Blog Section
The release of the Pale Moon 29.1 web browser is available, which branched off from the Firefox codebase to provide higher efficiency, maintain a classic interface, minimize memory consumption, and offer additional customization options. Pale Moon builds are generated for Windows and Linux (x86 and x86_64). The project’s code is distributed under the MPLv2 (Mozilla Public License). The project adheres to a classic interface organization, without […]
On February 6-7, 2021, one of the largest free conferences dedicated to free software, FOSDEM, took place. The conference was typically held in person in Brussels, but due to the coronavirus pandemic, it had to be moved online. To achieve this, the organizers teamed up with the Element team and chose a chat based on the open Matrix protocol to construct a federated communication network in real […]
New releases of the Linux From Scratch 10.1 (LFS) and Beyond Linux From Scratch 10.1 (BLFS) guides have been introduced, along with editions of LFS and BLFS using the system manager systemd. Linux From Scratch provides instructions for building a basic Linux system from scratch, using only the source code of the necessary software. Beyond Linux From Scratch supplements the LFS instructions with information on building […]
Today, on February 15, 2021, an updated version of Devuan 3.1.0 Beowulf was quietly released. Devuan 3.1 is an intermediate release continuing the development of the Devuan 3.x branch, built on the Debian 10 'Buster' package base. Live builds and installation ISO images for the AMD64 and i386 architectures have been prepared for download. Builds for ARM (armel, armhf, and arm64) and images for virtual machines for the release […]
In the new releases of the centralized configuration management system SaltStack 3002.5, 3001.6, and 3000.8, a vulnerability (CVE-2020-28243) has been fixed that allows a non-privileged local user on the host to escalate their privileges in the system. The issue was caused by a bug in the salt-minion handler, which is used to receive commands from the central server. The vulnerability was identified in November but was not fixed until now. During the 'restartcheck' operation, substitution may be possible […]
Brian Foy, the founder of the Perl Mongers organization, published a detailed analysis of the incident in which the domain perl.com was hijacked by external parties. The domain hijacking did not affect the project's server infrastructure and was carried out at the level of ownership change and DNS server parameter alterations at the registrar. It is claimed that the computers responsible for the domain were also not compromised, and the attackers used […]
The maintainer of the Telegram Desktop packages for Fedora and RPM Fusion announced the removal of packages from the repositories. A day prior, the package maintainer for Gentoo also announced the discontinuation of support for Telegram Desktop. In both cases, there was a willingness to restore the packages to the repositories if a new maintainer can be found to take over the support. […]
The release of aTox 0.6.0 has taken place — a new version of the free mobile messenger with open source, which uses the Tox protocol (c-toxcore). Tox offers a decentralized P2P model for message distribution, utilizing cryptographic methods for user identification and protecting transit traffic from interception. The application is written in Kotlin. The source code and ready-made builds of the application are distributed under the GNU GPLv3 license. Features of aTox: […]
The release of the interactive command shell fish 3.2.0 (friendly interactive shell) has been published, evolving as a more user-friendly alternative to bash and zsh. Fish supports features such as syntax highlighting with automatic error detection, suggestions for input based on the history of past operations, and the auto-completion of options and commands using their descriptions in man pages, all working out of the box […]
A vulnerability (CVE-2021-27803) has been identified in the wpa_supplicant package, which is used for connecting to wireless networks in many Linux distributions, *BSD, and Android. This vulnerability could potentially be exploited to execute code by an attacker when processing specially crafted control frames for Wi-Fi Direct (Wi-Fi P2P). To carry out an attack, the attacker must be within the range of the wireless network to send the victim a specially crafted […]
The developers of the Linux Mint distribution plan to redesign the update manager in the next release to encourage users to keep the distribution up to date. A study showed that only about 30% of users install updates in a timely manner, within a week of their release. Linux Mint does not collect telemetry, so an indirect method based on analysis was used to assess the relevance of the distribution components […]
A correction release of OpenVPN 2.5.1 has been prepared. This package allows the creation of virtual private networks, enabling encrypted connections between two client machines or facilitating the operation of a centralized VPN server for multiple clients. OpenVPN code is distributed under the GPLv2 license, and ready-made binary packages are available for Debian, Ubuntu, CentOS, RHEL, and Windows. New features: A new connection state AUTH_PENDING has been added to the connection states list, […]