Node.js 26.0.0 has been released, a platform for executing network applications in JavaScript. Node.js 26.0 is classified as a long-term support (LTS) version, but this status will only be assigned in October after stabilization. Support for Node.js 26.x will continue until May 2029. The previous LTS version, Node.js 24.x, will be supported until April 30, 2028, and the version before that […]
PHP developers have notified OSI (Open Source Initiative) of the voluntary withdrawal of PHP License 3.01. It has been stated that after several years of work, the PHP toolkit code has been fully transitioned to the BSD-3 license, and there is no longer any code under the old PHP License 3.01. The text of the new PHP License version has replaced […]
The release of ToaruOS 2.3, a Unix-like operating system built from scratch with its own kernel, bootloader, standard C library, package manager, user space components, and a graphical interface with a composited window manager, has been published. Initially, the project was developed at the University of Illinois as a research effort in creating new composited graphical interfaces, but then transformed into a standalone operating system. The code of the project […]
The Apache HTTP Server project has released a patch for httpd 2.4.67, which fixes the CVE-2026-23918 vulnerability in the HTTP/2 implementation. This issue has been rated as important and is related to a double free error when handling early connection reset scenarios in HTTP/2. Under unfortunate conditions, the error can lead not only to the crashing of the worker process but also to potential remote […]
A vulnerability has been identified in the Nix and Lix package managers that allows code execution with the rights of a background process, which in NixOS and multi-user installations runs under the root user. The issue (CVE not assigned) manifests in the nix-daemon background process used to facilitate access for unprivileged users to build operations and the package repository. The vulnerability arises from the lack of limitation on the recursive processing of directories in […]
On May 4, the AlmaLinux OS Foundation announced the release of the beta version of AlmaLinux 10.2 "Lavender Lion" for the following architectures: Intel/AMD (x86_64), Intel/AMD (x86_64_v2), ARM64 (aarch64), IBM PowerPC (ppc64le), IBM Z (s390x). Beta ISO images are available for download at repo.almalinux.org. Changes: includes Python 3.14, PostgreSQL 18, MariaDB 11.8, Ruby 4.0, and PHP 8.4 as new packages, […]
The release of the OmniOS Community Edition r151058 distribution, based on the developments of the Illumos project, has been published, which continues the development of the kernel, network stack, file systems, drivers, libraries, and the basic set of system utilities from OpenSolaris. OmniOS is notable for providing support for the bhyve and KVM hypervisors, the Crossbow virtual network stack, the ZFS file system, and tools for launching lightweight Linux containers. The distribution can be used to build scalable web systems, virtualization […]
The release of the Apache HTTP Server 2.4.67 has been announced, which fixes 11 vulnerabilities and includes several patches. The most severe vulnerability (CVE-2026-23918) is caused by double memory freeing in the mod_http2 module and could potentially lead to remote code execution on the server through HTTP/2 protocol manipulation. The vulnerability manifests only in release 2.4.66. The severity level assigned to this issue is 8.8 out of 10. Another […]
Brush is a command shell written in Rust that combines POSIX and Bash compatibility with memory safety guarantees and performance. The project aims to become a full-fledged alternative to traditional shells, allowing the execution of existing scripts and the use of .bashrc almost unchanged. This version consolidates several months of work and over 200 merged pull requests, significantly advancing […]
The author of the open-source code editor Notepad++ has noted the emergence of an unofficial port 'Notepad++ for macOS' that uses the Notepad++ trademark and project logo without permission. This port is not associated with the main project, but its website mimics the design of the official Notepad++ site, uses the title 'Notepad++ 1.0.5' on the download page, and mentions […] on the project information page.
The release of Dropbear project 2026.90, which develops SSH server and client, has been published; it is widely used in wireless routers and compact distributions like OpenWrt. Dropbear is characterized by low memory consumption, the ability to disable unnecessary functionality at the build stage, and supports building both client and server in a single executable file similar to busybox. When statically linked with uClibc, the Dropbear executable file takes […].
The search engine and Q&A service Ask.com, formerly known as Ask Jeeves, has ceased operations. The holding company IAC, which owned the service, decided to shut down the search business. Ask Jeeves was launched in 1996 and answered user questions posed in natural language, making it one of the precursors to modern AI chatbots. For most of its history, the service remained in the shadows […]