Author: Yuri Gagarin

A vulnerability allowing SQL code injection has been fixed in Ruby on Rails

Corrective updates for Ruby on Rails framework versions 7.0.4.1, 6.1.7.1, and 6.0.6.1 have been released, fixing 6 vulnerabilities. The most critical vulnerability (CVE-2023-22794) may allow execution of SQL commands specified by an attacker when using external data in comments processed in ActiveRecord. This issue is caused by the lack of necessary escaping of special characters in comments before they are stored in the DBMS. The second vulnerability (CVE-2023-22797) may be applied to […]

Release of pandoc 3.0, a package for converting text markup

The release of project pandoc 3.0 is available, developing the library and command-line utility for converting text markup formats. It supports conversion between over 50 formats, including docbook, docx, epub, fb2, html, latex, markdown, man, odt, and various wiki formats. Support for arbitrary Lua processors and filters is included. The code is written in Haskell and is distributed under the GPLv2 license. […]

GNOME report summarizing data obtained after telemetry collection

A report on the composition of GNOME user environments has been published, based on data collected from 2,560 users who voluntarily used the gnome-info-collect tool to send information about their systems. The data collected will help developers understand user preferences and consider them when making decisions related to enhancing usability and the development of the shell. Distributions used: Fedora 54.69% Arch […]

Debian 12 has entered the first stage of freeze before release

Debian developers have announced the achievement of the first stage of the package freeze for Debian 12 "Bookworm", which implies the cessation of performing "transitions" (updating packages that require dependency adjustments in other packages, leading to temporary removal of packages from Testing), as well as the halt of updates for packages required for building (build-essential). A transition to a soft package freeze is scheduled for February 12, 2023, […]

Release of the group policy application tool gpupdate 0.9.12

A new release of gpupdate, a tool for applying group policies in 'Alt' distributions, has been published. The gpupdate mechanisms apply group policies on client machines both at the system level and for individual users. The gpupdate tool is part of an alternative solution by 'Basil SPU' for implementing Active Directory domain infrastructure under Linux. The application supports operation within MS AD or Samba domain infrastructure […]

SQLite developers enhance the HC-tree backend with support for parallel write operations

SQLite project developers have begun testing an experimental HCtree backend that supports row-level locking and provides a high degree of concurrency when processing requests. The new backend aims to improve the efficiency of SQLite use in client-server systems that need to handle a significant number of simultaneous write requests to the database. The b-tree structures originally used in SQLite for data storage are not […]

The ability to build Glibc using LLVM tools has been implemented.

Engineers from Collabora have published a report on the implementation of a project to ensure the build of the GNU C Library (glibc) system library using LLVM tools (Clang, LLD, compiler-rt) instead of GCC. Until recently, glibc remained one of the significant components of distributions that supported building only with GCC. The difficulties in adapting glibc to build with LLVM are caused by differences in […]

Release of the git-compatible version control system Got 0.80

The developers of the OpenBSD project have released version 0.80 (Game of Trees) of the Got version control system, focusing primarily on simplicity of design and use. Got uses a storage format compatible with Git repository disk format for managing versioned data, allowing the repository to be accessed with both Got and Git tools. For example, Git can be used to perform tasks, […]

Two vulnerabilities in Git that can lead to remote code execution.

Corrective releases of the distributed version control system Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6, and 2.30.7 have been published, addressing two vulnerabilities that could allow malicious code execution on the user's system when using the 'git archive' command and working with untrusted external repositories. These vulnerabilities were caused by errors in commit formatting and parsing code, […]

Release of VirtualBox 7.0.6

Oracle has released a corrective update for the VirtualBox virtualization system, version 7.0.6, which includes 14 fixes. At the same time, an update was released for the previous VirtualBox 6.1.42 branch with 15 changes, including support for Linux kernels 6.1 and 6.2, as well as kernels from RHEL 8.7/9.1/9.2, Fedora (5.17.7-300), SLES 15.4, and Oracle Linux 8. Key changes in VirtualBox 7.0.6 include enhancements in the extensions, […]

Release of Lakka 4.3, a distribution for creating gaming consoles

The release of the Lakka 4.3 distribution has taken place, allowing computers, set-top boxes, or single-board computers to be transformed into full-fledged gaming consoles for retro gaming. This project is a modification of the LibreELEC distribution, originally designed for creating home theaters. Lakka builds are available for platforms including i386, x86_64 (Intel, NVIDIA, or AMD GPUs), Raspberry Pi 1-4, Orange Pi, Banana Pi, Hummingboard, Cubox-i, Odroid C1/C1+/XU3/XU4, etc. […]

Release of Firefox 109

The release of the web browser Firefox 109 has occurred. Additionally, an update for the long-term support branch—102.7.0—has been formed. The Firefox 110 branch is set to enter beta testing soon, with its release scheduled for February 14. Key innovations in Firefox 109 include enabled support for the third version of the Chrome manifest, which defines the capabilities and resources available for extensions written […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster