Author: ProHoster

Rashin lahani na DoS mai nisa a cikin kernel Linux ana amfani da shi ta hanyar aika fakitin ICMPv6

An gano wata lahani a cikin Linux kernel (CVE-2022-0742) wanda ke ba ku damar ƙyale ƙwaƙwalwar ajiyar da ke akwai da kuma haifar da ƙin sabis ta hanyar aika fakiti na icmp6 na musamman. Batun yana da alaƙa da ƙwaƙwalwar ƙwaƙwalwar ajiya wanda ke faruwa lokacin sarrafa saƙonnin ICMPv6 tare da nau'ikan 130 ko 131. Batun yana nan tun kernel 5.13 kuma an daidaita shi a cikin sakin 5.16.13 da 5.15.27. Matsalar ba ta shafi tsayayyen rassan Debian, SUSE, […]

Sakin yaren shirye-shiryen Go 1.18

An gabatar da sakin yaren shirye-shirye na Go 1.18, wanda Google ke haɓakawa tare da sa hannu na al'umma a matsayin mafita mai gauraya wanda ya haɗu da babban aiki na harsashi da aka haɗa tare da fa'idodin rubuce-rubucen harsuna kamar sauƙi na lambar rubutu. , saurin haɓakawa da kariyar kuskure. Ana rarraba lambar aikin a ƙarƙashin lasisin BSD. Rubutun Go's ya dogara ne akan abubuwan da aka saba na yaren C, tare da wasu aro daga […]

Rashin lahani a cikin OpenSSL da LibreSSL wanda ke haifar da madauki lokacin sarrafa takaddun shaida ba daidai ba

Ana samun sakewa na buɗe ɗakin karatu na sirri na OpenSSL 3.0.2 da 1.1.1n. Sabuntawa yana gyara lahani (CVE-2022-0778) wanda za'a iya amfani dashi don haifar da ƙin sabis (madaidaicin madaidaicin mai sarrafa). Don cin gajiyar raunin, ya isa aiwatar da takaddun shaida na musamman. Matsalar tana faruwa a duka uwar garken da aikace-aikacen abokin ciniki waɗanda zasu iya aiwatar da takaddun shaida da mai amfani ya kawo. Matsalar ta samo asali ne ta hanyar kwaro a cikin […]

Chrome 99.0.4844.74 sabuntawa tare da gyare-gyare mai mahimmanci

Google ya fitar da sabuntawar Chrome 99.0.4844.74 da 98.0.4758.132 (Extended Stable), wanda ke gyara lahani 11, gami da rashin lahani mai mahimmanci (CVE-2022-0971), wanda ke ba ku damar ketare duk matakan kariya na mai bincike da aiwatar da lamba akan tsarin. waje da akwatin yashi - muhalli. Har yanzu ba a bayyana cikakkun bayanai ba, an san kawai cewa mummunan rauni yana da alaƙa da samun damar ƙwaƙwalwar ajiya da aka rigaya (amfani-bayan-kyauta) a cikin injin binciken […]

Mai kula da Debian ya tafi saboda bai yarda da sabon salon ɗabi'a a cikin al'umma ba

Kungiyar kula da asusun ajiyar aikin Debian ta dakatar da matsayin Norbert Preining saboda rashin dacewa a cikin jerin wasiku na debian-mai zaman kansa. A cikin martani, Norbert ya yanke shawarar dakatar da shiga cikin ci gaban Debian kuma ya matsa zuwa al'ummar Arch Linux. Norbert ya shiga cikin ci gaban Debian tun daga 2005 kuma ya kiyaye kusan fakiti 150, galibi […]

Ana sabunta ƙima na ɗakunan karatu waɗanda ke buƙatar binciken tsaro na musamman

OpenSSF (Open Source Security Foundation), wanda Gidauniyar Linux ta kafa kuma da nufin inganta tsaro na buɗaɗɗen software, ta buga sabon bugu na nazarin ƙidayar jama'a na II, da nufin gano ayyukan buɗaɗɗen tushe waɗanda ke buƙatar tantance tsaro na fifiko. Binciken ya mayar da hankali kan nazarin lambar tushe da aka raba wanda aka yi amfani da shi kai tsaye a cikin ayyukan kasuwanci daban-daban ta hanyar dogaro da aka zazzage daga ma'ajiyar waje. IN […]

An aiwatar da tallafin farko na SMP don ReactOS

Masu haɓaka tsarin aiki na ReactOS, da nufin tabbatar da dacewa tare da shirye-shiryen Microsoft Windows da direbobi, sun sanar da shirye-shiryen saitin faci na farko don loda aikin akan tsarin multiprocessor tare da kunna yanayin SMP. Canje-canje don tallafawa SMP har yanzu ba a haɗa su a cikin babban codebase na ReactOS kuma suna buƙatar ƙarin aiki, amma gaskiyar cewa yana yiwuwa a yi taya tare da kunna yanayin SMP an lura […]

Sakin uwar garken Apache 2.4.53 http tare da ƙayyadaddun lahani masu haɗari

An buga sakin sabar HTTP ta Apache 2.4.53, wanda ke gabatar da canje-canje 14 kuma yana kawar da raunin 4: CVE-2022-22720 - ikon aiwatar da harin "HTTP Request Smuggling", wanda ke ba da izini, ta hanyar aika abokin ciniki na musamman. buƙatun, don shiga cikin abubuwan buƙatun sauran masu amfani waɗanda aka watsa ta hanyar mod_proxy (misali, zaku iya cimma maye gurbin mugun lambar JavaScript cikin zaman wani mai amfani da rukunin yanar gizon). Matsalar tana faruwa ta hanyar barin hanyoyin haɗin yanar gizo a buɗe […]

Debian 12 Kunshin Tushen Daskare Kwanan Wata Ƙaddara

Masu haɓaka Debian sun buga wani shiri don daskare tushen fakitin sakin "Bookworm" na Debian 12. Ana sa ran fitar da Debian 12 a tsakiyar 2023. A ranar 12 ga Janairu, 2023, matakin farko na daskarewa tushen kunshin zai fara, yayin da za a dakatar da aiwatar da "canji" (sabuntawa na fakitin da ke buƙatar daidaita abubuwan da suka dogara da sauran fakiti, wanda ke haifar da cire fakiti na ɗan lokaci daga Gwaji) , kuma […]

An ba da shawara don ƙara tsarin aiki tare da nau'in bayanin zuwa harshen JavaScript

Microsoft, Igalia, da Bloomberg sun ɗauki matakin haɗa syntax a cikin ƙayyadaddun JavaScript don fayyace ma'anar nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'in nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i nau'i na ma'anar ma'anar da aka yi amfani da shi). A halin yanzu, ana ƙaddamar da sauye-sauyen samfurin da aka gabatar don haɗawa cikin ma'aunin ECMAScript don tattaunawa ta farko (Mataki na 0). A taron kwamitin TC39 na gaba a cikin Maris, an shirya don matsawa zuwa matakin farko na la'akari da shawarwarin tare da […]

Sabunta Firefox 98.0.1 tare da cire injunan bincike na Yandex da Mail.ru

Mozilla ta buga wani saki na tabbatarwa na Firefox 98.0.1, mafi kyawun canji wanda shine cire Yandex da Mail.ru daga jerin injunan bincike da ake amfani da su azaman masu samar da bincike. Ba a bayyana dalilan cire su ba. Bugu da ƙari, Yandex ya daina amfani da shi a cikin majalisun Rasha da Turkiyya, wanda aka ba da shi ta hanyar tsohuwa daidai da yarjejeniyar da aka kammala a baya.