Author: Yuri Gagarin

The StackRot vulnerability in the Linux kernel allows privilege escalation.

The change in the Linux kernel 6.1 that translated VMA (Virtual Memory Area) from the "red-black tree" data structure to the "maple tree" has led to the emergence of a vulnerability (CVE-2023-3269) that allows non-privileged users to execute their code with kernel privileges. The vulnerability, codenamed StackRot, becomes apparent starting from the 6.1 kernel release and has been fixed in updates 6.4.1, 6.3.11, and 6.1.37. The "maple tree" structure [...].

Vulnerability in Nginx configurations with incorrect alias block settings

Some servers using nginx remain vulnerable to the Nginx Alias Traversal technique, which was introduced at the Blackhat conference back in 2018. This technique allows access to files and directories located outside the root directory specified in the "alias" directive. The issue only manifests in configurations where the "alias" directive is placed inside a "location" block, and its parameter does not end with the character […]

Release of Multimedia Library SDL 2.28.0. Transitioning to SDL 3.0 Development

After seven months of development, the release of the SDL 2.28.0 (Simple DirectMedia Layer) library has been published. This library aims to simplify the writing of games and multimedia applications. SDL provides features such as hardware-accelerated 2D and 3D graphics output, input handling, sound playback, and 3D rendering via OpenGL/OpenGL ES/Vulkan, among other related operations. The library is written in C and is distributed under the Zlib license. […]

Introducing SysLinuxOS, a distribution for system integrators and administrators

The SysLinuxOS 12 distribution has been released, built on the Debian 12 package base and aimed at providing a bootable live environment optimized for system integrators and administrators. Builds with GNOME (4.8 GB) and MATE (4.6 GB) desktops have been prepared for booting. It includes a selection of pre-installed applications for network monitoring and diagnostics, traffic tunneling, launching VPNs, and organizing remote access, […]

Wolvic 1.4 has been released, a web browser for virtual reality devices.

The release of the Wolvic 1.4 web browser has been published, intended for use in augmented and virtual reality systems. The project continues the development of the Firefox Reality browser, which was previously developed by Mozilla. After the stagnation of the Firefox Reality codebase, its development was continued under the Wolvic project by Igalia, known for its involvement in developing free projects like GNOME, GTK, WebKitGTK, Epiphany, GStreamer, Wine, Mesa […]

The release of Gyroflow 1.5.1, a video stabilization program.

A new release of the Gyroflow video stabilization system is available, operating in post-processing and utilizing data from the gyroscope and accelerometer to compensate for distortions caused by camera shake and uneven movement. The project code is written in Rust (the interface uses the Qt library) and is distributed under the GPLv3 license. Builds are published for Linux (AppImage), Windows, and macOS. Support for usage is provided […]

Promotion of Bcachefs to the Linux kernel

Kent Overstreet, the author of the SSD-based block device caching system BCache included in the Linux kernel, summarized the results of the promotion work for the Bcachefs filesystem into the mainline kernel in his presentation at the LSFMM 2023 (Linux Storage, Filesystem, Memory Management & BPF Summit), and discussed plans for further development of this filesystem. In […]

Release of nginx 1.25.1

The release of the main branch nginx 1.25.1 has been formed, continuing the development of new features. In the parallel stable branch 1.24.x, only changes related to fixing serious bugs and vulnerabilities are made. Subsequently, a stable branch 1.26 will be formed based on the main branch 1.25.x. Among the changes: a separate directive 'http2' has been added to selectively enable the HTTP/2 protocol in bindings to […]

Release of Tor Browser 12.0.7 and Tails 5.14 distribution

A release of the specialized Tails 5.14 distribution (The Amnesic Incognito Live System), based on the Debian package base and designed for anonymous web access, has been announced. Anonymous access in Tails is provided by the Tor system. All connections, except for traffic through the Tor network, are blocked by the packet filter by default. For storing user data in persistent mode between launches, encryption is applied. […]

The ninth update of the ALT p10 starter kits

The ninth edition of starter kits on the Tenth ALT platform has been published. The builds based on the stable repository are intended for experienced users. Most starter kits are live builds that feature various desktop environments and window managers (DE/WM) available for ALT operating systems. The system can be installed from these live builds if necessary. The next scheduled update is set for September 12, 2023. […]

WebRTC support has been added to OBS Studio, enabling broadcasting in P2P mode.

Changes have been integrated into the OBS Studio codebase, a package for streaming, compositing, and recording video, implementing support for WebRTC technology, which can be used instead of the RTMP protocol for streaming video without an intermediate server, allowing the content to be transmitted directly to the user's browser in a P2P manner. The WebRTC implementation is based on the use of the libdatachannel library, written in C++. In the current […]

Release of Debian GNU/Hurd 2023

The release of the Debian GNU/Hurd 2023 distribution has been announced, combining the Debian software environment with the GNU/Hurd kernel. The Debian GNU/Hurd repository includes about 65% of the packages from the total size of the Debian archive, including ported versions of Firefox and Xfce. Installation builds (364MB) have been created only for the i386 architecture. Ready-made images (4.9GB) for virtual machines are available for exploring the distribution without installation. Debian GNU/Hurd […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster