Internet News Section
The stable version of the GNU Coreutils 9.6 basic system utilities set has been published, which includes programs such as sort, cat, chmod, chown, chroot, cp, date, dd, echo, hostname, id, ln, ls, etc. Key innovations: The cksum utility has been updated with the '-a crc32b' option for calculating checksums according to the ITU V.42 specification, used, for example, in gzip. […]
The release of the free PaaS platform Cozystack 0.22.0, built on Kubernetes, is available. The project aims to provide a ready-made platform for hosting providers and a framework for building private and public clouds. The platform installs directly on servers and covers all aspects of preparing the infrastructure for providing managed services. Cozystack allows for running and providing Kubernetes clusters, databases, and virtual machines. The platform's code […]
The developers of the openSUSE project have discovered a vulnerability (CVE-2025-23013) in the PAM module pam-u2f, which is used for authentication via YubiKey, Yubico Security Key, YubiHSM, and other FIDO devices that support the U2F (Universal 2nd Factor) protocol. The vulnerability allows a user with unprivileged local access to the system to authenticate without inserting a hardware token in certain PAM configurations. In practice, the pam-u2f module is typically enabled for […]
One of the package maintainers in NixOS presented an attack technique that allows accessing data on encrypted disk partitions in configurations that do not require entering a unlock password at boot, due to placing decryption information in the TPM2 (Trusted Platform Module). Such configurations are often used on servers or multi-user workstations where it is problematic to manually enter […]
A change has been made to the GCC codebase used to build the GCC 15 branch, deprecating support for the ARM64 ILP32 ABI (-mabi=ilp32). ILP32 is similar to the x32 subarchitecture for x86_64 systems and allows the use of 32-bit pointers and a 32-bit memory addressing model, while the processor operates in 64-bit mode with support for 64-bit registers and extended instructions. The limitation of the ILP32 ABI […]
The release of OpenVPN 2.6.13 has been published, enabling the creation of encrypted connections between two client machines or the operation of a centralized VPN server for handling multiple clients simultaneously. This new version addresses a security issue that could lead to a buffer overflow on the OpenVPN server side when receiving a login or password from the client that exceeds the USER_PASS_LEN value. […]
The open-source database PostgreSQL has been named Database of the Year by the international portal DB-Engines. It demonstrated the best growth in popularity and maintained its leadership among over 400 systems studied. PostgreSQL topped the ranking for the fifth time — previously leading in 2017, 2018, 2020, and 2023. DB-Engines measures the popularity of databases by analyzing […]
The release of Linux Mint 22.1 has been announced, continuing the development branch based on Ubuntu 24.04 LTS. The distribution is fully compatible with Ubuntu but significantly differs in its approach to user interface organization and the selection of default applications. The Linux Mint developers provide a desktop environment that adheres to the classic desktop organization standards, which is more familiar to users who do not adopt new methods […]
Google has released version 132 of its web browser Chrome. Concurrently, the stable release of the open-source project Chromium, which forms the basis of Chrome, is also available. The Chrome browser differs from Chromium in that it includes Google logos, a crash notification system, modules for playing protected content (DRM), an automatic update system, constant Sandbox isolation, delivery of keys to Google API, and transmission of RLZ parameters […]
Hello, LOR! A new version of the amazing project OpenZFS, which implements the ZFS file system, has been released. Originally, ZFS was developed by Sun under the name Zettabyte File System (later shortened to just ZFS) and has been shipped with Solaris OS since 2005. After Sun was acquired by Oracle, the Solaris source code was closed. The OpenZFS project was founded as a fork of the last […]
In the upcoming Fedora 42 release, scheduled for late April, all Live builds of the distribution are planned to be switched from SquashFS to the EROFS file system, support for which was implemented last year in the Dracut 103 tool for creating boot images. The proposal has not yet been approved by the FESCo (Fedora Engineering Steering Committee), which is responsible for the technical aspects of Fedora's development. Reasons for the transition […]
The Rsync file synchronization utility has been updated to fix six critical vulnerabilities. Some of these vulnerabilities could be exploited with merely an anonymous connection to a Rsync server with read access. Fixed vulnerabilities include: CVE-2024-12084 - an out-of-bounds write via an incorrect checksum exceeding 16 bytes. CVE-2024-12085 - leakage of uninitialized data from the stack […]