Calnode v0.10.1 has been released, featuring significant contributions from community deployers. The release includes a security sweep addressing five critical issues: rate-limiting public booking lookups, consolidating CalDAV error messages, preventing credential forwarding during cross-origin redirects, fixing a panic caused by short GOOGLE_CLIENT_ID values, and improving video room host takeover explanations. The update also introduces a one-click NethServer 8 module, allowing Calnode to install as a pre-configured app with Traefik routing, cluster TLS, and persistent storage. This module is marked as preview-grade, with robot tests covering installation paths but no live node testing yet. The release follows v0.10.0, which was largely contributed by a developer from Rotterdam who submitted ten pull requests in sixteen minutes, addressing multiple features including destination-provider preferences, availability reporting, shared-calendar booking, and timezone picker enhancements. The project emphasizes community-driven development, with contributors like Minos Chatzidakis providing detailed bug reports and fixes before merging them upstream. The announcement also highlights Cal.eu's closure on November 1, urging EU teams to migrate using a provided playbook. Calnode is a self-hosted scheduling solution with a single Go binary, embedded SQLite, and no external dependencies like Redis or Postgres, operating under the Apache-2.0 license. The project has gained 100 stars and 17 forks, with the community actively contributing to its development. The release notes stress the importance of the update for users migrating from Cal.eu, positioning v0.10.1 as the recommended version for deployment.

Posted by Intilangelo, Andrea on Aug 24 Two stored XSS vulnerabilities have been disclosed in the NethServer WebTop module, affecting versions 1.5.6 and earlier. CVE-2026-78331 (CVSS 4.0: 8.7) affects the calendar component, while CVE-2026-78332 (CVSS 4.0: 8.2) affects the contacts component. Both vulnerabilities allow malicious content to be stored and JavaScript code to be executed when the affected calendar event or contact is viewed by another user. Affected versions: WebTop...

What happens when a successful classic Linux distribution, supported by awell-established international community of users and backed by a company,faces the challenges of a fast-paced open-source w...

News and feature lists of Linux and BSD distributions.

All the functionalities of a modern Next-Gen firewall in few clicks: MultiWAN, Deep Packet Inspection, VPNs, Threat Protection.

All the functionalities of a modern Next-Gen firewall in few clicks: MultiWAN, Deep Packet Inspection, VPNs, Threat Protection.

All the functionalities of a modern Next-Gen firewall in few clicks: MultiWAN, Deep Packet Inspection, VPNs, Threat Protection.

Posted by Andrea Intilangelo on May 16 CVE-2024-34058: Nethserver 7 & 8 stored cross-site scripting (XSS) in WebTop package Use CVE-2024-34058. Additional info: NethServer is an Open Source operating system for the Linux enthusiast, designed for small offices and medium enterprises. From their website: "It's simple, secure and flexible" and "ready to deliver your messages, to protect your network with the built-in firewall, share your files and much more,...

News and feature lists of Linux and BSD distributions.

Die Application-Plattform NethServer macht einen kleinen Versionssprung. Der verschafft Impasync weitere Funktionen, bringt standardmäßig das Metrics-Modul mit und blockiert auf Wunsch Unterseiten für...

A tool designed to link NethServer systems and provide remote access tools.

Release notes - Distribution Release

We are excited to announce the latest updates and improvements to NethServer 8 over the last three months, bringing new features, enhanced security, and better usability.

Con il rilascio della versione stabile di NethServer 8 (NS8), la piattaforma open source per la gestione di infrastrutture IT compie un salto di qualità,