Blog Section
Five vulnerabilities have been identified in the Libxml2 library, developed by the GNOME project and used for parsing XML content, two of which could potentially lead to code execution when processing specially crafted external data. The Libxml2 library is widely used in open-source projects and, for example, is a dependency in over 800 packages in Ubuntu. The first vulnerability (CVE-2025-6170) […]
Cisco has released new versions of the free antivirus suite ClamAV 1.4.3 and 1.0.98, which fix vulnerabilities, one of which may allow an attacker to execute code when checking specially crafted content. CVE-2025-20260 is a flaw in the code that parses PDF files, leading to data being written beyond the allocated buffer. The issue manifests in configurations where the maximum size settings [...]
The release of ONLYOFFICE DocumentServer 9.0 is now available, featuring a server for ONLYOFFICE online editors and collaboration management. The editors can be used for working with text documents, spreadsheets, and presentations. The Nextcloud Hub platform can also be utilized for collaboration, providing full integration with ONLYOFFICE. Pre-built packages are available for Linux, Windows, and macOS. The project's code [...]
Qualys has identified a vulnerability (CVE-2025-6019) in the libblockdev library, allowing root access to the system through manipulation of the udisks background process. A prototype exploit has been demonstrated on Ubuntu, Debian, Fedora, and openSUSE Leap 15. The udisks process is used in nearly all Linux distributions and provides a D-Bus interface for performing storage operations, such as mounting and formatting. For [...]
On June 19, 2025, sources reported the exposure of 16 billion accounts from many popular internet services. According to experts, most of the data was published for the first time. This should have prompted all concerned users to respond to the threat by changing their passwords and logins. However, when the dust settled, it turned out that this leak was merely [...]
Corrective releases X.Org Server 21.1.17 and the device-dependent X component xwayland 24.1.7 have been published, enabling the launch of the X.Org Server to run X11 applications in Wayland-based environments. The new version of X.Org Server addresses 6 vulnerabilities. These issues may potentially be exploited for privilege escalation in systems where the X server is running with root privileges, as well as for remote execution [...]
The developers of the Arch Linux distribution have announced the default build of Wine and Wine-Staging in Wow64 mode (64-bit Windows-on-Windows), enabling the execution of 32-bit Windows applications on 64-bit Unix systems. The supply of 64-bit Wine builds has made it unnecessary to use the multilib repository with 32-bit library versions for the wine and wine-staging packages. The reason for this change is cited as synchronization with the modifications in the main Wine project related to […]
The release of the distributed version control system Git 2.50 has been published. Git is known for its high performance and provides tools for non-linear development, based on branch branching and merging. To ensure the integrity of history and resilience to 'backdating' changes, implicit hashing of the entire previous history in each commit is utilized, as well as the authentication of individual tags and commits by developers using digital signatures. The Git code […]
The release of the Securonis Linux 3.0 distribution has taken place, focusing on privacy preservation and enhanced security. The distribution is based on the Debian 'Testing' package base, is preconfigured to route all traffic exclusively through the Tor network (I2P is optionally supported), and includes a collection of settings and component changes aimed at increasing security. MATE is offered as the desktop environment. The distribution can be installed for everyday use or […]
The release of Kali Linux 2025.2 has been presented, based on the Debian package base and designed for testing systems for vulnerabilities, conducting security audits, analyzing residual information, and identifying the aftermath of attacks. All original developments created for the distribution are distributed under the GPL license and are available through a public Git repository. ISO images sized 646 MB and 4.2 GB have been prepared for download. Builds […]
Caroline Stage, the Minister of Digitalization in the Danish government, confirmed the agreement between the government and regional authorities on the digital sovereignty strategy. In the first phase of implementing this new strategy, the Danish Ministry of Digitalization will cease the use of Microsoft products in favor of open-source software. LibreOffice will be used as the office suite, with half of the staff transitioning to LibreOffice within the next […]
Nate Graham, a developer working on quality control in the KDE project, has published another development report for KDE. The most notable changes being developed for the release of KDE Plasma 6.5 include the addition of support for the experimental Wayland protocol xdg-pip (picture-in-picture), which allows for the correct display of always-visible floating windows containing multimedia content, such as the 'picture-in-picture' window in Firefox. The code for supporting the xdg-pip protocol […]
Russian Russian
Italian
German
Polish
Estonian
Albanian
Bulgarian
Croatian
Czech
Danish
Dutch
English
French
Hungarian
Latvian
Portuguese
Romanian
Slovak
Slovenian
Spanish
Swedish