Author: Yuri Gagarin

Continuation flood attack leading to issues on servers using HTTP/2.0

Details have emerged about the 'Continuation flood' attack method, which affects various implementations of the HTTP/2 protocol, including Apache httpd, Apache Traffic Server, Node.js, oghttp, Go net/http2, Envoy, oghttp, and nghttp2. This vulnerability can be exploited to carry out attacks on servers supporting HTTP/2.0, leading to memory exhaustion (cessation of request processing or crash of processes) depending on the implementation or […]

Google has introduced the jpegli library for more efficient JPEG image compression

Google has introduced a new open-source library called jpegli, which features an image encoder and decoder for the JPEG format. The library includes additional optimizations for improved encoding efficiency, allowing for a 35% increase in the compression of high-quality images compared to traditional JPEG codecs. Compared to libjpeg-turbo, jpegli achieves a similar level of quality while reducing the bitrate by 32%. On […]

Release of LXC 6.0, Incus 6.0, and LXD 5.21.1 container management tools

The Linux Containers community has released the 6.0 toolkit for organizing the operation of isolated LXC containers, providing a runtime suitable for running containers with a full system environment, similar to virtual machines, as well as for executing unprivileged containers for individual applications (OCI). LXC is classified as a low-level toolkit that operates at the container level. For centralized management of containers deployed in a cluster of […]

Release of web browser CENO 2.1 using a P2P network to access websites

After a year of development, the mobile web browser CENO 2.1.0 has been released, designed to facilitate access to information in situations where direct access is impossible, for instance, when segments of the internet are disconnected from the global network due to failures or malicious actions. The browser is based on the GeckoView engine (used in Firefox for Android) and is enhanced with the capability to exchange data through a decentralized P2P network, in […]

Release of Redict 7.3.0, a fork of the Redis database.

Drew DeVault, the creator of the Sway user environment, the Hare programming language, the Aerc email client, and the collaborative development platform SourceHut, has announced the release of project Redict 7.3.0, a fork of the Redis database management system. Redict forked from Redis 7.2.4, the last version distributed under the BSD license. Changes developed by the Redict project are licensed under LGPLv3.0, but the borrowed code from Redis remains under the license […]

Attackers gained access to 174 accounts in the PyPI directory.

Administrators of the Python Package Index (PyPI) repository have published information about the detection of unauthorized access to 174 user accounts. According to representatives of PyPI, the authentication details of the affected users were likely obtained from collections of previously compromised credentials created as a result of breaches or leaks from other services. Access to PyPI accounts was possible due to the use of […]

Initiative to reduce dependencies in libsystemd

Developers of the system manager systemd are discussing the issue of reducing dependencies in the libsystemd library, which is linked not only with systemd components but also with many external applications. For example, in Fedora, over 150 packages use libsystemd as a dependency. The initiator of the discussion believes that including additional third-party libraries in libsystemd, which are not controlled by the systemd developers, significantly increases the attack surface […]

The release of the standard library for the Mojo language. Update of the Mojo toolkit 24.2

Developers of the Mojo programming language have started to transition project developments to open-source status. The source code of the standard library has been released first, now available under the Apache 2.0 license with exceptions from the LLVM project, allowing mixing with code under the GPLv2 license. In addition to publishing the code, the development process has shifted towards openness and the ability to contribute external changes through pull requests on GitHub. […]

libmui — a library for MacOS Classic-style interfaces

Hello, LOR! A few days ago, the code of the libmui library was published, which allows creating user interfaces reminiscent of the MacOS Classic operating system. The library's API is also inspired by this OS. The library is written in C and has a minimal set of dependencies. It only supports operation in X11 environments; the author does not plan to support Wayland. The code is released under the MIT license. Source: linux.org.ru

Embox v0.6.2

On April 2, 2024, the latest version of the open-source real-time operating system Embox was released. Among the changes: The file subsystem has been significantly redesigned. Support for the domestic RISC-V microcontroller k1921vg015 has been added. A utility for hot-flashing STM32 microcontrollers has been introduced. APIs for character and block devices have been improved. Support for some platforms, including RasPi & STM32, has been enhanced. A new 'nocode' annotation in Mybuild has been added. […]

Release of ROSA Fresh 12.5 distribution

NTC IT ROSA has released a corrective release of the freely distributed and community-developed ROSA Fresh 12.5 distribution, built on the rosa2021.1 platform. Builds have been prepared for free download for the x86_64 platform in variations with KDE Plasma 5, GNOME, Xfce, LXQt, and without GUI. Users who already have the ROSA Fresh 12 distribution installed will receive the update automatically. […]

The Ussury project is developing a new standard C library

The gradual adaptation of ONTL (Open NT Native Template Library) for the Linux operating system has begun (the ONTL project implements the standard C++11 library used for creating executable files for both the NativeAPI user space and the Windows OS kernel). The possibility of using C++ in the Linux kernel is fundamentally not considered, as it goes against established tradition. A small part of the C functions has been moved to a new […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster