Category: Blog

AlmaLinux 9.1 Distribution Released

The release of the AlmaLinux 9.1 distribution has been formed, synchronized with the Red Hat Enterprise Linux 9.1 distribution and containing all the proposed changes in this release. Installation images have been prepared for the x86_64, ARM64, ppc64le, and s390x architectures in the form of bootable (840 MB), minimal (1.6 GB), and full images (8.6 GB). Later, Live builds with GNOME, KDE, and Xfce will be generated, as well as images […]

Red Hat Enterprise Linux 9.1 Distribution Release

Red Hat has released the distribution of Red Hat Enterprise Linux 9.1. Ready installation images are available for registered users of the Red Hat Customer Portal (you can also use the iso images of CentOS Stream 9 for functionality evaluation). The release is built for x86_64, s390x (IBM System z), ppc64le, and Aarch64 (ARM64) architectures. The source code of rpm packages for Red Hat Enterprise Linux 9 is available in […]

Stable release of the MariaDB 10.10 database management system.

The first stable release of the new branch of the MariaDB database management system 10.10 (10.10.2) has been published, which branches off from MySQL, maintaining backward compatibility and featuring the integration of additional storage engines and enhanced capabilities. The development of MariaDB is overseen by the independent organization MariaDB Foundation, following an open and transparent development process, independent of specific vendors. MariaDB is supplied instead of MySQL in many […]

Mozilla will begin accepting extensions based on the third version of the Chrome manifest

On November 21, the AMO catalog (addons.mozilla.org) will start accepting and certifying add-ons using the third version of the Chrome manifest with a digital signature. These add-ons can be tested in the nightly builds of Firefox. The support for the third version of the manifest will be included in the stable releases in Firefox 109, scheduled for January 17, 2023. Support for the second version of the manifest will be maintained in the foreseeable future, but […]

The openSUSE Leap Micro 5.3 distribution is now available.

The developers of the openSUSE project have released the atomically updatable distribution openSUSE Leap Micro 5.3, intended for creating microservices and for use as a base system for virtualization platforms and container isolation. Builds for x86_64 and ARM64 (Aarch64) architectures are available for download, provided both with an installer (Offline builds, size 1.9 GB) and in the form of ready-to-use boot images: 782MB (preconfigured), […]

A vulnerability in the implementation of the MCTP protocol for Linux, allowing privilege escalation.

A vulnerability has been identified in the Linux kernel (CVE-2022-3977), which can potentially be exploited by a local user to escalate their privileges within the system. The vulnerability manifests starting from kernel 5.18 and was fixed in branch 6.1. You can track the appearance of fixes in distributions on the pages for: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch. The vulnerability exists in the implementation of the MCTP (Management Component Transport Protocol), used for […]

Vulnerability in Samba and MIT/Heimdal Kerberos that leads to buffer overflow.

Correction releases of Samba package 4.17.3, 4.16.7, and 4.15.12 have been published, addressing the vulnerability (CVE-2022-42898) in Kerberos libraries, which leads to integer overflow and out-of-bounds data write when processing PAC (Privileged Attribute Certificate) parameters sent by an authenticated user. The publication of package updates in distributions can be tracked on the following pages: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD. In addition to Samba […]

Critical vulnerabilities in Netatalk leading to remote code execution

Six remotely exploitable vulnerabilities have been identified in Netatalk, a server implementing AppleTalk and Apple Filing Protocol (AFP), allowing the execution of arbitrary code with root privileges through specially crafted packets. Netatalk is utilized by many network-attached storage (NAS) manufacturers to facilitate file sharing and access to printers from Apple computers, for example, it was used in devices […]

Release of Rocky Linux 8.7 distribution, developed by the founder of CentOS.

The release of Rocky Linux 8.7 has been announced, aimed at creating a free build of RHEL capable of filling the gap left by traditional CentOS after Red Hat prematurely ended support for the CentOS 8 branch at the end of 2021, rather than in 2029 as originally planned. This is the third stable release of the project, recognized as ready for production deployments. Rocky Linux builds are prepared […]

Release of the Alt Workstation K 10.1 distribution

The release of the distribution "Alt Workstation K 10.1" has been published, supplied with a KDE Plasma-based graphical environment. Boot and live images have been prepared for the x86_64 architecture (6.1 GB, 4.3 GB). The operating system has been included in the Unified Register of Russian Software and meets the requirements for transitioning to infrastructure managed by domestic operating systems. Russian root encryption certificates have been integrated into the main composition. As well as […]

Two vulnerabilities in GRUB2 allow bypassing UEFI Secure Boot protection

Details have been revealed about two vulnerabilities in the GRUB2 bootloader that could lead to code execution through specially crafted fonts and the processing of certain Unicode sequences. These vulnerabilities can be exploited to bypass the UEFI Secure Boot validated boot mechanism. Identified vulnerabilities: CVE-2022-2601 — buffer overflow in the function grub_font_construct_glyph() when processing specially crafted pf2 format fonts, arising from incorrect calculations […]

Release of BackBox Linux 8, a distribution for security testing.

After two and a half years since the last release, the BackBox Linux 8 distribution based on Ubuntu 22.04 is now available, coming with a collection of tools for security system testing, exploit testing, reverse engineering, network traffic analysis, wireless network exploration, malware analysis, stress testing, and data recovery. The user environment is based on Xfce. The size of the ISO image is 3.9 […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster