Blog Section
Development of pgBackRest, a popular free tool for backing up and restoring PostgreSQL databases, will continue. David Steele, the project's maintainer, reported that a group of sponsors has formed around the project, ready to fund further development. This means pgBackRest will no longer depend on a single corporate sponsor, which should make the project's development more sustainable in the long run. […]
The release of the email client Thunderbird 151.0, developed by the Mozilla community, has occurred. The release is available for Linux, Windows, and macOS; the system requirements for Linux specify the need for GTK+ 3.14 or newer. The release was published on May 19, 2026. The main change in this release is the enhanced support for OAuth and Exchange scenarios. Thunderbird 151.0 includes login to Thundermail via OAuth with automatic account configuration, […]
A proof-of-concept for the DirtyDecrypt vulnerability, also known as DirtyCBC, has been published, allowing a local unprivileged user to gain root rights on some Linux systems. The issue lies in the rxgk code of the RxRPC subsystem and is related to page cache writes due to a missing copy-on-write check in the rxgk_decrypt_skb() function. The publication of the PoC was reported by BleepingComputer on May 18, 2026; the PoC itself is hosted at […]
On May 19, the anniversary 60th release of the OpenBSD operating system was quietly and unobtrusively launched. Among the changes: improved support for arm64, luna88k, riscv64 architectures, and others; a fix for the FP-DSS vulnerability on amd64; the sysctl hw.smt mechanism has been deprecated, replaced by hw.blockcpu to exclude certain types of cores from the scheduler (useful for Intel processors); the delayed hibernation mechanism, known in systemd as suspend-then-hibernate, has been implemented; […]
The release of the two-panel file manager GNOME Commander 2.0 has taken place, optimized for use in the GNOME desktop environment. GNOME Commander offers features such as tabs, command line access, bookmarks, customizable color schemes, directory skipping mode when selecting files, access to external data via SFTP and SAMBA, extensible context menus, automatic mounting of external drives, access to navigation history, […]
The release of the TileOS 2.0 'Sauropod' distribution is available, built on a Debian package base and offering a desktop that utilizes tiled window managers. TileOS aims for the same goals as the Ubuntu Sway Remix distribution (developed by the same author), providing a ready-to-use interface that requires no additional configuration and is designed for both experienced Linux users and newcomers looking for […]
The release of the Startwine-Launcher 422 application, developed for launching programs and games compiled for the Windows platform in Linux systems, has been published. The main goal of developing StartWine-Launcher was to simplify the process for beginners in creating Wine prefixes — sets of libraries and dependencies required for Windows applications to run on Linux. The StartWine-Launcher code is written in Python and is distributed under the GPLv3 license. The interface is based on […]
An exploit for the seventh vulnerability (1, 2-3, 4, 5, 6) in the Linux kernel, which allows a non-privileged local user to gain root privileges by overwriting data in the page cache, has been made publicly available. No CVE identifier has yet been assigned, and aside from the exploit code, no further information about the issue is currently available. A patch was released on May 20, and was accepted on May 21 […]
Corrective releases of nginx 1.31.1 and 1.30.2 have been formed, addressing a critical vulnerability (CVE-2026-9256) that allows remote code execution with nginx worker process privileges through specially crafted HTTP requests. Researchers who uncovered the issue demonstrated a working exploit, which will be published along with a full description 30 days after the fix. The vulnerability has been code-named nginx-poolslip. The issue has been present since […]
Support for zero-copy is set to be removed from the AF_ALG interface for SKCIPHER and AEAD algorithm types in the Linux cryptography subsystem. The change is already in the cryptodev tree and is expected to be sent to the Linux 7.2 merge window, which is scheduled to open in June. This decision follows growing security concerns surrounding zero-copy mechanisms in the kernel, especially after recent vulnerabilities in Linux cryptographic code. AF_ALG […]
Seven vulnerabilities have been addressed in FreeBSD, one of which allows for remote code execution with root privileges, and four can escalate privileges within the system. These vulnerabilities have been fixed in updates FreeBSD 15.0-RELEASE-p9, 14.4-RELEASE-p5, and 14.3-RELEASE-p14. CVE-2026-45255 – there was a lack of escaping for special characters in the shell script of the bsdinstall installer and bsdconfig configurator, which displayed a list of available wireless networks to connect to, identified as a result of […]
The Flipper One project has been introduced, developing a portable computer for network engineers, enthusiasts, and security researchers. The device is designed like a gaming console and contains a computer that can be used independently for security system checks, diagnosing network issues, and traffic analysis, or as a portable workstation connected to a monitor, keyboard, and mouse. The project is being developed in collaboration with the community and […]
Russian Russian
Italian
German
Polish
Estonian
Albanian
Bulgarian
Croatian
Czech
Danish
Dutch
English
French
Hungarian
Latvian
Norwegian
Portuguese
Romanian
Slovak
Slovenian
Spanish
Swedish