Blog Section
Corrective releases of the Python programming language 3.7.10 and 3.6.13 are available, addressing the vulnerability (CVE-2021-3177) that could lead to code execution when processing untrusted floating-point numbers in handlers that call C functions using the ctypes mechanism. The issue also affects Python branches 3.8 and 3.9, but updates for them are currently in candidate status […]
Google has initiated efforts to address issues in open source software caused by unsafe memory operations. According to Google, 70% of security problems in Chromium are due to memory-related errors, such as buffer access after the associated memory has been freed (use-after-free). Microsoft's research also concluded that 70% of all vulnerabilities fixed in […]
Fedora Linux developers announced the formation of a SIG (Special Interest Group) to support the ELN (Enterprise Linux Next) project, aimed at providing continuously built Red Hat Enterprise Linux assemblies based on the Fedora Rawhide repository. The development process for new RHEL branches involves creating a branch from Fedora every three years, which develops separately for some time before being brought to […]
Corrective updates for the stable branches of the DNS server BIND 9.11.28 and 9.16.12, as well as the experimental branch 9.17.10 currently in development, have been released. The new versions fix a vulnerability (CVE-2020-8625) that leads to a buffer overflow and could potentially allow remote code execution by an attacker. No evidence of working exploits has been found so far. The issue is caused by a bug in the implementation of the SPNEGO (Simple and Protected GSSAPI […
The release of a compact distribution for creating firewalls and network gateways pfSense 2.5.0 has taken place. The distribution is based on the FreeBSD codebase, incorporating developments from the m0n0wall project and actively using pf and ALTQ. An ISO image for the amd64 architecture, sized at 360 MB, has been prepared for download. The distribution is managed via a web interface. To enable user access to both wired and wireless networks, […]
The release of the minimalist Linux distribution Tiny Core Linux 12.0 has occurred, which can operate on systems with 48 MB of RAM. The graphical environment of the distribution is based on the Tiny X server, the FLTK toolkit, and the FLWM window manager. The distribution is fully loaded into RAM and runs from memory. The new release includes updates to system components, featuring Linux kernel 5.10.3 and busybox 1.33.0, […]
A release of the nginx main branch 1.19.7 has been formed, which continues to develop new features (the parallel stable branch 1.18 only receives changes related to fixing serious bugs and vulnerabilities). Key changes: When the worker process runs out of free connections, nginx now closes not only keepalive connections but also connections in a lingering close state. The code for handling […]
A corrective release of the OpenSSL cryptographic library 1.1.1j is now available, addressing two vulnerabilities: CVE-2021-23841 — a null pointer dereference in the X509_issuer_and_serial_hash() function, which can lead to the crash of applications invoking this function for processing X509 certificates with an incorrect value in the issuer field. CVE-2021-23840 — an integer overflow in the EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate functions, which may result in the return value […]
The release of the Q4OS 3.14 distribution has occurred, based on the Debian package base and provided with KDE Plasma 5 and Trinity desktops. The distribution is positioned as resource-friendly and offers a classic desktop layout. It includes several proprietary applications, including 'Desktop profiler' for quickly installing themed software sets, 'Setup utility' for installing third-party applications, […]
Oracle has released an update for the Solaris 11.4 operating system SRU 30 (Support Repository Update), which offers a series of additional fixes and improvements for the Solaris 11.4 branch. To apply the proposed fixes in the update, simply execute the 'pkg update' command. In the new release: Support for the UMIP (User Mode Instruction Prevention) protection mechanism, provided by Intel processors, has been added. When this mode is enabled […]
The release of Tor Tool 0.4.5.6 has been announced, which is used to facilitate the operation of the anonymous Tor network. Tor 0.4.5.6 is recognized as the first stable release of the 0.4.5 branch, which has been in development for the past five months. The 0.4.5 branch will be supported during its regular maintenance cycle—release updates will cease after 9 months or 3 months after the release of the 0.4.6.x branch. Long-Term Support (LTS) […]
The first releases of the re3 and reVC projects are now available, which involve reverse engineering the source code of the games GTA III and GTA Vice City, released around 20 years ago. The published releases are considered ready to compile a fully functional game. The builds have been tested on Linux, Windows, and FreeBSD on x86, amd64, arm, and arm64 systems. Additional ports are under development […]