Author: Yuri Gagarin

Vulnerability in Samba and MIT/Heimdal Kerberos that leads to buffer overflow.

Correction releases of Samba package 4.17.3, 4.16.7, and 4.15.12 have been published, addressing the vulnerability (CVE-2022-42898) in Kerberos libraries, which leads to integer overflow and out-of-bounds data write when processing PAC (Privileged Attribute Certificate) parameters sent by an authenticated user. The publication of package updates in distributions can be tracked on the following pages: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD. In addition to Samba […]

Critical vulnerabilities in Netatalk leading to remote code execution

Six remotely exploitable vulnerabilities have been identified in Netatalk, a server implementing AppleTalk and Apple Filing Protocol (AFP), allowing the execution of arbitrary code with root privileges through specially crafted packets. Netatalk is utilized by many network-attached storage (NAS) manufacturers to facilitate file sharing and access to printers from Apple computers, for example, it was used in devices […]

Release of Rocky Linux 8.7 distribution, developed by the founder of CentOS.

The release of Rocky Linux 8.7 has been announced, aimed at creating a free build of RHEL capable of filling the gap left by traditional CentOS after Red Hat prematurely ended support for the CentOS 8 branch at the end of 2021, rather than in 2029 as originally planned. This is the third stable release of the project, recognized as ready for production deployments. Rocky Linux builds are prepared […]

Release of the Alt Workstation K 10.1 distribution

The release of the distribution "Alt Workstation K 10.1" has been published, supplied with a KDE Plasma-based graphical environment. Boot and live images have been prepared for the x86_64 architecture (6.1 GB, 4.3 GB). The operating system has been included in the Unified Register of Russian Software and meets the requirements for transitioning to infrastructure managed by domestic operating systems. Russian root encryption certificates have been integrated into the main composition. As well as […]

Two vulnerabilities in GRUB2 allow bypassing UEFI Secure Boot protection

Details have been revealed about two vulnerabilities in the GRUB2 bootloader that could lead to code execution through specially crafted fonts and the processing of certain Unicode sequences. These vulnerabilities can be exploited to bypass the UEFI Secure Boot validated boot mechanism. Identified vulnerabilities: CVE-2022-2601 — buffer overflow in the function grub_font_construct_glyph() when processing specially crafted pf2 format fonts, arising from incorrect calculations […]

Release of BackBox Linux 8, a distribution for security testing.

After two and a half years since the last release, the BackBox Linux 8 distribution based on Ubuntu 22.04 is now available, coming with a collection of tools for security system testing, exploit testing, reverse engineering, network traffic analysis, wireless network exploration, malware analysis, stress testing, and data recovery. The user environment is based on Xfce. The size of the ISO image is 3.9 […]

Canonical has released Ubuntu builds optimized for Intel IoT platforms.

Canonical has announced the preparation of separate builds of Ubuntu Desktop (20.04 and 22.04), Ubuntu Server (20.04 and 22.04), and Ubuntu Core (20 and 22), packed with the Linux 5.15 kernel and specifically optimized for operation on SoC and Internet of Things (IoT) devices using Intel Core and Atom 10th, 11th, and 12th generation processors (Alder Lake, Tiger Lake […]

Release of EuroLinux 8.7 distribution, compatible with RHEL.

The EuroLinux 8.7 distribution has been released, prepared by rebuilding the source texts of packages from the Red Hat Enterprise Linux 8.7 distribution and is fully binary compatible with it. Changes are mainly related to rebranding and removal of RHEL-specific packages; otherwise, the distribution is fully analogous to RHEL 8.7. Installation images have been prepared for download, with sizes of 12 GB (appstream) and 1.7 GB. The distribution includes […]

Release of Bluetooth stack BlueZ 5.66 with initial support for LA Audio

The free Bluetooth stack BlueZ 5.47 has been released, used in Linux and Chrome OS distributions. This release is notable for the initial implementation of the BAP (Basic Audio Profile) standard, which is part of the LE Audio (Low Energy Audio) standard and defines capabilities for managing the delivery of audio streams for devices using Bluetooth LE (Low Energy). It supports both audio reception and transmission in both regular and broadcast […]

Release of Firefox 107

The release of the web browser Firefox 107 has taken place. Additionally, an update for the long-term support branch — 102.5.0 — has been formulated. The Firefox 108 branch will soon enter beta testing, with the release scheduled for December 13. Key innovations in Firefox 107: The profiling interface (Performance tab in developer tools) has added energy consumption analysis capabilities on Linux systems and […]

Fedora Linux 37 distribution release

The release of Fedora Linux 37 has been announced. The Fedora Workstation, Fedora Server, Fedora CoreOS, Fedora Cloud Base, Fedora IoT Edition, and Live versions with desktop environments such as KDE Plasma 5, Xfce, MATE, Cinnamon, LXDE, and LXQt are available for download. Builds are created for x86_64, Power64, and ARM64 (AArch64) architectures. The publication of Fedora Silverblue is delayed. The most significant […]

DuckDB 0.6.0 has been released, a SQLite variant for analytical queries

The release of DuckDB 0.6.0, which combines properties of SQLite such as compactness, embeddability as a library, storage of the database in a single file, and a user-friendly CLI interface, along with tools and optimizations for executing analytical queries covering substantial amounts of stored data, is now available. This includes functions like aggregating all table content or merging multiple large tables. The project's code is distributed under the MIT license. […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster