Author: Yuri Gagarin

Updated X.Org Server 21.1.10 with vulnerability fixes. Removed UMS support from the Linux kernel.

Corrective releases of X.Org Server 21.1.10 and the Device-Dependent X component xwayland 23.2.3 have been published, enabling the launch of X.Org Server to facilitate the execution of X11 applications in Wayland-based environments. The new versions fix two vulnerabilities. The first vulnerability can be exploited for privilege escalation in systems where the X server runs with root privileges, as well as for remote code execution in […]

FreeRDP 3.0 release, an open-source implementation of the RDP protocol

The FreeRDP project has released version 3.0.0, offering a free implementation of the Remote Desktop Protocol (RDP), developed based on Microsoft's specifications. The project provides a library for integrating RDP support into third-party applications and a client that can be used for remote connections to Windows desktops. The project code is distributed under the Apache 2.0 license. In the new version: […]

The SEF platform for software-defined Flash storage has been released.

The Linux Foundation has introduced the first release of the open platform for software-managed Flash storage SEF (Software Enabled Flash), built on code contributed by KIOXIA (formerly Toshiba Memory Corporation), where Flash memory was invented in 1980. The toolchain's source code is written in C and distributed under the BSD license. The toolchain includes a set of patches for […]

Broadcom has eliminated perpetual licenses for VMware, transitioning all solutions to a subscription model and adjusting its product portfolio.

Following the acquisition of VMware, Broadcom has begun to change the portfolio of its current offerings. In particular, the practice of entering into perpetual software licensing contracts has been halted. Support and subscription renewals (SnS) for perpetual offerings have also been announced to cease. Broadcom stated that it is providing a BYOS (Bring Your Own Subscription) option, ensuring portability […]

Release of the Calamares installer framework 3.3.0 with Qt6 support

After five and a half years since the release of the 3.2.x branch, the Calamares 3.3.0 installer framework has been published, independent of specific Linux distributions. Developers are provided with several dozen ready-to-use modules implementing various features that are in demand in installers. The code is written in C++, the graphical interface is based on the Qt library (using QML), and modules can be developed using […]

Vulnerabilities in LibreOffice that allow the execution of Gstreamer scripts or plugins

Information has been revealed about two vulnerabilities in the free office suite LibreOffice, which have been assigned a high danger level (8.3 out of 10). The issues have been addressed in the recent updates of LibreOffice 7.6.4 and 7.5.9. The first vulnerability (CVE-2023-6186) allows for the execution of arbitrary scripts when a user clicks on a specially added link in the document that triggers built-in macros or internal commands. In certain situations, it was possible to […]

Proposal to shift responsibility for errors in open-source code

James Bottomley from IBM Research, who oversees SCSI and PA-RISC subsystems in the Linux kernel and previously led the technical committee of the Linux Foundation, has proposed a solution to the issue of potentially holding open-source developers accountable for bugs in their code or inadequate vulnerability remediation. The idea is to shift the legal responsibility for mistakes in the source […]

Linux 6.6.6

Greg Kroah-Hartman, apparently not suffering from hexakosioihexekontahexaphobia, has announced the release of the Linux kernel with the mystical number 6.6.6. The only change is the rollback of a fix related to the cfg80211 driver subsystem (the API configuration for wireless connections under the 802.11 standard), which resulted in a series of regressions due to one lost commit. Source: linux.org.ru

Linux Kernel 6.6.6 Update

Greg Kroah-Hartman, who is responsible for maintaining the stable branch of the Linux kernel, has published a significant release of kernel 6.6.6, which proposes one change affecting the cfg80211 wireless stack. The change rolls back the fix that was added in release 6.6.5, which led to regressions because another fix from the 6.7 branch was not transferred along with the fix in 6.6.5 […]

Vulnerabilities in Buildroot allowing code execution on the build server via a MITM attack

In the Buildroot build system, aimed at creating bootable Linux environments for embedded systems, six vulnerabilities have been identified that allow for alterations in the generated system images or execution of code at the build system level during transit traffic interception (MITM). The vulnerabilities have been addressed in the Buildroot releases 2023.02.8, 2023.08.4, and 2023.11. The first five vulnerabilities (CVE-2023-45841, CVE-2023-45842, CVE-2023-45838, CVE-2023-45839, CVE-2023-45840) affect […]

The OpenBao project has started the development of a fork of Hashicorp Vault

Under the auspices of the Linux Foundation, the OpenBao project has been established, which will continue the development of the Hashicorp Vault codebase under the free MPLv2 (Mozilla Public License). This fork was created in response to HashiCorp's transition of its products to a proprietary BSL 1.1 license, which restricts code usage in cloud systems competing with HashiCorp's products and services. The creators of OpenBao aim to continue […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster