Blog Section
The release of the Ubuntu 23.10 'Mantic Minotaur' distribution has been published, classified as an interim release, with updates being formulated over a 9-month period (support will be provided until July 2024). Ready installation images have been created for Ubuntu, Ubuntu Server, Lubuntu, Kubuntu, Ubuntu Mate, Ubuntu Budgie, Ubuntu Studio, Xubuntu, Ubuntu Kylin (the edition for China), Ubuntu Unity, Edubuntu, and Ubuntu Cinnamon. Key […]
The release of P2P VPN 0.11.3 has taken place—an implementation of a decentralized virtual private network that operates on a Peer-To-Peer basis, where participants are connected to each other rather than through a central server. Network participants can find each other via a BitTorrent tracker or BitTorrent DHT, or through other participants in the network (peer exchange). The application is a free and open-source alternative to VPN Hamachi, written in […]
The results of an independent security audit of the open caching proxy server Squid, conducted in 2021, have been published. During the review of the project’s codebase, 55 vulnerabilities were identified, of which 35 issues remain unaddressed by the developers (0-day). The Squid developers were notified about the problems two and a half years ago but have not completed their remediation. […]
The developers of the Raspberry Pi project have released a significant new version of the Raspberry Pi OS 2023-10-10 (Raspbian) distribution, based on the Debian package base. Three builds have been prepared for download: a minimal version (435 MB) for server systems, a desktop version (1 GB), and a full version with an additional set of applications (2.7 GB). About 35,000 packages are available for installation from the repositories. Key […]
The Qt Company has released Qt framework version 6.6, continuing to stabilize and expand the functionality of the Qt 6 branch. Qt 6.6 provides support for platforms including Windows 10+, macOS 11+, Linux (Ubuntu 22.04, openSUSE 15.4, SUSE 15 SP4, RHEL 8.6/9.0), iOS 14+, Android 8+ (API 23+), webOS, WebAssembly, INTEGRITY, and QNX. The source code for Qt components […]
Another release of curl, the utility and library for transferring data over the network, has occurred. Over 25 years of development, curl has implemented support for many network protocols, such as HTTP, Gopher, FTP, SMTP, IMAP, POP3, SMB, and MQTT. The libcurl library is used by important community projects such as Git and LibreOffice. The project code is distributed under the Curl license (variant […]
A vulnerability (CVE-2023-38545) has been identified in the curl utility for data retrieval and transmission over networks, and in the parallel developing libcurl library, which can lead to buffer overflow and potentially allow for the execution of the attacker's code on the client side when the curl utility or an application using libcurl interacts with a malicious HTTPS server. This issue manifests only when the curl […]
Information has been released about five vulnerabilities in the libX11 and libXpm libraries developed by the X.Org project. The issues have been resolved in the libXpm 3.5.17 and libX11 1.8.7 releases. Three vulnerabilities were identified in the libX11 library, which provides client-implemented features of the X11 protocol: CVE-2023-43785 — a buffer overflow in the libX11 code that occurs during the processing of a response from the X server with a number of characters that do not match […]
The release of the classic toolkit for managing the iptables packet filter 1.8.10 has been published, with recent development focusing on components for maintaining backward compatibility — iptables-nft and ebtables-nft, which provide utilities with the same command line syntax as in iptables and ebtables but translate the received rules into nftables bytecode. The original set of iptables programs, including ip6tables, arptables, and ebtables, is […]
A corrective release of Firefox 118.0.2 is available, which includes the following fixes: Resolved issues with loading games from the betsoft.com site. Fixed problems with printing certain SVG images. Addressed a regression in branch 118 that caused the handling of 'WWW-Authenticate: Negotiate' responses from other sites to fail. Corrected an error that prevented WebRTC from decoding in some contexts […]
Google has recorded the largest DDoS attack on its infrastructure, with an intensity of 398 million requests per second. This new attack is seven times more intense than the previous record DDoS attack, which generated a flow of 47 million requests per second. For comparison, total traffic across the entire web is estimated to be 1-3 billion requests per second. In addition to […]
As part of efforts to enhance the security of critical software components on the Android platform, Google has rewritten the pvmfm firmware used for running virtual machines managed by the pVM hypervisor within the Android Virtualization Framework in Rust. Previously, the firmware was written in C and implemented on top of the U-Boot bootloader, which had previously been found to have vulnerabilities due to issues with […]