In the RouterOS operating system used in MikroTik routers, a critical vulnerability (CVE-2023-32154) has been identified, allowing an unauthenticated user to execute code remotely on the device by sending a specially crafted IPv6 Router Advertisement (RA). The issue is caused by insufficient validation of incoming data during the processing of IPv6 RA requests, which enabled writing data beyond […]
Google has published the results of an audit on 389 crate packages used in the ChromiumOS and Fuchsia projects, which support development in Rust. A file for dependency checking using the cargo vet command has been provided for use in their projects, ensuring compliance with security, correctness, and testing requirements. Applying "cargo vet" guarantees that only verified packages are used in the project […]
PayPal has opened the source code of the fault-tolerant database management system JunoDB, which manipulates data in key-value format. The system was originally designed with a focus on high security, horizontal scalability, fault tolerance, and the ability to handle hundreds of thousands of concurrent connections with predictable latencies. At PayPal, nearly all services, from user login to financial transaction processing, are tied to JunoDB. The project's code is written in Go […]
The Python package repository PyPI (Python Package Index) has temporarily halted new user and project registrations. The reason stated is a surge in activity from malicious actors who have started publishing packages with harmful code. It is noted that, given the absence of several administrators on vacation, last week the volume of registered malicious projects exceeded the remaining PyPI team's capacity for prompt response. Developers plan to restructure over the weekend […]
The release of AlmaLinux 8.8 has been formed, synchronized with the Red Hat Enterprise Linux 8.8 distribution and containing all proposed changes in this release. Builds are prepared for x86_64, ARM64, s390x, and ppc64le architectures in the form of bootable (900 MB), minimal (1.9 GB), and full images (12 GB). Live builds with GNOME, KDE, Xfce, and MATE are planned to be formed later, as well as […]
Following the release of Red Hat Enterprise Linux 9.2, an update for the previous branch Red Hat Enterprise Linux 8.8 has been published, which is maintained alongside the RHEL 9.x branch and will be supported at least until 2029. Installation builds are prepared for x86_64, s390x (IBM System z), ppc64le, and Aarch64 architectures, but are available for download only to registered Red Hat Customer […]
SQLite 3.42 has been released, a lightweight DBMS designed as a plug-in library. SQLite code is released into the public domain, meaning it can be used freely and without restrictions for any purpose. Financial support for SQLite developers is provided by a specially created consortium, which includes companies such as Adobe, Oracle, Mozilla, Bentley, and Bloomberg. Key changes: For full-text indexes FTS5 […]
A new version of the Util-linux system utility package 2.39 has been released, which includes utilities closely related to the Linux kernel as well as general-purpose utilities. For instance, the package features utilities such as mount/umount, fdisk, hwclock, cal, blkid, fsck/cfdisk/sfdisk, blockdev, chrt, mkfs, ionice, more, renice, su, kill, setsid, login, shutdown, dmesg, lscpu, logger, losetup, setterm, mkswap, swapon, taskset, and so on. In […]
The Institute of System Programming of the Russian Academy of Sciences (ISP RAS) has formed a consortium aimed at organizing collaboration among Russian companies, educational institutions, and research organizations in the field of Linux kernel security research and addressing identified vulnerabilities. The consortium is established on the basis of the Technology Center for Security Research of operating systems built on the Linux kernel, created in 2021. It is expected that the formation of the consortium will allow […]
After eight months of development, a stable release of the composite server Weston 12.0 has been published, advancing technologies that facilitate the full support of the Wayland protocol in Enlightenment, GNOME, KDE, and other desktop environments. The development of Weston aims to provide a high-quality codebase and working examples for using Wayland in desktop environments and embedded solutions, such as platforms for automotive infotainment systems, smartphones, televisions […]
Four vulnerabilities have been identified in Cisco Small Business series switches, allowing a remote attacker to gain full access to the device with root privileges without authentication. To exploit these issues, the attacker must be able to send requests to the network port that hosts the web interface. These vulnerabilities have been assigned a critical severity level (9.8 out of 10). A working exploit prototype is reported to exist. Identified vulnerabilities (CVE-2023-20159, […]
The release of web browser Pale Moon 32.2 has been published, branching from the Firefox codebase to ensure higher performance, maintain the classic interface, minimize memory usage, and provide additional customization options. Pale Moon builds are available for Windows and Linux (x86_64). The project's code is distributed under the MPLv2 license (Mozilla Public License). The project adheres to a classic interface organization, without transitioning to […]