ProHoster > Blog

Category: Blog

Blog Section

Release of the CoMaps mapping application 2026.05.06 and project report for the year.

Posted on

The CoMaps project, which develops a fully open community fork of the mobile mapping application Organic Maps, has released version 2026.05.06 and published its development report for the year. The CoMaps code is distributed under the Apache 2.0 license. The application is available in the F-Droid, Google Play, Apple App Store, and Flathub directories, as well as directly on Codeberg. The main innovation in this release is the ability to update maps independently of the application itself. […]

In Python 3.14.5, due to memory leaks, the old garbage collector has been reinstated.

Posted on

A corrective release of the Python programming language 3.14.5 has been published, which, in addition to fixing bugs and minor vulnerabilities, reinstates the old garbage collector used before the 3.14.x branch. The unusual decision for an interim release is attributed to user complaints about a significant increase in memory consumption after migrating production systems to the 3.14 branch and the emergence of memory leaks.

Vulkan 1.4.351

Posted on

The Khronos Group has published an update for the Vulkan 1.4.351 graphics API. This technical release includes six new extensions, specification fixes, and further infrastructure preparation for upcoming GPUs and game engines. The most notable addition is the VK_KHR_shader_bfloat16 extension, which adds support for the BFloat16 format in shaders. This format is actively used in machine learning and AI acceleration tasks, helping to reduce requirements.

Fragnesia — a vulnerability in the Linux kernel that allows root access through page cache modification

Posted on

The fourth vulnerability in the Linux kernel has been identified in the last two weeks (CVE-2026-46300), allowing an unprivileged user to gain root access by overwriting data in the page cache. The vulnerability has been given the code name Fragnesia or Copy Fail 3.0. The nature of the vulnerability is similar to previously disclosed vulnerabilities Copy Fail and Dirty Frag. Like Dirty Frag, the new vulnerability exists in the xfrm-ESP subsystem.

GNOME Yelp 49.1

Posted on

The GNOME project developers released an update for the Yelp help application that fixes a vulnerability allowing the escape from the Flatpak sandbox environment. The issue was related to the handling of external URIs and the integration specifics of Yelp with application launching mechanisms. When opening a specially crafted document, an attacker could execute commands outside of the sandbox constraints, gaining access to the user’s system with the current user's privileges. The vulnerability affected […]

Vulnerability in Exim Leading to Remote Code Execution on Server

Posted on

A critical vulnerability (CVE-2026-45185) has been identified in the Exim mail server, allowing for remote code execution on the server. The issue manifests starting with the Exim 4.97 branch when built with the GnuTLS library ("USE_GNUTLS=yes") and has been fixed in the Exim 4.99.3 release. Builds with OpenSSL and other libraries different from GnuTLS are not affected by this vulnerability. The problem is caused by a use-after-free error in […]

Vulnerability in AMD Zen 2 CPU, which allows privilege escalation and bypassing the isolation of virtual machines

Posted on

AMD has disclosed information about a vulnerability (CVE-2025-54518) in processors based on the Zen 2 microarchitecture, which can lead to object code cache corruption. Successful exploitation of this vulnerability allows the execution of CPU instructions at a higher privilege level. In practice, the issue potentially allows for privilege escalation in the system, enabling code execution with kernel rights or access to […]

Release of Scrcpy 4.0, an application for mirroring Android smartphone screens

Posted on

The release of Scrcpy 4.0 has been published, allowing users to mirror the smartphone screen content in a desktop environment with the capability to control the device, remotely operate mobile applications using a keyboard and mouse, view videos, and listen to audio. Client programs for managing the smartphone have been prepared for Linux, Windows, and macOS. The project code is written in C (with the mobile app in Java) and […]

FEX 2605

Posted on

The quiet and unnoticed release of FEX 2605 has occurred — an open emulator and compatibility environment designed to run Linux applications compiled for x86 and x86-64 architectures on ARM64 systems. The project is evolving as an alternative to box64 and qemu-user, focused primarily on high performance, game support, and complex user software. FEX utilizes dynamic binary translation (JIT) and implements its own model […]

A self-replicating worm has been integrated into 42 TanStack NPM packages

Posted on

As a result of the compromise of the release process based on GitHub Actions, attackers were able to publish 84 malicious versions covering 42 NPM packages from the TanStack stack in the NPM repository. Some of the compromised packages had over 10 million downloads per week. Access to publishing releases was gained due to an incorrect configuration of pull_request_target 'Pwn Request' in GitHub Actions (indicating […]

Vulnerabilities in dnsmasq allowing DNS cache poisoning and execution of code with root privileges

Posted on

The Dnsmasq package, which includes a caching DNS resolver, DHCP server, service for announcing IPv6 routes, and network booting system, has revealed 6 vulnerabilities that allow for code execution with root privileges, domain redirection to another IP, memory content exposure of the process, and service crashing. Issues have been resolved in dnsmasq 2.92rel2. Fixes are also available in the form of patches. Identified issues: […]

« to the beginning 48 49 50 51 52 53 54 55 56 57 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster