Category: Blog

Vulnerability in GitLab allowing files to be written to arbitrary directories on the server

Corrective updates for the collaboration platform have been released — GitLab 16.8.1, 16.7.4, 16.6.6, and 16.5.8, addressing 5 vulnerabilities. One of the issues (CVE-2024-0402), which has been present since the release of GitLab 16.0, has been assigned a critical severity level. This vulnerability allows an authenticated user to write files to any directory on the server according to the access rights under which the web interface operates […]

SRELL 4.038 — ECMAScript-compatible Regular Expressions Library

On January 24, version 4.038 of the C++ library SRELL (Std::RegEx-Like Library) was released, implementing ECMAScript-compatible regular expressions. Change log: a bug was fixed where the expression /(?:ab)+|cd/ matched the string 'ababcd'; minor improvements. Library features: header-only; ECMAScript-compatible regular expressions; std::regex-like design; support for char8_t, char16_t, and char32_t types for C++11 and later standards. More detailed information is available at […]

Release of the Parrot 6.0 and Gnoppix 24 distributions for security researchers

The release of the Parrot 6.0 distribution is available, based on the Debian package base and including a selection of tools for system security testing, forensic analysis, and reverse engineering. Several ISO images with a MATE environment have been offered for download, intended for everyday use, security testing, installation on Raspberry Pi boards, and creating specialized installations, for example, for use in cloud environments. The Parrot distribution […]

Release of Radix cross Linux Distribution 1.9.367

Version 1.9.367 of the Radix cross Linux distribution is now available, prepared for devices based on ARM/ARM64, RISC-V, and x86/x86_64 architectures. The distribution is built using the proprietary Radix.pro build system, which simplifies the creation of distributions for embedded systems. The code for the build system is distributed under the MIT license. The boot images, prepared according to the instructions in the Platform Download section, contain a local package repository and therefore the system installation is not […]

Release of Cryptsetup 2.7 with support for OPAL hardware disk encryption

A set of Cryptsetup 2.7 utilities has been released, designed for configuring disk partition encryption in Linux using the dm-crypt module. It supports working with dm-crypt, LUKS, LUKS2, BITLK, loop-AES, and TrueCrypt/VeraCrypt partitions. The package also includes the veritysetup and integritysetup utilities for setting up data integrity verification based on the dm-verity and dm-integrity modules. Key improvements: The ability to use hardware mechanisms has been implemented […]

Release of web browser Chrome 121.

Google has released the web browser Chrome 121. At the same time, a stable release of the free Chromium project, which underpins Chrome, is available. The Chrome browser differs from Chromium by the use of Google logos, a crash reporting system, modules for playing copy-protected video content (DRM), an automatic update system, constant inclusion of Sandbox isolation, provision of keys for Google API, and transfer of […]

Firefox 122

Firefox, a free browser built on the Quantum engine, developed and distributed by Mozilla Corporation, and the fourth most popular browser in the world, has been updated to version 122. What's new: Linux: Support for VA-API has been enabled for all architectures (previously it was only enabled for x86 and ARM). Deb packages for Ubuntu, Debian, and Linux Mint are now offered. Search engine suggestions are now […]

Vulnerability in GNU split utility leading to buffer overflow

A vulnerability (CVE-2024-0684) has been discovered in the split utility, provided in the GNU coreutils package and used for splitting large files into parts. This vulnerability leads to a buffer overflow when processing long lines (several hundred bytes) when using the split option "—line-bytes" ("-C"). The vulnerability was identified during an analysis of crashes occurring when using the split utility to split data transmitted during […]

Release of CAD Ondsel ES 2024.1

Ondsel has released a public version of the Ondsel Engineering Suite (ES). This is a free fork of the open-source CAD application FreeCAD with various modifications. Among the enhancements: A built-in workbench for creating assemblies (stage — technological preview). The UX/UI was modeled after the implementation in Onshape, using its own solver (the original code was previously written in Smalltalk by one of the team members and then ported to […]

Release of Firefox 122

The release of web browser Firefox 122 has taken place, and an update for the long-term support branch — 115.7.0 has been formed. Firefox 123 has entered beta testing, with a release scheduled for February 20. Key innovations in Firefox 122 include expanded capabilities related to displaying suggestions while typing in the address bar, and for certain search engines, the ability to show images in suggestions and […]

Assessment of the effectiveness of MiraclePtr in preventing vulnerabilities in Chrome

Google has analyzed the effectiveness of using the C++ code type MiraclePtr (raw_ptr<T>) instead of regular pointers to protect against vulnerabilities caused by accessing already freed memory areas (use-after-free). MiraclePtr provides a wrapper around pointers that performs additional checks and terminates execution if access to freed memory areas is detected. Support for MiraclePtr has been enabled by default in […]

RubyWM has been introduced, a window manager written entirely in Ruby.

The RubyWM project has been released, which develops a window manager based on the X11 protocol, written in Ruby, including a driver for working with the X11 protocol. RubyWM supports virtual desktops and can use both tiled (tiling) window layouts and arbitrary window positioning on the desktop. The RubyWM code is distributed under the MIT License. The project also develops the pure-X11 library with the implementation of […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster