Cov xwm txheej tseem ceeb tshaj plaws ntawm 2019

Kev xaiv zaum kawg ntawm cov xwm txheej tseem ceeb thiab tseem ceeb tshaj plaws ntawm 2019:

• Richard Stallman sab laug tus thawj tswj hwm ntawm Open Source Foundation.
• IBM tuam txhab nqus tau Kaus mom Liab.
• Kev tsim qauv WebAssembly. Kev nce qib WebAssembly ua lub platform rau kev siv thoob ntiaj teb. WASI rau siv WebAssembly sab nraum browser. binaryAST kom ceev JavaScript loading.
• IBM, Google, Microsoft thiab Intel tsim alliance rau txoj kev loj hlob ntawm qhib cov ntaub ntawv tiv thaiv technologies.
• W3C thiab WHATWG cov koom haum tau pom zoo txhim kho HTML thiab DOM specifications.
• Rov qab rau qhov teeb meem ntawm kev txhawb nqa ntau lub tshuab pib hauv Debian и tuav kev pov npav dav dav rau cov txheej txheem pib hauv Debian.
• Microsoft lub tuam txhab luam tawm cov lus qhia tshwj xeeb uas muaj rau pej xeem thiab ua rau exFAT patents muaj rau kev siv dawb hauv LinuxLub Tuam Txhab Software Paragon qhib koj tus exFAT tsav tsheb code.
• Nab hab sej и Firefox hloov mus rau qhov kev tso tawm tshiab tiam tshiab.
• Kev nqis tes ua ntawm DNS-dhau-HTTPS kev txhawb nqa hauv Firefox и Chrome (kev koom tes ntawm cov kws kho mob hais lus vs DoH).
• Txhawb HTTP/3 Chrome и Firefox, kev kawm module nrog HTTP / 3 kev txhawb nqa rau nginx.
• Chrome thiab Firefox tab tom tsiv mus rau kos cov nplooj ntawv qhib dua HTTP nrog qhov ntsuas kev sib txuas tsis ruaj ntseg.
• Firefox: Teeb meem nrog tag nrho Firefox add-ons raug kaw vim Mozilla daim ntawv pov thawj tas sij hawm. Pab kom tracker thaiv los ntawm lub neej ntawd hauv Firefox. Txhim kho qhov browser tshiab mobile Firefox Saib Ua Ntej.
  Rov pib dua ua haujlwm ntawm kev koom ua ke Tor kev txhawb nqa rau hauv Firefox. Ua tiav ua hauj lwm ntawm kev tshem tawm XBL (XML Binding Language) Cheebtsam los ntawm Firefox; ntau yam built-in interfaces tau redone (saib daim ntawv pov thawj, chaw nyob bar, hais txog: config, thiab lwm yam). Tua tawm Firefox Xa kev pabcuam. Kaw Test Pilot program thiab Firefox Screenshots service.
  Rejection Mozilla los ntawm kev siv qee qhov kev txwv los ntawm Chrome manifesto tshiab.
• Chromium: Kev nce qib thib peb tsab ntawm lub manifesto, tsis sib haum nrog uBlock Keeb Kwm. Tig los blocker ntawm kev tshaj tawm tsis tsim nyog. Tshem tawm Flash. Txhob tso "https://" thiab "www." hauv qhov chaw nyob bar. Kev nce qib SXG thiab AMP rau xa cov ntawv pov thawj ntawm cov nplooj ntawv web los ntawm lwm qhov chaw. Tau txais Kev cais tawm ntawm qhov chaw. Tightening cov cai rau tshaj tawm add-ons hauv Chrome Web Store.
• TLS: Mozilla, Cloudflare thiab Facebook qhia TLS txuas ntxiv rau delegation ntawm daim ntawv pov thawj luv luv. ACME raws tu qauv tsim los ntawm Let's Encrypt project pom zoo raws li tus qauv hauv Internet.
• KDE и Mozilla hloov mus rau Matrix rau kev sib txuas lus tsim tawm. GTK hloov cov npe xa ntawv mus dhau mus rau lub platform Discourse.
• Kho vajtse: Qhib microarchitecture MIPS R6 (MIPS Qhib). IBM tuam txhab qhib Lub zog processor architecture. Western Digital tau nthuav tawm WD SweRV RISC-V processor. Intel tsim qhib firmware ModernFW. Google tsim OpenTitan, lub platform rau tsim cov chips ntseeg siab. Google, SiFive thiab WD nrhiav tau kev sib koom tes txhawb nqa qhib chips thiab SoCs.
• Patents: Patent thov tawm tsam GNOME Foundation. Initiative ntawm kev tiv thaiv qhib qhov software los ntawm patent trolls. Kev sim tsim patent pas dej ua ke rau sau cov nuj nqis rau kev siv AV1 thiab VP9 codecs.
• Kev foob: Rov pib dua kev tsis sib haum xeeb ntawm Google thiab Oracle ntsig txog Java thiab Android. Thov vs Adblock Plus. Yeej VMware nyob rau hauv rooj plaub ua txhaum GPL. Rambler tshaj tawm hais tias koj txoj cai ntawm Nginx.
• Kev Tsis Sib Haum Xeeb: Systemd nyob rau hauv Debian nyob tsis muaj tus saib xyuas. Kev txiav txim kev txhim kho dstat. Rho tawm Lub pov haum pob raws li lub cim ntawm kev tawm tsam. Kaw nkag mus rau Jonathon F. PPA repositories. Qhov kev thov rov hais dua Tsis txhob hloov lub ntsiab lus GTK hauv kev faib khoom. GNU Project Maintainers hais lus tawm tsam Stallman tus thawj coj.
• Daim ntawv tso cai: CockroachDB DBMS mus dhau rau ib daim ntawv tso cai. Oracle kev hloov daim ntawv tso cai rau Java SE tsim. Redis Labs Co txhais modules los ntawm Commons Clause rau lawv tus kheej tsis pub dawb daim ntawv tso cai. Daim ntawv tso cai siv los ntawm MongoDB qhov project yog SSPL lees paub tsis siv tau hauv Fedora LinuxDaim ntawv tso cai rau CUPS tau hloov pauv ntawm GPLv2 thiab LGPLv2 mus rau Apache 2.0. Chef tau ua ib qhov project qhib kiag li.
• New forks: Cib - GIMP diav rawg, Glaber -Zabix diav rawg, notqmail - qmail chaw.
• Network infrastructure: RIPE ib dwu kawg pub dawb IPv4 thaiv. Kev pib DNS chij hnub 2019 rau kev txiav txim kev txhawb nqa rau cov teeb meem DNS kev siv thiab DNS chij hnub 2020 los daws teeb meem nrog IP fragmentation thaum ua cov lus DNS loj.
  Facebook qhib platform rau kev xa tawm sai ntawm LTE tes hauj lwm. BGP txoj kev xau coj ua rau muaj kev cuam tshuam loj heev ntawm kev sib txuas hauv Is Taws Nem.
• Microsoft Open Initiatives: system mimalloc nco faib, subsystem NWS 2 с hloov kho lub plawv Linux, kev sib koom ua ke .NET 5 platforms nrog kev txhawb nqa Linux и Android, Cov Khoom Siv Quantum rau kev txhim kho ntawm quantum algorithms, C++ txheem tsev qiv ntawv, lub platform .NET Core 3.0 nrog WinUI thiab Windows Cov Ntawv. Microsoft koom tes rau OpenJDK kev txhim kho. Microsoft Edge browser yuav txhawb nqa Linux.
• Kev kawm tshuab: Yooj cais suab paj nruag thiab suab.
  Mozilla tsim tshuab txhais lus system. Microsoft qhib SPTAG machine learning library. Synthesis animations siv neural networks. Tso tawm TensorFlow 2.0. CodeSearchNet rau kev tshawb nrhiav thiab tsom xam code. NVIDIA SPADE (GauGAN) rau kev sib xyaw ua ke ntawm cov duab kos duab. StyleGAN tsim kom muaj ntsej muag.
• Txoj haujlwm code qhib: Google tau qhib Sandboxed rau tsim sandbox ib puag ncig, ClusterFuzz txhawm rau txheeb xyuas qhov yuam kev thiab adiantum rau ceev ceev encryption. Cloudflare luam tawm faib random tooj generator. Netflix qhib code rau kev sib tham sib xam ib puag ncig Polynote. Intel luam tawm tsev qiv ntawv kom txo suab nrov thiab lim duab.
  Facebook qhib Hermes JavaScript cav code. BMW qhib lub system faib rendering RAMSES. Amazon npaj qhib ib tsab Elasticsearch. OpenDrop - qhib kev siv Apple AirDrop. Yog qhib code rau industrial CRM / BPM / ERP system BGERP. NSA luam tawm Ghidra rov qab engineering toolkit. Cryptographic tsev qiv ntawv EverCrypt.
• Programming lus: Perl 6 hloov npe hauv Raku. Cov lus tshiab V, 9,
  P++ (yuav tsum ntaus PHP dialect).

  Nim 1.0. GCC 9. Nab hab sej 3.8. LWM 8/9. Java SE 12/13. Jakarta EECov. Mus 1.12/1.13
  PHP 7.4.Perl 5.30.

• System Cheebtsam: systemd 241, 242, 243, 244. systemd-homed tswj cov chaw khaws ntaub ntawv hauv tsev portable. Glibc 2.29/2.30.
• Virtualization thiab ntim: Hypervisor NVMM los ntawm NetBSD qhov project. Hypervisors Intel Cloud Hypervisor thiab Amazon Firecracker sau hauv Rust. Kev faib tawm ClonOS rau kev xa tawm cov khoom siv virtual server raws li FreeBSD. Lub kernel suav nrog Linux 5.3 hypervisor qhib lawm ACRN. Hermitux — unikernel, binary sib xws nrog Linux.
• BSD: Kev faib FreeBSD puag system rau hauv pob. Hloov Mus FreeBSD ntawm "ZFS rau" Linux". Rho tawm GCC los ntawm FreeBSD core. FreeBSD 12.1. Kev faib tawm tshiab FuryBSD и SecBSD. Hyperbola hloov mus rau ib tug nkhaus ntawm OpenBSD. Qhib Qhib Qhov Ntawv Qhib Rau Xov Xwm 6.5/6.6. Tsim pob hloov tshiab rau OpenBSD ceg ruaj khov. Git sib xws Tau txais version tswj system los ntawm OpenBSD.

  DragonFlyBSD 5.6.

• Kev faib tawm: Red Hat Enterprise Linux 8.0 (8.1). Debian 10. Fedora 30/31. Ubuntu 19.04/19.10.

  Kev hloov kho tshiab tsis tu ncua CentOS Kwj. ELISA Project ntawm kev txhim kho Linux-ib puag ncig rau cov txheej txheem txhim khu kev qha heev. Trident mus dhau los ntawm BSD-raws li TrueOS mus rau Void Linux. Kaw Qhov project Lavxias Fedora. Tsim los ntawm Scientific Linux 8 dov li nyob rau hauv txaus siab CentOS.
  Kev tsim kho ntawm Fedora Atomic Host txiav tawm nyob rau hauv txaus siab rau qhov project Fedora Core OS. Kev txiav txim kev txhawb nqa rau 32-ntsis x86 systems hauv Ubuntu.

• Mobile platforms: webOS Qhib Tus Ntawv Tshaj Xov Xwm 2, Android 10, Cov Ntawv Cog Lus 16, EdgeX 1.0.
  Ua Ntej batch ntawm Librem 5 smartphone thiab kev npaj ntawm PinePhone smartphone. Sib koom ua ke qhib qhov project Mer thiab tus tswv OS Sailfish. Platform Mozilla WebThings.
• DBMS: PostgreSQL 12, MariaDB 10.4. Yog qhib VictoriaMetrics DBMS code. BlazingSQL, uas siv GPU rau acceleration. Dqlite, ib qho kev faib tawm ntawm SQLite.
• Kev cai ib puag ncig thiab duab: GTK + hloov npe hauv GTK. Xfce 4.14, KDE 5.15/5.16/5.17, GNOME 3.32/3.34. LXQt 0.14. HLOOV 1.22.

  Wayland 1.17, Weston 7.0 Nws.
  liab cov kaus mom npaj siab nres tsim X.Org server. Tshiab shader compiler rau AMD GPUs los ntawm Valve. AMD qhib Caudron lub moj khaum rau kev ceev prototyping ntawm 3D daim ntawv thov. Riam 2.80. xrdesktop siv GNOME thiab KDE hauv virtual reality headsets.

• Codecs: Intel qhib AV1 video encoder optimized rau on-the-fly transcoding. Xiph thiab Mozilla txhim kho rav1e, AV1 encoder hauv Rust.
  Google qhib libgav1, decoder rau AV1 hom. VideoLAN thiab FFmpeg txhim kho AV1 decoder dav1d.
• Nthuav cov peev xwm ntawm kernel Linux: 5.0, 5.1, 5.2, 5.3, 5.4.
  Kev cob qhia USB 4.0 tsav tsheb, txoj kev loj hlob lub moj khaum rau kev sau cov tsav tsheb ruaj ntseg hauv Rust thiab Kev saws me nyuam mus rau ceg VPN sim WireGuardKev hloov pauv ntawm cov subsystems rau Android (peb tes num rau kev koom tes hauv Android tus qauv (tsis muaj kev hloov pauv) kernel Linux).

  Cov kev hloov loj hauv cov ntsiav: cov ntaub ntawv kaw lus encryption mechanism adiantum, BinderFS cov ntaub ntawv kaw lus, seccomp xauv handlers hauv cov neeg siv qhov chaw, tus tsoom fwv ext4 ua haujlwm hauv qhov xwm txheej tsis txaus ntseeg,

  io_uring asynchronous I/O interface, muaj peev xwm siv NVDIMM li RAM, kev txhawb nqa rau scalable saib xyuas ntawm cov ntaub ntawv loj heev ntawm fanotify, muaj peev xwm los teeb tsa Zstd compression qib hauv Btrfs, tshiab cpuidle TEO handler, kev siv lub kaw lus hu los daws qhov teeb meem 2038, muaj peev xwm khau raj los ntawm cov cuab yeej siv -mapper yam tsis muaj initramfs, SafeSetID LSM module, kev txhawb nqa rau kev sib xyaw ua ke nyob,

  tsav tsheb rau GPU Mali 4xx / 6xx / 7xx, ntaus ntawv-mapper module dm-dust, Suab Qhib Firmware txhawb rau DSP, BFQ kev ua tau zoo, PSI (Pressure Stall Information) subsystem,

  kev txhawb nqa rau Intel Speed ​​​​Selection zog tswj thev naus laus zis, pidfd_open system hu, muaj peev xwm siv IPv4 chaw nyob los ntawm 0.0.0.0/8 subnet, nftables kho vajtse acceleration, HDR kev txhawb nqa hauv DRM subsystem, ACRN hypervisor kev koom ua ke,

  sim exFAT tsav tsheb, hom "xauv nrawm"kom txwv cov neeg siv hauv paus nkag mus rau cov ntsiav, fs-verity mechanism rau kev saib xyuas cov ntaub ntawv kev ncaj ncees, muaj peev xwm siv CIFS rau cov hauv paus muab faib, iocost input / output controller, EROFS FS, dm-clone module rau kev rov ua dua ntawm cov khoom siv sab nraud, virtiofs FS rau kev xa tawm cov npe rau cov qhua, txhawb nqa rau AMD Navi 12/14, AMD Arcturus, AMD Renoir, Intel Tiger Lake thiab Zhaoxi GPUs.

• Hacks: Matrix, https://www.opennet.ru/opennews/art.shtml?num=50673 Picreel thiab Alpaca Forms, Tshooj Tshooj, Pale hli, Momnero, HackerOne, Webmin, NASA, kev rhuav tshem ntawm Stallman lub vev xaib.
• Kev ua phem nyob rau hauv repositories thiab directory:
  Docker Hub hack. Hacking PHP repository PEAR thiab kev hloov kho ntawm tus thawj tswj pob.
  siab phem add-ons Mozilla directory, Google ua si.
  Nres siab phem ransomware ntawm Git repositories hauv GitHub, GitLab thiab Bitbucket cov kev pabcuam. Hacking Canonical repositories ntawm GitHub. 73 repository ua nrog backdoors ntawm GitHub.
  Txhaj tshuaj phem rau hauv pob Ruby Strong_password, NPM pob bb-builder, npm package dependency PureScript, Python cov tsev qiv ntawv hauv PyPI, Ruby cov tsev qiv ntawv bootstrap-sass и so-neeg siv, Android-cov ntawv thov rau kev ua haujlwm nrog lub koob yees duab.
• Cryptocurrencies: Blockchain platform TUJ (Telegram Qhib Network) thiab tsis txaus ntseeg Kev tso kawm ntawm Telegram cryptocurrency. Critical vulnerability hauv Ethereum. Kom txhob raug nyob rau hauv Zcash, uas tso cai rau tsim cov nyiaj tshiab. Hacking Monero cryptocurrency lub vev xaib. Muab ob npaug Cov nyiaj hauv Ethereum Classic.
• Txoj kev tawm tsam:
  • Nres txhawm rau txiav txim siab lub cim xeeb ntawm cov txheej txheem siv nplooj ntawv cache.
  • Cov txheej txheem bypass Widevine L3 DRM tiv thaiv.
  • KNOB attack, tso cai rau koj los cuam tshuam encrypted Bluetooth tsheb.
  • Nres ntawm microphones ntawm lub suab tswj tshuab siv lub laser.
  • Nres siv cov cuab yeej phem Thunderbolt.
  • Qhov siab kev tawm tsam cuam tshuam txog kev qaug dab peg ntawm kev tswj hwm DNS.
  • Nres rau ntau yam kev siv TLS.
  • Nres rau lub network ntawm OpenPGP cryptographic key servers.
  • Sijhawm cuam ​​tshuam nrog TCP kev sib txuas ua los ntawm VPN tunnels.
  • Nres ntawm frontend-backend systems, tso cai rau koj mus rau qhov kev thov thib peb
  • Nres CPDoS, uas tso cai rau koj los ua cov nplooj ntawv tau txais los ntawm CDN tsis muaj.
  • Minerva - ECDSA cov txheej txheem tseem ceeb rov qab los.
  • NetCAT - Kev tshawb pom tej thaj chaw deb ntawm cov yuam sij nias hauv qhov kev sib tham SSH.
  • DoS tawm tsam txo qhov kev ua tau zoo ntawm Tor network;
  • Ua haujlwm zoo dua Kev sib tsoo nrhiav kom pom txoj kev rau SHA-1.
• Vulnerabilities nyob rau hauv processors. Teeb meem nrog Intel chips: MDS, TUS TXIJ NKAWM, Zombieload 2, Plundervolt. Intel thiab AMD: SWAPGS. AMD:
  AMD SEV.
• Vulnerabilities nyob rau hauv firmware, raws tu qauv thiab cais chips: BMC controllers, WiFi firmware Marvell Avastar, TPM-Fail, HSM modules, Qualcomm TrustZone, intel sgx ua, WPA3 and EAP-pwd (1, 2), Broadcom WiFi chips, QualPwn (Qualcomm Wi-Fi)
• Kev Tsis Muaj Zog: Cov hauv paus hauv zos tsis muaj zog hauv lub kernel Linux (SCTP, AF_ALG, USB, i915, v4l 2, xav tsis thoob, fbdev ua). Qhov tsis muaj zog DoS nyob deb hauv lub kernel Linux (RDS, UDP, rtlw ua) thiab FreeBSD. Pob ntawv-ntawm-kev tuag в Linux thiab FreeBSD.
  Plaub tseem ceeb yooj yim в xa ntawv server Exim, uas coj rau kev tawm tsam loj.

  Tej thaj chaw deb vulnerabilities nyob rau hauv php-fpm, WordPress, WhatsApp, SQLite (+ nres ntawm WebSQL hauv Chrome) OpenSSL, NPM, Cia li mus, Tsis khi, tsis kawg kwj ntawm vulnerabilities hauv Ghostscript, Dovecot, KDE, Proftpd, Squid, Magento, SDL, GraphicsMagick, Vim, MyBB, PharStreamWrapper (Drupal, Joomla thiab Typo3), APT, pacman, Drupal, LibreOffice thiab OpenOffice, SCP.

  Dangerous zos vulnerabilities nyob rau hauv runc thiab LXC (Docker) systemd-journald, ld.so ua и libc hauv OpenBSD, xen,
  vhost-net, QEMU, docker, snap thiab flatpak, snapd.

Thaum lub xyoo, 1687 xov xwm (790 lub ntsiab, 897 mini) tau luam tawm ntawm OpenNET, uas 148862 cov lus tau tso tseg.

Tau qhov twg los: opennet.ru