Internet News Section
OpenSSH 10.5 has been released, an open implementation of the client and server for working with SSH 2.0 and SFTP protocols. Key changes: The portable version of OpenSSH now requires cryptographic support based on elliptic curves (ECC — Elliptic Curve Cryptography) in the libcrypto library, including support for the elliptic curve NISTP521. In the libcrypto implementations from the LibreSSL, OpenSSL, BoringSSL projects, and […]
The developers of the Linux Mint distribution have released updated ISO images, now bundled with a newer version of the Linux kernel. For the release of Linux Mint 22.3, originally shipped with kernel 6.14, an HWE (Hardware Enablement) update has been published with kernel version 7.0, ported from Ubuntu 26.04 and prepared for inclusion in Ubuntu 26.04.5 LTS. It is anticipated that the release of such intermediate updates of ISO images will resolve issues faced by users […]
Mozilla has announced the replacement of the GPG key used for signing the artifacts of Firefox and Thunderbird releases, such as tar archives, RPM packages, and checksum files. The change was made following an incident where an unencrypted copy of the key was inadvertently added to a private company repository on GitHub, accessible to a limited number of project participants who had access […]
The second beta release of the composite server Xfwl4 has been introduced, utilizing the Wayland protocol. Xfwl4 is written in Rust, using the Smithay library. The project does not overlap with the codebase of the window manager xfwm4 but aims to implement all functionalities available in xfwm4, including the ability to use existing xfconf settings and configuration interface, considering the specifics of using Wayland instead of X11. Functionality […]
A vulnerability (CVE-2026-64564) has been identified in the SCTP protocol implementation provided in the Linux kernel, allowing a local user to gain root privileges on the system. Among other issues, this vulnerability allows root access to the main system when an exploit is launched in an isolated container. A prototype of the exploit has been prepared, and its operation has been demonstrated in the Debian 13, Rocky Linux 9, RHEL 9, and Ubuntu 24.04 distributions with kernels 5.14, 6.6, […]
Cisco has released new versions of the free antivirus package ClamAV 1.4.6 and 1.5.4, which fix vulnerabilities, some of which may lead to the execution of attacker's code when checking specially crafted content. CVE-2026-20337 — out-of-bounds write during the processing of specially crafted ZIP archive headers. CVE-2026-20345 — buffer overflow on write and read when processing invalid names […]
Oracle has banned the acceptance of changes generated through AI tools into the open project OpenJDK. The ban covers source code, text materials, and images submitted to the project repositories or posted on the website, in messages, or on wiki pages. Areas where AI is permitted in Java development include debugging and code reviews. The reason cited is potential risks with […]
On August 5, 2026, Proxmox Server Solutions released the first officially supported version of Proxmox Virtual Environment for the ARM64 architecture. Until now, the Proxmox VE virtualization server platform was officially released for x86-64, although there were third-party ports and experimental ways to run it on ARM. The ARM64 variant is implemented not as a separate fork or stripped-down edition. Proxmox VE 9.2 for […]
On August 7, corrective releases of the free antivirus package ClamAV 1.5.4 and 1.4.6 were published. The main focus of the new versions is security: in the current branch 1.5, eight CVEs are fixed, six of which are also resolved in the supported branch 1.4. Additionally, an issue in clamd has been addressed that could lead to memory content disclosure of the process. In ClamAV 1.5.4, the following vulnerabilities have been fixed: […]
On August 7, GCC 16.2 was released — the second stable release of the GCC 16 branch. The new version is primarily corrective in nature: developers explicitly call it a bug-fix release, containing fixes for regressions found in GCC 16.1 compared to previous releases. A total of 102 known bugs have been fixed since the April GCC 16.1. The fixes affect various components of the compiler and supported architectures; no […]
3 TL;DR: Facing the third buffer overflow discovered in 2026 (and, according to F5, an RCE if ASLR is not in place) while working with regexes and variables, developer freenginx Maxim Dunin decided it was time to put an end to this and added a check for variable size before writing data into it. This new feature was subsequently adopted elsewhere […]
Developer Vyacheslav Serbov, known by the pseudonym slvDev, demonstrated fully local text generation on the ESP32-S3 microcontroller. The language model he created contains 28.9 million parameters and produces about 9.9 tokens per second without relying on a server or other external computing resources. The generated short stories are displayed on a connected OLED screen. The esp32-ai project was tested on the ESP32-S3 N16R8 module, which has […]