USN-4896-1: lxml vulnerability

It was discovered that lxml incorrectly handled certain HTML attributes. A
remote attacker could possibly use this issue to perform cross-site
scripting (XSS) attacks.
Smash a Button
[Total: 0 Average: 0]
Get PDFPrint This
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


Linux Foundation Will Host AsyncAPI to Support Growth and Collaboration for Industry’s Fastest-Growing API Spec

The open specification for defining asynchronous APIs gains momentum, seeks neutral home for open governance, community growth and industry adoption

SAN FRANCISCO, Calif., March 30, 2021 –  The Linux Foundation, the nonprofit organization enabling mass innovation through open source, today announced it will host the AsyncAPI Initiative. AsyncAPI is a specification and a suite of open source tools that work with asynchronous APIs and event-driven architectures. It is the fastest-growing API specification according to a recent developer survey, tripling in production usage from 2019 to 2020.

Founding sponsors of the AsyncAPI Initiative include Ably Realtime, Apideck, Bump, IQVIA Technologies, MuleSoft, Slack, Solace, and TIBCO, and AsyncAPI recently announced a partnership with Postman. Today, AsyncAPI is in production at Adidas, PayPal, Salesforce, SAP, and Slack, among other enterprise environments. 

“As the growth of AsyncAPI skyrocketed, it became clear to us that we needed to find a neutral, trusted home for its ongoing development. The Linux Foundation is without question the leader in bringing together interested communities to advance technology and accelerate adoption in an open way,” said Fran Méndez, who created AsyncAPI in 2016. “This natural next step for the project really represents the maturity and strength of AsyncAPI. We expect the open governance model architected and standardized by the Linux Foundation will ensure the initiative continues to thrive.” 

AsyncAPI helps unify documentation automation and code generation, as well as managing, testing, and monitoring asynchronous APIs. It provides language for describing the interface of event-driven systems regardless of the underlying technology and supports the full development cycle of event-driven architecture.  AsyncAPI is considered a sister project of the OpenAPI Initiative, which is focused on synchronous REST communication and is also hosted by the Linux Foundation.

“The Linux Foundation is pleased to provide a forum where individuals and organizations can come together to advance AsyncAPI and nurture collaboration in a neutral forum that can support the kind of growth this community is experiencing,” said Chris Aniszczyk, CTO and Vice President, Developer Relations at the Linux Foundation.

For more information, please visit: https://www.asyncapi.org

Supporting Quotes

Łukasz Górnicki, AsyncAPI

“AsyncAPI at Linux Foundation is another brick needed to build a solid and sustainable community for the project. We are securing a perimeter for AsyncAPI and can focus on expanding the vision of making all the specs work together for the user’s good.”

Bill Doerrfeld, NordicAPIs

“Open standards are only as strong as their community effort. The details of the AsyncAPI charter represent their ongoing community mission and goal to retain vendor neutrality around the format. AsyncAPI is taking an active role in enacting this by limiting company representation per TSC, privileging work over money, and other strategies.”

Kin Lane, Postman

“AsyncAPI joining the Linux Foundation is the final cornerstone in the foundation of the open source event-driven API specification. This creates solid groundwork for defining the next generation of API infrastructure, beginning with HTTP request and response APIs, but also event-driven approaches spanning multiple protocols and patterns including Kafka, GraphQL, MQTT, AMQP, and much more. And all of that, in turn, will provide what is needed to power documentation, mocking, testing, and other critical stops along a modern enterprise API lifecycle.”

Matt McLarty, MuleSoft

“Seeing how AsyncAPI has blossomed has been incredible. Its progress has been guided by two key principles in my opinion: a focus on solving real world problems, and a focus on community. As the world of synchronous APIs and event-based communication converges, AsyncAPI plays a vital role in levelling the API playing field.”

About the Linux Foundation

Founded in 2000, the Linux Foundation is supported by more than 1,000 members and is the world’s leading home for collaboration on open source software, open standards, open data, and open hardware. Linux Foundation’s projects are critical to the world’s infrastructure including Linux, Kubernetes, Node.js, and more.  The Linux Foundation’s methodology focuses on leveraging best practices and addressing the needs of contributors, users and solution providers to create sustainable models for open collaboration. For more information, please visit us at linuxfoundation.org.

###

The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page:  https://www.linuxfoundation.org/trademark-usage. Linux is a registered trademark of Linus Torvalds.

Media Contact

Jennifer Cloer
for Linux Foundation 
503-867-2304
jennifer@storychangesculture.com

The post Linux Foundation Will Host AsyncAPI to Support Growth and Collaboration for Industry’s Fastest-Growing API Spec appeared first on Linux Foundation.

Smash a Button
[Total: 0 Average: 0]
Get PDFPrint This
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


How To: Use ‘apt-cache’ to Find Homepage for Your Installed Apps

It can come in pretty handy to know for certain the homepage for the applications you have installed. You can do this with ‘apt-cache’. I’ll show you how. This is a pretty easy article to follow and just another tool to add to your toolbox.

NOTE: This is only valid for systems that use apt. As the title indicates, it requires ‘apt-cache’. Without apt-cache, this page will do you no good. None good. That’s how much it will do you. None!

Why would you want to know the homepage – and, more so, the preferred homepage? For starters, in the days of GitHub and everyone forking, and awkward application names that aren’t easily searched for, it’s hard to know which site is the correct one.

Maybe you want to report a bug? Maybe you want to request a feature? Maybe you want to make a donation? Maybe you just want to thank the author for writing such awesome software? Maybe you want to know where the homepage is because you need support and you’re not sure where to turn to?

There are all sorts of reasons why you might want to know the homepage of a piece of software. It’s actually something that’s important. It’s also something your system already knows and will happily show you if you know the proper magical incantation. 

Like many other articles, you’re gonna want the terminal for this. Let’s go ahead and get that opened by using your keyboard and pressing CTRL + ALT + T

Got your terminal emulator open? Good! Let’s start with the command.

If you do not have ‘inxi’ installed, feel free to use a different application. Note that you do not need to use sudo for this. Not all apt commands require sudo. You only need sudo when you’re actually doing administrative tasks. See? I saved you some typing!

Anyhow, in the text output from the above command you’ll see a line that starts with “Homepage:”. If you hadn’t already guessed it, that’s the line that tells you the authors homepage. This, of course, only works on installed applications. For sanity and space sake, it’s not like your system has all that information downloaded for all the possible packages. Thus, it works on naught but the apps you have already installed.

So, let’s go ahead and make the command a little more precise. We’ll pipe the output through grep and get rid of the cruft we don’t actually need. In that same terminal, go ahead and enter:

NOTE: The command contains a capitalized letter H because Linux is often case-sensitive and is certainly case-sensitive in this case. If you don’t believe me, try it with a lowercase h!

But wait, there’s more!

Not only is there homepage information in there, there’s sometimes some useful nuggets of information in there. If you have LibreOffice installed, go ahead and check (skip the pipe and grepping) to see what the output is. Inside, it has a ton of additional information, including listing ways that you can extend LibreOffice by installing more software.

And there you have it. You can now easily find the homepage for the applications you have installed. Should you need to contact the author, check for information, or just see if they did anything else, you now know how to do that. It’s a little hidden nugget that most folks don’t seem to know. Well, now they do…

Yay! You made it all the way to the bottom. You deserve a treat. Seeing as you’ve already got the terminal open, and seeing as we’re dealing with apt-cache, let’s just get some pretty neat stats with:

That’s it and thanks for reading. I appreciate the audience and am happy that I finally am putting some effort into this project. I’ve been meaning to do this for years, but something always got in the way. If you want to get notified when new articles are posted, just scroll up and sign up for the newsletter. I promise not to send you any commercial emails and I won’t give any of your private data away.

Smash a Button
[Total: 1 Average: 5]
Get PDFPrint This
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


USN-4895-1: Squid vulnerabilities

Alex Rousskov and Amit Klein discovered that Squid incorrectly handled
certain Content-Length headers. A remote attacker could possibly use this
issue to perform an HTTP request smuggling attack, resulting in cache
poisoning. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-15049)

Jianjun Chen discovered that Squid incorrectly validated certain input. A
remote attacker could use this issue to perform HTTP Request Smuggling and
possibly access services forbidden by the security controls.
(CVE-2020-25097)

Smash a Button
[Total: 0 Average: 0]
Get PDFPrint This
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


USN-4894-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Smash a Button
[Total: 0 Average: 0]
Get PDFPrint This
About Me: I'm just some retired dude with a little bit more free time on my hands. If you want to support the site, why not help yourself out too by ordering some inexpensive web hosting so that you can start your own site?


Linux Tips
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 International License.
SITEMAP