ProHoster > Blog

Category: Blog

Blog Section

Vulnerability in Rust libraries for TAR format that leads to extracting files from a nested archive

Posted on

A vulnerability (CVE-2025-62518, code name TARmageddon) has been discovered in the async-tar library written in Rust, which provides functions for reading and writing tar archives. This vulnerability allows, when unpacking a specially crafted tar archive, not only the extraction of files contained within, but also files contained in nested tar archives. The vulnerability can be exploited to bypass archive verification systems and unpack files for which […]

The implementation of Binder IPC for Android, written in Rust, has been accepted into the Linux kernel 6.18.

Posted on

The implementation of the Binder inter-process communication mechanism, written in Rust, has been accepted into the Linux kernel codebase, which forms the basis for the 6.18 release. Binder is used in Android to facilitate interaction between processes and remote method invocation (one Android process can call a method or function in another Android process using Binder to identify, invoke, and pass arguments between […]

VirtualBox 7.2.4 update addresses vulnerabilities

Posted on

Oracle has released a correction update for the virtualization system VirtualBox 7.2.4, addressing 8 vulnerabilities, details of which are not yet disclosed. It is noted that the most serious issue has a severity level of 8.2 out of 10. In addition to the vulnerabilities, the new version includes 6 changes: Initial support for Linux kernel 6.18 has been implemented in the additions for guest systems and host environments with Linux. […]

Intel and AMD standardize the ChkTag mechanism to protect against memory-related vulnerabilities.

Posted on

Intel and AMD are jointly developing an extended instruction set called ChkTag (x86 Memory Tagging), which will be standardized for unified implementation in x86 processors from various manufacturers. ChkTag has capabilities similar to the MTE (MemTag) extension already available in ARM processors and also helps to block the exploitation of vulnerabilities caused by accessing already freed memory blocks, buffer overflows, or accessing memory. […]

Release of the free racing game SuperTuxKart 1.5

Posted on

After nearly three years of development, the release of Supertuxkart 1.5 has been announced, a free racing game with a wide selection of maps, tracks, and features. The game's code is distributed under the GPLv3 license. Binary builds are available for Linux, Android, Windows, and macOS. The new release includes: Three new artifact hunting tasks on the tracks Black Forest, Gran Paradisio Island, and […]

For the Linux kernel, the ntfsplus driver with a new implementation of NTFS has been proposed.

Posted on

Namjae Jeon, a participant in the Samba project who maintains the EXFAT driver and KSMBD server in the Linux kernel, has proposed adding a new implementation of the NTFS file system — ntfsplus to the kernel. It is anticipated that a more robust and maintained NTFS driver will enhance the compatibility of Linux systems with Windows devices and simplify user interaction. Currently, NTFS support in Linux is limited to the old NTFS driver, which has been removed. […]

Release of the browser engine Servo 0.0.1

Posted on

The first standalone release of the Servo browser engine, written in Rust, has been published. Until now, the project only produced nightly builds. The release note mentions that functionally, it is equivalent to the nightly build from October 19, for which additional manual testing was conducted. This release also marks the beginning of builds for Apple systems running macOS based on […]

Chrome and Android will discontinue many technologies created by the Privacy Sandbox project.

Posted on

The Vice President of Google overseeing the Privacy Sandbox project announced the discontinuation of development and the removal from Chrome and Android of parts of the technologies being developed to achieve a compromise between users' need for privacy and the desire of ad networks and sites to track visitors' preferences. Most APIs developed by the Privacy Sandbox project were intended to replace third-party cookies, which were planned to be phased out in Chrome. Initially, […]

The beta testing of the Linux version of the proprietary CAD software KOMPAS-3D has begun.

Posted on

Ascon, a company developing CAD systems since 1989, announced the launch of open beta testing for the KOMPAS-3D automated design system version on the Linux platform. The product is designed for two-dimensional and three-dimensional design of parts, mechanisms, and structures used in machine engineering, instrumentation, and construction. It supports parametric modeling as well as object, sheet, surface, and solid design modes. Previously, the product was available only for Windows, […]

Website Xubuntu hacked with links on the download page replaced with malware

Posted on

The official website of the Xubuntu distribution has been compromised by unknown attackers who changed the links on the distribution's download page, directing to torrents, to a file "https://xubuntu.org/wp-content/Xubuntu-Safe-Download.zip". As a result, the download page now only has links to a malicious archive and available mirrors. Xubuntu developers have not yet commented on the situation, but a few hours ago they removed the malicious archive and blocked access to the section "xubuntu.org/download/", organizing a redirect […]

Node.js version 25.0.0 has been released

Posted on

Node.js 25.0.0 has been released, a platform for running network applications in JavaScript. Node.js 25.0 has been classified as an intermediate branch, which will be maintained for 7 months (until June 2026). In the coming days, the stabilization of the Node.js 24 branch will be completed, which will receive LTS status at the end of October and will be supported until April 2028. Support for previous LTS branches […]

The Forgejo 13.0 collaborative development platform is now available.

Posted on

The release of the collaborative development platform Forgejo 13.0 has been announced, allowing users to deploy a system on their own servers for collaborating with Git repositories, similar to the tasks addressed by GitHub, Bitbucket, and Gitlab. Forgejo is a fork of the Gitea project, which in turn branched off from the Gogs platform. The separation of Forgejo occurred in 2022 after attempts to commercialize Gitea and a change in management to […]

« to the beginning 133 134 135 136 137 138 139 140 141 142 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster