Internet News Section
The developers of the systemd project have begun investigating and addressing a long-standing architectural issue in the 'systemd-journald' component that leads to a significant write amplification compared to the actual log volume. This issue dates back to March 2020, when a report was registered in the bug tracking system demonstrating that generating about 500 KB of textual […]
At the Black Hat 2026 conference, an attack method was demonstrated that uses the swizzle mode of AMD memory controllers to bypass memory isolation and read or write arbitrary data from memory, including areas with CPU microcode and memory allocated to the PSP processor (Platform Security Processor). This method allows bypassing built-in memory encryption mechanisms (AMD SME/SEV), breaking virtual machine isolation, and rewriting processor microcode. For […]
The organization KDE e.V., together with the companies Kubuntu Focus and Techpaladin Software, has introduced an initiative to provide LTS support for the KDE Plasma 6.6 branch, which entails generating fixes for at least three years. Last year, the KDE project halted support for LTS branches and delegated their maintenance to distribution developers wishing to provide older versions of KDE Plasma. This decision was made in light of significant […]
The developers of the VideoLan project have warned users of a regression occurring on the Windows 11 platform, manifesting as a 30-second freeze before playback of certain types of files, including MP3. This regression is attributed to a bug in the Microsoft Defender application that emerged after the latest Windows 11 update. Due to this bug, the cache directory for VLC plugins was quarantined by Microsoft Defender. To resolve […]
The release of Manjaro Linux 26.1, built on Arch Linux and aimed at beginner users, has been introduced. This distribution is notable for its simplified and user-friendly installation process, support for automatic hardware detection, and installation of the necessary drivers for operation. Manjaro is available as live builds with graphical environments KDE (5.2 GB), GNOME (5 GB), and Xfce (4.9 GB), created […]
OpenSSH 10.5 has been released, an open implementation of the client and server for working with SSH 2.0 and SFTP protocols. Key changes: The portable version of OpenSSH now requires cryptographic support based on elliptic curves (ECC — Elliptic Curve Cryptography) in the libcrypto library, including support for the elliptic curve NISTP521. In the libcrypto implementations from the LibreSSL, OpenSSL, BoringSSL projects, and […]
The developers of the Linux Mint distribution have released updated ISO images, now bundled with a newer version of the Linux kernel. For the release of Linux Mint 22.3, originally shipped with kernel 6.14, an HWE (Hardware Enablement) update has been published with kernel version 7.0, ported from Ubuntu 26.04 and prepared for inclusion in Ubuntu 26.04.5 LTS. It is anticipated that the release of such intermediate updates of ISO images will resolve issues faced by users […]
Mozilla has announced the replacement of the GPG key used for signing the artifacts of Firefox and Thunderbird releases, such as tar archives, RPM packages, and checksum files. The change was made following an incident where an unencrypted copy of the key was inadvertently added to a private company repository on GitHub, accessible to a limited number of project participants who had access […]
The second beta release of the composite server Xfwl4 has been introduced, utilizing the Wayland protocol. Xfwl4 is written in Rust, using the Smithay library. The project does not overlap with the codebase of the window manager xfwm4 but aims to implement all functionalities available in xfwm4, including the ability to use existing xfconf settings and configuration interface, considering the specifics of using Wayland instead of X11. Functionality […]
A vulnerability (CVE-2026-64564) has been identified in the SCTP protocol implementation provided in the Linux kernel, allowing a local user to gain root privileges on the system. Among other issues, this vulnerability allows root access to the main system when an exploit is launched in an isolated container. A prototype of the exploit has been prepared, and its operation has been demonstrated in the Debian 13, Rocky Linux 9, RHEL 9, and Ubuntu 24.04 distributions with kernels 5.14, 6.6, […]
Cisco has released new versions of the free antivirus package ClamAV 1.4.6 and 1.5.4, which fix vulnerabilities, some of which may lead to the execution of attacker's code when checking specially crafted content. CVE-2026-20337 — out-of-bounds write during the processing of specially crafted ZIP archive headers. CVE-2026-20345 — buffer overflow on write and read when processing invalid names […]
Oracle has banned the acceptance of changes generated through AI tools into the open project OpenJDK. The ban covers source code, text materials, and images submitted to the project repositories or posted on the website, in messages, or on wiki pages. Areas where AI is permitted in Java development include debugging and code reviews. The reason cited is potential risks with […]