Blog Section
The results of an independent security audit of the open caching proxy server Squid, conducted in 2021, have been published. During the review of the project’s codebase, 55 vulnerabilities were identified, of which 35 issues remain unaddressed by the developers (0-day). The Squid developers were notified about the problems two and a half years ago but have not completed their remediation. […]
The developers of the Raspberry Pi project have released a significant new version of the Raspberry Pi OS 2023-10-10 (Raspbian) distribution, based on the Debian package base. Three builds have been prepared for download: a minimal version (435 MB) for server systems, a desktop version (1 GB), and a full version with an additional set of applications (2.7 GB). About 35,000 packages are available for installation from the repositories. Key […]
The Qt Company has released Qt framework version 6.6, continuing to stabilize and expand the functionality of the Qt 6 branch. Qt 6.6 provides support for platforms including Windows 10+, macOS 11+, Linux (Ubuntu 22.04, openSUSE 15.4, SUSE 15 SP4, RHEL 8.6/9.0), iOS 14+, Android 8+ (API 23+), webOS, WebAssembly, INTEGRITY, and QNX. The source code for Qt components […]
Another release of curl, the utility and library for transferring data over the network, has occurred. Over 25 years of development, curl has implemented support for many network protocols, such as HTTP, Gopher, FTP, SMTP, IMAP, POP3, SMB, and MQTT. The libcurl library is used by important community projects such as Git and LibreOffice. The project code is distributed under the Curl license (variant […]
A vulnerability (CVE-2023-38545) has been identified in the curl utility for data retrieval and transmission over networks, and in the parallel developing libcurl library, which can lead to buffer overflow and potentially allow for the execution of the attacker's code on the client side when the curl utility or an application using libcurl interacts with a malicious HTTPS server. This issue manifests only when the curl […]
Information has been released about five vulnerabilities in the libX11 and libXpm libraries developed by the X.Org project. The issues have been resolved in the libXpm 3.5.17 and libX11 1.8.7 releases. Three vulnerabilities were identified in the libX11 library, which provides client-implemented features of the X11 protocol: CVE-2023-43785 — a buffer overflow in the libX11 code that occurs during the processing of a response from the X server with a number of characters that do not match […]
The release of the classic toolkit for managing the iptables packet filter 1.8.10 has been published, with recent development focusing on components for maintaining backward compatibility — iptables-nft and ebtables-nft, which provide utilities with the same command line syntax as in iptables and ebtables but translate the received rules into nftables bytecode. The original set of iptables programs, including ip6tables, arptables, and ebtables, is […]
A corrective release of Firefox 118.0.2 is available, which includes the following fixes: Resolved issues with loading games from the betsoft.com site. Fixed problems with printing certain SVG images. Addressed a regression in branch 118 that caused the handling of 'WWW-Authenticate: Negotiate' responses from other sites to fail. Corrected an error that prevented WebRTC from decoding in some contexts […]
Google has recorded the largest DDoS attack on its infrastructure, with an intensity of 398 million requests per second. This new attack is seven times more intense than the previous record DDoS attack, which generated a flow of 47 million requests per second. For comparison, total traffic across the entire web is estimated to be 1-3 billion requests per second. In addition to […]
As part of efforts to enhance the security of critical software components on the Android platform, Google has rewritten the pvmfm firmware used for running virtual machines managed by the pVM hypervisor within the Android Virtualization Framework in Rust. Previously, the firmware was written in C and implemented on top of the U-Boot bootloader, which had previously been found to have vulnerabilities due to issues with […]
After nearly three years of development, the release of the Wayfire 0.8 compositing server has been announced. Utilizing Wayland, it allows for resource-friendly user interfaces with 3D effects similar to 3D plugins for Compiz (screen switching via a 3D cube, spatial window layouts, morphing effects when interacting with windows, etc.). Wayfire supports plugin extensions and offers a flexible configuration system. The project's code is written […]
The recently released major functional update for Microsoft's flagship software platform has left many users puzzled with the question: where are the previously announced features? We explain how to activate them and why you shouldn't rush to do so. Source: 3dnews.ru