ProHoster > Blog > Internet News

Category: Internet News

Internet News Section

Release of Alt Virtualization 11.1

Posted on

A minor release of the 'Alt Virtualization' operating system 11.1 has been made. The build is prepared for x86_64 and AArch64 based on kernel 6.12.74. Download the image from ftp.altlinux.org download.basealt.ru mirror.yandex.ru. The new image includes Glibc 2.38, a set of GCC 13 compilers, systemd 257, and OpenSSL 3.3.3. SDN network capabilities have been expanded: the option to build Fabrics networks using OpenFabric and OSPF routing protocols has been added. The implementation of this technology allows […]

MuseScore Studio 4.7

Posted on

MuseScore Studio 4.7 has been released, a free music notation software for Linux, Windows, and macOS. In this new version, the developers focused on engraving, guitar notation, streamlining everyday tasks, and improving the audio engine. The project's code is distributed under the GPLv3 license. The main change for guitarists is the new system for displaying dive lines — techniques using the tremolo arm. Such elements can now be shown […]

Canonical has released the monolithic distribution Ubuntu Core 26

Posted on

Canonical has announced the release of Ubuntu Core 26, a compact variant of the Ubuntu distribution designed for use on Internet of Things (IoT) devices, containers, consumer and industrial equipment. Ubuntu Core is provided as a single monolithic base system image, which does not use separate deb packages. The images of Ubuntu Core 26 are synchronized with the package base of Ubuntu 26.04, […]

Microsoft develops a general-purpose distribution Azure Linux 4 based on Fedora Linux

Posted on

Microsoft has published developments related to the Azure Linux 4 distribution, which has been fundamentally redesigned compared to version 3.0 and transitioned from its own package base to using packages from Fedora 43. While Azure Linux was previously positioned as a platform for Linux environments used in cloud infrastructure, edge systems, and various Microsoft services, it is now presented as […]

Ad Nihilum 0.4.3

Posted on

The release of Ad Nihilum 0.4.3 has occurred — a minimalist service for exchanging encrypted messages based on the "read and burn" principle, primarily aimed at self-hosting. The server acts only as a silent storage. Encryption and decryption occur solely on the client side, in the browser (via AES-GCM). Key features include local encryption and decryption, where the server never sees the key; support for an additional layer […]

PinTheft — the sixth vulnerability of the Copy Fail class, providing root rights in Linux

Posted on

Details have emerged about the sixth vulnerability (1, 2-3, 4, 5) that allows an unprivileged local user to gain root privileges by overwriting data in page caches. The vulnerability has been given the code name PinTheft. A prototype exploit is available. The CVE identifier has not yet been assigned. A patch has been released as of May 5, and on May 11 it was accepted into the netdev branch, but not included in […]

IncidentRelay — an open system for organizing duty rosters and alert routing

Posted on

The IncidentRelay project has been released, developing an open system for organizing on-call duties, routing notifications, and incident management, which can be run on a self-hosted server. The project is aimed at SRE, DevOps, and infrastructure teams that require a locally deployable alternative to SaaS services for on-call management, applying escalation policies, and responding to incidents. The project code is written in Python and is distributed under the MIT license. […]

A vulnerability ssh-keysign-pwn has been closed in Linux, allowing local users to read root files.

Posted on

A vulnerability in the Linux kernel, unofficially named ssh-keysign-pwn, has been fixed. This issue allows a local unprivileged user to read files that should only be accessible by the root, including private SSH host keys and, in some scenarios, /etc/shadow. At the time of publication, a separate CVE for the problem had not yet been assigned. Despite the name, it does not refer to a bug in OpenSSH as a network server […]

Release of ForgeZero 1.9.0, a build tool for C and assembler.

Posted on

The ForgeZero 1.9.0 (fz) release has been published, a console build tool for projects in C, C++, and assembler languages (NASM, GAS, FASM). The tool does not require the creation of a Makefile or other configuration files for basic use. The project code is written in Go and is distributed under the MIT license. ForgeZero identifies the file type and automatically selects the necessary backend. Each code file […]

In Exim 4.99.3, a vulnerability allowing remote code execution when using GnuTLS has been resolved.

Posted on

The developers of the Exim mail server have released a patch for Exim 4.99.3, addressing a vulnerability in certain configurations of the mail agent. The issue goes by the internal identifier EXIM-Security-2026-05-01.1; it is also referred to in the official notification as CVE-TBD. The vulnerability is classified as Remote Use-After-Free and manifests when parsing the body of a message BDAT while working in TLS with GnuTLS. BDAT is used in the SMTP CHUNKING extension for transmitting the body […]

DirtyDecrypt — another Copy Fail class vulnerability that grants root rights in Linux.

Posted on

A vulnerability has been discovered in the Linux kernel, similar to the Copy Fail, Dirty Frag, and Fragnesia vulnerabilities, allowing a non-privileged user to gain root privileges by overwriting data in the page cache. The vulnerability has been assigned the code name DirtyDecrypt (also referred to as DirtyCBC). A prototype exploit is available. The CVE identifier is not mentioned in the exploit note, only that researchers identified the issue on May 9, […]

The compromise of a GitHub token belonging to Grafana Labs has led to the leakage of proprietary code.

Posted on

Grafana Labs, which develops the eponymous open monitoring and data visualization platform, disclosed details about a GitHub access token that fell into the hands of attackers. The attackers used the token to download code for the company's proprietary products from private repositories and attempted to extort money by threatening to disclose the acquired codebase. Grafana Labs representatives refused to pay. According to the company, the attackers did not gain access […]

« to the beginning 53 54 55 56 57 58 59 60 61 62 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster