ProHoster > Articles on: Yuri Gagarin

Author: Yuri Gagarin

A technical specialist at ProHoster with over six years of experience in server administration, VPN solutions, and network security. I manage infrastructure setup and support, monitor service stability, and implement solutions to protect client data. I also contribute to performance optimization and compliance with modern security and privacy requirements.

Vulnerability in pam-u2f allowing bypass of hardware token authentication

Posted on

The developers of the openSUSE project have discovered a vulnerability (CVE-2025-23013) in the PAM module pam-u2f, which is used for authentication via YubiKey, Yubico Security Key, YubiHSM, and other FIDO devices that support the U2F (Universal 2nd Factor) protocol. The vulnerability allows a user with unprivileged local access to the system to authenticate without inserting a hardware token in certain PAM configurations. In practice, the pam-u2f module is typically enabled for […]

Bypassing disk encryption using TPM2 for automatic unlocking

Posted on

One of the package maintainers in NixOS presented an attack technique that allows accessing data on encrypted disk partitions in configurations that do not require entering a unlock password at boot, due to placing decryption information in the TPM2 (Trusted Platform Module). Such configurations are often used on servers or multi-user workstations where it is problematic to manually enter […]

GCC has decided to remove support for ABI ARM64 ILP32

Posted on

A change has been made to the GCC codebase used to build the GCC 15 branch, deprecating support for the ARM64 ILP32 ABI (-mabi=ilp32). ILP32 is similar to the x32 subarchitecture for x86_64 systems and allows the use of 32-bit pointers and a 32-bit memory addressing model, while the processor operates in 64-bit mode with support for 64-bit registers and extended instructions. The limitation of the ILP32 ABI […]

OpenVPN 2.6.13 update addressing a security issue

Posted on

The release of OpenVPN 2.6.13 has been published, enabling the creation of encrypted connections between two client machines or the operation of a centralized VPN server for handling multiple clients simultaneously. This new version addresses a security issue that could lead to a buffer overflow on the OpenVPN server side when receiving a login or password from the client that exceeds the USER_PASS_LEN value. […]

PostgreSQL once again tops the global ranking of DBMS popularity growth.

Posted on

The open-source database PostgreSQL has been named Database of the Year by the international portal DB-Engines. It demonstrated the best growth in popularity and maintained its leadership among over 400 systems studied. PostgreSQL topped the ranking for the fifth time — previously leading in 2017, 2018, 2020, and 2023. DB-Engines measures the popularity of databases by analyzing […]

Release of Linux Mint 22.1 distribution

Posted on

The release of Linux Mint 22.1 has been announced, continuing the development branch based on Ubuntu 24.04 LTS. The distribution is fully compatible with Ubuntu but significantly differs in its approach to user interface organization and the selection of default applications. The Linux Mint developers provide a desktop environment that adheres to the classic desktop organization standards, which is more familiar to users who do not adopt new methods […]

Release of web browser Chrome 132

Posted on

Google has released version 132 of its web browser Chrome. Concurrently, the stable release of the open-source project Chromium, which forms the basis of Chrome, is also available. The Chrome browser differs from Chromium in that it includes Google logos, a crash notification system, modules for playing protected content (DRM), an automatic update system, constant Sandbox isolation, delivery of keys to Google API, and transmission of RLZ parameters […]

OpenZFS 2.3.0

Posted on

Hello, LOR! A new version of the amazing project OpenZFS, which implements the ZFS file system, has been released. Originally, ZFS was developed by Sun under the name Zettabyte File System (later shortened to just ZFS) and has been shipped with Solaris OS since 2005. After Sun was acquired by Oracle, the Solaris source code was closed. The OpenZFS project was founded as a fork of the last […]

Live builds of Fedora intend to transition from SquashFS to EROFS

Posted on

In the upcoming Fedora 42 release, scheduled for late April, all Live builds of the distribution are planned to be switched from SquashFS to the EROFS file system, support for which was implemented last year in the Dracut 103 tool for creating boot images. The proposal has not yet been approved by the FESCo (Fedora Engineering Steering Committee), which is responsible for the technical aspects of Fedora's development. Reasons for the transition […]

Rsync 3.4.0

Posted on

The Rsync file synchronization utility has been updated to fix six critical vulnerabilities. Some of these vulnerabilities could be exploited with merely an anonymous connection to a Rsync server with read access. Fixed vulnerabilities include: CVE-2024-12084 - an out-of-bounds write via an incorrect checksum exceeding 16 bytes. CVE-2024-12085 - leakage of uninitialized data from the stack […]

Release of Linux Mint 22.1 "Xia"

Posted on

The developers of Linux Mint have announced the release of version 22.1, codenamed 'Xia'. The system has LTS (Long Term Support) status with support until 2029. The distribution is based on Ubuntu 24.04 and runs on the Linux 6.8 kernel. The update to the package management system Aptkit replaces aptdaemon for package management. Captain combines the functionalities of GDebi and apturl. This update has improved localization and reduced […]

SQLite 3.48.0

Posted on

After a month of development, version 3.48.0 of the compact embedded database SQLite, written in C and distributed as public domain, has been released. Change log: Revised the configure script used for building SQLite from source code to fix bugs, improve performance, and enhance maintainability of the code. This does not affect the configure script in the sqlite3-autoconf-NNNNNNN.tar.gz archive, for which the build system does not […]

« to the beginning 100 101 102 103 104 105 106 107 108 109 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster