Category: Blog

Vulnerabilities in Netfilter and io_uring allow for privilege escalation in the system

Vulnerabilities have been identified in the Linux kernel subsystems Netfilter and io_uring that allow a local user to escalate privileges in the system: A vulnerability (CVE-2023-32233) in the Netfilter subsystem, caused by accessing memory after it has been freed (use-after-free) in the nf_tables module, which supports the nftables packet filtering. The vulnerability can be exploited by sending specially crafted requests to update the nftables configuration. For the attack to take place […]

Lennart Poettering has proposed adding a soft reboot mode to systemd

Lennart Poettering discussed preparations to add a soft reboot mode to the system manager systemd ('systemctl soft-reboot'), which restarts only user space components without affecting the Linux kernel. It is expected that, compared to a regular reboot, the soft reboot will reduce downtime during updates of environments using ready-made system images. The new mode will allow all processes to terminate […]

The creator of LLVM is developing a new programming language called Mojo

Chris Lattner, founder and chief architect of LLVM, as well as the creator of the Swift programming language, along with Tim Davis, former head of AI projects at Google such as Tensorflow and JAX, have introduced a new programming language, Mojo, which combines ease of use for research developments and rapid prototyping with the capability for producing high-performance end products. This is achieved through the use of […]

Vulnerability in GitLab allows code execution during CI builds for any project

Corrective updates for the collaborative development platform GitLab 15.11.2, 15.10.6, and 15.9.7 have been released, fixing a critical vulnerability (CVE-2023-2478) that allows any authenticated user to attach their own runner (task execution application for building project code in continuous integration) to any project on the same server through manipulation of the GraphQL API. Details of exploitation are not yet […]

Release of the memory testing system Memtest86+ 6.20

The release of the memory testing program Memtest86+ 6.20 is now available. The program is not tied to any operating systems and can be run directly from BIOS/UEFI firmware or from the bootloader to conduct a complete memory check. If issues are detected, the built-in Memtest86+ faulty memory block map can be used in the Linux kernel to exclude problematic areas using the memmap option. […]

The seL4 project has been awarded the ACM Software System Award

The project developing the open microkernel seL4 has received the ACM Software System Award, an award granted annually by the Association for Computing Machinery (ACM), the most prestigious international organization in the field of computer systems. The award is given for achievements in the mathematical proof of operational reliability, which demonstrates full compliance with formally specified requirements and acknowledges readiness for use in critical applications. The seL4 project […]

Release of the portable version OpenBGPD 8.0

The portable edition release of the OpenBGPD routing package 8.0 has been presented, developed by the OpenBSD project developers and adapted for use in FreeBSD and Linux (support for Alpine, Debian, Fedora, RHEL/CentOS, and Ubuntu is claimed). To ensure portability, parts of the code from the OpenNTPD, OpenSSH, and LibreSSL projects were used. The project supports most of the BGP 4 specifications and complies with RFC8212 requirements, but does not attempt to cover everything […]

Выпуск СУБД AlaSQL 4.0, нацеленной на использование в браузерах и Node.js

The release of the AlaSQL 4.0 DBMS is available, intended for use in web applications in browsers, in mobile applications based on web technologies, or in server-side handlers based on the Node.js platform. The DBMS is presented as a JavaScript library and allows the use of SQL language. It supports data storage in traditional relational tables or in nested JSON structures that do not require strict schema definition. For […]

Release of the SFTP server SFTPGo 2.5.0

The release of the SFTPGo 2.5.0 server has been published, allowing remote access to files using SFTP, SCP/SSH, Rsync, HTTP, and WebDav protocols, as well as providing access to Git repositories using the SSH protocol. Data can be served from the local file system and from external storage compatible with Amazon S3, Google Cloud Storage, and Azure Blob Storage. It is possible […]

The Pulse Browser project develops an experimental fork of Firefox

A new web browser, Pulse Browser, built on the Firefox codebase, is available for testing and experiments with ideas to enhance usability and build a minimalist interface. Builds are available for Linux, Windows, and macOS platforms. The code is distributed under the MPL 2.0 license. The browser is notable for cleaning the code of components related to telemetry collection and replacing some typical […]

Control over 14 PHP libraries in the Packagist repository has been intercepted

Administrators of the Packagist package repository revealed information about an attack, resulting in the takeover of accounts managing 14 PHP libraries, including popular packages such as instantiator (526 million total installs, 8 million installs per month, 323 dependent packages), sql-formatter (94 million total installs, 800 thousand per month, 109 dependent packages), doctrine-cache-bundle (73 million […]

Release of Chrome 113

Google has released version 113 of the Chrome web browser. At the same time, a stable release of the open-source project Chromium, which forms the basis of Chrome, is available. The Chrome browser differs from Chromium by incorporating Google logos, a crash notification system, modules for playback of copy-protected video content (DRM), an automatic update installation system, always-on Sandbox isolation, the delivery of keys to Google API, and transmission of […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster