ProHoster > Articles on: Yuri Gagarin

Author: Yuri Gagarin

A technical specialist at ProHoster with over six years of experience in server administration, VPN solutions, and network security. I manage infrastructure setup and support, monitor service stability, and implement solutions to protect client data. I also contribute to performance optimization and compliance with modern security and privacy requirements.

Vulnerability in LibKSBA leading to code execution when processing S/MIME in GnuPG.

Posted on

A critical vulnerability (CVE-2022-3515) has been identified in the LibKSBA library, developed by the GnuPG project, which provides functions for working with X.509 certificates. This vulnerability leads to integer overflow and arbitrary data writing beyond the allocated buffer when parsing ASN.1 structures used in S/MIME, X.509, and CMS. The issue is exacerbated by the fact that the Libksba library is used in the GnuPG package, and the vulnerability could lead to severe consequences.

Rhino Linux has been introduced, a continuously updated distribution based on Ubuntu.

Posted on

The developers of the Rolling Rhino Remix build have announced the transformation of the project into a separate distribution, Rhino Linux. The reason for creating the new product is a reassessment of the goals and development model of the project, which has outgrown its amateur development state and has gone beyond simple rebuilding of Ubuntu. The new distribution will still be built based on Ubuntu but will include additional utilities and be developed by a dedicated team.

Update of the Void Linux installation builds.

Posted on

New bootable builds of the Void Linux distribution have been formed. Void Linux is an independent project that does not use the developments of other distributions and is developed using a continuous version update cycle (rolling updates, without separate releases of the distribution). The previous builds were published a year ago. In addition to the availability of up-to-date bootable images based on a more recent system snapshot, the update does not bring any functional changes to the builds and their […]

Google has opened the source code of the secure operating system KataOS.

Posted on

Google has announced the release of work related to the KataOS project, aimed at creating a secure operating system for embedded hardware. The system components of KataOS are written in Rust and run on top of the seL4 microkernel, for which a mathematical proof of reliability has been provided on RISC-V systems, demonstrating full compliance of the code with the specifications defined in formal language. The project's code is open under the […]

Wine 7.19 Release

Posted on

An experimental release of the open implementation of WinAPI — Wine 7.19 has taken place. Since the release of version 7.18, 17 bug reports have been closed and 270 changes have been made. The most important changes include: the ability to save DOS file attributes to disk. The vkd3d package with Direct3D 12 implementation, working through call translation to the Vulkan graphic API, has been updated to version 1.5. Support for the format […]

An attack on NPM that allows the discovery of packages in private repositories

Posted on

A vulnerability has been identified in NPM that allows for the detection of packages in private repositories. The issue is caused by the different response times when querying an existing package versus a non-existent one by an external user without access to the repository. For any packages in private repositories without access, the server registry.npmjs.org returns a '404' error, but in the case of an existing package with the requested name, an error is returned […]

The Genode project has released the general-purpose OS Sculpt 22.10

Posted on

The Sculpt 22.10 operating system release has been introduced, which is based on the Genode OS Framework technologies and is being developed as a general-purpose operating system that can be used by regular users for everyday tasks. The project's source code is distributed under the AGPLv3 license. A LiveUSB image of 28 MB is available for download. It supports operation on systems with Intel processors and graphics subsystems […]

Vulnerabilities in the Linux kernel's wireless stack that allow for remote code execution

Posted on

A series of vulnerabilities has been identified in the wireless stack (mac80211) of the Linux kernel, some of which could potentially lead to buffer overflows and remote code execution through the transmission of specially crafted packets by the access point. A patch is currently the only fix available. Examples of frames causing the overflow have been published to demonstrate the potential for an attack, along with a utility to inject these frames into the wireless stack […]

Release of PostgreSQL DBMS 15

Posted on

After a year of development, a new stable branch of the PostgreSQL database management system 15 has been released. Updates for the new branch will be released over the next five years until November 2027. Key innovations include: support for the SQL command 'MERGE', which resembles the 'INSERT … ON CONFLICT' expression. MERGE allows for the creation of conditional SQL expressions that combine INSERT, UPDATE, and DELETE operations in a single statement. For example, using MERGE, one can […]

The code for a machine learning system that generates realistic human movements has been made available

Posted on

A group of researchers from Tel Aviv University has released the source texts associated with the MDM (Motion Diffusion Model) machine learning system, which allows for the generation of realistic human movements. The code is written in Python using the PyTorch framework and is distributed under the MIT license. For conducting experiments, both pre-trained models and the option to train models independently using the provided scripts are available, for example, […]

Vulnerability in LibreOffice allows script execution while working with a document

Posted on

A vulnerability (CVE-2022-3140) has been identified in the free office suite LibreOffice, allowing for the execution of arbitrary scripts by clicking on a specially crafted link in a document or when triggering a specific event while working with a document. The issue has been resolved in the updates LibreOffice 7.3.6 and 7.4.1. The vulnerability was caused by the addition of support for an additional macro call scheme ‘vnd.libreoffice.command’, specific to LibreOffice. This scheme was included in that […]

A national open source code repository has been approved in the Russian Federation

Posted on

The Russian government has adopted a resolution 'On conducting an experiment to provide the right to use programs for electronic computers, algorithms, databases and related documentation, including exclusive rights belonging to the Russian Federation, on the basis of open licenses and creating conditions for the use of open-source software'. The resolution mandates: The creation of a national repository for open-source software; Placement of […]

« to the beginning 334 335 336 337 338 339 340 341 342 343 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster