OWASP Dependency-Track 5.0 is now generally available. Codenamed Hyades, v5 delivers the biggest redesign in project history: stateless, horizontally scalable APIs; durable execution that resumes BOM processing and vulnerability analysis after crashes; component integrity verification against upstream registry tampering; and a CEL-based policy engine. Early adopters processed 20,000+ SBOMs/hour. PostgreSQL is now the sole supported database.
The #Forgejo monthly report was published ✨
Forgejo v15 was released, along with security releases. The Forgejo Security Team responds to community concerns. The Forgejo Runner had multiple releases, the Forgejo Helm chart v17 was released and the Forgejo v16 release is progressing.
Are you sick of Linux vulnerabilities lately?
Good.
Here's ssh-keysign-pwn
You can read root-owned files from an unprivileged account. Concept publicly Reported by Jann Horn nearly 6 years ago. CVE unknown. Was patched in the Linux kernel 11 hours ago
Update: It's apparently CVE-2026-46333
It can be mitigated with:sudo sysctl kernel.yama.ptrace_scope=2
Or more permanently, do whatever dance your distro supports. e.g. in /etc/sysctl.d/99-yama-ptrace.conf put:
OWASP Foundation
Forgejo
Will Dormannkernel.yama.ptrace_scope = 2
Codeberg is offering a hosted Forgejo similar to gitlab[.]com and github[.]com in case you do not want to self-host. They are run by the non-profit Codeberg e.V., donations to it are tax deductible in Germany.
In light of the recent GitLab announcement, which raises questions about long-term software quality and security, it is worth mentioning that there are alternative open source solutions out there which are worth using and supporting.
Forgejo is an open source VCS platform that you can self-host. Its look closely resembles GitHub's and many of the features you know from GitLab and GitHub are available.
SINGULARITY, the painterly space adventure and newest open movie by Blender Studio is now released!
Watch in on Youtube: https://www.youtube.com/watch?v=l5OZu-IrXpw
Blender Studio
Tarah Wheeler