Samba 4 branch with a full implementation of the domain controller and Active Directory service, compatible with the Windows 2000 implementation and capable of servicing all Microsoft supported versions of Windows clients, including Windows 10. Samba 4 is a multifunctional server product that also provides file server, print service, and identity server (winbind) implementations. Key changes […]