Category: Internet News

Vulnerabilities in Nix and Lix that allow privilege escalation in the system

A vulnerability has been identified in the Nix and Lix package managers that allows code execution with the rights of a background process, which in NixOS and multi-user installations runs under the root user. The issue (CVE not assigned) manifests in the nix-daemon background process used to facilitate access for unprivileged users to build operations and the package repository. The vulnerability arises from the lack of limitation on the recursive processing of directories in […]

AlmaLinux 10.2 Beta

On May 4, the AlmaLinux OS Foundation announced the release of the beta version of AlmaLinux 10.2 "Lavender Lion" for the following architectures: Intel/AMD (x86_64), Intel/AMD (x86_64_v2), ARM64 (aarch64), IBM PowerPC (ppc64le), IBM Z (s390x). Beta ISO images are available for download at repo.almalinux.org. Changes: includes Python 3.14, PostgreSQL 18, MariaDB 11.8, Ruby 4.0, and PHP 8.4 as new packages, […]

Release of the OmniOS CE r151058 distribution, built on OpenSolaris technologies

The release of the OmniOS Community Edition r151058 distribution, based on the developments of the Illumos project, has been published, which continues the development of the kernel, network stack, file systems, drivers, libraries, and the basic set of system utilities from OpenSolaris. OmniOS is notable for providing support for the bhyve and KVM hypervisors, the Crossbow virtual network stack, the ZFS file system, and tools for launching lightweight Linux containers. The distribution can be used to build scalable web systems, virtualization […]

In Apache httpd 2.4.67, a vulnerability in HTTP/2 has been fixed that does not exclude remote code execution.

The release of the Apache HTTP Server 2.4.67 has been announced, which fixes 11 vulnerabilities and includes several patches. The most severe vulnerability (CVE-2026-23918) is caused by double memory freeing in the mod_http2 module and could potentially lead to remote code execution on the server through HTTP/2 protocol manipulation. The vulnerability manifests only in release 2.4.66. The severity level assigned to this issue is 8.8 out of 10. Another […]

Brush v0.4.0

Brush is a command shell written in Rust that combines POSIX and Bash compatibility with memory safety guarantees and performance. The project aims to become a full-fledged alternative to traditional shells, allowing the execution of existing scripts and the use of .bashrc almost unchanged. This version consolidates several months of work and over 200 merged pull requests, significantly advancing […]

The author of Notepad++ has requested to rename the port for macOS due to trademark infringement.

The author of the open-source code editor Notepad++ has noted the emergence of an unofficial port 'Notepad++ for macOS' that uses the Notepad++ trademark and project logo without permission. This port is not associated with the main project, but its website mimics the design of the official Notepad++ site, uses the title 'Notepad++ 1.0.5' on the download page, and mentions […] on the project information page.

Release of Dropbear SSH 2026.90 addressing vulnerabilities.

The release of Dropbear project 2026.90, which develops SSH server and client, has been published; it is widely used in wireless routers and compact distributions like OpenWrt. Dropbear is characterized by low memory consumption, the ability to disable unnecessary functionality at the build stage, and supports building both client and server in a single executable file similar to busybox. When statically linked with uClibc, the Dropbear executable file takes […].

Goodbye, Jeeves: the Ask.com search engine has closed after a quarter of a century

The search engine and Q&A service Ask.com, formerly known as Ask Jeeves, has ceased operations. The holding company IAC, which owned the service, decided to shut down the search business. Ask Jeeves was launched in 1996 and answered user questions posed in natural language, making it one of the precursors to modern AI chatbots. For most of its history, the service remained in the shadows […]

Unexpected Keyboard 2.0.0

Version 2.0.0 of Unexpected Keyboard has been released – a lightweight virtual keyboard for Android that ensures privacy. The main feature of the keyboard is the ability to input more characters via swipe, by dragging a finger across the keys towards their corners. The source code of the project is distributed under the GNU GPL 3.0 license. Ready-made builds are available on the repository page, F-Droid, and Google Play. Changes in this version: added […]

CodePointer 0.1.4

On May 1st, the release of 0.1.4 CodePointer (formerly known as qtedit4) took place—an IDE for C++, Go, Rust, and many other languages. The project is in its early stages of development, focusing primarily on local rather than web development. Key features include support for UTF-8 only, project loading/building with CMake, Meson, Go, and Cargo. Previewing XML, JSON, SVG, and Markdown is also available. The binary/hexadecimal file editor […]

Release of Brython 3.14.1, an implementation of Python for web browsers

The release of Brython 3.14.1 (Browser Python) is now available, implementing the Python 3 programming language for web browsers, allowing developers to use Python instead of JavaScript for web scripting. The project code is written in Python and is distributed under the BSD license. By including the brython.js and brython_stdlib.js libraries, web developers can utilize Python to define client-side logic for websites, applying […]

Linux Mint has started releasing HWE builds with a newer kernel

The developers of the Linux Mint distribution have begun publishing updated ISO images equipped with newer versions of the Linux kernel. For the January release of Linux Mint 22.3, originally shipped with kernel 6.14, an HWE update (Hardware Enablement) has been released with kernel version 6.17, ported from Ubuntu 24.04.4 LTS. The aim is that the release of such interim ISO image updates will resolve user issues with support […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster