Internet News Section
The release of the lightweight HTTP server lighttpd 1.4.71 has been announced, which aims to combine high performance, security, standards compliance, and configuration flexibility. Lighttpd is suitable for use in high-load systems and is designed for low memory and CPU consumption. The project's code is written in C and is distributed under the BSD license. The new version has transitioned from the built-in HTTP/2 implementation in the main server […]
Oracle has released distributions of Oracle Linux 9.2 and 8.8, based on Red Hat Enterprise Linux 9.2 and 8.8, respectively, and is fully binary compatible with them. Unrestricted installation ISO images, sized at 9.8 GB and 880 MB, are available for download, prepared for x86_64 and ARM64 (aarch64) architectures. Oracle Linux offers unlimited and […]
The experimental release of the open implementation of WinAPI — Wine 8.9 — has taken place. Since the release of version 8.8, 16 bug reports have been closed and 284 changes have been made. The most significant changes include: The Wine Mono engine with .NET platform implementation has been updated to version 8.0.0. The translation of the PostScript driver to the Portable Executable (PE) format has been completed. Support has been added to the DirectSound API for […]
An error has been identified in the Linux kernel 6.3 release published at the end of April, which leads to corruption of XFS file system metadata. The issue remains unresolved and manifests itself in the latest update 6.3.4 (corruption has been recorded in releases 6.3.1, 6.3.2, 6.3.3, and 6.3.4, but the appearance of the problem remains questionable in release 6.3.0). In earlier kernel branches, such as […]
Bootlin has released the first version of the Snagboot toolkit, designed to restore the operation and reflash embedded devices that have stopped booting, for example, due to firmware corruption. The Snagboot code is written in Python and is open-source under the GPLv2 license. Most embedded platforms provide USB or UART interfaces for recovery and transferring boot images in the event of firmware corruption, but the data […]
Red Hat has released the first significant version of the Podman Desktop application, featuring a graphical interface for creating, running, and managing containers, competing with products like Rancher Desktop and Docker Desktop. Podman Desktop allows developers without system administration skills to create, run, test, and publish microservices and applications developed for container systems directly from their workstations […]
The Thunderbird project developers have introduced a new logo designed by Jon Hicks, who previously created the logos for Firefox and Mozilla. The new logo is crafted in a consistent style with the Firefox logo, emphasizing the connection to Mozilla projects. The new logo is planned to be included in the upcoming Thunderbird 115 release, scheduled for July 4. In addition to the logo, Thunderbird 115 will feature significant redesigns […]
The ksmbd module, which offers a kernel-integrated implementation of a file server based on the SMB protocol, has been found to have 14 vulnerabilities, four of which allow remote code execution with kernel privileges. The attack can be carried out without authentication, as long as the ksmbd module is activated on the system. These issues have been present since kernel 5.15, which included […]
In the RouterOS operating system used in MikroTik routers, a critical vulnerability (CVE-2023-32154) has been identified, allowing an unauthenticated user to execute code remotely on the device by sending a specially crafted IPv6 Router Advertisement (RA). The issue is caused by insufficient validation of incoming data during the processing of IPv6 RA requests, which enabled writing data beyond […]
Google has published the results of an audit on 389 crate packages used in the ChromiumOS and Fuchsia projects, which support development in Rust. A file for dependency checking using the cargo vet command has been provided for use in their projects, ensuring compliance with security, correctness, and testing requirements. Applying "cargo vet" guarantees that only verified packages are used in the project […]
PayPal has opened the source code of the fault-tolerant database management system JunoDB, which manipulates data in key-value format. The system was originally designed with a focus on high security, horizontal scalability, fault tolerance, and the ability to handle hundreds of thousands of concurrent connections with predictable latencies. At PayPal, nearly all services, from user login to financial transaction processing, are tied to JunoDB. The project's code is written in Go […]
The Python package repository PyPI (Python Package Index) has temporarily halted new user and project registrations. The reason stated is a surge in activity from malicious actors who have started publishing packages with harmful code. It is noted that, given the absence of several administrators on vacation, last week the volume of registered malicious projects exceeded the remaining PyPI team's capacity for prompt response. Developers plan to restructure over the weekend […]