Internet News Section
OpenBSD has implemented a vulnerability exploitation protection technique based on randomly rearranging the executable file sshd at each system boot. Previously, such a rearrangement technique was applied to the kernel and the libraries libc.so, libcrypto.so, and ld.so, and now it will be used for certain executables as well. The method is also planned to be implemented for ntpd and other server applications in the near future. […]
Corrective updates for Ruby on Rails framework versions 7.0.4.1, 6.1.7.1, and 6.0.6.1 have been released, fixing 6 vulnerabilities. The most critical vulnerability (CVE-2023-22794) may allow execution of SQL commands specified by an attacker when using external data in comments processed in ActiveRecord. This issue is caused by the lack of necessary escaping of special characters in comments before they are stored in the DBMS. The second vulnerability (CVE-2023-22797) may be applied to […]
The release of project pandoc 3.0 is available, developing the library and command-line utility for converting text markup formats. It supports conversion between over 50 formats, including docbook, docx, epub, fb2, html, latex, markdown, man, odt, and various wiki formats. Support for arbitrary Lua processors and filters is included. The code is written in Haskell and is distributed under the GPLv2 license. […]
A report on the composition of GNOME user environments has been published, based on data collected from 2,560 users who voluntarily used the gnome-info-collect tool to send information about their systems. The data collected will help developers understand user preferences and consider them when making decisions related to enhancing usability and the development of the shell. Distributions used: Fedora 54.69% Arch […]
Debian developers have announced the achievement of the first stage of the package freeze for Debian 12 "Bookworm", which implies the cessation of performing "transitions" (updating packages that require dependency adjustments in other packages, leading to temporary removal of packages from Testing), as well as the halt of updates for packages required for building (build-essential). A transition to a soft package freeze is scheduled for February 12, 2023, […]
A new release of gpupdate, a tool for applying group policies in 'Alt' distributions, has been published. The gpupdate mechanisms apply group policies on client machines both at the system level and for individual users. The gpupdate tool is part of an alternative solution by 'Basil SPU' for implementing Active Directory domain infrastructure under Linux. The application supports operation within MS AD or Samba domain infrastructure […]
SQLite project developers have begun testing an experimental HCtree backend that supports row-level locking and provides a high degree of concurrency when processing requests. The new backend aims to improve the efficiency of SQLite use in client-server systems that need to handle a significant number of simultaneous write requests to the database. The b-tree structures originally used in SQLite for data storage are not […]
Engineers from Collabora have published a report on the implementation of a project to ensure the build of the GNU C Library (glibc) system library using LLVM tools (Clang, LLD, compiler-rt) instead of GCC. Until recently, glibc remained one of the significant components of distributions that supported building only with GCC. The difficulties in adapting glibc to build with LLVM are caused by differences in […]
The developers of the OpenBSD project have released version 0.80 (Game of Trees) of the Got version control system, focusing primarily on simplicity of design and use. Got uses a storage format compatible with Git repository disk format for managing versioned data, allowing the repository to be accessed with both Got and Git tools. For example, Git can be used to perform tasks, […]
Corrective releases of the distributed version control system Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6, and 2.30.7 have been published, addressing two vulnerabilities that could allow malicious code execution on the user's system when using the 'git archive' command and working with untrusted external repositories. These vulnerabilities were caused by errors in commit formatting and parsing code, […]
Oracle has released a corrective update for the VirtualBox virtualization system, version 7.0.6, which includes 14 fixes. At the same time, an update was released for the previous VirtualBox 6.1.42 branch with 15 changes, including support for Linux kernels 6.1 and 6.2, as well as kernels from RHEL 8.7/9.1/9.2, Fedora (5.17.7-300), SLES 15.4, and Oracle Linux 8. Key changes in VirtualBox 7.0.6 include enhancements in the extensions, […]
The release of the Lakka 4.3 distribution has taken place, allowing computers, set-top boxes, or single-board computers to be transformed into full-fledged gaming consoles for retro gaming. This project is a modification of the LibreELEC distribution, originally designed for creating home theaters. Lakka builds are available for platforms including i386, x86_64 (Intel, NVIDIA, or AMD GPUs), Raspberry Pi 1-4, Orange Pi, Banana Pi, Hummingboard, Cubox-i, Odroid C1/C1+/XU3/XU4, etc. […]