Category: Blog

A vulnerability in the Python infrastructure allowed spoofing of release links on python.org.

The Python Software Foundation disclosed a critical vulnerability in the release management API that could be exploited to attack the Python project's infrastructure. The vulnerability allowed attackers to bypass authentication and connect to the release management API with administrator privileges by sending a request with any key and specifying one of the administrators in the username field. The resulting […]

PEdit-CoW and DirtyClone kernel vulnerabilities Linux, allowing to obtain root by modifying the page cache

Two new kernel vulnerabilities have been disclosed. Linux, allowing an unprivileged user to gain root privileges by overwriting data in the page cache. Working exploits have been prepared for both vulnerabilities. PEdit-CoW (CVE-2026-46331, exploit 1, exploit 2) – an error in the copy-on-write mechanism in the packet header modification code (act_pedit) used in the network packet scheduler (net/sched) allows data to be written beyond the […]

Akrites project to coordinate rapid vulnerability remediation

The Akrites project has been announced to coordinate vulnerability patching and vulnerability disclosure in critical open source software. The project was created under the auspices of Linux Foundation, with participation from Amazon Web Services, Anthropic, Cisco, Ericsson, Google, IBM, Microsoft/GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Sonatype, and Vodafone, as well as the nonprofit Rust Foundation. The project's participants will provide funding, engineering resources, and […]

Release of DXVK 3.0, Direct3D 8/9/10/11 implementations on top of the Vulkan API

DXVK 3.0 is now available. It provides an implementation of DXGI (DirectX Graphics Infrastructure), Direct3D 8, 9, 10, and 11, and works via call translation to the Vulkan API. DXVK requires drivers that support the Vulkan 1.4 API, such as NVIDIA 575.51.02, Mesa AMD RADV 25.0, NVIDIA 25.1, and Intel ANV 25.1. DXVK can be used to run 3D applications […]

Release of ISPC 1.31 compiler developed by Intel for C language with SPMD extensions

Intel has published the ISPC 1.31 (Implicit SPMD Program Compiler), designed to compile C code with the SPMD (Single Program, Multiple Data) parallel programming extensions, which enable the parallel execution of multiple instances of a single program with different sets of input data. The project code is written in C++ and is distributed under the BSD license. It supports Linux, Windows, [...]

Firefox 152.0.3 fixes a regression in 152.0.2 that caused the browser to hang

Firefox 152.0.3, an emergency patch, has been released. This patch fixes a bug that could cause a freeze on startup and uncontrolled RAM consumption (~10 GB immediately after launch) in configurations with language packs installed. This issue only occurs in Firefox 152.0.2 and is caused by a regression caused by an incorrect fix in 152.0.2 for a locale mismatch in widgets.

Deno 2.9 platform with Deno Desktop support for creating desktop applications

Deno 2.9, a platform designed for decoupled execution of server-side and desktop JavaScript and TypeScript applications using the V8 engine found in Chromium-based browsers, has been released. The project is being developed by Ryan Dahl, the creator of Node.js, with the goal of providing a more secure environment and addressing conceptual flaws in the Node.js architecture. To improve security, the framework […]

The rars project has prepared a free implementation of RAR with support for creating archives.

The rars project is a free implementation of RAR tools written in Rust that supports not only unpacking but also creating RAR archives. The toolkit supports both the earlier RAR 1.3/1.4 formats with the "RE~^" signature and the latest version, RAR 7. Advanced operations are available, including splitting into volumes, password protection, header encryption, comment attachment, RARVM filters, indexes, […]

The first release of QSOE, a QNX-style operating system with two replaceable microkernels

The first release of the QSOE operating system, designed in the QNX style and supplied with two replaceable microkernels, "Skimmer" and "seL4," is presented. Only the resource allocation system, the synchronous messaging mechanism (QNX IPC), and the minimalist kernel are implemented at the kernel level, with all other components implemented in user space. It supports 64-bit CPUs with RISC-V architecture. The OS has been tested on […]

KaOS 2026.06 is now available, switching from systemd to Dinit.

KaOS 2026.06, a rolling release distribution focused on delivering a desktop experience with Qt-based applications, has been released. Its distinctive design features include a vertical panel on the right side of the screen. The distribution is being developed with Arch in mind. Linux, but maintains its own independent repository of over 1500 packages, and also offers a number of its own graphical utilities. […]

The Fedora Project is mandating two-factor authentication for privileged maintainers.

The Fedora Engineering Steering Committee (FESCO), which is responsible for the technical development of Fedora Linux, decided to introduce mandatory two-factor authentication for all members of the provenpackager group who have commit access to the repository where packages are maintained and developed. Unlike members with development access to specific packages, members of the provenpackager group can make changes to […]

AlmaLinux certified to EAL1 security level

Project AlmaLinux announced the certification of the distribution according to the Common Criteria EAL1 (Evaluation Assurance Level 1) security compliance program. The certificate was received for release AlmaLinux 9.2. EAL1 is the entry-level certification and demonstrates independent testing of the stated functionality. EAL1 confirms validation of correct operation and is intended for areas where security threats are not significant. Certification […]

Buy reliable hosting for sites with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster