nurdsoft reposted this
We are back to bother y'all with the latest tech updates featuring news from the world of Linux and open-source this week! 🐧 Major Linux Vulnerability Exposes Systems to Remote Code Execution – Here’s What You Need to Know A critical vulnerability in the Common UNIX Printing System (CUPS) has raised alarms, potentially exposing up to 300,000 Linux endpoints to remote code execution (RCE). While most of the exposed systems are likely desktops rather than servers, the flaw enables attackers to exploit the cups-browsed daemon if it is manually enabled. The vulnerability affects several versions of Linux, including Red Hat Enterprise Linux (RHEL), but it’s not active by default in most cases. Mitigation is simple, involving disabling the cups-browsed service or updating the CUPS package. 🐘 PostgreSQL 17 Released: Enhanced Performance and New Features PostgreSQL 17 has officially launched, introducing significant performance enhancements and new functionalities. The latest version revamps the internal memory structure for vacuum processes, reducing memory usage by up to 20 times, while improvements to the I/O layer can deliver double the write throughput for high-concurrency workloads. Additional features include support for JSON_TABLE, enhanced MERGE functionalities, a new collation provider, and incremental backup capabilities with pg_basebackup. 🗃️ Valkey 8.0 Released: A High-Performance Fork of Redis Achieving One Million RPS Valkey 8.0 has been launched as a powerful fork of Redis, designed to handle up to one million requests per second (RPS). This release focuses on significant performance enhancements, tripling the speed of its predecessor and introducing numerous optimizations for better memory efficiency. Key improvements include optimized handling of temporary set objects, experimental RDMA user keep-alive support, and enhancements to multi-threaded performance through memory prefetching. The release also features dual-channel efficient full-sync replication and various command changes, ensuring full compatibility with Redis OSS 7.2.4. With these advancements, Valkey is poised to become a leading open-source alternative to Redis, attracting more industry attention. 💰 Compensation Correlates with Security: Survey Highlights Need for Better Support for Open-Source Maintainers A Tidelift survey of 400 open-source software maintainers reveals that paid maintainers are 55% more likely to implement critical security and maintenance practices than their unpaid counterparts, such as two-factor authentication and static code analysis. Despite the benefits of compensation, 60% of maintainers remain unpaid, leading many to feel underappreciated and stressed, with 60% considering quitting. As threats like malware increase, maintainers now spend about 11% of their time on security tasks, yet skepticism about AI tools persists, with 64% fearing they could negatively impact their work. #linux #postgres #opensource #security