Author: Yuri Gagarin

Release of Linux distribution CRUX 3.8

After two and a half years of development, the release of the independent lightweight Linux distribution CRUX 3.7 has been finalized. Developed since 2001 in accordance with the KISS (Keep It Simple, Stupid) principle, it is aimed at experienced users. The project's goal is to create a simple and transparent distribution for users, based on BSD-like initialization scripts, with a maximally simplified structure and containing a relatively small number of […]

A vulnerability in the SSL.com certificate authority allowed obtaining a certificate for someone else's domain

A vulnerability has been identified in the domain ownership verification system at the SSL.com certification authority, allowing attackers to obtain a TLS certificate for any domain by providing an email address controlled by the attacker. Gaining access to an email associated with the target domain was sufficient to acquire a TLS certificate. For example, the vulnerability allowed the issuance of TLS certificates for domains used in public email services such as gmail.com, yandex.ru, yahoo.com, outlook.com, and icloud.com. The vulnerability also provided attackers with the ability to […]

Mox mail server 0.0.15 is available

The release of the Mox 0.0.15 project has been announced, which develops a comprehensive solution for the operation of mail servers, including all components necessary for sending and receiving email. It offers custom implementations of SMTP and IMAP4 servers, a system for filtering unwanted content, as well as web interfaces for administrators and users. The project code is written in Go and distributed under the MIT license. The project's goal is […]

Release of REST service EasyREST 0.8

The release of EasyREST 0.8 has occurred, a lightweight extensible REST service for executing CRUD and aggregated queries to relational databases. The project is written in Go and utilizes a plugin system to connect to various DBMS (SQLite, MySQL, PostgreSQL, Redis). The code is distributed under the Apache 2.0 license. To run it, you only need to compile or download the executable file and specify the plugins in the YAML configuration file or through […]

The release of Bastille 0.14, a container management system based on FreeBSD Jail

The release of Bastille 0.14.20250420 has been published, a system for automating the deployment and management of applications running in containers isolated by the FreeBSD Jail mechanism. The code is written in Shell, requires no external dependencies for operation, and is distributed under the BSD license. A command-line utility called bastille is provided for managing containers, allowing users to create and update Jail environments based on their chosen version of FreeBSD, as well as […]

14 vulnerabilities in the libsoup library used in GNOME

14 vulnerabilities have been discovered in the libsoup library, developed by the GNOME project. Libsoup provides client and server HTTP implementations that utilize GObjects for integration with GNOME applications. The library is used in GNOME Shell, the Epiphany browser (GNOME Web), the Shotwell image viewer, in the GStreamer plugin souphttpsrc, and in applications that use libwebkit2gtk. Previously, the libsoup library was used in NetworkManager, which has been […] since version 1.8.

Assessment of network requests sent by web browsers at first launch

The results of an analysis of network activity while using the browsers Firefox, Chrome, Safari, Edge, Opera, Brave, Yandex Browser, Ungoogled Chromium, Mulvad, Vivaldi, Librewolf, Arc, Tor Browser, Kagi Orion, Pale Moon, Floorp, Zen, Waterfox, and Thorium have been published. The purpose of the research was to evaluate the traffic associated with the browsers sending service network requests unrelated to the content being processed by the user. In addition to telemetry transmission […]

Update of the free publishing package Scribus 1.6.4

The release of the free Scribus 1.6.4 document layout package has been announced. The package provides tools for professional print layout, includes tools for generating PDF, and supports working with separate color profiles, CMYK, spot colors, and ICC. The program is written using the Qt toolkit and is provided under the GPLv2+ license. Ready binary builds are available for Linux (AppImage), macOS, and Windows. […]

Wine 10.6 Release

An experimental release of the open implementation of the Win32 API — Wine 10.6 has been published. Since the release of 10.5, 27 bug reports have been closed and 286 changes have been made. The most significant changes: A new lexer has been proposed in the command interpreter cmd.exe. Support for PBKDF2, a password-based key derivation function, has been added to the Bcrypt library. Metadata support has been expanded in the WindowsCodecs library. […]

Release of the MySQL Database Management System 9.3.0

Oracle has created a new branch of the MySQL Database Management System 9.3.0. MySQL Community Server 9.3.0 builds are prepared for all major distributions including Linux, FreeBSD, macOS, and Windows. In accordance with the new release model implemented in 2023, MySQL 9.3 is categorized under the 'Innovation' branches. Innovation branches are recommended for those who want early access to new features and are released every 3 […]

Cryptographic functions with mathematical proof of reliability are involved in Python

An announcement has been made regarding the successful completion of the initiative to replace the cryptographic algorithm implementations offered in Python's hashlib and hmac modules with options having mathematical proof of reliability, prepared by the 'HACL*' project. The work on transitioning to functions with mathematical proof of reliability began in 2022 and was initiated after a buffer overflow was discovered in the implementation of the SHA3 algorithm used in the Python hashlib module. […]

Release of the NTP Server NTPsec 1.2.4

After more than a year of development, the release of the precise time synchronization server NTPsec 1.2.4 has been published. The project was created as a fork of the reference implementation of the NTPv4 protocol (NTP Classic 4.3.34), focusing on restructuring the codebase to enhance security. The NTPsec source code is distributed under BSD, MIT, and NTP licenses. NTPsec is being developed under the guidance of Eric Raymond with the participation of several […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster