ProHoster > Blog

Category: Blog

Blog Section

Remote vulnerability in OMI Agent deployed in Microsoft Azure Linux environments

Posted on

Clients of the Microsoft Azure cloud platform using Linux in virtual machines have encountered a critical vulnerability (CVE-2021-38647) that allows remote code execution with root privileges. The vulnerability, codenamed OMIGOD, is notable because the issue exists within the OMI Agent application, which is quietly installed in Linux environments. The OMI Agent is automatically installed and activated when using services such as […]

The release of Apache HTTP Server 2.4.49 has been published, featuring 27 changes and addressing 5 vulnerabilities: CVE-2021-33193 - vulnerability of mod_http2 to a new variant of the 'HTTP Request Smuggling' attack.

Posted on

In the Travis CI continuous integration service designed for testing and building projects developed on GitHub and Bitbucket, a security issue (CVE-2021-41077) has been identified that allows the content of sensitive environment variables in public repositories using Travis CI to be exposed. The vulnerability also allows exposure of the keys used in Travis CI for generating digital signatures, access keys, and tokens for accessing […]

Release of Apache HTTP Server 2.4.49 with vulnerability fixes

Posted on

The release of Apache HTTP Server 2.4.49 has been published, featuring 27 changes and fixing 5 vulnerabilities: CVE-2021-33193 — mod_http2 is susceptible to a new variant of the "HTTP Request Smuggling" attack, which allows crafted client requests to interject into the content of requests made by other users through mod_proxy (for example, malicious JavaScript code could be injected into another user's session on the site). CVE-2021-40438 — SSRF vulnerability (Server […]

Release of the open billing system ABillS 0.91

Posted on

The release of the open billing system ABillS 0.91 is now available, with components provided under the GPLv2 license. Key updates include: Paysys: all modules have been revamped. Paysys: payment system tests have been added. Client API introduced. Triplay: the management mechanism for sub-services Internet/TV/Telephony has been reworked. Cams: integration with the cloud-based video surveillance system Forpost. Ureports: the ability to send notifications simultaneously through multiple types has been added. Maps2: new layers added: Visicom Maps, 2GIS. […]

Mozilla has introduced Firefox Suggest and a new interface for the Firefox Focus browser.

Posted on

Mozilla has introduced a new recommendation system, Firefox Suggest, which provides additional suggestions while typing in the address bar. Unlike recommendations based on local data and search engine queries, this new feature can include information from third-party partners, which may be non-profit projects like Wikipedia as well as paid sponsors. For example, when you start typing in […]

Release of Java SE 17

Posted on

After six months of development, Oracle has released Java SE 17 (Java Platform, Standard Edition 17), with the open project OpenJDK serving as its reference implementation. Except for the removal of some outdated features, Java SE 17 maintains backward compatibility with previous versions of the Java platform — most previously written Java projects will run without modification on […]

Vulnerabilities in Matrix clients that allow the exposure of end-to-end encryption keys.

Posted on

Vulnerabilities (CVE-2021-40823, CVE-2021-40824) have been identified in most client applications for the decentralized communication platform Matrix, allowing access to keys used for transmitting messages in end-to-end encrypted (E2EE) chats. An attacker, having compromised one user in the chat, can decrypt messages that were previously sent to that user from vulnerable client applications. Successful exploitation requires access to the recipient's account […]

In Firefox 94, output for X11 will default to using EGL.

Posted on

The nightly builds that will form the release of Firefox 94 have incorporated a change that includes a new rendering backend for graphical environments using the X11 protocol by default. This new backend is notable for using EGL for graphics output instead of GLX. It supports open OpenGL drivers Mesa 21.x and proprietary NVIDIA drivers 470.x. Proprietary OpenGL drivers from AMD are not yet […]

Chrome update 93.0.4577.82 with fixes for 0-day vulnerabilities

Posted on

Google has released an update for Chrome 93.0.4577.82, which fixes 11 vulnerabilities, including two issues that are already being exploited by attackers (0-day). Details are not yet disclosed, but it's known that the first vulnerability (CVE-2021-30632) is caused by a flaw that leads to a buffer overflow in the JavaScript engine V8, while the second issue (CVE-2021-30633) exists in the implementation of the Indexed DB API and is related to […]

Autumn update of ALT p10 starter kits

Posted on

The second release of starter kits on the Alt Ten platform has been published. These images are suitable for experienced users who prefer to determine their own application package list and configure the system (even creating their own derivatives) for starting work with a stable repository. As composite works, they are distributed under the GPLv2+ license. Options include a basic system and one of the environments […]

New exploitation techniques for Spectre vulnerabilities in Chrome.

Posted on

A group of researchers from American, Australian, and Israeli universities has proposed a new side-channel attack technique to exploit Spectre-class vulnerabilities in browsers based on the Chromium engine. The attack, codenamed Spook.js, allows attackers to bypass site isolation mechanisms by running JavaScript code and read the contents of the entire address space of the current process, that is, accessing the data of pages that are loaded […]

HashiCorp has temporarily suspended the acceptance of changes from the community for the Terraform project.

Posted on

HashiCorp explained the reason for the recent addition to the open source configuration management platform Terraform repository regarding the temporary suspension of review and acceptance of pull requests submitted by community members. The note was perceived by some participants as a crisis in Terraform's open development model. Terraform developers quickly reassured the community, stating that the note was misunderstood and was added merely for […]

« to the beginning 547 548 549 550 551 552 553 554 555 556 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster