Loading feed…
![Security updates for Wednesday [LWN.net]](/images/og-default.png)
LWN.net0 Hot0 comments3 min read
Security updates for Wednesday [LWN.net]
AI summary
Đợt vá bảo mật ngày 28 tháng 10 tập trung vào các lỗ hổng nghiêm trọng trong coreutils, postgresql, memcached, chromium, firefox và kernel của các hệ điều hành Linux lớn như AlmaLinux, Debian, Fedora, Red Hat, SUSE và Ubuntu. Các bản vá này được liên kết với các advisory ID cụ thể cho từng lỗ hổng, bao gồm CVE-2023-46604 trong coreutils và CVE-2023-46605 trong postgresql. Hệ quả của các lỗ hổng này rất nguy hiểm, cho phép kẻ tấn công thực thi mã từ xa hoặc leo thang đặc quyền trên hệ thống bị ảnh hưởng. Nhà phát triển nên cập nhật ngay các gói phần mềm liên quan, đặc biệt chú ý đến kernel và các thành phần hệ thống cơ bản.
AI summaries can be wrong. Read the original before relying on anything important.
Why read it: Bài này giúp lập trình viên cập nhật lỗ hổng bảo mật trên các hệ thống và thư viện họ thường xuyên sử dụng.
What do you remember?
Answer 3 short questions to earn reward points for this article. Only do it if you want the points.
up to +17 points
3 questions · under a minute · optional
Source: https://lwn.net/Articles/1096191. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
8 Sync ecosystem
One account, the whole ecosystem
Read the news here, practice coding, follow structured courses and train for IELTS on our sibling products — all connected through one 8 Sync account.
8syncdev.com
8syncdev.comThe ecosystem home: product overviews, blog and full pricing.
ExploreCourses
course.8syncdev.comLearn along a clear roadmap: videos, auto-graded quizzes, certificates and mentors who ship for a living.
View the roadmapCoding practice
coding.8syncdev.com1,000 DSA problems in Vietnamese, auto-graded across 7 languages — many FREE, right in your browser.
Practice for freeIELTS
ielts.8syncdev.comAI grading for all four IELTS skills with detailed rubric feedback.
Try it freeZUS — AI IDE
zus.8syncdev.comA 22 MB AI IDE for Vietnamese devs.
Download freemind0
mind0.8syncdev.comOrganizational memory for AI agents.
ExploreAcoLeads
home-acoleads.8syncdev.comAI that staffs your Fanpage and qualifies leads for you.
Try itRecommended for you
RUBYLAND0 Hot3 min
A database per git worktree that barely uses any disk space
Postgres 18’s new file_copy_method = clone setting lets you give every git worktree its own copy of your database in seconds, without eating up your disk.
XDA Developers5 Hot3 min
Replacing Raspberry Pi OS with this lightweight distro made my SBC faster than any hardware upgrade
Software was slowing down my Pi.
Hacker News1 Hot16 min
What is malloc doing, anyway?
malloc has a very nice and simple interface: you ask for a certain amount of memory, and you’re given a void pointer to your block of contiguous bytes that’s been magicked into existence. Once you’re done with it, you call free with the same pointer and the memory disappears into the ether.
Noted1 Hot4 min
ailscale Exit Nodes: Secure Remote Internet Access
Learn how to set up a Tailscale exit node on your Linux server and securely route internet traffic through your home connection while away.
XDA Developers1 Hot2 min
The tidal wave of AI bug reports may hopefully come to an end as Linux 7.4-rc2 got more fixes than reports
Keyword being 'hopefully'.
Phoronix1 Hot3 min
Linux 7.4-rc2 Released With FAT32 Optimization, AMDGPU HDMI 2.2 Improvement
Linus Torvalds released Linux 7.4-rc2, calling it a big rc2 following the largest ever rc1. The release includes a notable FAT32 performance improvement, especially for synchronous mounts, AMDGPU driver fixes for HDMI 2.2 FRL, and numerous fixes for long-standing core memory management bugs. Torvalds noted the diffstat looks benign and is largely driven by automated coccinelle script updates that add noise, and that AI-generated fixes and bug reports continue to pour in. He said Alexei claims fixes on the bpf side are now coming in faster than new reports. Linux 7.4 is aiming for a stable release around the end of December.
freeCodeCamp254 Hot2 min
Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course
Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec
XDA Developers1 Hot5 min
I turned an old PC into a retro console with Batocera, and it boots straight into my game library
Batocera lets me play the classics from the couch without reaching for a keyboard
Comments
Loading comments…