The ForgeZero 1.9.0 (fz) release has been published, a console build tool for projects in C, C++, and assembler languages (NASM, GAS, FASM). The tool does not require the creation of a Makefile or other configuration files for basic use. The project code is written in Go and is distributed under the MIT license. ForgeZero identifies the file type and automatically selects the necessary backend. Each code file […]
The developers of the Exim mail server have released a patch for Exim 4.99.3, addressing a vulnerability in certain configurations of the mail agent. The issue goes by the internal identifier EXIM-Security-2026-05-01.1; it is also referred to in the official notification as CVE-TBD. The vulnerability is classified as Remote Use-After-Free and manifests when parsing the body of a message BDAT while working in TLS with GnuTLS. BDAT is used in the SMTP CHUNKING extension for transmitting the body […]
A vulnerability has been discovered in the Linux kernel, similar to the Copy Fail, Dirty Frag, and Fragnesia vulnerabilities, allowing a non-privileged user to gain root privileges by overwriting data in the page cache. The vulnerability has been assigned the code name DirtyDecrypt (also referred to as DirtyCBC). A prototype exploit is available. The CVE identifier is not mentioned in the exploit note, only that researchers identified the issue on May 9, […]
Grafana Labs, which develops the eponymous open monitoring and data visualization platform, disclosed details about a GitHub access token that fell into the hands of attackers. The attackers used the token to download code for the company's proprietary products from private repositories and attempted to extort money by threatening to disclose the acquired codebase. Grafana Labs representatives refused to pay. According to the company, the attackers did not gain access […]
Another local privilege escalation vulnerability has been revealed in the Linux kernel, named Fragnesia with CVE identifier CVE-2026-46300. This issue pertains to the same class of page cache attacks as the recently discussed Copy Fail and Dirty Frag, but it is not a rehash of an old error: it is a distinct defect in the XFRM ESP-in-TCP code. Researcher William Bowling discovered the vulnerability […]
For six days—from May 6 to May 12, 2026—the official Linux builds of the popular Wii U emulator Cemu version 2.6 were compromised. Instead of the clean program, users downloaded malware that stole passwords, SSH keys, GitHub tokens, and credentials for cloud services. The attackers succeeded in replacing binary files in the official project repository on GitHub. […]
Jasper Nuyens, founder of Linux Belgium, who created a layer for using Linux in Tesla's automotive information system, proposed a simple way to reduce the attack surface of the Linux kernel to lower the likelihood of compromise amid a surge in the detection of dangerous vulnerabilities using AI. Many vulnerabilities are typically found in specific kernel modules available for autoloading, but […]
The release of the Memtest86+ memory testing program 8.10 is now available. The program is not tied to any operating system and can be launched directly from the BIOS/UEFI firmware or bootloader for a comprehensive memory check. In case of issues, the built-in Memtest86+ faulty memory map can be used in the Linux kernel to exclude problematic areas using the memmap option. […]
The fifth corrective update for Debian 13 has been formed, which includes accumulated package updates and installer fixes. The release includes 144 updates addressing stability issues and 103 updates fixing vulnerabilities. Notable changes in Debian 13.5 include updates to the latest stable versions of packages apache2, openssl, and systemd. The dav4tbsync package has been removed, whose functionality […]
Linus Torvalds accepted a document into the kernel that outlines the process for handling security-related bugs, defining the threat model, clarifying which kernel bugs are considered vulnerabilities, and discussing actions regarding bugs identified using AI. The document was prepared by Willy Tarreau, author of HAProxy and a long-time Linux kernel developer responsible for maintaining several stable kernel branches. In […]
The release of the functional programming language Erlang 29 has taken place, aimed at the development of distributed fault-tolerant applications that ensure real-time parallel request processing. The language has found applications in areas such as telecommunications, banking systems, e-commerce, computer telephony, and instant messaging. At the same time, the release of OTP 29 (Open Telecom Platform) has been issued — a companion set of libraries and components for […]
The release of OpenZFS 2.4.2 has occurred, a corrective release of the open implementation of the ZFS file system for Linux and FreeBSD. The main change in the new version is support for the stable branch of Linux 7.0. The previous OpenZFS 2.4 release supported Linux kernels only up to 6.19, while compatibility with older kernels is maintained starting from Linux 4.18. For FreeBSD, support is declared for releases 13.3 and newer, […]