ProHoster > Blog

Category: Blog

Blog Section

Buffer overflow in curl and libcurl occurring when connecting through a SOCKS5 proxy

Posted on

A vulnerability (CVE-2023-38545) has been identified in the curl utility for data retrieval and transmission over networks, and in the parallel developing libcurl library, which can lead to buffer overflow and potentially allow for the execution of the attacker's code on the client side when the curl utility or an application using libcurl interacts with a malicious HTTPS server. This issue manifests only when the curl […]

Vulnerabilities in X.Org libraries, two of which have been present since 1988

Posted on

Information has been released about five vulnerabilities in the libX11 and libXpm libraries developed by the X.Org project. The issues have been resolved in the libXpm 3.5.17 and libX11 1.8.7 releases. Three vulnerabilities were identified in the libX11 library, which provides client-implemented features of the X11 protocol: CVE-2023-43785 — a buffer overflow in the libX11 code that occurs during the processing of a response from the X server with a number of characters that do not match […]

Release of the iptables 1.8.10 packet filter

Posted on

The release of the classic toolkit for managing the iptables packet filter 1.8.10 has been published, with recent development focusing on components for maintaining backward compatibility — iptables-nft and ebtables-nft, which provide utilities with the same command line syntax as in iptables and ebtables but translate the received rules into nftables bytecode. The original set of iptables programs, including ip6tables, arptables, and ebtables, is […]

Firefox update 118.0.2

Posted on

A corrective release of Firefox 118.0.2 is available, which includes the following fixes: Resolved issues with loading games from the betsoft.com site. Fixed problems with printing certain SVG images. Addressed a regression in branch 118 that caused the handling of 'WWW-Authenticate: Negotiate' responses from other sites to fail. Corrected an error that prevented WebRTC from decoding in some contexts […]

Vulnerability in the HTTP/2 protocol exploited in the largest DDoS attack.

Posted on

Google has recorded the largest DDoS attack on its infrastructure, with an intensity of 398 million requests per second. This new attack is seven times more intense than the previous record DDoS attack, which generated a flow of 47 million requests per second. For comparison, total traffic across the entire web is estimated to be 1-3 billion requests per second. In addition to […]

Google has rewritten the pvmfm firmware used in Android in Rust.

Posted on

As part of efforts to enhance the security of critical software components on the Android platform, Google has rewritten the pvmfm firmware used for running virtual machines managed by the pVM hypervisor within the Android Virtualization Framework in Rust. Previously, the firmware was written in C and implemented on top of the U-Boot bootloader, which had previously been found to have vulnerabilities due to issues with […]

The composite server Wayfire 0.8, utilizing Wayland, is now available.

Posted on

After nearly three years of development, the release of the Wayfire 0.8 compositing server has been announced. Utilizing Wayland, it allows for resource-friendly user interfaces with 3D effects similar to 3D plugins for Compiz (screen switching via a 3D cube, spatial window layouts, morphing effects when interacting with windows, etc.). Wayfire supports plugin extensions and offers a flexible configuration system. The project's code is written […]

Ubuntu will restrict access to user namespace

Posted on

Canonical has announced changes in Ubuntu 23.10 that restrict user access to user namespace identifiers, which will enhance the security of systems using container isolation against vulnerabilities that require manipulation of the user namespace for exploitation. According to Google, 44% of exploits involved in the bounty program for identifying vulnerabilities in the Linux kernel, […]

A vulnerability in libcue that leads to code execution when loading files in GNOME

Posted on

A vulnerability (CVE-2023-43641) has been discovered in the libcue library, which is used for parsing metadata containing information about the order and duration of audio tracks, allowing for code execution when processing specially crafted cue files. The library is used in some multimedia players and audio editors, including Audacious, and can be exploited to compromise the system when opening unverified data. Furthermore, the libcue library […]

Ardour 8.0

Posted on

A major update of the free digital audio workstation Ardour has been released. Key changes: The MIDI track widget (scroomer) has been completely rewritten to control the scale and visibility of track content. It now displays notes (048 C, 049 C#, and so on), or note names if specified in MIDNAM (for example, names of different drums when a drum sampler plugin is loaded). A familiar interface for editing strength […]

New version of POP3 and IMAP4 server Dovecot 2.3.21

Posted on

A new version of the cross-platform high-performance POP3/IMAP4 server Dovecot 2.3.21 has been released, supporting the POP3 and IMAP4rev1 protocols along with popular extensions such as SORT, THREAD, and IDLE, as well as authentication and encryption mechanisms (SASL, TLS, SCRAM). Dovecot maintains full compatibility with traditional mbox and Maildir, utilizing external indexes to enhance performance. Plugins can be used to extend functionality (for example, through plugins it implements […]

« to the beginning 388 389 390 391 392 393 394 395 396 397 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster