Internet News Section
On March 13, a corrective release 3.51.3 of the compact embedded database SQLite was announced. The project's code is written in C and is distributed as public domain. Due to compatibility issues related to some new features, version 3.52.0 (released on March 6) was withdrawn. Change list for version 3.51.3: on March 3, one of the SQLite developers (Dan) discovered and fixed […]
The code for TUI Studio (Visual Terminal UI Designer), a tool for visually designing user interfaces that operate in a text terminal, has been opened. This environment allows users to interactively create interfaces by dragging and dropping pre-made blocks, editing properties in a visual mode, and previewing results on the fly. The created interface layout can be exported for use in frameworks like Ink, BubbleTea, Blessed, Textual, OpenTUI […]
Google has released version 146 of the Chrome web browser. At the same time, a stable release of the open-source Chromium project, which serves as the basis for Chrome, is available. The Chrome browser differs from Chromium in its use of Google logos, a crash notification system, modules for playing DRM-protected video content, an automatic update system, constant Sandbox isolation, the provision of keys for Google APIs, and the transfer of RLZ parameters […]
A vulnerability has been identified in the gssapi.patch used in many Linux distributions, which adds GSSAPI-based key exchange support to OpenSSH. This vulnerability leads to memory corruption and the bypassing of the privilege separation mechanism. It can be exploited remotely. The presence of the vulnerability has currently been confirmed in Debian and Ubuntu. It manifests when the "GSSAPIKeyExchange yes" option is enabled in the settings. Notably, in […]
Qualys has discovered 9 vulnerabilities in the AppArmor mandatory access control system, the most dangerous of which allow a local unprivileged user to gain root rights on the system, exit isolated containers, and bypass restrictions set through AppArmor. The vulnerabilities have been code-named CrackArmor. CVE identifiers have not yet been assigned. Successful privilege escalation examples have been demonstrated in Ubuntu 24.04 and Debian 13. The issues […]
A vulnerability (CVE-2026-3497) has been identified in the gssapi.patch used in many Linux distributions, which adds GSSAPI-based key exchange support to OpenSSH. This vulnerability leads to pointer dereferencing, memory corruption, and the bypassing of the privilege separation mechanism (Privsep). It can be exploited remotely during the pre-authentication stage. The researcher who identified the issue demonstrated that the process could be caused to crash by sending one […]
The linux-api mailing list has discussed a proposal (RFC) to replace the deprecated binary formats of system logs lastlog, btmp, utmp, and wtmp with new shared libraries using SQLite as a backend. This initiative aims to address accumulated issues, including the overflow of 32-bit time counters in 2038, lack of scalability, low query performance, and lack of atomicity in writing. In […]
Version 1.0.0 of the linear algebra library for C++ (C++23 standard) smath has been released, distributed under the Apache 2.0 license as a single small header file. Library features include a generic class Vec with useful aliases Vec2/Vec3/Vec4 and accessors (x/y/z/w, r/g/b/a). Vectors support approximate comparison and tuple-structured bindings; type Quaternion based on Vec4; generic class Mat with useful aliases Mat2/Mat3/Mat4; auxiliary […]
A community of enthusiasts has developed its own DSL using macros, functioning similarly to do-notation from functional languages. Advanced preprocessor features are utilized. The presented project implements a new technique for parsing DSL, which may facilitate the creation of further DSLs on the C and C++ preprocessor. The code in the repository is written in C++23 and is open under the MIT license, and the technique can be used […]
A year after the announcement and regulatory checks, Google has finalized the acquisition of Wiz, a company specializing in cybersecurity, for a record $32 billion. The startup, which previously declined a sale for $23 billion, will help the tech giant create unified security for Google Cloud's cloud environment and combat new types of vulnerabilities arising from vibe coding. This purchase marks the largest acquisition in history […]
Intel has unveiled a chip for Fully Homomorphic Encryption (FHE) that performs tasks 5,000 times faster than traditional server processors. This accelerator, Heracles, was developed for the U.S. military to counteract hacking from quantum computers. Heracles speeds up the processing of fully encrypted information without any decoding, maintaining confidentiality at all stages. Fully homomorphic […]
On March 11, after more than two months of development and 538 commits, version 8.19.0 (the 273rd) of the cross-platform command-line utility and library curl, written in C and released under the curl license, was released. Key changes Security The bug bounty program for vulnerability discovery has been discontinued; however, this has not stopped people from finding vulnerabilities in curl: CVE-2026-1965 – improper reuse of HTTP Negotiate connections; […]