Category: Internet News

Vulnerability in Ruby-SAML allowing authentication bypass in GitLab

Corrective updates for the GitLab collaborative development platform have been released – versions 17.3.3, 17.2.6, and 17.1.8, which fix a critical vulnerability allowing SAML (Security Assertion Markup Language) authentication bypass. The issue is caused by a vulnerability (CVE-2024-45409) in the Ruby libraries ruby-saml and omniauth-saml, which implement the client side of SAML authorization. The vulnerabilities have been assigned the maximum danger level of 10 out of 10. The issue has been resolved in the updates of the packages […]

Release of the database anonymization tool nxs-data-anonymizer 1.11.0

The nxs-data-anonymizer 1.11.0 has been released – a tool for anonymizing PostgreSQL and MySQL/MariaDB/Percona database dumps. This tool is written in Go and is released under the Apache License 2.0. It can be used through unnamed pipes in the command line to redirect a dump from the source database directly to the target database with the necessary transformations. Depending on the type of entities in the settings […]

Release of the GNOME 47 desktop environment

After six months of development, the GNOME 47 desktop environment has been released. For a quick assessment of GNOME 47's capabilities, specialized Live builds based on openSUSE and an installation image prepared under the GNOME OS initiative are available. GNOME 47 is also included in the experimental builds of Ubuntu 24.10 and Fedora 41. In this release: Support for accent color customization has been added, […]

SRELL 4.056 - ECMAScript-compliant regular expressions library

On September 11, the release of version 4.056 of the C++ SRELL (Std::RegEx-Like Library) library was announced, implementing ECMAScript-compatible regular expressions. Change list: Support for Unicode 16.0.0; other minor changes. Library features: header-only; ECMAScript-compatible regular expressions; std::regex-like design; support for char8_t, char16_t, and char32_t types for C++11 and later standards. More detailed description is available on the author's website. Change history: English/Japanese. Permanent […]

The PanVK Vulkan driver now supports ARM GPUs based on the V10 architecture.

Collabora announced the implementation of ARM Mali GPU support based on the V10 microarchitecture in the PanVK driver, which provides support for the Vulkan graphics API. The changes, which have already been accepted into the main branch of the Mesa project, enable the use of open drivers on systems with ARM Mali-G610 and Mali-G310 GPUs. However, it is noted that the support is still quite raw, as the driver itself […]

Release of Java SE 23 and OpenJDK 23

After six months of development, Oracle has released Java SE 23 (Java Platform, Standard Edition 23), with the open project OpenJDK being used as the reference implementation. Aside from the removal of some deprecated features, Java SE 23 maintains backward compatibility with previous releases of the Java platform—most previously written Java projects will run without changes under […]

An engineer from AMD has proposed simplifying CPU vulnerability lock management in the Linux kernel.

Since the number of support modes in the Linux kernel for mitigating CPU vulnerabilities has reached 15, and enumerating all vulnerabilities in the kernel command line has become quite complex, a kernel developer from AMD has suggested transitioning from configuring locks for specific vulnerabilities to selecting locks for attack vectors. The locking methods are proposed to be activated based on the type of isolation violation: between user […]

Linux 6.11

The latest release of the Linux kernel 6.11 is out, featuring several significant changes, the most important of which include: Added support for atomic block-level write operations where either the entire specified set of blocks is written to the storage or none of the blocks are. This can prevent situations where, after a hardware failure or for some other reason, only a portion of the blocks is written, while in another […]

libarchive 3.7.5

On September 14, a patch release 3.7.5 of the libarchive library was made, fixing many bugs and vulnerabilities. The library and accompanying utilities are written in C and distributed under the New BSD license. Vulnerability fixes: multiple vulnerabilities identified through Microsoft SAST; cpio: possible (fuzz test) overflow of signed 64-bit intermediate values gid/uid/size/ino when parsing AFIO archive files (a type of CPIO); lzop: preventing integer […]

The C++ Alliance promotes memory safety mechanisms in C++, tested in Rust.

The president of the C++ Alliance announced work on a specification that adds memory safety extensions to the C++ language, reminiscent of features implemented in Rust. Sean Baxter, author of the experimental C++ compiler Circle, which develops ideas for enhancing C++ code security on the compiler side without using garbage collection, has been engaged for the project […].

OpenSearch, the fork of the Elasticsearch platform, has moved under the umbrella of the Linux Foundation.

Amazon has announced the establishment of the OpenSearch Software Foundation, governed by the Linux Foundation, which will oversee further development of the OpenSearch project, a fork of the Elasticsearch data search, analysis, and storage platform, along with the Kibana web interface. It is noted that transitioning OpenSearch to an independent neutral platform, not controlled by individual companies, will attract new contributors to the development and enhance the project's appeal […].

Release of FreeBSD 13.4

After 6 months of development, the release of FreeBSD 13.4 has been published, marking the first release formed under the updated development cycle that includes interim releases every six months. Installation images for FreeBSD 13.4 have been created for the amd64, i386, powerpc, powerpc64, powerpc64le, powerpcspe, armv6, armv7, aarch64, and riscv64 architectures. Additionally, builds for virtualization systems (QCOW2, VHD, VMDK, raw) have been prepared […].

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster