Internet News Section
A corrective release of Firefox 146.0.1 is now available, fixing 3 vulnerabilities caused by accessing already freed memory areas (CVE-2025-14860) and buffer overflows (CVE-2025-14861). These issues could potentially allow an attacker to execute code by opening specially crafted pages. Additionally, several non-security issues have been resolved: Increased text contrast in the sidebar when using […]
After 11 months of development, the release of OpenZFS 2.4.0 has been published, advancing the implementation of the ZFS file system for Linux and FreeBSD. The project became known as "ZFS on Linux" and was previously limited to developing a module for the Linux kernel, but after merging with code from FreeBSD, it was recognized as the main implementation of OpenZFS and renamed. OpenZFS has been tested with Linux kernels starting from 4.18 […]
The Debian project has begun testing the Debusine system, which allows the creation of custom repositories for distributing newer versions of software, conducting pre-testing of packages, or hosting additional packages that do not fit into the standard Debian repositories. Debusine is presented as a Debian counterpart to PPA (Personal Package Archive) repositories used in Ubuntu. The project is being developed by Colin Watson, […]
The AOUSD alliance (Alliance for OpenUSD), overseen by the Linux Foundation, has published the OpenUSD Core Specification 1.0, defining a universal format and language for describing 3D scenes optimized for collaborative work on 3D content. The specification is presented as an open standard for creating 3D content and exchanging data between different 3D editors and platforms. Companies such as Pixar, Lucasfilm, […] have participated in the development of the specification.
The Open Source Initiative (OSI), responsible for verifying licenses for compliance with Open Source criteria, has published a ranking of the popularity of open licenses. The positions in the ranking are calculated based on the number of page views of information about each license. The data is presented after filtering out bot activity. The MIT license leads by a significant margin, followed by licenses like Apache 2.0, BSD3, BSD2, GPL 2 […]
The release of multimedia player VLC 3.0.23 has been published. The code is written in C and is distributed under the LGPLv2.1 license. This release comes two weeks after VLC 3.0.22 and primarily includes bug fixes and vulnerabilities identified in the immediate aftermath. The new version addresses: Crashes when processing certain JPEG files with JFIF headers. Problems with line positioning have been resolved […]
The release of the libmdbx 0.13.10 (MDBX) library has been published, featuring a high-performance, compact embedded key-value database. The libmdbx code is distributed under the Apache 2.0 license. It supports all current operating systems and architectures, including the Russian Elbrus 2000. A comprehensive API for C++ is available for libmdbx, along with enthusiast-supported bindings for Rust, Haskell, Python, NodeJS, Ruby, Go, Nim, […]
A corrective release of the Exim 4.99.1 mail server has been published, addressing a vulnerability (CVE-2025-67896) that allows a remote attacker to modify memory contents outside the allocated buffer. This issue could potentially be exploited for remote code execution on the server, although a working exploit has not yet been developed. The vulnerability exists in the code dealing with the internal database (Hints DB) based on SQLite, used for storing temporary […]
Alex Kontos, the founder of Waterfox, a Firefox modification focused on privacy, performance, and minimalism, stated that the Waterfox project will not integrate functionalities utilizing large language models in the foreseeable future, at least not in the form they are being developed in Firefox. This concerns the application of large language models that influence the browser's behavior and perform actions […]
The release of the free PaaS platform Cozystack 0.38, built on Kubernetes, is now available. The project aims to provide a ready-to-use platform for hosting providers and a framework for building private and public clouds. The platform installs directly onto servers and covers all aspects of infrastructure preparation for offering managed services. Cozystack enables the deployment of Kubernetes clusters, databases, and virtual machines. The platform's code […]
The Binder inter-process communication mechanism, integrated into the Linux 6.18 kernel and written in Rust, has fixed a vulnerability (CVE-2025-68260). The issue is caused by a race condition during operations in unsafe blocks that directly handle pointers to the previous and next list elements. When successfully exploited, the vulnerability in Binder is limited to a crash and does not lead to memory corruption. Greg Kroah-Hartman […]
The release of the desktop-oriented MidnightBSD 4.0 operating system, based on FreeBSD with elements ported from DragonFly BSD, OpenBSD, and NetBSD, has occurred. The base desktop environment is built on Xfce (optionally, a GNUstep + Window Maker + GWorkspace combo can be installed). Unlike other desktop distributions of FreeBSD, MidnightBSD initially evolved as a fork of FreeBSD 6.1-beta, which was synchronized in 2011 […]