Blog Section
A stable release of the Squid 7.1 proxy server has been presented, ready for use in production systems (the 7.0.x releases were in beta status). After granting the 7.x branch the stable status, it will now only receive fixes for vulnerabilities and stability issues, with minor optimizations allowed. Development of new features will take place in a new experimental branch 8.0. Users of the previous stable branch 6.x […]
Aaron Ballman, the lead maintainer of the Clang compiler and a member of the WG21 (C++) and WG14 (C) standards development teams, has begun discussion about adding a security enhancement mode to the Clang compiler. The new mode will allow a set of security strengthening options to be activated at once, similar to the flag "-fhardened" added in GCC 14, which includes options like "-D_FORTIFY_SOURCE=3 -D_GLIBCXX_ASSERTIONS -ftrivial-auto-var-init=zero -fPIE -pie […]
The fourth release of the Orbitiny Desktop environment, written from scratch using the Qt framework, has been published. The project attempts to combine some innovative ideas that have not been seen before in user environments with traditional elements, such as panels, menus, and icon placement on the desktop. The code is written in C++ and is distributed under the GPL license. In the new version, most […]
One of the participants in the UIUCTF 2025 competition detailed how he managed to execute a task that required running his code on the server, having only the ability to modify the content of the comment text in the code. Participants could send a network request to a Python script that created a new Python script with a random name, added the data received from the user into the comment text, while removing the characters "\n" and […]
The release of the FEX 2508 project has been published, which develops an emulator for running games and applications built for x86 and x86-64 architectures in a Linux environment on systems with ARM64 (AArch64) processors. The FEX emulator is used by the Asahi project to run Steam catalog games compiled for the x86_64 architecture on systems with Apple Silicon ARM chips. The project's code is written in C++ with assembly […]
The stable release of the interface for simplifying network configuration - NetworkManager 1.54.0 - has been published. Plugins for VPN support (Libreswan, OpenConnect, Openswan, SSTP, etc.) are being developed within their own development cycles. The main innovations in NetworkManager 1.54 include: the ability to attach individual IPv4 packet forwarding settings to devices using the "ipv4.forwarding" option. The "prefix-delegation" setting has been added to allow using the "subnet-id" property to select the subnet […]
The AUR (Arch User Repository), used in Arch Linux for distributing packages from third-party developers, has seen continued publication of malicious code integrated into packages with unofficial browser builds. In addition to the two malicious packages identified two weeks ago, firefox-patch-bin, librewolf-fix-bin, and zen-browser-patched-bin, a new package, google-chrome-stable, has been added to AUR, which also contains a modification that installs a malicious component providing remote access […]
The release of the libmdbx 0.13.7 library (MDBX) has been announced, featuring an implementation of a high-performance, compact embedded key-value database. The libmdbx code is distributed under the Apache 2.0 license. All current operating systems and architectures are supported, including Russia's Elbrus 2000. An advanced API for C++ is offered for libmdbx, along with enthusiast-supported bindings for Rust, Haskell, Python, NodeJS, Ruby, Go, Nim, […]
The 4MLinux 49.0 release is available, a minimalist user distribution that is not a fork of any other projects and uses a graphical environment based on the JWM window manager. 4MLinux can be utilized both as a Live environment for playing multimedia files and solving user tasks, as well as for recovery systems and as a platform for running mini-servers. A live image has been prepared for download […]
Information about phishing victims, which administrators of the Python package repository PyPI recently warned about, has been disclosed. As a result of messages sent to confirm their email, which pointed to a fake site pypj.org (the letter 'j' instead of 'i'), accounts of four maintainers were compromised. Consequently, the attackers generated two tokens for API access […]
Mozilla China has announced the discontinuation of services for Firefox users in China. As of July 27, registration for the Chinese versions of Firefox Accounts (accounts.firefox.com.cn) and Firefox Community has been stopped, and the ability to post messages and comments on the forum has been blocked. Starting September 29, the website firefox.com.cn, the forum (mozilla.com.cn), the homepage (home.firefoxchina.cn), and resources for downloading and updating Firefox […]
A vulnerability (CVE-2025-46811) has been detected in the SUSE Manager toolkit, which is designed for centrally managing IT infrastructure that utilizes various Linux distributions. This vulnerability permits command execution on any systems serviced through SUSE Manager without authentication. Commands are executed with root privileges, granting full control over the entire infrastructure. The issue has been assigned a critical severity level (9.3 out of 10). The vulnerability is caused by the presence of a handler […]